Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/d5f58d30-f0f6-3fc0-b2e8-04faf5d95110.roa
File:                     d5f58d30-f0f6-3fc0-b2e8-04faf5d95110.roa (raw, json)
Hash identifier:          vbZMd5qmUOCpuA0fXIP/WBMA8kPTvXgkx2U7uATu88E=
Subject key identifier:   1C:3C:0B:BA:A1:0D:F0:9C:61:57:CB:0E:6D:1E:DD:6B:FA:CB:66:2A
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F432858453A12AB6012B5E36815FC0D00
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/d5f58d30-f0f6-3fc0-b2e8-04faf5d95110.roa
Signing time:             Sat 16 Mar 2024 13:00:31 +0000
ROA not before:           Sat 16 Mar 2024 13:00:31 +0000
ROA not after:            Fri 14 Jun 2024 13:00:31 +0000
asID:                     13213
IP address blocks:        174.127.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3a:12:ab:60:12:b5:e3:68:15:fc:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Mar 16 13:00:31 2024 GMT
            Not After : Jun 14 13:00:31 2024 GMT
        Subject: CN=8ea2a221-76bf-4fc2-986a-9cb45598b697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6d:a2:22:de:6d:6a:17:c2:39:75:ec:d4:a8:
                    72:c3:4b:36:19:7f:f0:c7:77:c1:5e:c0:eb:8d:7f:
                    73:6f:34:71:ae:84:45:58:06:c4:a5:8c:87:9c:46:
                    59:74:fb:07:17:7d:3f:06:af:48:88:89:74:23:4b:
                    23:88:d5:f3:c1:2d:05:13:68:14:5e:36:65:cb:7b:
                    b1:2d:df:d4:c4:da:80:a2:4d:1e:57:6e:8f:e0:b7:
                    cb:05:f9:e4:04:43:9f:27:04:6e:98:c8:67:26:87:
                    21:a8:2f:8d:a5:65:3d:42:16:bd:ff:21:8b:8c:4e:
                    db:bd:36:93:f8:0d:8e:8e:8f:e7:27:50:8a:3d:a9:
                    64:36:95:90:f3:18:ed:7f:e8:57:04:2e:29:96:e6:
                    de:23:a8:99:c7:e3:da:62:f3:dd:f2:0a:ce:29:72:
                    d0:d0:7c:f8:7c:f7:1f:5f:47:3a:8c:9f:7b:e3:28:
                    18:8f:ed:87:0d:85:e2:eb:20:98:e2:a4:a3:63:84:
                    fd:4e:b0:49:f9:5e:78:03:8a:6a:c1:18:31:1d:b7:
                    d0:fb:1b:a7:46:bc:ea:2e:a1:06:dc:6b:2e:9d:3c:
                    b8:a8:2c:35:24:3f:00:76:a0:b3:af:3b:18:07:cc:
                    94:6e:cc:50:92:c2:db:d7:45:e2:e9:00:74:7e:7a:
                    0c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3C:0B:BA:A1:0D:F0:9C:61:57:CB:0E:6D:1E:DD:6B:FA:CB:66:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/d5f58d30-f0f6-3fc0-b2e8-04faf5d95110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.127.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e6:56:8b:8f:7d:af:05:88:07:3e:19:dd:59:b2:b3:2f:88:
