Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/0b78c170-f215-3ee3-b7e2-5f77c9c6823c.roa
File:                     0b78c170-f215-3ee3-b7e2-5f77c9c6823c.roa (raw, json)
Hash identifier:          +7uzcbWNklXh0VMhF20v8E6+FQMk0TQEmwUseHvMp4Q=
Subject key identifier:   7F:BE:BD:4F:3F:F8:65:B9:61:44:0F:FA:AF:D2:A5:34:79:00:90:F2
Certificate issuer:       /CN=5f0271af-0900-4d68-9a01-e446c3910a39
Certificate serial:       010D0C9F43285847814F6862A917AF0D2379DF80
Authority key identifier: 92:3F:9A:FA:35:22:EC:6A:5B:BF:ED:78:90:A1:C3:8A:C6:7C:C2:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/0b78c170-f215-3ee3-b7e2-5f77c9c6823c.roa
Signing time:             Fri 11 Oct 2024 10:59:13 +0000
ROA not before:           Fri 11 Oct 2024 10:59:13 +0000
ROA not after:            Thu 09 Jan 2025 11:59:13 +0000
asID:                     53356
IP address blocks:        140.235.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/5f0271af-0900-4d68-9a01-e446c3910a39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/5f0271af-0900-4d68-9a01-e446c3910a39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:81:4f:68:62:a9:17:af:0d:23:79:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0271af-0900-4d68-9a01-e446c3910a39
        Validity
            Not Before: Oct 11 10:59:13 2024 GMT
            Not After : Jan  9 11:59:13 2025 GMT
        Subject: CN=a4218f76-ccbc-425d-8f34-53ed4a643637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7b:7b:83:d4:cd:e0:8a:78:05:37:e0:c6:e6:
                    df:82:52:5e:47:c9:05:e4:88:49:ff:ac:8b:98:f3:
                    e5:52:c9:6a:60:c4:8c:0f:d3:cc:16:13:d4:e0:4e:
                    7e:30:48:bb:e0:85:fd:b0:aa:41:25:ab:79:a5:ef:
                    74:f4:f5:5d:d3:bd:40:0c:52:c3:4f:88:bf:c0:d4:
                    87:c4:e5:2b:3d:cd:b8:ed:38:00:6c:54:c8:a6:ff:
                    ab:44:b4:64:5e:f7:e1:0a:47:53:20:1a:f9:68:c0:
                    57:70:a4:72:79:0d:8b:bd:5d:00:99:32:48:97:ac:
                    a3:eb:e8:0a:f7:e0:12:75:db:c6:ac:64:f8:0e:25:
                    ff:0a:df:b5:8b:e3:70:cf:e3:7d:4a:1a:d6:24:df:
                    b4:31:e5:f6:cc:81:cd:27:e1:ad:dd:62:cc:32:78:
                    a5:78:47:97:1f:62:f3:7f:13:90:15:8e:8f:00:65:
                    78:01:de:d1:dc:0e:91:c1:d1:5d:f8:95:40:f8:9e:
                    2e:e5:c0:ca:ba:a7:c6:fa:09:ff:db:2b:60:03:eb:
                    03:6b:aa:e9:4d:bc:68:d2:88:8d:4c:e2:b6:0f:2f:
                    0d:37:12:f6:e9:ac:70:22:e7:1f:da:8b:3c:85:a1:
                    0e:8a:7d:0a:b7:cb:0f:23:b8:da:f7:a0:52:28:91:
                    29:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BE:BD:4F:3F:F8:65:B9:61:44:0F:FA:AF:D2:A5:34:79:00:90:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/0b78c170-f215-3ee3-b7e2-5f77c9c6823c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/5f0271af-0900-4d68-9a01-e446c3910a39.crl

