Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/0108988f-fef1-3eed-b0b7-ddcfd1ca1e4c.roa
File:                     0108988f-fef1-3eed-b0b7-ddcfd1ca1e4c.roa (raw, json)
Hash identifier:          GX4GwVuTHttpZJhn66vMV2C2pw3q2AqxXf+ssUOevjY=
Subject key identifier:   92:F5:55:33:10:83:F4:F6:A4:0C:19:F1:CB:56:A1:13:2E:C7:96:07
Certificate issuer:       /CN=21536be2-b559-4b5e-9749-413cb6af0bc1
Certificate serial:       010D0C9F43285847EF465AB3AD84946DB13C5400
Authority key identifier: D9:6F:83:DF:E3:4D:6B:F6:09:48:86:48:C7:34:0C:5D:69:74:69:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/0108988f-fef1-3eed-b0b7-ddcfd1ca1e4c.roa
Signing time:             Tue 19 Nov 2024 20:19:54 +0000
ROA not before:           Tue 19 Nov 2024 20:19:54 +0000
ROA not after:            Mon 17 Feb 2025 20:19:54 +0000
asID:                     16498
IP address blocks:        139.84.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/21536be2-b559-4b5e-9749-413cb6af0bc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/21536be2-b559-4b5e-9749-413cb6af0bc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:46:5a:b3:ad:84:94:6d:b1:3c:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21536be2-b559-4b5e-9749-413cb6af0bc1
        Validity
            Not Before: Nov 19 20:19:54 2024 GMT
            Not After : Feb 17 20:19:54 2025 GMT
        Subject: CN=4f86bb60-1ca4-4299-8323-e2b72587bc02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b2:46:13:3f:d1:c9:f3:e7:bb:b5:7e:a2:da:
                    0f:bb:0a:e9:62:7e:b1:c2:bc:67:8b:65:93:2f:8d:
                    3a:35:ae:49:50:ff:72:ec:8f:05:a3:0b:b3:62:0d:
                    61:b6:8e:a5:33:4c:c5:fe:7a:2e:ad:23:be:08:fb:
                    1e:07:77:00:1c:ad:a0:e6:5b:e1:81:22:2f:72:3a:
                    c9:f8:42:77:69:19:73:6c:b4:25:00:c7:7d:5e:12:
                    5b:6b:b4:11:2b:54:13:78:d1:6f:de:91:fb:63:e8:
                    1d:c8:c1:74:9e:c7:3d:9e:d2:0b:68:c7:f5:79:07:
                    32:53:46:f1:19:53:5f:e4:e5:28:18:1a:cf:f8:12:
                    83:58:4f:fb:33:72:ee:fc:4d:0d:2e:10:7a:a4:df:
                    ed:df:64:29:e6:0f:de:f3:16:31:da:e5:bf:44:39:
                    18:2a:cf:41:4f:5f:7f:44:52:30:48:91:8e:01:ee:
                    d1:7b:0f:36:0b:73:b0:05:97:a6:ff:68:47:8e:32:
                    e4:75:44:c8:7c:d6:70:65:c2:41:5b:f9:2f:d0:a4:
                    db:9c:ae:13:af:95:09:cb:d8:9b:3e:62:03:de:64:
                    e9:fd:de:45:ad:af:bb:ee:a9:23:de:d7:83:c4:35:
                    1a:06:94:c1:78:ed:90:65:9c:67:6b:aa:4f:17:4e:
                    77:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F5:55:33:10:83:F4:F6:A4:0C:19:F1:CB:56:A1:13:2E:C7:96:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/0108988f-fef1-3eed-b0b7-ddcfd1ca1e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/21536be2-b559-4b5e-9749-413cb6af0bc1.crl

            X509v3 Authority Key Identifier:
