Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b4fb41c2-1c3f-3f9a-a8ea-ba96962be3ae.roa
File:                     b4fb41c2-1c3f-3f9a-a8ea-ba96962be3ae.roa (raw, json)
Hash identifier:          tID6qK6vvqIORS2wq4rEfuWPVwdXiaaTHkb8KjwKCmQ=
Subject key identifier:   3B:5F:F9:83:A2:57:2C:12:78:0F:06:0C:9C:C5:D7:37:A7:DD:34:DA
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453E42A207D81C891D7C280D80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b4fb41c2-1c3f-3f9a-a8ea-ba96962be3ae.roa
Signing time:             Mon 18 Mar 2024 01:00:25 +0000
ROA not before:           Mon 18 Mar 2024 01:00:25 +0000
ROA not after:            Sun 16 Jun 2024 01:00:25 +0000
asID:                     852
IP address blocks:        207.134.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:42:a2:07:d8:1c:89:1d:7c:28:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 18 01:00:25 2024 GMT
            Not After : Jun 16 01:00:25 2024 GMT
        Subject: CN=0fb48613-af2b-4d2f-bd25-82948276faff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b0:d1:a0:0b:1b:9c:52:88:96:62:b3:8c:ad:
                    f3:5f:5f:28:6c:5a:89:43:6e:05:98:8c:b5:c3:47:
                    60:5c:0d:bc:27:9f:96:35:86:a3:dc:8d:1e:c2:53:
                    76:5b:7d:24:56:0b:e1:fd:db:0c:22:ab:9c:00:ec:
                    6e:5e:c7:4f:a1:3f:ea:5b:ef:1b:2c:15:53:bf:4c:
                    43:45:38:b9:08:d0:6d:3d:65:94:f4:4d:e2:06:ab:
                    10:c6:9b:39:7f:e7:df:4a:f0:bd:52:cc:22:43:c4:
                    91:1e:c3:5c:b8:ad:2d:c9:66:b7:73:b4:9a:cb:95:
                    fd:f6:6d:2b:90:82:c1:ad:b8:b2:f0:b4:b5:eb:04:
                    74:16:5a:18:79:43:72:f5:78:b0:71:36:f0:30:89:
                    3a:9a:e5:cb:9a:1d:51:a5:c8:58:37:2a:e6:e2:d7:
                    1d:e3:dc:de:35:f9:f4:82:71:14:e7:d7:ad:a7:13:
                    a8:23:6e:15:b5:6b:38:1a:55:0c:db:06:c9:10:04:
                    fc:7f:7f:b6:a9:04:f0:db:75:17:06:17:13:a5:04:
                    ff:fe:89:10:27:2a:58:8d:0e:17:db:5e:73:06:13:
                    28:d4:aa:3c:ca:9e:07:40:ec:6e:64:d4:33:29:1e:
                    6a:fc:29:60:e2:64:9c:5c:8c:77:11:1f:68:2e:63:
                    c8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5F:F9:83:A2:57:2C:12:78:0F:06:0C:9C:C5:D7:37:A7:DD:34:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b4fb41c2-1c3f-3f9a-a8ea-ba96962be3ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:14:fc:6d:39:21:bf:71:51:f6:28:75:d9:5b:83:f8:5a:23:
         65:41:0a:0e:f5:3e:4f:65:29:80:3b:b3:64:95:c4:36:08:14:
         7e:b8:c8:c5:8f:9a:57:17:49:12:f3:4f:6c:6f:30:df:b5:a0:
         15:b9:f9:71:b7:79:36:46:08:9e:74:63:1e:36:a2:9a:18:ec:
         5c:e2:99:90:3e:cb:17:d7:99:16:78:1e:21:34:f7:81:76:9c:
         bc:4e:c5:1f:d4:0a:df:25:44:75:e6:ff:d0:00:5b:1c:86:04:
         36:8d:6f:cb:ce:0c:a0:4f:86:65:bf:4c:06:1e:5f:45:c2:fc:
         dd:8f:8f:2c:d9:e7:de:72:2f:f7:a3:d3:59:71:12:80:5c:f6:
         2e:88:02:e7:d0:09:2a:bc:86:be:97:cd:ab:78:59:6e:3d:92:
         20:5d:bb:df:57:b0:49:67:10:35:d8:c8:45:85:a3:e2:a9:a8:
         88:9c:34:f7:28:a0:6f:e2:13:50:91:d3:b0:de:cc:a3:7c:6d:
         87:1d:b9:e7:8c:4c:92:c0:43:20:b8:6a:70:e2:7f:1b:1b:7c:
         f0:13:00:ef:a7:1b:a8:45:5f:8b:bd:5d:f9:de:18:4f:9f:79:
         51:7d:5a:56:6f:98:18:77:16:c8:63:28:13:78:6e:43:99:5d:
         5d:ef:00:fa
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEU+QqIH2ByJHXwoDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDMxODAxMDAyNVoXDTI0MDYxNjAxMDAyNVowLzEtMCsGA1UEAxMk
MGZiNDg2MTMtYWYyYi00ZDJmLWJkMjUtODI5NDgyNzZmYWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7DRoAsbnFKIlmKzjK3zX18obFqJQ24FmIy1
w0dgXA28J5+WNYaj3I0ewlN2W30kVgvh/dsMIqucAOxuXsdPoT/qW+8bLBVTv0xD
RTi5CNBtPWWU9E3iBqsQxps5f+ffSvC9UswiQ8SRHsNcuK0tyWa3c7Say5X99m0r
kILBrbiy8LS16wR0FloYeUNy9XiwcTbwMIk6muXLmh1RpchYNyrm4tcd49zeNfn0
gnEU59etpxOoI24VtWs4GlUM2wbJEAT8f3+2qQTw23UXBhcTpQT//okQJypYjQ4X
215zBhMo1Ko8yp4HQOxuZNQzKR5q/Clg4mScXIx3ER9oLmPIkwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDtf+YOiVywSeA8GDJzF1zen3TTaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYjRmYjQxYzItMWMzZi0z
ZjlhLWE4ZWEtYmE5Njk2MmJlM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAz4YwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmRT8bTkhv3FR9ih12VuD+FojZUEKDvU+T2UpgDuzZJXENggUfrjIxY+a
VxdJEvNPbG8w37WgFbn5cbd5NkYInnRjHjaimhjsXOKZkD7LF9eZFngeITT3gXac
vE7FH9QK3yVEdeb/0ABbHIYENo1vy84MoE+GZb9MBh5fRcL83Y+PLNnn3nIv96PT
WXESgFz2LogC59AJKryGvpfNq3hZbj2SIF2731ewSWcQNdjIRYWj4qmoiJw09yig
b+ITUJHTsN7Mo3xthx2554xMksBDILhqcOJ/Gxt88BMA76cbqEVfi71d+d4YT595
UX1aVm+YGHcWyGMoE3huQ5ldXe8A+g==
-----END CERTIFICATE-----
Generated at Sat May 18 16:11:01 2024 by rpki-client on console-ams.rpki-client.org