            X509v3 Authority Key Identifier:
                keyid:92:3F:9A:FA:35:22:EC:6A:5B:BF:ED:78:90:A1:C3:8A:C6:7C:C2:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ea:f8:0b:ea:78:07:25:fe:e7:48:d0:66:84:87:a0:96:c9:
         d5:c5:8a:7d:83:61:b8:dc:3c:03:d3:10:85:c9:37:4a:c2:a4:
         7e:b6:af:4f:f9:13:81:44:2d:a3:14:94:1b:c3:07:d2:f6:c2:
         b6:fb:77:d8:60:78:7a:46:10:e6:93:95:00:91:4e:1c:dd:c7:
         dd:20:3e:72:3e:7e:46:19:dd:aa:ed:22:e0:d2:56:f3:4c:76:
         36:75:a9:29:4d:24:35:23:e1:a6:52:04:e9:2f:4a:f3:04:bb:
         84:5f:4c:91:db:f1:13:88:94:9c:5e:7d:23:9b:a0:0c:c1:5e:
         6e:d8:bb:ba:31:54:b0:33:23:3b:37:66:db:26:a4:53:5c:63:
         dc:e4:2e:e2:96:2e:51:65:4e:47:cd:8b:d6:61:c1:56:13:34:
         9d:78:54:6b:03:c0:1d:f3:eb:b9:03:99:00:d9:ee:88:ee:c5:
         07:40:91:fa:cd:57:bf:7e:c9:56:7d:47:55:51:9f:4d:1b:e7:
         e7:da:3c:19:ae:f4:7c:13:d9:2e:7b:8d:77:11:17:b7:99:28:
         87:9a:ca:40:b2:c6:1c:b4:be:f2:40:ff:88:2b:cc:16:85:c3:
         fa:f0:0b:2f:bb:ef:02:ad:d0:8b:60:c3:8d:83:54:d3:73:76:
         0a:4d:da:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeBT2hiqRevDSN534AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWYwMjcxYWYtMDkwMC00ZDY4LTlhMDEtZTQ0NmMzOTEw
YTM5MB4XDTI0MTAxMTEwNTkxM1oXDTI1MDEwOTExNTkxM1owLzEtMCsGA1UEAxMk
YTQyMThmNzYtY2NiYy00MjVkLThmMzQtNTNlZDRhNjQzNjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3t7g9TN4Ip4BTfgxubfglJeR8kF5IhJ/6yL
mPPlUslqYMSMD9PMFhPU4E5+MEi74IX9sKpBJat5pe909PVd071ADFLDT4i/wNSH
xOUrPc247TgAbFTIpv+rRLRkXvfhCkdTIBr5aMBXcKRyeQ2LvV0AmTJIl6yj6+gK
9+ASddvGrGT4DiX/Ct+1i+Nwz+N9ShrWJN+0MeX2zIHNJ+Gt3WLMMnileEeXH2Lz
fxOQFY6PAGV4Ad7R3A6RwdFd+JVA+J4u5cDKuqfG+gn/2ytgA+sDa6rpTbxo0oiN
TOK2Dy8NNxL26axwIucf2os8haEOin0Kt8sPI7ja96BSKJEplQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH++vU8/+GW5YUQP+q/SpTR5AJDyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZjAy
NzFhZi0wOTAwLTRkNjgtOWEwMS1lNDQ2YzM5MTBhMzkvMGI3OGMxNzAtZjIxNS0z
ZWUzLWI3ZTItNWY3N2M5YzY4MjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWYwMjcxYWYtMDkwMC00ZDY4LTlh
MDEtZTQ0NmMzOTEwYTM5LzVmMDI3MWFmLTA5MDAtNGQ2OC05YTAxLWU0NDZjMzkx
MGEzOS5jcmwwHwYDVR0jBBgwFoAUkj+a+jUi7Gpbv+14kKHDisZ8wqUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZjAyNzFhZi0wOTAwLTRkNjgtOWEwMS1lNDQ2
YzM5MTBhMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOtQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADrq+AvqeAcl/udI0GaEh6CWydXFin2DYbjcPAPTEIXJN0rCpH62r0/5
E4FELaMUlBvDB9L2wrb7d9hgeHpGEOaTlQCRThzdx90gPnI+fkYZ3artIuDSVvNM
djZ1qSlNJDUj4aZSBOkvSvMEu4RfTJHb8ROIlJxefSOboAzBXm7Yu7oxVLAzIzs3
ZtsmpFNcY9zkLuKWLlFlTkfNi9ZhwVYTNJ14VGsDwB3z67kDmQDZ7ojuxQdAkfrN
V79+yVZ9R1VRn00b5+faPBmu9HwT2S57jXcRF7eZKIeaykCyxhy0vvJA/4grzBaF
w/rwCy+77wKt0Itgw42DVNNzdgpN2qM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:19 2024 by rpki-client on console-fra.rpki-client.org