                keyid:D9:6F:83:DF:E3:4D:6B:F6:09:48:86:48:C7:34:0C:5D:69:74:69:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.84.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:77:cb:5f:c0:ad:a4:a4:40:f8:32:ae:3f:f2:7d:fd:ae:68:
         ef:29:01:eb:74:34:04:b2:b8:54:76:31:c1:0b:f3:51:14:ee:
         2a:84:88:c5:61:ad:36:4d:82:9e:79:de:3c:30:e3:c0:44:62:
         6b:5f:a5:36:c6:64:9e:da:e0:d5:fd:e4:cf:ee:46:9f:b8:cd:
         bc:4a:72:0d:81:73:ab:cc:a0:5c:60:3e:2a:f3:8f:5e:7d:06:
         57:0c:19:76:b7:ad:13:1f:a4:44:75:3b:b7:a5:4b:10:c4:fe:
         94:d6:dd:8e:ca:ac:e4:75:03:9a:b3:9a:f9:71:ad:ba:34:b3:
         aa:d3:7b:9c:e2:43:e0:57:25:b4:10:1e:01:ee:fb:c2:61:b5:
         62:cf:ce:d7:4b:f6:87:8a:59:34:44:ed:c6:cb:7d:40:da:6b:
         34:de:52:b5:99:88:c0:c6:d5:b6:54:5b:e8:62:da:13:a6:b3:
         38:3a:fb:2d:8d:84:3f:e5:c9:53:a0:3f:b5:c0:e5:1b:95:b8:
         54:aa:1c:ce:22:dd:83:d7:ee:da:ab:30:20:a0:6b:73:f6:de:
         26:67:64:35:ba:20:49:20:41:1a:9a:9f:16:b1:9d:88:36:ab:
         14:a9:bd:d5:92:49:50:f6:09:70:34:97:00:ed:c3:7b:b7:a9:
         cd:ba:01:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfvRlqzrYSUbbE8VAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjE1MzZiZTItYjU1OS00YjVlLTk3NDktNDEzY2I2YWYw
YmMxMB4XDTI0MTExOTIwMTk1NFoXDTI1MDIxNzIwMTk1NFowLzEtMCsGA1UEAxMk
NGY4NmJiNjAtMWNhNC00Mjk5LTgzMjMtZTJiNzI1ODdiYzAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbJGEz/RyfPnu7V+otoPuwrpYn6xwrxni2WT
L406Na5JUP9y7I8FowuzYg1hto6lM0zF/nourSO+CPseB3cAHK2g5lvhgSIvcjrJ
+EJ3aRlzbLQlAMd9XhJba7QRK1QTeNFv3pH7Y+gdyMF0nsc9ntILaMf1eQcyU0bx
GVNf5OUoGBrP+BKDWE/7M3Lu/E0NLhB6pN/t32Qp5g/e8xYx2uW/RDkYKs9BT19/
RFIwSJGOAe7Rew82C3OwBZem/2hHjjLkdUTIfNZwZcJBW/kv0KTbnK4Tr5UJy9ib
PmID3mTp/d5Fra+77qkj3teDxDUaBpTBeO2QZZxna6pPF0530QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJL1VTMQg/T2pAwZ8ctWoRMux5YHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMTUz
NmJlMi1iNTU5LTRiNWUtOTc0OS00MTNjYjZhZjBiYzEvMDEwODk4OGYtZmVmMS0z
ZWVkLWIwYjctZGRjZmQxY2ExZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjE1MzZiZTItYjU1OS00YjVlLTk3
NDktNDEzY2I2YWYwYmMxLzIxNTM2YmUyLWI1NTktNGI1ZS05NzQ5LTQxM2NiNmFm
MGJjMS5jcmwwHwYDVR0jBBgwFoAU2W+D3+NNa/YJSIZIxzQMXWl0aTAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMTUzNmJlMi1iNTU5LTRiNWUtOTc0OS00MTNj
YjZhZjBiYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHi1QAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAl3y1/AraSkQPgyrj/yff2uaO8pAet0NASyuFR2McEL81EU7iqEiMVh
rTZNgp553jww48BEYmtfpTbGZJ7a4NX95M/uRp+4zbxKcg2Bc6vMoFxgPirzj159
BlcMGXa3rRMfpER1O7elSxDE/pTW3Y7KrOR1A5qzmvlxrbo0s6rTe5ziQ+BXJbQQ
HgHu+8JhtWLPztdL9oeKWTRE7cbLfUDaazTeUrWZiMDG1bZUW+hi2hOmszg6+y2N
hD/lyVOgP7XA5RuVuFSqHM4i3YPX7tqrMCCga3P23iZnZDW6IEkgQRqanxaxnYg2
qxSpvdWSSVD2CXA0lwDtw3u3qc26Aac=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:16 2024 by rpki-client on console-ams.rpki-client.org