Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/542e2058-829b-3afc-b126-e875b2d7c788.roa
File:                     542e2058-829b-3afc-b126-e875b2d7c788.roa (raw, json)
Hash identifier:          NfBf5lYkDX+BhYPGHW+E7BFbQvI2dTYEcLrwKTFt0V4=
Subject key identifier:   0A:A5:67:47:CC:0F:C3:B2:82:EA:59:9E:D9:92:2A:82:FE:D9:CA:16
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285845068ABE66657C5D408025B3A0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/542e2058-829b-3afc-b126-e875b2d7c788.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     203963
IP address blocks:        139.177.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:be:66:65:7c:5d:40:80:25:b3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=65862815-da4a-42b5-b41a-355e6d4038e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:37:b3:8d:bd:ff:b2:90:ff:54:11:54:5f:40:
                    9b:05:37:2a:8f:59:83:8c:bd:6c:fb:66:6c:de:77:
                    a9:d8:49:13:10:06:4d:b1:f2:65:76:47:f9:61:77:
                    2c:cc:89:a0:aa:e3:0e:fa:66:fc:ba:f4:9a:58:59:
                    e3:ee:89:14:89:76:46:89:39:6f:c6:6b:77:8d:c6:
                    80:71:df:60:f3:bc:e4:03:43:04:82:7e:14:b2:73:
                    9b:98:fd:2a:ee:4f:9b:27:b1:4f:35:a6:2e:eb:d4:
                    a8:d0:7e:c5:6e:b4:2a:9c:34:64:75:40:ba:27:2c:
                    d1:01:34:3a:22:47:f5:09:37:88:ee:18:95:9a:0b:
                    24:bd:43:86:2f:8a:1f:32:e5:68:1a:71:bc:1d:cf:
                    07:07:fd:eb:a6:2e:ca:fb:8d:75:e1:c2:ff:de:7a:
                    13:6b:68:40:e1:90:ad:f9:2a:7b:a6:b9:dc:0a:a8:
                    d0:71:0b:b4:fd:5b:5f:dd:98:00:b2:d3:95:99:62:
                    4d:7a:e1:b1:c1:f4:32:38:e2:4a:1d:e0:f7:f9:b9:
                    a7:c8:85:cf:94:a8:4f:72:36:2b:6d:ab:80:6e:9c:
                    c4:1b:cc:b6:22:2d:77:65:5c:43:ab:47:61:30:95:
                    f7:af:24:bd:40:66:4d:c3:e4:03:ea:ea:ea:2b:c8:
                    29:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A5:67:47:CC:0F:C3:B2:82:EA:59:9E:D9:92:2A:82:FE:D9:CA:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/542e2058-829b-3afc-b126-e875b2d7c788.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:7f:35:58:60:0e:94:10:a8:d7:30:cc:8b:e0:4b:0d:db:11:
         99:9c:57:5a:6c:dd:8d:81:04:72:d7:fd:90:3c:db:1b:ae:c8:
         42:14:04:d5:10:36:3b:34:14:1b:a0:60:1a:5b:a6:72:8a:95:
         ad:a0:65:e2:e3:40:2d:73:67:56:bd:1b:2a:ff:3d:41:a2:ed:
         0b:86:ec:e1:23:e8:ed:3e:22:79:c5:7b:d4:06:20:00:e3:26:
         2c:d2:f6:28:68:b1:47:77:6a:65:a3:54:67:73:a3:f2:e6:85:
         5e:b4:60:f7:cc:91:44:f3:1e:cb:8f:5b:47:62:60:83:dd:f7:
         8d:f2:04:a4:82:9b:f9:c8:75:0f:c8:86:6f:c2:e4:2f:30:fe:
         71:69:4d:b9:f9:a0:47:8f:e9:2f:8b:6e:7b:8e:7d:19:bd:75:
         e3:53:96:94:f1:19:5b:d3:54:7d:62:68:f4:fe:f0:22:85:a4:
         9a:de:30:56:21:20:85:d2:84:c0:26:70:26:cb:2b:18:c3:90:
         58:a3:13:e1:29:b8:84:3d:3f:ee:27:03:d5:e9:db:36:51:1d:
         6e:8f:19:62:4d:4a:1b:e8:f0:85:38:76:b9:3f:f2:3c:33:ec:
         ef:e6:aa:59:91:07:d0:df:3c:aa:28:f9:e6:9b:18:08:f3:03:
         0e:88:fc:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUGir5mZXxdQIAls6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI0MDIyNzAyMDAyNloXDTI0MDUyNzAxMDAyNlowLzEtMCsGA1UEAxMk
NjU4NjI4MTUtZGE0YS00MmI1LWI0MWEtMzU1ZTZkNDAzOGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTezjb3/spD/VBFUX0CbBTcqj1mDjL1s+2Zs
3nep2EkTEAZNsfJldkf5YXcszImgquMO+mb8uvSaWFnj7okUiXZGiTlvxmt3jcaA
cd9g87zkA0MEgn4UsnObmP0q7k+bJ7FPNaYu69So0H7FbrQqnDRkdUC6JyzRATQ6
Ikf1CTeI7hiVmgskvUOGL4ofMuVoGnG8Hc8HB/3rpi7K+4114cL/3noTa2hA4ZCt
+Sp7prncCqjQcQu0/Vtf3ZgAstOVmWJNeuGxwfQyOOJKHeD3+bmnyIXPlKhPcjYr
bauAbpzEG8y2Ii13ZVxDq0dhMJX3ryS9QGZNw+QD6urqK8gpgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAqlZ0fMD8OygupZntmSKoL+2coWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNTQyZTIwNTgtODI5Yi0z
YWZjLWIxMjYtZTg3NWIyZDdjNzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7GVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG1/NVhgDpQQqNcwzIvgSw3bEZmcV1ps3Y2BBHLX/ZA82xuuyEIUBNUQ
Njs0FBugYBpbpnKKla2gZeLjQC1zZ1a9Gyr/PUGi7QuG7OEj6O0+InnFe9QGIADj
JizS9ihosUd3amWjVGdzo/LmhV60YPfMkUTzHsuPW0diYIPd943yBKSCm/nIdQ/I
hm/C5C8w/nFpTbn5oEeP6S+LbnuOfRm9deNTlpTxGVvTVH1iaPT+8CKFpJreMFYh
IIXShMAmcCbLKxjDkFijE+EpuIQ9P+4nA9Xp2zZRHW6PGWJNShvo8IU4drk/8jwz
7O/mqlmRB9DfPKoo+eabGAjzAw6I/LQ=
-----END CERTIFICATE-----
Generated at Sat May 4 13:37:33 2024 by rpki-client on console-fra.rpki-client.org