Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6acea789-1a07-36ae-952f-17d3be706048.roa
File:                     6acea789-1a07-36ae-952f-17d3be706048.roa (raw, json)
Hash identifier:          bTC07pF1RDKmKKleOCqefYNd9F2SuKAFJnjs7gGq4hg=
Subject key identifier:   57:5D:B9:85:A6:BD:36:46:1D:73:63:23:5C:46:3C:31:43:FA:E3:C5
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858473A5B888EA320BC7A0C84FCC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6acea789-1a07-36ae-952f-17d3be706048.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     64267
IP address blocks:        138.229.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:88:8e:a3:20:bc:7a:0c:84:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=d94e9b87-b583-4345-a884-6dd939569044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:3a:2c:e7:d0:99:a5:8c:83:0e:a4:d5:01:
                    e2:fe:9c:44:14:ed:8c:aa:53:3a:00:dd:41:23:86:
                    b4:ad:a1:58:b2:75:e2:13:1c:bc:ef:f5:f1:6b:b9:
                    54:77:f7:b8:c1:b8:6d:82:98:9d:30:fd:a2:a4:c3:
                    12:cd:a0:d6:30:0f:d6:5c:e9:18:5e:eb:5e:fe:a7:
                    e8:d8:50:16:c4:a4:81:0d:3c:2a:77:5a:21:7d:41:
                    9b:60:21:13:25:56:fb:f2:71:5e:24:1c:e3:23:bc:
                    9a:f2:50:53:2d:e0:fe:10:ee:fb:d8:db:ee:dd:94:
                    6f:cc:d3:44:aa:ff:66:b1:1b:64:89:60:7c:cc:c9:
                    f4:49:8b:53:8e:ab:09:01:b5:f3:32:f0:7d:5a:6b:
                    77:a6:c7:e3:f9:56:44:af:e1:c5:0a:82:69:03:d5:
                    d2:a3:b5:36:d2:33:0a:da:b3:3b:9a:ef:a1:a1:3a:
                    f5:c3:88:5d:86:a0:77:4e:6c:cb:d6:a4:ea:7d:2b:
                    e4:a6:07:24:3e:ca:15:b3:e5:68:66:57:c7:78:7b:
                    cf:e0:f4:46:6b:76:42:aa:67:f1:06:39:3d:77:68:
                    d4:fd:b1:99:48:66:7e:c8:0a:ff:01:20:1c:59:66:
                    dc:5b:05:a2:3d:8f:53:5b:f2:39:e7:db:fc:53:58:
                    61:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5D:B9:85:A6:BD:36:46:1D:73:63:23:5C:46:3C:31:43:FA:E3:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6acea789-1a07-36ae-952f-17d3be706048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:a1:94:60:13:ca:a8:2b:c0:75:3d:7c:cd:67:e9:b0:14:ec:
         7c:fc:15:c0:98:97:71:b1:d6:dc:44:e9:ab:73:7d:6c:92:97:
         fa:1c:7f:1c:85:7a:ca:7d:27:78:56:43:9a:db:f8:3f:fd:cd:
         d4:40:44:62:73:b4:a0:31:f5:91:79:f6:6b:ce:7f:a7:16:6f:
         af:ad:50:fa:e9:40:78:68:2d:f0:1e:50:69:6a:47:34:50:bb:
         2d:07:83:a3:f5:49:6f:5a:87:ae:a7:d3:80:f3:c4:2e:b4:7f:
         48:4b:14:13:27:f1:9d:44:f6:84:52:af:50:8a:3c:bd:89:c7:
         f2:69:0b:ab:8d:27:ea:ef:ee:d6:c7:89:be:06:85:87:d3:22:
         d6:ff:20:b1:f4:fb:02:d5:87:fa:1c:2a:85:85:31:e3:4b:76:
         b2:72:87:b4:2d:4a:00:6a:e4:1d:07:2f:2a:af:0f:fa:d7:c1:
         5d:f7:eb:28:52:91:0b:3a:06:37:3c:87:b6:5d:64:04:f3:55:
         11:09:69:3b:a3:8b:d3:7d:0e:45:ce:1a:c5:db:4f:61:4c:bd:
         6d:72:3d:2e:c1:62:6f:d4:28:45:46:f9:d5:40:81:29:39:ac:
         9b:14:2f:56:1a:60:37:9a:8f:f1:fb:d3:ea:f0:41:17:5c:a2:
         76:a3:38:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6W4iOoyC8egyE/MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
ZDk0ZTliODctYjU4My00MzQ1LWE4ODQtNmRkOTM5NTY5MDQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmU6LOfQmaWMgw6k1QHi/pxEFO2MqlM6AN1B
I4a0raFYsnXiExy87/Xxa7lUd/e4wbhtgpidMP2ipMMSzaDWMA/WXOkYXute/qfo
2FAWxKSBDTwqd1ohfUGbYCETJVb78nFeJBzjI7ya8lBTLeD+EO772Nvu3ZRvzNNE
qv9msRtkiWB8zMn0SYtTjqsJAbXzMvB9Wmt3psfj+VZEr+HFCoJpA9XSo7U20jMK
2rM7mu+hoTr1w4hdhqB3TmzL1qTqfSvkpgckPsoVs+VoZlfHeHvP4PRGa3ZCqmfx
Bjk9d2jU/bGZSGZ+yAr/ASAcWWbcWwWiPY9TW/I559v8U1hhGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFdduYWmvTZGHXNjI1xGPDFD+uPFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNmFjZWE3ODktMWEwNy0z
NmFlLTk1MmYtMTdkM2JlNzA2MDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiuVgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALmhlGATyqgrwHU9fM1n6bAU7Hz8FcCYl3Gx1txE6atzfWySl/ocfxyF
esp9J3hWQ5rb+D/9zdRARGJztKAx9ZF59mvOf6cWb6+tUPrpQHhoLfAeUGlqRzRQ
uy0Hg6P1SW9ah66n04DzxC60f0hLFBMn8Z1E9oRSr1CKPL2Jx/JpC6uNJ+rv7tbH
ib4GhYfTItb/ILH0+wLVh/ocKoWFMeNLdrJyh7QtSgBq5B0HLyqvD/rXwV336yhS
kQs6Bjc8h7ZdZATzVREJaTuji9N9DkXOGsXbT2FMvW1yPS7BYm/UKEVG+dVAgSk5
rJsUL1YaYDeaj/H70+rwQRdconajOOM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:41 2024 by rpki-client on console-fra.rpki-client.org