Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/bd7aeeae-347b-3c7a-a196-6f3abd3bd28a.roa
File:                     bd7aeeae-347b-3c7a-a196-6f3abd3bd28a.roa (raw, json)
Hash identifier:          VwZzwYg0Q4zJao0cDp5msi8/r8cSCE6eHw9drefFHjA=
Subject key identifier:   C8:A8:5C:08:BF:53:C3:5E:ED:F5:36:4D:F6:6D:78:77:D6:14:F2:AC
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F432858477D5BA0523BA918D9A8D4D400
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/bd7aeeae-347b-3c7a-a196-6f3abd3bd28a.roa
Signing time:             Thu 10 Oct 2024 01:00:33 +0000
ROA not before:           Thu 10 Oct 2024 01:00:33 +0000
ROA not after:            Wed 08 Jan 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        151.193.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7d:5b:a0:52:3b:a9:18:d9:a8:d4:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Oct 10 01:00:33 2024 GMT
            Not After : Jan  8 02:00:33 2025 GMT
        Subject: CN=ef8390dd-1775-4bb0-9426-055bf9af0ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:25:a2:97:62:d8:77:04:2c:4d:d1:95:b3:34:
                    70:64:74:22:f9:56:76:e9:d6:7a:78:99:60:89:b0:
                    e0:e7:63:f6:c9:85:d3:a3:54:e1:b6:8f:b8:b4:04:
                    e4:04:c5:dd:16:f8:2e:78:1a:8d:92:a5:03:4f:42:
                    2d:89:9e:62:a7:ac:7e:6c:dd:24:7b:90:f5:c6:85:
                    b1:f5:30:1f:df:a8:0f:2c:a5:41:20:ea:52:b6:b0:
                    36:47:d1:87:5f:77:94:64:b2:99:39:fb:61:f9:72:
                    f7:29:e9:05:a3:3a:1b:14:c9:59:20:9f:5c:63:04:
                    ee:79:d6:37:3e:06:2f:5f:88:e4:58:9c:5a:7d:06:
                    46:56:bd:a7:f7:df:ef:d7:f8:64:68:63:9e:3c:53:
                    bb:4b:ed:2c:01:41:49:02:da:a2:25:53:d1:54:0d:
                    02:55:10:b2:90:31:df:bc:c3:a9:25:e8:0e:92:06:
                    4d:5c:b0:c6:77:9a:8f:ea:ef:68:28:20:f8:ec:c2:
                    e9:95:5d:18:66:b4:28:71:7f:d6:ca:05:23:4b:fe:
                    85:77:e6:b0:23:76:cf:5d:54:6d:95:56:3c:4a:5e:
                    36:dc:5f:0f:5c:33:9b:07:b3:7d:30:b4:ff:c4:ca:
                    84:fd:22:45:34:14:2c:aa:ec:d3:4a:a6:14:7d:26:
                    75:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A8:5C:08:BF:53:C3:5E:ED:F5:36:4D:F6:6D:78:77:D6:14:F2:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/bd7aeeae-347b-3c7a-a196-6f3abd3bd28a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:bf:a5:e3:19:82:13:77:dd:31:07:2d:74:35:d4:d3:f2:60:
         7a:a2:f7:56:01:63:da:3c:61:c6:aa:f0:c3:c5:cb:73:1c:33:
