Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/8eb37cca-6666-338e-a2be-4b72624172ff.roa
File:                     8eb37cca-6666-338e-a2be-4b72624172ff.roa (raw, json)
Hash identifier:          ZX5qgLGJRotXaGL+ch6SlCNM8WYleO42q3iIoQqytAs=
Subject key identifier:   2E:4C:B7:4B:C9:28:32:BC:5B:0A:94:DA:EC:24:9F:F9:60:62:D6:62
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584582A885AC787B8BB39A67B4C0
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/8eb37cca-6666-338e-a2be-4b72624172ff.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     14297
IP address blocks:        139.131.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:85:ac:78:7b:8b:b3:9a:67:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=f8f4fd60-08bf-4c0a-b7c7-3f0a12a17b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:47:db:ec:ef:28:82:72:c8:d2:c0:20:b1:
                    bb:bf:d3:09:fa:6c:14:3d:3b:61:41:c7:50:2a:4d:
                    aa:31:38:29:78:0e:cd:76:99:ef:0f:e5:38:f7:51:
                    ef:52:9d:fb:c2:79:dc:d9:72:f6:42:b5:d7:c2:4e:
                    c9:3a:6e:88:fe:fa:9e:78:d8:f4:83:42:cb:dc:7e:
                    6a:f6:32:ab:89:e7:0d:a4:88:82:f5:a5:0c:79:9a:
                    7c:13:1d:22:20:fe:63:61:c9:d9:b0:88:a2:af:9c:
                    76:35:98:00:7d:f0:1c:13:61:84:30:01:89:36:57:
                    e2:6b:68:d0:b5:22:29:c2:e8:82:5d:a6:0d:4a:4a:
                    87:a0:cb:d1:dd:ac:c9:b5:eb:f1:c5:c0:65:2a:72:
                    0c:12:cc:9c:52:d4:ce:ff:30:f1:c9:7d:e7:dd:c1:
                    66:0e:95:f4:97:a8:73:7e:43:83:af:04:32:3c:30:
                    b4:1a:b9:c8:80:d3:a6:22:4b:15:5e:fa:49:be:8e:
                    b8:9e:f2:09:56:f7:43:28:0d:7b:b7:6f:a4:01:de:
                    b1:df:46:c4:f8:52:41:79:a2:c1:8b:f0:cd:b2:b9:
                    60:64:9e:c3:91:19:e0:de:94:86:97:b9:df:ec:6a:
                    6e:4f:9d:73:0f:2e:cd:ea:2f:0e:12:69:22:c4:56:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4C:B7:4B:C9:28:32:BC:5B:0A:94:DA:EC:24:9F:F9:60:62:D6:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/8eb37cca-6666-338e-a2be-4b72624172ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:33:77:06:60:d3:92:e2:01:52:9f:95:63:e9:2d:87:85:9f:
         78:ca:a5:06:2b:50:62:88:db:8b:be:b3:17:24:6d:e0:f5:fd:
         cf:bd:92:5a:16:bb:92:e1:a1:80:8e:b6:14:84:4f:20:cd:8a:
         18:10:0b:9a:44:bb:ee:15:97:3b:9b:88:cd:66:44:57:1f:46:
         90:ff:70:1a:55:6b:f5:65:56:b4:8d:5e:d6:0f:25:40:97:a3:
         d5:79:50:23:23:d2:0f:ee:c3:bf:35:9e:a4:c1:a7:91:59:7e:
         66:ac:93:00:45:8f:ce:f9:06:d7:26:6f:6f:c2:17:31:09:34:
         25:5d:a5:3c:86:4b:0a:47:f4:58:22:e0:b4:da:f8:fe:30:9f:
         9a:5d:f1:a9:14:2d:d8:e9:6e:6d:80:cf:a4:e4:7b:8b:64:40:
         a2:31:38:09:7c:0c:42:a1:1e:b6:7c:7f:2e:dc:17:72:0b:ef:
         c8:65:67:4f:35:17:75:81:01:e1:a7:ea:66:a5:ac:25:d6:e3:
         c9:4d:c3:6e:b3:cf:13:06:5f:3d:36:94:b0:98:c8:a2:e5:7a:
         b2:19:68:c9:cc:1f:38:32:30:fb:61:b9:a2:ee:93:bf:8f:6e:
         2c:71:12:57:ff:70:b4:05:87:0b:f3:1f:b1:b9:0a:29:87:92:
         ed:99:fa:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqIWseHuLs5pntMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz
N2U2MB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk
ZjhmNGZkNjAtMDhiZi00YzBhLWI3YzctM2YwYTEyYTE3YjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtStH2+zvKIJyyNLAILG7v9MJ+mwUPTthQcdQ
Kk2qMTgpeA7NdpnvD+U491HvUp37wnnc2XL2QrXXwk7JOm6I/vqeeNj0g0LL3H5q
9jKriecNpIiC9aUMeZp8Ex0iIP5jYcnZsIiir5x2NZgAffAcE2GEMAGJNlfia2jQ
tSIpwuiCXaYNSkqHoMvR3azJtevxxcBlKnIMEsycUtTO/zDxyX3n3cFmDpX0l6hz
fkODrwQyPDC0GrnIgNOmIksVXvpJvo64nvIJVvdDKA17t2+kAd6x30bE+FJBeaLB
i/DNsrlgZJ7DkRng3pSGl7nf7GpuT51zDy7N6i8OEmkixFaMEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC5Mt0vJKDK8WwqU2uwkn/lgYtZiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw
NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvOGViMzdjY2EtNjY2Ni0z
MzhlLWEyYmUtNGI3MjYyNDE3MmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm
NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl
MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz
YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4PBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQzdwZg05LiAVKflWPpLYeFn3jKpQYrUGKI24u+sxckbeD1/c+9kloW
u5LhoYCOthSETyDNihgQC5pEu+4VlzubiM1mRFcfRpD/cBpVa/VlVrSNXtYPJUCX
o9V5UCMj0g/uw781nqTBp5FZfmaskwBFj875Btcmb2/CFzEJNCVdpTyGSwpH9Fgi
4LTa+P4wn5pd8akULdjpbm2Az6Tke4tkQKIxOAl8DEKhHrZ8fy7cF3IL78hlZ081
F3WBAeGn6malrCXW48lNw26zzxMGXz02lLCYyKLlerIZaMnMHzgyMPthuaLuk7+P
bixxElf/cLQFhwvzH7G5CimHku2Z+oM=
-----END CERTIFICATE-----
Generated at Sun May 5 01:28:20 2024 by rpki-client on console-ams.rpki-client.org