Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa
File:                     747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa (raw, json)
Hash identifier:          ax9gQZych+7nCM5zK5prEhfhxUoimOBlNr4Rtq7Q/Us=
Subject key identifier:   74:00:93:A4:6C:86:5F:C6:A5:F8:2F:81:22:64:50:61:DE:13:E4:D6
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584742BB46F6A707D203BA48EDE0
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     14297
IP address blocks:        139.131.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:46:f6:a7:07:d2:03:ba:48:ed:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=8ea7029b-c3d3-42ca-b7be-8716c97e40a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:70:d9:ca:28:4a:76:eb:77:34:d4:c2:d2:48:
                    02:41:7a:29:64:97:36:e8:1a:b8:a9:f1:7f:7e:c1:
                    d4:17:42:97:88:5c:bc:15:8a:50:7f:33:86:5f:68:
                    df:71:64:a1:cd:41:a4:92:d6:a9:b3:f3:4b:28:ea:
                    2a:f2:8e:5e:7e:88:0a:aa:4f:9c:95:8e:a3:90:c8:
                    1f:bd:65:92:c6:b2:eb:e5:b8:ad:4e:23:f3:55:2b:
                    ad:6b:44:e1:8c:4d:c1:b1:67:70:d9:cc:a5:de:2c:
                    10:82:21:6e:ad:2a:7d:76:e0:90:93:82:91:be:e3:
                    54:e6:67:2a:89:f4:66:4d:00:d3:1d:0a:24:9f:6b:
                    49:f2:29:ac:98:28:b7:32:9c:1e:36:0a:ad:6e:af:
                    13:42:1c:97:4a:21:4d:cf:84:4b:a2:ef:6a:c3:33:
                    9e:02:6e:0a:53:cd:c5:8f:b9:94:66:60:18:11:62:
                    6d:9d:e0:b6:12:7b:fe:3e:54:a5:90:19:bd:ee:d0:
                    a6:a8:ad:94:a5:e5:08:7e:20:5b:f1:b1:e7:f1:55:
                    24:98:82:56:63:49:d1:b7:b1:69:65:0b:25:c6:61:
                    34:f2:48:1b:f4:7b:5d:10:58:b6:c0:bd:fb:84:f0:
                    c7:80:f7:fb:83:5f:a3:e7:6a:c4:f6:c4:8a:f1:36:
                    a3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:00:93:A4:6C:86:5F:C6:A5:F8:2F:81:22:64:50:61:DE:13:E4:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:83:1a:90:1f:33:3c:e7:7e:43:8d:5b:b2:47:dd:ef:00:0c:
         02:3c:3c:4b:b8:96:eb:07:27:05:fe:75:92:c1:cd:f9:f0:be:
         fb:d8:f4:22:66:ad:01:f5:3a:f2:28:7b:26:09:5c:73:d8:e1:
         7f:f3:8d:63:8e:70:33:94:98:de:2f:29:e3:b1:22:7f:9b:d3:
         48:89:c1:da:93:d2:a1:37:3a:d4:b9:51:a3:3f:b3:32:c2:7e:
         91:05:8e:5c:7e:76:c1:86:e1:06:60:41:12:57:18:87:bc:92:
         2e:24:9d:00:c9:d2:06:25:e4:d3:fc:a6:f1:26:95:5a:df:38:
         09:79:1b:99:8c:7a:e5:50:9e:6a:78:74:fe:ad:a5:7f:b6:89:
         ea:84:20:77:f7:4f:16:38:04:48:95:6c:db:54:4f:b3:fa:b5:
         5d:47:97:2d:0c:8a:65:48:6f:9f:55:bf:e1:15:66:55:3f:8d:
         a7:03:0b:5a:2a:0b:d0:f0:e2:04:d7:a5:91:48:32:c8:17:7c:
         f1:05:4b:c3:c6:b7:28:73:75:48:e0:9e:6e:59:a0:e3:28:ea:
         fb:ff:18:47:cc:32:d4:31:44:d6:be:04:8b:25:81:71:a3:70:
         99:4f:33:9e:8b:ba:4c:08:33:90:e8:df:61:0a:7e:4f:c2:f5:
         87:f0:a0:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdCu0b2pwfSA7pI7eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz
N2U2MB4XDTI0MDkxOTAxMDAzMVoXDTI0MTIxODAyMDAzMVowLzEtMCsGA1UEAxMk
OGVhNzAyOWItYzNkMy00MmNhLWI3YmUtODcxNmM5N2U0MGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHDZyihKdut3NNTC0kgCQXopZJc26Bq4qfF/
fsHUF0KXiFy8FYpQfzOGX2jfcWShzUGkktaps/NLKOoq8o5efogKqk+clY6jkMgf
vWWSxrLr5bitTiPzVSuta0ThjE3BsWdw2cyl3iwQgiFurSp9duCQk4KRvuNU5mcq
ifRmTQDTHQokn2tJ8imsmCi3MpweNgqtbq8TQhyXSiFNz4RLou9qwzOeAm4KU83F
j7mUZmAYEWJtneC2Env+PlSlkBm97tCmqK2UpeUIfiBb8bHn8VUkmIJWY0nRt7Fp
ZQslxmE08kgb9HtdEFi2wL37hPDHgPf7g1+j52rE9sSK8TajdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHQAk6Rshl/GpfgvgSJkUGHeE+TWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw
NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNzQ3YTQyMWItZDdiZC0z
NzhlLWFlNzYtYTFmYjBhODE5ZWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm
NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl
MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz
YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4NAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKqDGpAfMzznfkONW7JH3e8ADAI8PEu4lusHJwX+dZLBzfnwvvvY9CJm
rQH1OvIoeyYJXHPY4X/zjWOOcDOUmN4vKeOxIn+b00iJwdqT0qE3OtS5UaM/szLC
fpEFjlx+dsGG4QZgQRJXGIe8ki4knQDJ0gYl5NP8pvEmlVrfOAl5G5mMeuVQnmp4
dP6tpX+2ieqEIHf3TxY4BEiVbNtUT7P6tV1Hly0MimVIb59Vv+EVZlU/jacDC1oq
C9Dw4gTXpZFIMsgXfPEFS8PGtyhzdUjgnm5ZoOMo6vv/GEfMMtQxRNa+BIslgXGj
cJlPM56LukwIM5Do32EKfk/C9YfwoKc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:56 2024 by rpki-client on console-fra.rpki-client.org