Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/132e666f-3154-3555-be51-484325b33d86.roa
File:                     132e666f-3154-3555-be51-484325b33d86.roa (raw, json)
Hash identifier:          1PDbeP/waFDqREulTByxq7rcgFaAczZmyOnmIHTraGg=
Subject key identifier:   97:47:B1:E2:18:BE:81:BC:7F:09:41:E1:D7:AE:06:4E:F5:35:CD:21
Certificate issuer:       /CN=2777da36-faff-4a3d-a4c5-1a6ce89b194a
Certificate serial:       010D0C9F432858456822E521954DF35489C640C0
Authority key identifier: E7:0D:6D:9A:55:D3:D6:4C:FC:9F:A8:21:DD:5F:19:99:24:8D:9A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/132e666f-3154-3555-be51-484325b33d86.roa
Signing time:             Tue 02 Apr 2024 01:00:26 +0000
ROA not before:           Tue 02 Apr 2024 01:00:26 +0000
ROA not after:            Mon 01 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        192.159.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/2777da36-faff-4a3d-a4c5-1a6ce89b194a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/2777da36-faff-4a3d-a4c5-1a6ce89b194a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:68:22:e5:21:95:4d:f3:54:89:c6:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2777da36-faff-4a3d-a4c5-1a6ce89b194a
        Validity
            Not Before: Apr  2 01:00:26 2024 GMT
            Not After : Jul  1 01:00:26 2024 GMT
        Subject: CN=1fabe58d-b94f-4fc2-9104-1fd95643f973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:25:67:52:ff:4e:96:cd:1d:72:a4:59:77:
                    a0:c8:c3:d7:06:b6:bc:de:3b:aa:c2:fb:ff:39:22:
                    b9:3a:11:02:52:64:d7:ff:7b:06:0e:ff:ff:f9:29:
                    21:f8:6f:43:24:11:e4:92:ef:76:70:af:41:e3:24:
                    09:3c:d1:fe:bf:6d:1e:6c:72:65:60:35:eb:2e:ad:
                    79:7b:c3:6b:01:c1:c6:e6:92:19:a8:01:4a:29:d9:
                    97:0a:e7:b5:9f:58:54:43:22:1f:85:9f:ea:5f:b0:
                    5f:17:99:b2:49:a5:60:13:c0:e9:4b:27:a4:9b:00:
                    0e:5c:73:db:1f:ed:f5:58:6d:35:70:cd:dc:e5:5e:
                    50:97:47:3d:42:be:1e:ca:23:97:de:f3:64:c5:6f:
                    04:42:c6:a7:25:93:7a:27:52:d2:54:ae:46:45:99:
                    ba:b9:85:a6:7f:cf:24:56:c0:59:ef:ca:5e:27:88:
                    9d:f1:e5:ad:6f:ae:ef:34:56:d6:78:77:ff:41:40:
                    48:3a:40:43:6d:36:66:66:5f:3b:a4:1b:7d:9f:9a:
                    cf:86:5c:85:dd:cf:35:cc:c5:4f:39:f9:d5:70:65:
                    cf:45:eb:6b:f7:a5:c0:ae:2c:eb:12:26:ca:3a:d7:
                    46:b2:10:fa:75:c8:11:9b:fc:f1:22:c8:db:e4:bc:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:47:B1:E2:18:BE:81:BC:7F:09:41:E1:D7:AE:06:4E:F5:35:CD:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/132e666f-3154-3555-be51-484325b33d86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/2777da36-faff-4a3d-a4c5-1a6ce89b194a.crl

            X509v3 Authority Key Identifier:
