Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e606b373-1397-4ee9-854e-85cd917bae32/831399c8-9859-3845-bb04-afed3c7dddd6.roa
File:                     831399c8-9859-3845-bb04-afed3c7dddd6.roa (raw, json)
Hash identifier:          priGzcNARRYgcVsmNcPWEYs4lc17tnEP6sDv5zrmSQ0=
Subject key identifier:   F4:C8:1B:D9:DF:F8:88:D0:FB:95:83:BD:EF:30:D7:B0:9A:D8:68:41
Certificate issuer:       /CN=e606b373-1397-4ee9-854e-85cd917bae32
Certificate serial:       010D0C9F432858489FD097A6DF3E285FF4BDB560
Authority key identifier: 4F:6B:AB:9E:74:A4:95:78:EF:98:99:BE:7E:21:1A:68:E9:EC:23:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e606b373-1397-4ee9-854e-85cd917bae32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e606b373-1397-4ee9-854e-85cd917bae32/831399c8-9859-3845-bb04-afed3c7dddd6.roa
Signing time:             Wed 22 Jan 2025 02:00:39 +0000
ROA not before:           Wed 22 Jan 2025 02:00:39 +0000
ROA not after:            Tue 22 Apr 2025 01:00:39 +0000
asID:                     16475
IP address blocks:        139.57.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e606b373-1397-4ee9-854e-85cd917bae32/e606b373-1397-4ee9-854e-85cd917bae32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e606b373-1397-4ee9-854e-85cd917bae32/e606b373-1397-4ee9-854e-85cd917bae32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e606b373-1397-4ee9-854e-85cd917bae32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:d0:97:a6:df:3e:28:5f:f4:bd:b5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e606b373-1397-4ee9-854e-85cd917bae32
        Validity
            Not Before: Jan 22 02:00:39 2025 GMT
            Not After : Apr 22 01:00:39 2025 GMT
        Subject: CN=b53f0438-ea52-4a65-bc0a-078b689e8f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:57:67:f6:46:72:48:a2:29:7d:34:f3:4e:0f:
                    29:ef:4e:66:ab:d5:c3:0e:5c:05:68:1a:f5:6d:cb:
                    2c:db:73:7a:31:26:ea:d0:07:fa:c8:03:61:46:2d:
                    3a:f9:e6:88:09:d9:46:ab:81:99:71:70:e2:94:fd:
                    84:cc:e9:fc:d2:ec:01:4c:29:73:ff:e6:de:3f:71:
                    fc:96:b5:72:3c:ea:35:da:e5:c2:b1:13:ae:73:4d:
                    d2:79:76:76:f9:13:ff:f5:0c:af:17:7f:55:09:9f:
                    14:fe:44:95:9c:83:7c:c4:51:06:4f:08:77:11:c3:
                    95:bc:a5:9f:8b:57:d3:b5:74:bb:ae:22:8f:a2:f6:
                    18:0e:50:9b:55:1c:22:7c:a1:03:0e:d3:cb:5b:08:
                    f2:63:2b:ea:6b:1e:b1:5e:d7:fc:e8:bd:eb:2c:53:
                    12:2a:8a:9d:ca:19:7b:60:9e:7b:70:76:28:63:21:
                    c6:85:29:62:9f:d2:c2:9b:22:ea:9b:6c:a8:c5:81:
                    bb:50:65:3b:6a:79:01:91:cc:09:91:50:b7:86:cc:
                    0d:8a:81:35:7a:fe:82:fd:c8:0a:be:22:5b:56:62:
                    be:04:2a:fb:79:89:a7:b2:38:c1:70:fa:bd:5d:74:
                    b5:b5:d8:27:a7:67:41:94:97:f9:f0:04:8a:f9:f5:
                    88:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C8:1B:D9:DF:F8:88:D0:FB:95:83:BD:EF:30:D7:B0:9A:D8:68:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e606b373-1397-4ee9-854e-85cd917bae32/831399c8-9859-3845-bb04-afed3c7dddd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e606b373-1397-4ee9-854e-85cd917bae32/e606b373-1397-4ee9-854e-85cd917bae32.crl

