Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/41612672-b849-3212-9e09-add5d62adc0e.roa
File:                     41612672-b849-3212-9e09-add5d62adc0e.roa (raw, json)
Hash identifier:          z1Vgm0wk21v1Sh+o5M9qmAtR8NVRWIXFB8VmJP9+KDg=
Subject key identifier:   D2:60:B3:28:76:5A:BC:89:9A:EF:B5:22:57:01:77:EF:7C:B7:FB:BA
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584582A8870881EF79A6B54DFFC0
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/41612672-b849-3212-9e09-add5d62adc0e.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     14297
IP address blocks:        139.131.122.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:87:08:81:ef:79:a6:b5:4d:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=84f00269-4327-4e83-8174-1e30c8be0eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:10:18:2b:9d:be:34:f9:29:02:22:3e:da:98:
                    d0:06:0b:e8:e8:0e:b2:60:66:7a:dd:df:d7:3e:f8:
                    09:3d:b4:df:51:5b:38:78:6a:a6:0d:b2:05:2e:79:
                    35:ba:65:e4:d1:47:e3:a0:ac:e7:6a:a0:15:16:40:
                    dd:97:44:92:4b:42:68:ff:1d:e3:98:1f:80:c0:1e:
                    7c:56:4c:95:80:43:bc:5b:2b:3a:e0:3e:1a:9c:0c:
                    b2:28:fe:fe:b3:96:44:24:d3:5b:5b:15:79:5c:89:
                    54:ef:9a:aa:1d:20:74:42:9b:7a:46:02:7d:4f:64:
                    dd:ad:5a:15:fb:da:dd:5d:2f:90:96:be:0f:ea:c9:
                    cc:d3:58:f6:a2:5d:ae:a0:cc:db:0a:63:69:94:0e:
                    19:30:63:05:ea:d1:41:96:c6:e2:e3:6f:22:94:04:
                    ef:99:8b:ef:61:ce:af:ba:70:9a:1f:b9:6a:da:42:
                    b0:cd:e9:a7:8f:eb:43:62:29:d3:0a:16:7c:28:5c:
                    52:89:78:f0:9c:73:55:18:b7:2c:5b:2b:50:2d:ff:
                    70:dd:34:9e:39:69:03:ea:cd:70:d3:a5:c9:95:c4:
                    4b:4f:24:7a:70:82:9a:34:cd:b4:9a:44:94:ca:ef:
                    a2:ff:23:7b:20:2f:db:01:b6:df:e3:7d:69:94:bf:
                    34:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:60:B3:28:76:5A:BC:89:9A:EF:B5:22:57:01:77:EF:7C:B7:FB:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/41612672-b849-3212-9e09-add5d62adc0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:56:2b:5c:b1:ba:08:86:97:86:f5:db:33:ca:4a:0b:dd:89:
         01:c1:bb:50:37:48:b7:8a:f4:2a:b8:76:01:6f:e3:14:4b:37:
         6d:cb:5b:34:a9:0b:16:1b:df:a0:4b:cc:d8:f1:58:3f:81:79:
         fa:34:a4:91:4b:03:04:9d:72:9f:91:a1:ce:5a:bc:f1:fd:74:
         d7:38:9b:87:97:98:fd:d2:3e:84:2f:c0:e7:d7:8b:be:49:9a:
         2c:c7:85:99:60:38:8d:19:b5:e0:24:28:52:ae:83:ee:14:35:
         3c:f6:73:0f:bd:d8:4b:52:59:42:20:73:e1:7c:4d:d6:73:e1:
         ff:51:3b:2c:62:86:6e:6b:41:84:e5:b6:b7:1c:27:e4:08:9d:
         88:db:af:4f:09:14:5b:fb:b8:ba:fa:7b:50:8b:3f:4b:99:99:
         9e:6a:18:f2:a1:63:d4:b3:90:22:00:21:f3:af:97:e9:e4:43:
         14:f4:39:47:2f:05:80:de:b0:e2:43:99:1c:e9:2f:d3:02:ba:
         e4:b8:7e:0a:52:93:cc:ce:99:3e:a9:dd:54:fc:e5:8a:f3:95:
         a8:d2:e0:5b:ef:91:ef:0a:e0:5d:af:46:cd:f5:26:2f:aa:9b:
         58:cf:b1:8f:83:89:1c:4f:7e:cd:d4:bd:53:ba:88:96:4c:75:
         3c:b1:a2:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqIcIge95prVN/8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz
N2U2MB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk
ODRmMDAyNjktNDMyNy00ZTgzLTgxNzQtMWUzMGM4YmUwZWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhAYK52+NPkpAiI+2pjQBgvo6A6yYGZ63d/X
PvgJPbTfUVs4eGqmDbIFLnk1umXk0UfjoKznaqAVFkDdl0SSS0Jo/x3jmB+AwB58
VkyVgEO8Wys64D4anAyyKP7+s5ZEJNNbWxV5XIlU75qqHSB0Qpt6RgJ9T2TdrVoV
+9rdXS+Qlr4P6snM01j2ol2uoMzbCmNplA4ZMGMF6tFBlsbi428ilATvmYvvYc6v
unCaH7lq2kKwzemnj+tDYinTChZ8KFxSiXjwnHNVGLcsWytQLf9w3TSeOWkD6s1w
06XJlcRLTyR6cIKaNM20mkSUyu+i/yN7IC/bAbbf431plL80SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJgsyh2WryJmu+1IlcBd+98t/u6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw
NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNDE2MTI2NzItYjg0OS0z
MjEyLTllMDktYWRkNWQ2MmFkYzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm
NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl
MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz
YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4N6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFWK1yxugiGl4b12zPKSgvdiQHBu1A3SLeK9Cq4dgFv4xRLN23LWzSp
CxYb36BLzNjxWD+Befo0pJFLAwSdcp+Roc5avPH9dNc4m4eXmP3SPoQvwOfXi75J
mizHhZlgOI0ZteAkKFKug+4UNTz2cw+92EtSWUIgc+F8TdZz4f9ROyxihm5rQYTl
trccJ+QInYjbr08JFFv7uLr6e1CLP0uZmZ5qGPKhY9SzkCIAIfOvl+nkQxT0OUcv
BYDesOJDmRzpL9MCuuS4fgpSk8zOmT6p3VT85YrzlajS4Fvvke8K4F2vRs31Ji+q
m1jPsY+DiRxPfs3UvVO6iJZMdTyxoug=
-----END CERTIFICATE-----
Generated at Sun May 5 01:28:20 2024 by rpki-client on console-ams.rpki-client.org