Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa
File:                     be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa (raw, json)
Hash identifier:          maG1wRPbjopfFDyogSNv1StHZ/Z+8xCaEno6Ght+lYg=
Subject key identifier:   1C:C6:A2:A1:82:A1:81:EE:C8:CA:54:78:B5:F5:72:33:87:26:BC:D4
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285845ADEE011CFAAE6872498A9500
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     393740
IP address blocks:        147.124.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:01:1c:fa:ae:68:72:49:8a:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=1810a441-cc0b-4332-bcf4-0b7efd424b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1b:0c:b2:cc:29:70:df:41:38:6d:bb:16:02:
                    a5:eb:e8:c8:b7:06:d7:6c:58:7f:df:06:26:78:ae:
                    a7:f0:14:29:59:2c:e6:b1:db:0c:5d:de:81:fd:9b:
                    b2:e5:c1:b2:a3:2c:d5:04:b7:5a:36:47:49:11:43:
                    d9:4d:17:d2:1d:ab:44:2f:40:88:f6:c3:1e:06:1d:
                    d6:82:38:c2:cb:10:a4:01:95:89:7b:95:67:2d:51:
                    ea:f4:62:73:62:66:24:32:6e:b9:50:bf:d5:1b:cc:
                    05:47:ea:e2:9e:ac:6f:51:17:57:bb:94:16:85:ca:
                    58:be:4b:f1:0f:d5:4a:e2:a2:79:1a:1e:f9:ac:f5:
                    54:d4:4e:86:40:94:87:fb:a7:73:19:f9:e1:5f:54:
                    09:c8:ab:56:e5:ee:a5:72:18:67:36:89:6a:7f:92:
                    1d:da:f3:03:11:5f:dd:7e:51:63:b5:8b:e6:6e:ff:
                    95:a0:ff:cb:bd:d7:58:65:be:5b:a6:52:c2:6a:54:
                    88:c1:99:cd:8d:b1:b3:89:81:a0:fe:ca:de:3c:2d:
                    44:a0:f4:a9:4c:9a:86:c9:60:a2:7a:af:9a:c5:2d:
                    51:ac:7a:60:a7:83:6b:bf:57:19:ef:63:51:03:17:
                    ec:28:62:0f:2e:9c:4d:e7:25:0f:12:72:c9:5a:fb:
                    ae:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C6:A2:A1:82:A1:81:EE:C8:CA:54:78:B5:F5:72:33:87:26:BC:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a7:89:2a:42:5e:5a:e7:1c:08:3e:9c:95:42:7c:fa:2b:c9:
         c2:21:88:e8:a8:30:29:ad:b4:72:f7:59:04:16:ef:a7:73:18:
         45:59:e2:60:56:e2:17:46:3a:f5:3d:64:2e:6a:48:f2:bb:89:
         76:ab:9e:76:6e:b5:28:b7:5c:b8:37:c4:1c:28:f4:3e:90:e2:
         9b:62:34:a7:af:22:ce:79:23:6b:21:8c:27:e6:0a:d9:0e:e9:
         9f:5d:d5:40:82:53:36:46:36:48:d9:34:c0:f8:11:0e:a6:28:
         66:d8:9b:a4:f4:3a:75:c4:81:3b:b9:b7:4c:80:11:e3:b5:8e:
         b5:15:e8:e4:1a:4c:d1:94:d2:52:db:a8:6d:a0:e5:56:f0:b4:
         0f:e8:42:d9:89:56:f2:fa:2b:3d:26:de:b7:ad:39:13:2e:50:
         40:56:5e:4c:1a:de:ef:83:04:55:0f:a8:18:a6:1e:75:55:2c:
         6b:c6:3a:83:b6:7b:34:d1:8c:f6:eb:9a:e8:fc:73:0b:da:84:
         fd:d7:a1:2d:4a:af:ea:fb:d4:6b:84:3f:fc:76:bf:76:12:ce:
         12:f6:ea:32:4a:d6:ab:82:0e:c3:9a:47:e7:85:aa:c9:ba:1a:
         7c:bc:d7:21:a0:b0:02:28:74:fd:c7:60:f8:da:65:0d:d6:88:
         22:d5:b7:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWt7gEc+q5ockmKlQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI0MDQyNzAxMDAyNloXDTI0MDcyNjAxMDAyNlowLzEtMCsGA1UEAxMk
MTgxMGE0NDEtY2MwYi00MzMyLWJjZjQtMGI3ZWZkNDI0YjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhsMsswpcN9BOG27FgKl6+jItwbXbFh/3wYm
eK6n8BQpWSzmsdsMXd6B/Zuy5cGyoyzVBLdaNkdJEUPZTRfSHatEL0CI9sMeBh3W
gjjCyxCkAZWJe5VnLVHq9GJzYmYkMm65UL/VG8wFR+rinqxvURdXu5QWhcpYvkvx
D9VK4qJ5Gh75rPVU1E6GQJSH+6dzGfnhX1QJyKtW5e6lchhnNolqf5Id2vMDEV/d
flFjtYvmbv+VoP/LvddYZb5bplLCalSIwZnNjbGziYGg/srePC1EoPSpTJqGyWCi
eq+axS1RrHpgp4Nrv1cZ72NRAxfsKGIPLpxN5yUPEnLJWvuuTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBzGoqGCoYHuyMpUeLX1cjOHJrzUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvYmUzYTY5NWEtMWNiYy0z
NWQ5LTg0NzYtMDE5YWNlMWMyZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3znMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF6niSpCXlrnHAg+nJVCfPorycIhiOioMCmttHL3WQQW76dzGEVZ4mBW
4hdGOvU9ZC5qSPK7iXarnnZutSi3XLg3xBwo9D6Q4ptiNKevIs55I2shjCfmCtkO
6Z9d1UCCUzZGNkjZNMD4EQ6mKGbYm6T0OnXEgTu5t0yAEeO1jrUV6OQaTNGU0lLb
qG2g5VbwtA/oQtmJVvL6Kz0m3retORMuUEBWXkwa3u+DBFUPqBimHnVVLGvGOoO2
ezTRjPbrmuj8cwvahP3XoS1Kr+r71GuEP/x2v3YSzhL26jJK1quCDsOaR+eFqsm6
Gny81yGgsAIodP3HYPjaZQ3WiCLVt9g=
-----END CERTIFICATE-----
Generated at Mon May 20 15:19:47 2024 by rpki-client on console-fra.rpki-client.org