Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/60ac8036-8fed-3caa-bd30-7d9eb7de9f09.roa
File:                     60ac8036-8fed-3caa-bd30-7d9eb7de9f09.roa (raw, json)
Hash identifier:          jvwod3THKrnYD5apSXMXwmII69j97F7/6u59ZctI4Yw=
Subject key identifier:   93:6D:76:23:A4:72:8E:FB:22:58:06:D9:83:9A:49:3A:4F:92:26:3A
Certificate issuer:       /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial:       010D0C9F43285844FF901AABE1F477869CF394D0
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/60ac8036-8fed-3caa-bd30-7d9eb7de9f09.roa
Signing time:             Sat 24 Feb 2024 14:00:31 +0000
ROA not before:           Sat 24 Feb 2024 14:00:31 +0000
ROA not after:            Fri 24 May 2024 13:00:31 +0000
asID:                     14299
IP address blocks:        207.135.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ff:90:1a:ab:e1:f4:77:86:9c:f3:94:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
        Validity
            Not Before: Feb 24 14:00:31 2024 GMT
            Not After : May 24 13:00:31 2024 GMT
        Subject: CN=5d4eb6e6-de2d-417d-919f-d618c723ab1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:12:8a:cb:10:5f:ad:89:f2:93:ff:95:4a:c1:
                    82:d3:1d:3b:25:1d:30:e9:cc:6c:bb:2a:bd:c4:b7:
                    c2:70:14:6e:48:f9:4b:63:a7:39:64:59:52:26:f0:
                    09:d0:18:2c:b8:4e:c7:cb:3a:9b:41:11:52:46:67:
                    ff:84:55:09:50:a6:d0:65:63:25:d5:0f:f8:99:9c:
                    b0:70:29:79:6f:bc:e0:a5:cd:ee:21:1a:db:ee:61:
                    9a:51:a7:33:cc:f1:f7:97:82:82:73:fb:4a:f1:26:
                    db:7c:e1:eb:b7:03:0d:04:c4:e2:7b:67:9b:22:18:
                    c2:fb:e5:69:ca:19:c6:be:03:40:23:4e:07:64:1e:
                    6a:23:a0:c6:d5:7f:a6:a5:5b:d8:10:ea:75:11:92:
                    8c:26:82:0e:75:e6:88:9a:82:d0:2e:60:0f:75:00:
                    d8:ae:db:5e:bf:a2:fd:2d:c9:70:fe:00:28:57:1d:
                    79:6b:e8:85:c0:e2:be:6a:fa:36:fc:b8:20:06:e2:
                    c4:db:36:03:d3:9b:4a:9c:bb:3c:48:01:e1:fd:75:
                    4f:d7:59:77:c7:8f:01:7a:b6:27:f9:ec:9e:b4:ed:
                    21:fd:5f:41:be:b2:67:93:02:00:0c:b0:59:fa:50:
                    bc:14:db:55:43:fe:38:6f:98:a9:a5:19:6e:36:d7:
                    e9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6D:76:23:A4:72:8E:FB:22:58:06:D9:83:9A:49:3A:4F:92:26:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/60ac8036-8fed-3caa-bd30-7d9eb7de9f09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.135.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:89:dd:b2:a4:b9:a9:45:86:ee:d4:a1:f6:62:68:f9:39:e2:
