Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/8899cf25-090d-3d92-b839-b8b83a5ee264.roa
File:                     8899cf25-090d-3d92-b839-b8b83a5ee264.roa (raw, json)
Hash identifier:          N5ez4+AKGOBjLDuQtg61rRULsMhPDR/y/bQlcGLcK2Q=
Subject key identifier:   1E:B3:8A:C4:D5:6B:FF:C6:DA:AE:21:73:37:DF:82:EA:E4:48:A3:F7
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F432858477D5BA011B751BE3CB9CCDE80
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/8899cf25-090d-3d92-b839-b8b83a5ee264.roa
Signing time:             Thu 10 Oct 2024 01:00:33 +0000
ROA not before:           Thu 10 Oct 2024 01:00:33 +0000
ROA not after:            Wed 08 Jan 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        151.193.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7d:5b:a0:11:b7:51:be:3c:b9:cc:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Oct 10 01:00:33 2024 GMT
            Not After : Jan  8 02:00:33 2025 GMT
        Subject: CN=22272dba-1b55-4a8d-82e9-893158c3f62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:4b:61:2e:0e:12:c7:c6:b3:3a:27:b0:2c:
                    fb:21:26:9b:e2:40:1d:97:f3:e8:d7:68:8c:dc:f7:
                    7f:b8:3c:1e:5b:1b:e5:1a:8c:f8:e4:40:38:b0:b9:
                    75:2e:e9:d5:61:f6:65:31:2d:1f:ca:30:7e:e1:1b:
                    53:6f:4a:72:70:e0:54:04:e1:c4:28:c2:57:1a:1d:
                    86:c6:d5:a2:2e:2b:3d:ef:5a:e4:ff:cc:8d:9c:0a:
                    1f:73:67:5a:8b:72:ed:27:06:f0:63:5d:a2:31:44:
                    be:c7:5e:f3:85:cf:1e:2f:5c:24:77:39:ea:e0:53:
                    cc:21:e2:72:c5:0e:60:a6:f7:e1:b9:c2:e7:ad:36:
                    bd:d9:de:91:0a:15:a2:64:7d:59:ba:27:2e:c8:8f:
                    1c:28:ca:85:a5:6d:37:4b:e6:61:37:ba:cf:05:82:
                    8e:89:c2:cf:39:ab:af:22:2d:5a:7c:f8:35:ac:d4:
                    38:c5:ef:3c:e6:e6:8b:b4:7d:4b:ef:e0:10:23:5f:
                    76:30:ae:8b:28:80:df:54:43:24:5e:6a:ad:a9:cb:
                    78:b8:89:d9:a5:83:d1:a5:8e:54:3c:d5:0c:0b:28:
                    3a:99:75:be:d3:91:d5:26:eb:72:fd:da:86:cd:69:
                    2e:8e:f9:96:64:1c:f8:57:40:8f:08:a2:09:79:3e:
                    1f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B3:8A:C4:D5:6B:FF:C6:DA:AE:21:73:37:DF:82:EA:E4:48:A3:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/8899cf25-090d-3d92-b839-b8b83a5ee264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:99:cb:57:10:29:4d:e3:41:df:75:b3:87:fd:69:8f:11:c2:
         2f:6a:5f:da:3b:b3:48:41:5d:ba:40:db:7f:54:a1:5f:49:08:
         ee:e1:a8:fc:c4:2d:2a:e6:30:ff:29:32:f7:ea:20:38:09:45:
         bf:74:87:68:a1:87:88:db:d6:c4:58:14:66:93:2c:c8:62:9c:
         25:89:f4:45:72:df:14:c2:82:dd:8c:db:47:52:c1:a6:da:3f:
         c6:dd:28:6b:8b:67:15:b4:b4:66:32:07:d5:db:6a:87:ed:9f:
         3c:64:9a:8b:eb:53:0a:62:03:fc:23:cc:6d:1d:28:05:a4:bb:
         65:1f:2d:5f:e1:68:15:66:b1:2a:b4:de:32:24:e4:20:5c:6e:
         7d:f3:8b:cc:2c:28:9c:de:2c:20:0a:a6:d8:e5:36:9b:59:1f:
         0c:a4:66:78:84:b8:71:17:02:9a:63:a0:2e:16:91:92:07:35:
         79:5c:15:0f:3e:76:6c:8f:40:b9:bd:95:ce:77:46:08:00:11:
         ec:18:71:6d:64:e5:5f:b4:63:1c:29:03:87:ed:f9:6d:61:31:
         d4:1f:9f:aa:15:9d:d3:8b:88:a2:8c:58:26:39:e3:0a:34:74:
         49:3e:46:43:fe:9b:a0:58:79:6c:9f:e3:00:eb:84:4a:5c:4d:
         67:e4:b7:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd9W6ARt1G+PLnM3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIxNTk4MjMtODA2YS00ODc5LTlkZTktN2JlNjM0ZThj
ZDMxMB4XDTI0MTAxMDAxMDAzM1oXDTI1MDEwODAyMDAzM1owLzEtMCsGA1UEAxMk
MjIyNzJkYmEtMWI1NS00YThkLTgyZTktODkzMTU4YzNmNjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxodLYS4OEsfGszonsCz7ISab4kAdl/Po12iM
3Pd/uDweWxvlGoz45EA4sLl1LunVYfZlMS0fyjB+4RtTb0pycOBUBOHEKMJXGh2G
xtWiLis971rk/8yNnAofc2dai3LtJwbwY12iMUS+x17zhc8eL1wkdznq4FPMIeJy
xQ5gpvfhucLnrTa92d6RChWiZH1ZuicuyI8cKMqFpW03S+ZhN7rPBYKOicLPOauv
Ii1afPg1rNQ4xe885uaLtH1L7+AQI192MK6LKIDfVEMkXmqtqct4uInZpYPRpY5U
PNUMCyg6mXW+05HVJuty/dqGzWkujvmWZBz4V0CPCKIJeT4fGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB6zisTVa//G2q4hczffgurkSKP3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMjE1
OTgyMy04MDZhLTQ4NzktOWRlOS03YmU2MzRlOGNkMzEvODg5OWNmMjUtMDkwZC0z
ZDkyLWI4MzktYjhiODNhNWVlMjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTIxNTk4MjMtODA2YS00ODc5LTlk
ZTktN2JlNjM0ZThjZDMxL2EyMTU5ODIzLTgwNmEtNDg3OS05ZGU5LTdiZTYzNGU4
Y2QzMS5jcmwwHwYDVR0jBBgwFoAUpZGQmoiGHwLfK88I1KSUYP2ExWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hMjE1OTgyMy04MDZhLTQ4NzktOWRlOS03YmU2
MzRlOGNkMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl8E6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKZy1cQKU3jQd91s4f9aY8Rwi9qX9o7s0hBXbpA239UoV9JCO7hqPzE
LSrmMP8pMvfqIDgJRb90h2ihh4jb1sRYFGaTLMhinCWJ9EVy3xTCgt2M20dSwaba
P8bdKGuLZxW0tGYyB9XbaoftnzxkmovrUwpiA/wjzG0dKAWku2UfLV/haBVmsSq0
3jIk5CBcbn3zi8wsKJzeLCAKptjlNptZHwykZniEuHEXAppjoC4WkZIHNXlcFQ8+
dmyPQLm9lc53RggAEewYcW1k5V+0YxwpA4ft+W1hMdQfn6oVndOLiKKMWCY54wo0
dEk+RkP+m6BYeWyf4wDrhEpcTWfkt3g=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:41 2024 by rpki-client on console-fra.rpki-client.org