Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/a8579459-c72d-3238-ab3c-aac7b61cc538.roa
File:                     a8579459-c72d-3238-ab3c-aac7b61cc538.roa (raw, json)
Hash identifier:          EDeTvTud5JW9bSm01flP5La87CvZNo1GBQjyTUWgKAQ=
Subject key identifier:   8A:DB:79:00:0D:2E:D7:A0:E1:E8:A1:95:29:F0:9A:DB:5E:9C:D2:3A
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F432858484EDAD18182CCCE39AAA3AC00
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/a8579459-c72d-3238-ab3c-aac7b61cc538.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     1742
IP address blocks:        140.247.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:d1:81:82:cc:ce:39:aa:a3:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=9eccbc32-c539-4cbb-b257-e989bae468f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1f:b7:cb:e0:92:28:5e:8d:65:87:6b:f4:69:
                    d6:95:13:1c:da:33:61:79:55:93:54:cb:8f:8b:f7:
                    76:98:ca:eb:a8:0e:87:23:f5:0b:4e:f9:93:ab:bf:
                    6d:60:7b:16:32:d8:9b:3d:f4:ed:16:0b:74:9f:60:
                    bd:53:51:91:af:c4:ba:7f:5f:e6:2f:3f:ec:07:28:
                    63:ff:71:7c:47:07:cd:46:dc:22:76:60:cf:18:be:
                    26:ed:b4:37:40:fb:63:36:3b:cc:d8:cf:19:2b:a5:
                    40:65:77:f2:a1:e5:2c:f7:fe:06:02:96:3c:8e:e6:
                    26:c3:59:58:09:ad:39:5d:82:ed:d5:cc:16:41:76:
                    c2:e2:5f:43:08:f1:b7:ee:3f:12:62:8b:a0:fd:31:
                    69:51:ce:48:9b:fb:56:d6:b2:46:69:2b:fc:a5:b7:
                    27:a4:91:9e:c7:ae:09:3e:5a:87:ca:cf:c3:a3:36:
                    3d:36:19:c3:fb:da:ea:43:0f:1d:bc:f0:5e:fa:f8:
                    89:6c:e8:d1:49:20:83:41:c4:52:9c:73:08:fe:37:
                    3e:44:08:f4:bb:f6:93:6c:a4:9a:1d:ff:09:c9:33:
                    6f:da:33:fa:da:6b:5d:62:d8:11:3d:05:64:6f:16:
                    eb:bf:73:13:9d:60:5a:43:9b:84:f4:40:04:0a:d7:
                    b6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DB:79:00:0D:2E:D7:A0:E1:E8:A1:95:29:F0:9A:DB:5E:9C:D2:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/a8579459-c72d-3238-ab3c-aac7b61cc538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.247.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:26:3c:f9:d9:20:09:46:a1:81:c3:94:26:02:10:5b:4e:88:
         e5:9c:e8:60:de:d9:30:cc:ad:3d:fa:d6:95:4a:e2:ca:62:59:
         24:1e:75:41:ad:6f:3f:a1:ac:92:12:27:35:a1:68:3c:a3:3f:
         e8:d5:5f:6d:34:b7:1d:d6:82:04:a8:90:6e:4c:fa:79:1d:5c:
         71:57:89:f7:ab:2c:49:48:ce:f5:0e:de:eb:74:41:86:05:42:
         a4:4a:e8:c1:73:e6:7e:2c:f5:14:f2:bd:0f:4d:1b:ea:d6:30:
         88:7f:8c:da:c8:ea:ff:a4:68:6a:31:ac:ac:e1:19:e3:50:6c:
         a7:f1:91:13:db:a4:82:3e:c6:e0:ea:19:11:2f:db:ce:d0:b1:
         20:91:91:92:86:ab:ca:c4:63:d7:42:ae:1b:17:34:98:09:d5:
         0d:b2:29:2e:7a:b4:95:b3:72:41:3d:07:87:bb:89:57:ef:21:
         d6:aa:53:25:e3:3f:95:3e:35:fb:69:f6:6e:c0:df:dd:83:48:
         b3:14:97:bb:20:37:89:61:0b:8c:ba:dc:1c:7c:54:cd:b0:63:
         8c:3a:00:bc:f8:8d:09:18:be:64:63:64:a6:52:46:f7:13:d6:
         65:f7:e6:d4:13:1d:cf:32:e1:6a:ab:c5:d6:ad:d4:d8:e2:bb:
         eb:0c:3e:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhO2tGBgszOOaqjrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc0MTdmZTYtMTc5MC00ODFhLTliZGMtNjU3NGMwZWY3
ZDdjMB4XDTI0MTIyNDAyMDAzOFoXDTI1MDMyNDAxMDAzOFowLzEtMCsGA1UEAxMk
OWVjY2JjMzItYzUzOS00Y2JiLWIyNTctZTk4OWJhZTQ2OGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx+3y+CSKF6NZYdr9GnWlRMc2jNheVWTVMuP
i/d2mMrrqA6HI/ULTvmTq79tYHsWMtibPfTtFgt0n2C9U1GRr8S6f1/mLz/sByhj
/3F8RwfNRtwidmDPGL4m7bQ3QPtjNjvM2M8ZK6VAZXfyoeUs9/4GApY8juYmw1lY
Ca05XYLt1cwWQXbC4l9DCPG37j8SYoug/TFpUc5Im/tW1rJGaSv8pbcnpJGex64J
PlqHys/DozY9NhnD+9rqQw8dvPBe+viJbOjRSSCDQcRSnHMI/jc+RAj0u/aTbKSa
Hf8JyTNv2jP62mtdYtgRPQVkbxbrv3MTnWBaQ5uE9EAECte2TwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIrbeQANLteg4eihlSnwmttenNI6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzQx
N2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0YzBlZjdkN2MvYTg1Nzk0NTktYzcyZC0z
MjM4LWFiM2MtYWFjN2I2MWNjNTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc0MTdmZTYtMTc5MC00ODFhLTli
ZGMtNjU3NGMwZWY3ZDdjLzg3NDE3ZmU2LTE3OTAtNDgxYS05YmRjLTY1NzRjMGVm
N2Q3Yy5jcmwwHwYDVR0jBBgwFoAUurcPAt6acXKk8OlAE68ADtiaXP0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NzQxN2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0
YzBlZjdkN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPeYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADsmPPnZIAlGoYHDlCYCEFtOiOWc6GDe2TDMrT361pVK4spiWSQedUGt
bz+hrJISJzWhaDyjP+jVX200tx3WggSokG5M+nkdXHFXiferLElIzvUO3ut0QYYF
QqRK6MFz5n4s9RTyvQ9NG+rWMIh/jNrI6v+kaGoxrKzhGeNQbKfxkRPbpII+xuDq
GREv287QsSCRkZKGq8rEY9dCrhsXNJgJ1Q2yKS56tJWzckE9B4e7iVfvIdaqUyXj
P5U+Nftp9m7A392DSLMUl7sgN4lhC4y63Bx8VM2wY4w6ALz4jQkYvmRjZKZSRvcT
1mX35tQTHc8y4Wqrxdat1Njiu+sMPl4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:07 2025 by rpki-client