Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/c826d2c7-c973-3a95-b348-80cf23735821.roa
File:                     c826d2c7-c973-3a95-b348-80cf23735821.roa (raw, json)
Hash identifier:          7/aXg/U+zTeJjFpRlfLeNo0AD6QUEd4rHc0FwykK/SI=
Subject key identifier:   58:1B:80:E7:A8:7D:C7:55:E0:E7:61:5E:55:BC:C4:BD:BB:40:F4:D1
Certificate issuer:       /CN=a75ece7f-5380-409e-b027-b6733c088c34
Certificate serial:       010D0C9F43285847B97512AADE4E1FCE7E1E38C0
Authority key identifier: 41:9C:A5:A0:88:3E:87:77:F8:C3:93:27:25:12:7A:9F:8E:25:CE:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/c826d2c7-c973-3a95-b348-80cf23735821.roa
Signing time:             Thu 31 Oct 2024 13:40:23 +0000
ROA not before:           Thu 31 Oct 2024 13:40:23 +0000
ROA not after:            Wed 29 Jan 2025 14:40:23 +0000
asID:                     59
IP address blocks:        146.151.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:75:12:aa:de:4e:1f:ce:7e:1e:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a75ece7f-5380-409e-b027-b6733c088c34
        Validity
            Not Before: Oct 31 13:40:23 2024 GMT
            Not After : Jan 29 14:40:23 2025 GMT
        Subject: CN=4484e4d2-32f1-4cc3-b80a-55c455541b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7b:1c:df:d4:2a:51:96:2f:fd:93:38:e8:d3:
                    11:27:99:97:04:a6:97:2f:68:10:6b:5a:e9:ac:f2:
                    10:e4:a0:5a:55:83:ae:bc:9b:31:b6:a9:3f:4a:94:
                    c1:e1:02:c0:a2:4a:6e:6d:50:0a:63:ed:0b:d6:f2:
                    a8:4d:cf:34:49:69:4a:5a:c7:9f:82:b6:d5:3f:0a:
                    e7:d7:09:86:89:04:74:19:da:db:e5:38:1b:c5:ee:
                    58:c6:e4:a4:99:07:66:2f:b9:53:46:96:d5:24:cf:
                    9f:f8:8f:d9:b4:7d:ae:71:c9:7a:ff:59:58:20:dc:
                    1b:65:b0:d6:fb:13:ab:53:97:58:0c:58:1d:e0:9e:
                    a5:fe:63:6b:9e:c8:84:8b:64:72:52:2a:6f:c4:10:
                    65:4b:0b:25:1c:cc:34:ed:34:ea:51:71:7f:ac:14:
                    dc:63:7c:3b:3a:6a:98:f7:f5:15:cd:d8:55:1f:f2:
                    97:4d:a4:52:d4:6b:23:35:67:84:9c:99:4e:32:8b:
                    4d:2c:7a:9b:9e:ce:32:a3:17:41:6b:ba:2b:5f:e5:
                    f5:ad:12:02:93:6b:4c:1f:57:bc:f9:74:d9:7e:fb:
                    ac:53:c6:ea:fc:e5:54:ba:3a:f6:23:e9:42:54:a8:
                    b5:83:1d:dc:07:0c:0d:f2:af:ff:33:46:9c:9a:53:
                    ee:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1B:80:E7:A8:7D:C7:55:E0:E7:61:5E:55:BC:C4:BD:BB:40:F4:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/c826d2c7-c973-3a95-b348-80cf23735821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.crl

            X509v3 Authority Key Identifier:
