Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a5e3e02d-084d-3839-a180-3654f49107df.roa
File:                     a5e3e02d-084d-3839-a180-3654f49107df.roa (raw, json)
Hash identifier:          FoH6vMSVoxPlvFB3X2Z8SWYi0C8QcNZ8IAVngkUDo2U=
Subject key identifier:   D0:2E:62:07:40:01:7D:D3:24:09:EB:65:64:35:71:F1:B4:08:48:E8
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285848960B573ACED5DC2AA93A7A40
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a5e3e02d-084d-3839-a180-3654f49107df.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     212669
IP address blocks:        139.177.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:57:3a:ce:d5:dc:2a:a9:3a:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=f4116e25-a668-4f78-9c05-94ae7a249be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:47:5d:ce:95:41:85:f7:c1:c0:40:eb:5e:4e:
                    4b:ad:81:5c:6b:12:57:63:c3:20:3b:94:c5:65:33:
                    6b:00:46:c2:5e:62:29:56:b4:dd:b3:e2:a6:09:0c:
                    69:82:b6:08:69:60:29:d7:a1:d6:4d:b0:1b:b9:5f:
                    4c:42:c9:ea:2a:4c:a6:63:d9:7c:e2:72:1a:b9:17:
                    0e:ae:bd:40:7c:46:3e:73:d7:d3:42:26:c8:34:7b:
                    1f:5f:96:79:21:8e:9d:3e:7a:c0:b7:e2:0c:93:32:
                    c9:ac:fb:b7:c2:cd:f5:ab:fc:55:f4:86:43:af:11:
                    e9:e2:c0:1a:88:90:87:7b:de:83:08:c5:ea:9f:42:
                    25:76:cd:b5:97:e4:09:3f:91:c9:7c:4e:59:7d:61:
                    f6:8a:b6:dc:d1:56:cd:b0:49:75:93:c8:0f:5d:3c:
                    1e:3a:0d:7d:c8:6e:bf:37:72:25:c9:2d:a0:ae:ab:
                    57:72:18:06:64:74:f4:63:57:f1:fb:2f:14:d2:48:
                    c9:34:bc:4e:f7:13:1f:78:d0:46:1e:0a:67:b3:28:
                    dc:e5:04:73:bb:0c:68:f5:62:6e:27:5e:2c:e9:1e:
                    3e:86:7e:88:10:dc:2e:64:2c:2b:b3:43:d0:f9:bf:
                    1b:c4:1d:47:71:95:e2:69:05:13:11:e5:0a:73:b8:
                    cf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2E:62:07:40:01:7D:D3:24:09:EB:65:64:35:71:F1:B4:08:48:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a5e3e02d-084d-3839-a180-3654f49107df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:48:c0:8a:a6:4d:4a:80:5b:0c:57:f9:53:89:5c:36:c0:8e:
         3c:bc:32:1d:b0:29:d8:43:0f:e9:23:4d:80:1a:b5:45:bf:1b:
         cc:aa:44:75:11:8a:8b:7c:b9:d9:03:4d:31:e3:29:c7:f6:37:
         a7:8c:97:21:59:48:c2:b8:d5:d8:9b:ca:b4:f9:2c:88:43:19:
         e1:cf:46:b6:86:56:ef:01:e8:40:39:3f:3b:e7:de:e2:77:f7:
         51:56:b3:a3:2e:64:77:1e:c4:4e:6b:0b:cc:5c:4c:0c:d3:72:
         a4:1f:48:f9:e0:ab:58:20:3b:f2:be:44:03:25:b6:3b:43:73:
         3b:06:30:41:04:6e:e7:65:b5:12:d4:ab:50:5f:8e:f0:8b:20:
         7f:ba:31:4d:cd:e9:b2:15:f8:4c:ca:af:ce:9f:5a:ed:64:91:
         6b:f9:39:63:c1:9f:88:52:88:31:fa:0b:d9:c6:4a:5e:2d:5b:
         93:2f:db:7b:52:09:16:89:69:1b:1e:fe:eb:a0:1d:b4:45:f8:
         4e:d3:f9:6b:27:43:1c:ae:5e:ac:a8:5e:79:55:35:0d:70:1c:
         80:6d:df:97:f1:7d:2e:0c:07:9e:e8:1d:f3:50:7f:46:7d:8e:
         9b:e8:a2:21:31:dd:9f:5b:a7:66:e3:de:0d:73:53:cb:1e:70:
         23:bd:92:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC1c6ztXcKqk6ekAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk
ZjQxMTZlMjUtYTY2OC00Zjc4LTljMDUtOTRhZTdhMjQ5YmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkddzpVBhffBwEDrXk5LrYFcaxJXY8MgO5TF
ZTNrAEbCXmIpVrTds+KmCQxpgrYIaWAp16HWTbAbuV9MQsnqKkymY9l84nIauRcO
rr1AfEY+c9fTQibINHsfX5Z5IY6dPnrAt+IMkzLJrPu3ws31q/xV9IZDrxHp4sAa
iJCHe96DCMXqn0Ilds21l+QJP5HJfE5ZfWH2irbc0VbNsEl1k8gPXTweOg19yG6/
N3IlyS2grqtXchgGZHT0Y1fx+y8U0kjJNLxO9xMfeNBGHgpnsyjc5QRzuwxo9WJu
J14s6R4+hn6IENwuZCwrs0PQ+b8bxB1HcZXiaQUTEeUKc7jPdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNAuYgdAAX3TJAnrZWQ1cfG0CEjoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvYTVlM2UwMmQtMDg0ZC0z
ODM5LWExODAtMzY1NGY0OTEwN2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7GaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIVIwIqmTUqAWwxX+VOJXDbAjjy8Mh2wKdhDD+kjTYAatUW/G8yqRHUR
iot8udkDTTHjKcf2N6eMlyFZSMK41dibyrT5LIhDGeHPRraGVu8B6EA5Pzvn3uJ3
91FWs6MuZHcexE5rC8xcTAzTcqQfSPngq1ggO/K+RAMltjtDczsGMEEEbudltRLU
q1BfjvCLIH+6MU3N6bIV+EzKr86fWu1kkWv5OWPBn4hSiDH6C9nGSl4tW5Mv23tS
CRaJaRse/uugHbRF+E7T+WsnQxyuXqyoXnlVNQ1wHIBt35fxfS4MB57oHfNQf0Z9
jpvooiEx3Z9bp2bj3g1zU8secCO9kkY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:34 2025 by rpki-client