            X509v3 Authority Key Identifier:
                keyid:4F:6B:AB:9E:74:A4:95:78:EF:98:99:BE:7E:21:1A:68:E9:EC:23:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e606b373-1397-4ee9-854e-85cd917bae32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.57.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:bf:98:24:b0:02:d9:74:2d:fc:55:7b:ed:97:dc:07:06:40:
         de:9e:c4:91:bf:c8:f5:ce:6c:69:48:4a:c8:ee:dd:f3:05:ba:
         ca:20:9c:15:e2:95:8a:8f:34:99:25:d2:e2:23:f4:fd:2a:07:
         c4:fa:46:33:54:ef:bf:87:a2:fa:7a:75:7e:5b:bb:3f:45:35:
         e7:22:71:15:be:71:f0:ff:73:6b:80:00:c8:45:4d:3a:ea:49:
         3e:98:0e:34:52:65:d6:08:56:cc:df:ad:a8:7e:98:39:59:40:
         d1:5f:31:10:1d:0d:9d:ca:80:16:81:28:88:d6:82:93:c6:18:
         41:41:a2:3f:32:65:af:16:05:f0:82:a1:5d:44:67:53:f0:60:
         aa:71:ef:2a:b6:82:5a:de:67:47:d0:ca:f3:c3:28:1c:63:1c:
         a2:ad:30:61:2c:cf:b5:fa:73:b2:1b:86:fb:8a:44:82:3f:89:
         4e:34:6e:a1:d6:87:29:4f:9e:97:cc:08:e4:e3:0e:d7:b3:60:
         51:21:0d:61:53:bb:c1:9d:0b:fd:6b:9e:63:39:c6:f0:69:51:
         e6:b6:75:e9:ad:8f:da:52:18:16:d6:dd:06:a8:1b:ae:0f:08:
         17:27:6c:4d:9d:51:69:7c:90:19:a5:d8:93:50:f4:92:26:2a:
         5e:a0:99:e6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEif0Jem3z4oX/S9tWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNmIzNzMtMTM5Ny00ZWU5LTg1NGUtODVjZDkxN2Jh
ZTMyMB4XDTI1MDEyMjAyMDAzOVoXDTI1MDQyMjAxMDAzOVowLzEtMCsGA1UEAxMk
YjUzZjA0MzgtZWE1Mi00YTY1LWJjMGEtMDc4YjY4OWU4ZjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11dn9kZySKIpfTTzTg8p705mq9XDDlwFaBr1
bcss23N6MSbq0Af6yANhRi06+eaICdlGq4GZcXDilP2EzOn80uwBTClz/+beP3H8
lrVyPOo12uXCsROuc03SeXZ2+RP/9QyvF39VCZ8U/kSVnIN8xFEGTwh3EcOVvKWf
i1fTtXS7riKPovYYDlCbVRwifKEDDtPLWwjyYyvqax6xXtf86L3rLFMSKoqdyhl7
YJ57cHYoYyHGhSlin9LCmyLqm2yoxYG7UGU7ankBkcwJkVC3hswNioE1ev6C/cgK
viJbVmK+BCr7eYmnsjjBcPq9XXS1tdgnp2dBlJf58ASK+fWIgQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPTIG9nf+IjQ+5WDve8w17Ca2GhBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lNjA2
YjM3My0xMzk3LTRlZTktODU0ZS04NWNkOTE3YmFlMzIvODMxMzk5YzgtOTg1OS0z
ODQ1LWJiMDQtYWZlZDNjN2RkZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTYwNmIzNzMtMTM5Ny00ZWU5LTg1
NGUtODVjZDkxN2JhZTMyL2U2MDZiMzczLTEzOTctNGVlOS04NTRlLTg1Y2Q5MTdi
YWUzMi5jcmwwHwYDVR0jBBgwFoAUT2urnnSklXjvmJm+fiEaaOnsI+8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lNjA2YjM3My0xMzk3LTRlZTktODU0ZS04NWNk
OTE3YmFlMzIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAizkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVL+YJLAC2XQt/FV77ZfcBwZA3p7Ekb/I9c5saUhKyO7d8wW6yiCcFeKV
io80mSXS4iP0/SoHxPpGM1Tvv4ei+np1flu7P0U15yJxFb5x8P9za4AAyEVNOupJ
PpgONFJl1ghWzN+tqH6YOVlA0V8xEB0NncqAFoEoiNaCk8YYQUGiPzJlrxYF8IKh
XURnU/BgqnHvKraCWt5nR9DK88MoHGMcoq0wYSzPtfpzshuG+4pEgj+JTjRuodaH
KU+el8wI5OMO17NgUSENYVO7wZ0L/WueYznG8GlR5rZ16a2P2lIYFtbdBqgbrg8I
FydsTZ1RaXyQGaXYk1D0kiYqXqCZ5g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:49 2025 by rpki-client