Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b53281a-a0ba-38f4-bc44-32aa7e758304.roa
File:                     3b53281a-a0ba-38f4-bc44-32aa7e758304.roa (raw, json)
Hash identifier:          kW94VkkjwsseLpo6jQQnI/xAwQ+gRwxlAeDHjgJr7xE=
Subject key identifier:   B1:FB:40:0C:44:E2:A1:07:2C:BD:C7:23:74:29:FC:21:7C:22:25:03
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847DC64A2FC6C3F300CE0135C00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b53281a-a0ba-38f4-bc44-32aa7e758304.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     852
IP address blocks:        142.59.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:a2:fc:6c:3f:30:0c:e0:13:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=96617775-4100-410a-8959-79eedac65bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ad:77:f9:d4:53:6f:fa:75:23:1f:6a:39:66:
                    9d:b7:94:b8:f0:85:9a:06:fb:84:3e:46:cd:ca:9c:
                    81:28:8b:b0:a9:97:09:54:e3:22:61:af:55:a7:b4:
                    30:4a:16:b5:2f:7b:28:de:d0:b5:64:30:78:ad:55:
                    05:68:f3:cb:2f:e0:16:0a:4c:84:f8:10:76:27:86:
                    4c:27:5f:14:55:55:35:70:93:b5:11:34:24:67:e8:
                    b6:52:24:96:52:bf:61:54:b3:29:74:08:5f:48:9d:
                    6d:1a:67:19:d5:67:ea:12:6a:79:44:e5:d4:ed:53:
                    af:f7:75:9b:bb:45:08:73:b0:88:12:d4:c2:cc:f2:
                    51:b7:68:16:76:1a:56:d0:22:a2:88:2e:72:b3:21:
                    55:4d:64:02:45:01:ce:e3:c3:e9:79:55:e2:67:c2:
                    6b:18:8f:91:13:b7:ee:18:1d:93:c8:8f:63:1d:3b:
                    de:fd:d9:ed:96:29:2c:9e:5a:47:6f:d4:04:f1:7a:
                    7c:da:76:b7:c6:db:d0:2f:10:d8:c0:9f:f8:7d:d9:
                    1c:80:68:95:ce:bc:dc:5f:ec:28:41:bb:0a:29:8b:
                    40:99:38:09:5a:de:8b:d2:05:1a:b4:94:b3:c7:26:
                    65:28:78:d5:3c:79:86:2a:96:8b:8c:96:a8:5c:79:
                    2b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FB:40:0C:44:E2:A1:07:2C:BD:C7:23:74:29:FC:21:7C:22:25:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b53281a-a0ba-38f4-bc44-32aa7e758304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.59.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:11:3c:a4:b7:a7:f9:d3:c6:ea:d8:22:5a:ee:86:ff:04:73:
         a3:54:dd:0b:6d:24:9f:de:0a:99:d0:a4:5f:bd:04:bf:e1:55:
         9e:f9:1d:ec:47:e6:9b:20:50:99:3c:a9:a6:e3:1b:83:28:04:
         2d:07:f3:a2:5a:c4:de:f1:73:e2:cd:f4:0b:0e:9b:07:47:b2:
         ce:36:db:82:7f:32:58:87:15:c4:06:64:1c:eb:7d:aa:68:2b:
         f7:5d:40:8d:dd:52:7a:02:7a:ed:dc:4c:98:b9:46:2e:c4:01:
         10:e1:92:89:68:0f:6a:2f:12:b0:b1:e9:4a:38:77:f6:ab:0d:
         73:82:50:1a:57:5c:7d:45:67:0e:94:84:7b:6f:e4:a8:03:81:
         b8:32:51:b4:3c:f9:7a:70:5a:a2:8e:47:ca:35:74:d7:11:90:
         6a:16:fe:01:41:b9:13:13:d3:8c:45:33:2c:ab:dd:92:3c:03:
         50:00:df:0d:f8:47:0f:0f:2f:5a:a4:51:01:9e:ff:dd:e3:52:
         f8:7d:32:5f:45:f7:71:74:b6:86:98:2d:8c:47:27:25:ad:0c:
         60:90:19:50:d7:32:90:b6:ef:19:a9:a2:12:fe:ed:04:9a:38:
         fd:b5:40:fd:29:ef:05:56:c3:ff:c1:38:6f:d6:20:0b:b0:96:
         f0:2f:55:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZKL8bD8wDOATXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk
OTY2MTc3NzUtNDEwMC00MTBhLTg5NTktNzllZWRhYzY1YmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK13+dRTb/p1Ix9qOWadt5S48IWaBvuEPkbN
ypyBKIuwqZcJVOMiYa9Vp7QwSha1L3so3tC1ZDB4rVUFaPPLL+AWCkyE+BB2J4ZM
J18UVVU1cJO1ETQkZ+i2UiSWUr9hVLMpdAhfSJ1tGmcZ1WfqEmp5ROXU7VOv93Wb
u0UIc7CIEtTCzPJRt2gWdhpW0CKiiC5ysyFVTWQCRQHO48PpeVXiZ8JrGI+RE7fu
GB2TyI9jHTve/dntliksnlpHb9QE8Xp82na3xtvQLxDYwJ/4fdkcgGiVzrzcX+wo
QbsKKYtAmTgJWt6L0gUatJSzxyZlKHjVPHmGKpaLjJaoXHkr3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLH7QAxE4qEHLL3HI3Qp/CF8IiUDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2I1MzI4MWEtYTBiYS0z
OGY0LWJjNDQtMzJhYTdlNzU4MzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjjuwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgRPKS3p/nTxurYIlruhv8Ec6NU3QttJJ/eCpnQpF+9BL/hVZ75HexH
5psgUJk8qabjG4MoBC0H86JaxN7xc+LN9AsOmwdHss4224J/MliHFcQGZBzrfapo
K/ddQI3dUnoCeu3cTJi5Ri7EARDhkoloD2ovErCx6Uo4d/arDXOCUBpXXH1FZw6U
hHtv5KgDgbgyUbQ8+XpwWqKOR8o1dNcRkGoW/gFBuRMT04xFMyyr3ZI8A1AA3w34
Rw8PL1qkUQGe/93jUvh9Ml9F93F0toaYLYxHJyWtDGCQGVDXMpC27xmpohL+7QSa
OP21QP0p7wVWw//BOG/WIAuwlvAvVVc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:55 2024 by rpki-client on console-fra.rpki-client.org