         71:51:b3:81:9a:c4:62:2c:81:f8:80:7e:2e:28:c6:6f:69:f9:
         3e:e2:6c:89:68:79:c5:0d:89:c4:c4:25:b8:7a:6e:3a:90:e5:
         d2:94:4b:ff:a5:b8:6a:4f:ac:b0:df:d5:43:bc:19:2e:5c:fd:
         bf:15:dc:1c:b0:d7:e1:82:a2:c0:9e:e3:f6:13:bb:25:6e:93:
         49:d0:37:e6:46:f9:ba:dd:b4:2e:7d:34:bd:9c:e4:7f:b1:f4:
         5b:66:6d:76:3d:c2:38:3d:55:b5:5d:a9:ad:87:e6:6a:6b:b7:
         99:00:82:a1:1d:d9:8d:d5:1c:ac:ab:c6:24:7c:9e:64:f2:b7:
         80:bd:53:2f:e0:ef:f9:8c:7d:47:5b:38:65:46:d4:e3:56:c1:
         cc:80:26:79:26:72:4b:b5:b8:f3:c5:de:48:75:a8:dd:4d:c2:
         06:1e:ae:de:51:23:5b:c2:db:97:ef:b5:22:e4:cb:67:1e:08:
         91:db:98:d0:4e:30:80:8c:fe:a4:10:e3:02:54:dc:81:40:2b:
         17:c7:4d:c8:6b:61:4e:06:5a:1e:fe:6e:18:50:44:d8:9b:df:
         87:30:5e:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd9W6BSO6kY2ajU1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIxNTk4MjMtODA2YS00ODc5LTlkZTktN2JlNjM0ZThj
ZDMxMB4XDTI0MTAxMDAxMDAzM1oXDTI1MDEwODAyMDAzM1owLzEtMCsGA1UEAxMk
ZWY4MzkwZGQtMTc3NS00YmIwLTk0MjYtMDU1YmY5YWYwYmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiWil2LYdwQsTdGVszRwZHQi+VZ26dZ6eJlg
ibDg52P2yYXTo1Thto+4tATkBMXdFvgueBqNkqUDT0ItiZ5ip6x+bN0ke5D1xoWx
9TAf36gPLKVBIOpStrA2R9GHX3eUZLKZOfth+XL3KekFozobFMlZIJ9cYwTuedY3
PgYvX4jkWJxafQZGVr2n99/v1/hkaGOePFO7S+0sAUFJAtqiJVPRVA0CVRCykDHf
vMOpJegOkgZNXLDGd5qP6u9oKCD47MLplV0YZrQocX/WygUjS/6Fd+awI3bPXVRt
lVY8Sl423F8PXDObB7N9MLT/xMqE/SJFNBQsquzTSqYUfSZ1hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMioXAi/U8Ne7fU2TfZteHfWFPKsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMjE1
OTgyMy04MDZhLTQ4NzktOWRlOS03YmU2MzRlOGNkMzEvYmQ3YWVlYWUtMzQ3Yi0z
YzdhLWExOTYtNmYzYWJkM2JkMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTIxNTk4MjMtODA2YS00ODc5LTlk
ZTktN2JlNjM0ZThjZDMxL2EyMTU5ODIzLTgwNmEtNDg3OS05ZGU5LTdiZTYzNGU4
Y2QzMS5jcmwwHwYDVR0jBBgwFoAUpZGQmoiGHwLfK88I1KSUYP2ExWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hMjE1OTgyMy04MDZhLTQ4NzktOWRlOS03YmU2
MzRlOGNkMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl8FAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFq/peMZghN33TEHLXQ11NPyYHqi91YBY9o8Ycaq8MPFy3McM3FRs4Ga
xGIsgfiAfi4oxm9p+T7ibIloecUNicTEJbh6bjqQ5dKUS/+luGpPrLDf1UO8GS5c
/b8V3Byw1+GCosCe4/YTuyVuk0nQN+ZG+brdtC59NL2c5H+x9FtmbXY9wjg9VbVd
qa2H5mprt5kAgqEd2Y3VHKyrxiR8nmTyt4C9Uy/g7/mMfUdbOGVG1ONWwcyAJnkm
cku1uPPF3kh1qN1NwgYert5RI1vC25fvtSLky2ceCJHbmNBOMICM/qQQ4wJU3IFA
KxfHTchrYU4GWh7+bhhQRNib34cwXq8=
-----END CERTIFICATE-----
Generated at Sun Nov 24 19:48:12 2024 by rpki-client on console-fra.rpki-client.org