Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa
File:                     3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa (raw, json)
Hash identifier:          DcQ9MzjYnXWfxPY7AhlSDWllhzzuP30olHueX4oj00s=
Subject key identifier:   0F:19:E4:27:3A:23:B3:B1:2C:BE:FB:5E:F1:9B:75:6E:0A:01:69:63
Certificate issuer:       /CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Certificate serial:       010D0C9F43285847AF9BEA34FEB51039DF098860
Authority key identifier: 3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa
Signing time:             Mon 28 Oct 2024 01:00:32 +0000
ROA not before:           Mon 28 Oct 2024 01:00:32 +0000
ROA not after:            Sun 26 Jan 2025 02:00:32 +0000
asID:                     15171
IP address blocks:        158.120.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:af:9b:ea:34:fe:b5:10:39:df:09:88:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
        Validity
            Not Before: Oct 28 01:00:32 2024 GMT
            Not After : Jan 26 02:00:32 2025 GMT
        Subject: CN=9da292e8-3278-4a3e-b356-892cd421f2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:61:13:a6:f9:d7:4d:10:0d:87:8d:94:1a:
                    f6:99:f1:6b:17:8f:9f:98:1b:75:01:e4:f8:3e:51:
                    4f:3e:10:2c:7b:c0:f6:c8:8b:39:3a:7a:34:8e:ef:
                    a4:20:17:58:ad:c0:07:d7:78:d9:23:fa:ec:36:4e:
                    ce:08:77:90:92:4f:13:df:aa:b1:26:d5:e0:f0:47:
                    be:3d:6f:d2:fa:d8:aa:e6:c2:e4:4f:b9:a2:82:5c:
                    a6:b0:de:45:51:f7:e9:38:03:29:2b:29:84:07:91:
                    0c:b6:2f:6a:cf:94:a1:06:1d:0f:ab:1b:37:9d:f4:
                    10:72:ba:59:f9:16:cd:61:50:a2:b2:5f:a3:26:6f:
                    77:ee:74:9b:08:69:5e:dd:4f:5e:4c:1e:19:f3:11:
                    13:cb:c9:b0:f9:d8:03:50:91:f0:70:5e:12:fb:ef:
                    9e:07:76:59:ea:ec:17:4d:ae:30:0b:70:1f:e7:14:
                    11:3a:7d:e2:48:05:5e:29:06:6f:f4:0e:69:8b:72:
                    0a:18:4b:4a:bf:3f:c4:08:95:39:7a:86:df:dc:f7:
                    b0:21:bc:7a:47:4e:e2:2b:05:57:59:42:65:f6:b5:
                    fa:38:79:7b:da:fb:b3:03:fc:39:60:c2:3b:51:68:
                    09:1a:99:45:59:6c:8e:18:01:3d:db:3f:6d:ff:7a:
                    99:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:19:E4:27:3A:23:B3:B1:2C:BE:FB:5E:F1:9B:75:6E:0A:01:69:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl

            X509v3 Authority Key Identifier:
                keyid:3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f9:10:1f:45:5f:0e:42:46:f4:05:0a:ad:31:cd:9d:65:eb:
         41:ae:aa:61:f2:59:f6:4f:8c:ac:b1:97:27:28:9d:bf:b7:e7:
         3c:d9:2e:69:7e:fd:76:51:7f:08:74:87:ec:39:24:18:db:43:
         8e:b9:53:9d:84:df:16:53:cf:e5:ef:80:2f:9a:ac:6b:ee:c9:
         32:19:74:8c:d3:5e:65:3a:06:e7:18:e5:5d:bc:af:74:96:b1:
         1f:b9:74:9c:4d:7a:7e:92:2c:19:e6:41:aa:40:92:b0:e4:5a:
         28:2a:13:92:a4:28:6e:a8:68:76:fb:89:d4:6b:32:f4:5b:2e:
         da:29:56:27:27:db:50:9f:78:2f:dd:17:a0:cc:54:4a:b9:05:
         4a:6a:5e:3c:13:9e:52:76:c8:d7:0f:9f:0e:6a:ad:ae:8c:78:
         24:59:83:d8:3e:1e:db:fd:6e:c7:1d:9d:57:4f:f9:2d:aa:52:
         ff:86:6f:86:7a:39:a2:b3:0a:41:ce:c2:bc:c6:64:94:54:f3:
         f1:e7:fe:b6:79:09:0c:59:07:0c:4c:f6:27:99:fd:6e:72:45:
         cf:03:e0:ec:5e:5f:7d:b9:b0:89:55:b1:0b:20:df:a4:0b:ed:
         eb:0c:3d:59:2c:b6:b6:ea:60:0d:fc:75:8e:4f:d2:7d:e6:5e:
         77:ce:53:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEevm+o0/rUQOd8JiGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmJkMTEwNzUtY2RkNC00Y2M3LTk0N2MtYTk0YzU2MjRh
ZGVkMB4XDTI0MTAyODAxMDAzMloXDTI1MDEyNjAyMDAzMlowLzEtMCsGA1UEAxMk
OWRhMjkyZTgtMzI3OC00YTNlLWIzNTYtODkyY2Q0MjFmMmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lhhE6b5100QDYeNlBr2mfFrF4+fmBt1AeT4
PlFPPhAse8D2yIs5Ono0ju+kIBdYrcAH13jZI/rsNk7OCHeQkk8T36qxJtXg8Ee+
PW/S+tiq5sLkT7miglymsN5FUffpOAMpKymEB5EMti9qz5ShBh0Pqxs3nfQQcrpZ
+RbNYVCisl+jJm937nSbCGle3U9eTB4Z8xETy8mw+dgDUJHwcF4S+++eB3ZZ6uwX
Ta4wC3Af5xQROn3iSAVeKQZv9A5pi3IKGEtKvz/ECJU5eobf3PewIbx6R07iKwVX
WUJl9rX6OHl72vuzA/w5YMI7UWgJGplFWWyOGAE92z9t/3qZUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA8Z5Cc6I7OxLL77XvGbdW4KAWljMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82YmQx
MTA3NS1jZGQ0LTRjYzctOTQ3Yy1hOTRjNTYyNGFkZWQvM2E3MzM2NzMtODdkOC0z
MzE4LWI5YWEtOWQzNmMwNGFjMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNmJkMTEwNzUtY2RkNC00Y2M3LTk0
N2MtYTk0YzU2MjRhZGVkLzZiZDExMDc1LWNkZDQtNGNjNy05NDdjLWE5NGM1NjI0
YWRlZC5jcmwwHwYDVR0jBBgwFoAUP5ADfwiMLsR8qc08o/FSGtCv/EUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82YmQxMTA3NS1jZGQ0LTRjYzctOTQ3Yy1hOTRj
NTYyNGFkZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnniAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFX5EB9FXw5CRvQFCq0xzZ1l60GuqmHyWfZPjKyxlyconb+35zzZLml+
/XZRfwh0h+w5JBjbQ465U52E3xZTz+XvgC+arGvuyTIZdIzTXmU6BucY5V28r3SW
sR+5dJxNen6SLBnmQapAkrDkWigqE5KkKG6oaHb7idRrMvRbLtopVicn21CfeC/d
F6DMVEq5BUpqXjwTnlJ2yNcPnw5qra6MeCRZg9g+Htv9bscdnVdP+S2qUv+Gb4Z6
OaKzCkHOwrzGZJRU8/Hn/rZ5CQxZBwxM9ieZ/W5yRc8D4OxeX325sIlVsQsg36QL
7esMPVkstrbqYA38dY5P0n3mXnfOUxA=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:38 2024 by rpki-client on console-fra.rpki-client.org