                keyid:E7:0D:6D:9A:55:D3:D6:4C:FC:9F:A8:21:DD:5F:19:99:24:8D:9A:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.159.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:9f:67:9f:fb:bb:2c:ca:dc:22:23:9f:78:13:19:a7:bf:7a:
         e0:c1:4f:bc:b8:14:48:46:60:02:3d:5d:d3:34:78:ac:ec:35:
         7f:78:fd:fe:6e:e1:cc:b6:34:c1:00:d0:f1:92:07:1d:e3:00:
         3f:ec:7d:a9:b4:71:98:f4:88:a4:1b:d6:72:df:14:3d:aa:c7:
         5c:2d:d7:9e:d7:df:68:8e:07:ec:63:46:a4:bc:0a:39:44:75:
         d4:b5:e2:90:8d:d2:40:ca:05:33:62:a1:66:99:f3:db:76:59:
         44:ed:a2:b4:de:7e:1d:86:4c:88:ed:ce:37:8e:ea:49:39:fb:
         6a:3e:9a:81:6c:e8:82:c2:9d:e2:a3:3e:90:fb:51:d5:ec:c1:
         77:6e:5d:d5:0b:d7:c8:75:48:d7:f3:18:42:d6:a8:07:5b:63:
         77:01:1b:58:2e:e0:e1:17:91:e0:60:30:1b:b8:96:93:a6:85:
         4a:3b:a8:dc:a1:16:4b:d7:76:5a:60:06:a6:6c:80:8b:67:d6:
         f0:ba:f8:3d:7f:bd:65:3c:34:67:37:c6:bc:04:70:14:36:23:
         08:c8:a0:19:59:0f:37:97:92:d4:5b:4b:9a:26:12:98:07:2e:
         75:fd:53:b9:1d:45:ae:17:9f:c2:00:61:19:de:a7:76:0c:b1:
         c2:f1:28:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVoIuUhlU3zVInGQMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjc3N2RhMzYtZmFmZi00YTNkLWE0YzUtMWE2Y2U4OWIx
OTRhMB4XDTI0MDQwMjAxMDAyNloXDTI0MDcwMTAxMDAyNlowLzEtMCsGA1UEAxMk
MWZhYmU1OGQtYjk0Zi00ZmMyLTkxMDQtMWZkOTU2NDNmOTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuElZ1L/TpbNHXKkWXegyMPXBra83juqwvv/
OSK5OhECUmTX/3sGDv//+Skh+G9DJBHkku92cK9B4yQJPNH+v20ebHJlYDXrLq15
e8NrAcHG5pIZqAFKKdmXCue1n1hUQyIfhZ/qX7BfF5mySaVgE8DpSyekmwAOXHPb
H+31WG01cM3c5V5Ql0c9Qr4eyiOX3vNkxW8EQsanJZN6J1LSVK5GRZm6uYWmf88k
VsBZ78peJ4id8eWtb67vNFbWeHf/QUBIOkBDbTZmZl87pBt9n5rPhlyF3c81zMVP
OfnVcGXPRetr96XArizrEibKOtdGshD6dcgRm/zxIsjb5LwIswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJdHseIYvoG8fwlB4deuBk71Nc0hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNzc3
ZGEzNi1mYWZmLTRhM2QtYTRjNS0xYTZjZTg5YjE5NGEvMTMyZTY2NmYtMzE1NC0z
NTU1LWJlNTEtNDg0MzI1YjMzZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjc3N2RhMzYtZmFmZi00YTNkLWE0
YzUtMWE2Y2U4OWIxOTRhLzI3NzdkYTM2LWZhZmYtNGEzZC1hNGM1LTFhNmNlODli
MTk0YS5jcmwwHwYDVR0jBBgwFoAU5w1tmlXT1kz8n6gh3V8ZmSSNmu4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNzc3ZGEzNi1mYWZmLTRhM2QtYTRjNS0xYTZj
ZTg5YjE5NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ97MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6fZ5/7uyzK3CIjn3gTGae/euDBT7y4FEhGYAI9XdM0eKzsNX94/f5u
4cy2NMEA0PGSBx3jAD/sfam0cZj0iKQb1nLfFD2qx1wt157X32iOB+xjRqS8CjlE
ddS14pCN0kDKBTNioWaZ89t2WUTtorTefh2GTIjtzjeO6kk5+2o+moFs6ILCneKj
PpD7UdXswXduXdUL18h1SNfzGELWqAdbY3cBG1gu4OEXkeBgMBu4lpOmhUo7qNyh
FkvXdlpgBqZsgItn1vC6+D1/vWU8NGc3xrwEcBQ2IwjIoBlZDzeXktRbS5omEpgH
LnX9U7kdRa4Xn8IAYRnep3YMscLxKHQ=
-----END CERTIFICATE-----
Generated at Thu May 2 08:04:30 2024 by rpki-client on console-ams.rpki-client.org