                keyid:41:9C:A5:A0:88:3E:87:77:F8:C3:93:27:25:12:7A:9F:8E:25:CE:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.151.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:de:e0:92:19:e7:83:d5:b6:cd:7a:bb:3a:fa:b5:19:b4:24:
         0d:e0:de:91:9f:df:70:8b:72:a6:a7:8a:60:4a:da:d6:e2:ed:
         e7:54:de:2a:74:46:57:cc:6e:88:36:5f:5c:d7:74:66:9f:c2:
         1e:5e:b8:0a:08:65:74:d5:ce:67:0b:e7:12:16:a0:d0:2d:09:
         55:5e:0b:f0:3c:13:59:50:8e:c1:a8:d6:60:84:19:0c:27:90:
         aa:fd:d1:5d:83:3c:74:bf:9a:69:8d:39:ee:50:3a:04:16:88:
         74:04:bf:21:76:ca:c1:60:50:a8:8d:87:44:aa:76:cf:30:49:
         bc:44:c1:db:3c:1b:33:77:7d:36:d0:d5:45:8c:f1:26:3c:bb:
         25:e1:47:29:e4:12:65:3a:30:19:8f:97:82:7e:a9:bc:55:99:
         ce:6f:e3:81:64:8b:e5:09:ca:df:61:40:ed:93:11:b4:6b:59:
         d0:1d:81:9c:92:ba:8f:7d:17:70:49:de:c7:4e:ad:19:7f:45:
         cc:a0:55:71:a3:db:c8:53:ac:ce:44:6f:1d:cc:fe:88:8a:e4:
         87:d4:16:88:eb:49:6f:5b:a8:bd:fa:a4:5b:b5:d5:83:4c:fd:
         ed:be:05:db:af:1e:10:75:41:20:c5:91:d7:ea:2f:19:15:bc:
         7a:df:55:ed
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEe5dRKq3k4fzn4eOMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc1ZWNlN2YtNTM4MC00MDllLWIwMjctYjY3MzNjMDg4
YzM0MB4XDTI0MTAzMTEzNDAyM1oXDTI1MDEyOTE0NDAyM1owLzEtMCsGA1UEAxMk
NDQ4NGU0ZDItMzJmMS00Y2MzLWI4MGEtNTVjNDU1NTQxYjk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXsc39QqUZYv/ZM46NMRJ5mXBKaXL2gQa1rp
rPIQ5KBaVYOuvJsxtqk/SpTB4QLAokpubVAKY+0L1vKoTc80SWlKWsefgrbVPwrn
1wmGiQR0Gdrb5Tgbxe5YxuSkmQdmL7lTRpbVJM+f+I/ZtH2uccl6/1lYINwbZbDW
+xOrU5dYDFgd4J6l/mNrnsiEi2RyUipvxBBlSwslHMw07TTqUXF/rBTcY3w7OmqY
9/UVzdhVH/KXTaRS1GsjNWeEnJlOMotNLHqbns4yoxdBa7orX+X1rRICk2tMH1e8
+XTZfvusU8bq/OVUujr2I+lCVKi1gx3cBwwN8q//M0acmlPu5wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFgbgOeofcdV4OdhXlW8xL27QPTRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hNzVl
Y2U3Zi01MzgwLTQwOWUtYjAyNy1iNjczM2MwODhjMzQvYzgyNmQyYzctYzk3My0z
YTk1LWIzNDgtODBjZjIzNzM1ODIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTc1ZWNlN2YtNTM4MC00MDllLWIw
MjctYjY3MzNjMDg4YzM0L2E3NWVjZTdmLTUzODAtNDA5ZS1iMDI3LWI2NzMzYzA4
OGMzNC5jcmwwHwYDVR0jBBgwFoAUQZyloIg+h3f4w5MnJRJ6n44lziEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hNzVlY2U3Zi01MzgwLTQwOWUtYjAyNy1iNjcz
M2MwODhjMzQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkpcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGN7gkhnng9W2zXq7Ovq1GbQkDeDekZ/fcItypqeKYEra1uLt51TeKnRG
V8xuiDZfXNd0Zp/CHl64CghldNXOZwvnEhag0C0JVV4L8DwTWVCOwajWYIQZDCeQ
qv3RXYM8dL+aaY057lA6BBaIdAS/IXbKwWBQqI2HRKp2zzBJvETB2zwbM3d9NtDV
RYzxJjy7JeFHKeQSZTowGY+Xgn6pvFWZzm/jgWSL5QnK32FA7ZMRtGtZ0B2BnJK6
j30XcEnex06tGX9FzKBVcaPbyFOszkRvHcz+iIrkh9QWiOtJb1uovfqkW7XVg0z9
7b4F268eEHVBIMWR1+ovGRW8et9V7Q==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:24 2024 by rpki-client on console-ams.rpki-client.org