         a7:87:11:d9:05:d6:55:a3:7d:96:c9:df:d7:61:6b:54:5f:fd:
         61:15:19:d4:e0:dd:64:0b:53:99:97:4f:a6:6d:33:2a:1f:e0:
         8e:96:2f:39:64:09:22:28:08:58:b5:15:90:5e:d2:b7:e6:c0:
         c2:18:b9:6d:1a:64:e3:97:63:8c:13:15:15:8e:33:cb:20:3f:
         be:54:11:b2:41:97:f8:9b:b7:5c:a1:7d:f0:80:5d:9e:91:24:
         6a:b4:82:7b:c8:16:b7:0a:88:ba:cc:73:8a:5a:9a:65:41:4d:
         8b:c2:44:80:96:a9:c6:f3:d1:02:91:0a:14:4a:60:94:3f:bb:
         e3:13:cf:61:a8:b3:29:cc:68:33:56:af:6a:39:99:76:0e:e5:
         9a:0c:6d:ab:9b:dc:17:54:f3:58:f0:9a:0e:95:93:4d:21:d3:
         dd:4f:a0:d0:c6:5c:7c:91:5a:17:6f:38:18:3d:d4:45:ae:f9:
         fc:d9:e7:54:85:8f:36:80:6c:4b:06:10:89:1d:fc:a4:43:28:
         66:71:68:9f:f3:d5:e3:0e:24:2c:54:fb:c7:11:84:a6:a5:04:
         9b:52:1e:a4:fc:b6:ef:bc:98:32:38:2b:40:28:b3:d5:a3:ff:
         dd:4e:6f:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET/kBqr4fR3hpzzlNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGZlNzgwNGYtZjE2YS00Zjc4LTk5NzktNmE4ZDUwOTll
NWU3MB4XDTI0MDIyNDE0MDAzMVoXDTI0MDUyNDEzMDAzMVowLzEtMCsGA1UEAxMk
NWQ0ZWI2ZTYtZGUyZC00MTdkLTkxOWYtZDYxOGM3MjNhYjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BKKyxBfrYnyk/+VSsGC0x07JR0w6cxsuyq9
xLfCcBRuSPlLY6c5ZFlSJvAJ0BgsuE7HyzqbQRFSRmf/hFUJUKbQZWMl1Q/4mZyw
cCl5b7zgpc3uIRrb7mGaUaczzPH3l4KCc/tK8SbbfOHrtwMNBMTie2ebIhjC++Vp
yhnGvgNAI04HZB5qI6DG1X+mpVvYEOp1EZKMJoIOdeaImoLQLmAPdQDYrttev6L9
Lclw/gAoVx15a+iFwOK+avo2/LggBuLE2zYD05tKnLs8SAHh/XVP11l3x48BerYn
+eyetO0h/V9BvrJnkwIADLBZ+lC8FNtVQ/44b5ippRluNtfpVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJNtdiOkco77IlgG2YOaSTpPkiY6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3
ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThkNTA5OWU1ZTcvNjBhYzgwMzYtOGZlZC0z
Y2FhLWJkMzAtN2Q5ZWI3ZGU5ZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGZlNzgwNGYtZjE2YS00Zjc4LTk5
NzktNmE4ZDUwOTllNWU3LzBmZTc4MDRmLWYxNmEtNGY3OC05OTc5LTZhOGQ1MDk5
ZTVlNy5jcmwwHwYDVR0jBBgwFoAU+VXAQ4RRLwbPOrS6kfJqw02k5GgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThk
NTA5OWU1ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz4ecMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKeJ3bKkualFhu7UofZiaPk54qeHEdkF1lWjfZbJ39dha1Rf/WEVGdTg
3WQLU5mXT6ZtMyof4I6WLzlkCSIoCFi1FZBe0rfmwMIYuW0aZOOXY4wTFRWOM8sg
P75UEbJBl/ibt1yhffCAXZ6RJGq0gnvIFrcKiLrMc4pammVBTYvCRICWqcbz0QKR
ChRKYJQ/u+MTz2GosynMaDNWr2o5mXYO5ZoMbaub3BdU81jwmg6Vk00h091PoNDG
XHyRWhdvOBg91EWu+fzZ51SFjzaAbEsGEIkd/KRDKGZxaJ/z1eMOJCxU+8cRhKal
BJtSHqT8tu+8mDI4K0Aos9Wj/91Ob2A=
-----END CERTIFICATE-----
Generated at Wed May 1 20:51:32 2024 by rpki-client on console-ams.rpki-client.org