         6e:24:91:5e:fa:78:b2:04:04:58:92:55:40:19:bc:cc:34:6a:
         b8:8a:f6:49:53:0a:42:59:84:d4:c4:f3:19:20:15:0d:25:02:
         c8:2d:09:6e:42:99:5c:8c:27:83:4d:e3:0e:09:2e:fe:34:e7:
         6a:c3:a3:95:6b:b9:0f:57:fb:64:69:46:01:a0:54:de:90:44:
         48:27:f0:a5:96:36:58:94:7c:0a:e8:77:71:38:6e:31:44:e6:
         0c:1e:17:de:3e:76:a4:9e:37:f9:9b:ae:ae:94:19:11:f7:9d:
         15:04:cf:f1:43:37:cd:1b:09:f3:4c:33:68:36:d0:be:5b:a1:
         75:e0:ba:4c:47:4f:29:04:18:fe:f8:c3:27:e1:8e:d3:cd:65:
         9f:74:ae:1c:75:f2:ca:6f:a4:f0:2b:e1:35:b5:91:4d:00:6e:
         27:4c:94:ac:61:ca:d1:96:54:ea:df:41:f7:b5:e3:5d:f6:bc:
         51:07:48:e3:02:8f:d2:71:4c:c6:10:d0:b1:96:7d:45:a9:e6:
         19:8e:fa:74:c7:ea:64:2c:77:67:a5:84:5c:a5:b0:82:af:bc:
         b0:20:02:c4:e2:59:f7:6b:87:7f:9a:bc:15:43:c8:fa:ed:ea:
         7d:e5:3b:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU6EqtgErXjaBX8DQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0MDdjZDgtYzgzMC00OWU2LTlkYjQtN2RkYWM3NWVi
MDNmMB4XDTI0MDMxNjEzMDAzMVoXDTI0MDYxNDEzMDAzMVowLzEtMCsGA1UEAxMk
OGVhMmEyMjEtNzZiZi00ZmMyLTk4NmEtOWNiNDU1OThiNjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG2iIt5tahfCOXXs1Khyw0s2GX/wx3fBXsDr
jX9zbzRxroRFWAbEpYyHnEZZdPsHF30/Bq9IiIl0I0sjiNXzwS0FE2gUXjZly3ux
Ld/UxNqAok0eV26P4LfLBfnkBEOfJwRumMhnJochqC+NpWU9Qha9/yGLjE7bvTaT
+A2Ojo/nJ1CKPalkNpWQ8xjtf+hXBC4plubeI6iZx+PaYvPd8grOKXLQ0Hz4fPcf
X0c6jJ974ygYj+2HDYXi6yCY4qSjY4T9TrBJ+V54A4pqwRgxHbfQ+xunRrzqLqEG
3GsunTy4qCw1JD8AdqCzrzsYB8yUbsxQksLb10Xi6QB0fnoMawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBw8C7qhDfCcYVfLDm0e3Wv6y2YqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MTQw
N2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1ZWIwM2YvZDVmNThkMzAtZjBmNi0z
ZmMwLWIyZTgtMDRmYWY1ZDk1MTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTE0MDdjZDgtYzgzMC00OWU2LTlk
YjQtN2RkYWM3NWViMDNmLzUxNDA3Y2Q4LWM4MzAtNDllNi05ZGI0LTdkZGFjNzVl
YjAzZi5jcmwwHwYDVR0jBBgwFoAUy7XVgkiqTdjWioVCA8Spu4nGVq4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRh
Yzc1ZWIwM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArn94MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbmVouPfa8FiAc+Gd1ZsrMviG4kkV76eLIEBFiSVUAZvMw0ariK9klT
CkJZhNTE8xkgFQ0lAsgtCW5CmVyMJ4NN4w4JLv4052rDo5VruQ9X+2RpRgGgVN6Q
REgn8KWWNliUfArod3E4bjFE5gweF94+dqSeN/mbrq6UGRH3nRUEz/FDN80bCfNM
M2g20L5boXXgukxHTykEGP74wyfhjtPNZZ90rhx18spvpPAr4TW1kU0AbidMlKxh
ytGWVOrfQfe14132vFEHSOMCj9JxTMYQ0LGWfUWp5hmO+nTH6mQsd2elhFylsIKv
vLAgAsTiWfdrh3+avBVDyPrt6n3lOwU=
-----END CERTIFICATE-----
Generated at Thu May 2 14:55:24 2024 by rpki-client on console-fra.rpki-client.org