Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a6af1852-3b76-312b-8d2c-3743c4fd5146.roa
File:                     a6af1852-3b76-312b-8d2c-3743c4fd5146.roa (raw, json)
Hash identifier:          IE0COummYe+VHlXpmLlS/CrY5pl5lMFR0Zx7gQRLQCE=
Subject key identifier:   B4:C6:C3:21:3D:56:E6:E5:08:E8:FE:37:52:07:35:80:5D:7A:9B:EA
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F43285847949C9C4D9F573AA457F19800
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a6af1852-3b76-312b-8d2c-3743c4fd5146.roa
Signing time:             Fri 18 Oct 2024 08:55:08 +0000
ROA not before:           Fri 18 Oct 2024 08:55:08 +0000
ROA not after:            Thu 16 Jan 2025 09:55:08 +0000
asID:                     14297
IP address blocks:        139.131.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:94:9c:9c:4d:9f:57:3a:a4:57:f1:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Oct 18 08:55:08 2024 GMT
            Not After : Jan 16 09:55:08 2025 GMT
        Subject: CN=5b12b175-01c2-4a81-b03d-5813bc5365ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6e:ff:43:60:a5:07:87:7d:81:8e:92:83:88:
                    0c:63:6f:46:d0:5b:7b:73:7b:4e:6b:b4:02:59:04:
                    c1:27:d2:72:e2:c0:59:33:4a:8f:da:d5:d7:c2:fb:
                    cd:9e:56:29:e7:8a:20:44:35:99:0c:d0:75:08:04:
                    1b:cf:b6:8f:70:73:8e:2e:cf:98:bc:9a:58:14:dc:
                    e8:53:4b:91:e2:1b:8e:24:8d:a8:34:2b:35:d7:5d:
                    bc:cb:5e:8d:ec:6c:5a:0e:3c:b3:b4:17:32:ed:c1:
                    36:d5:5e:56:4f:fe:10:cf:53:09:fd:95:19:1f:76:
                    60:32:84:94:1e:bf:fe:19:d7:ef:75:5d:d6:dc:b4:
                    57:52:f2:63:c2:3d:20:3d:eb:6d:45:cd:e0:6a:1a:
                    40:b3:9b:f5:ee:bf:ab:0a:05:93:19:b9:33:e1:1a:
                    3f:06:b1:cc:23:57:3c:15:1e:2b:4f:3c:60:32:0b:
                    77:2f:9f:68:66:c9:3e:75:33:d2:3c:29:30:11:9b:
                    8a:64:0d:15:98:81:aa:a1:7a:01:c9:11:78:c9:ef:
                    05:0c:7c:13:8f:a9:bb:40:7e:d2:5e:16:69:f8:b9:
                    0d:dc:08:20:df:8b:7d:d8:4c:92:49:46:3c:32:5f:
                    86:65:b4:e3:42:df:97:0e:23:36:0f:93:27:c8:a0:
                    1c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C6:C3:21:3D:56:E6:E5:08:E8:FE:37:52:07:35:80:5D:7A:9B:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a6af1852-3b76-312b-8d2c-3743c4fd5146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:65:35:bb:5b:93:dc:43:c5:b8:fa:b7:9b:06:2c:06:6f:69:
         e9:1f:fe:5b:b2:57:d1:9f:dd:9c:eb:dc:6c:de:b8:a9:a3:56:
         d8:55:b3:97:f8:8e:0f:2f:59:75:30:1c:76:28:32:c0:fc:91:
         82:4d:56:71:40:f7:9f:06:36:f7:f9:42:b6:01:32:d8:44:30:
         04:f2:3e:e5:6b:cf:fd:ae:85:24:65:05:05:8c:c6:86:6c:56:
         32:23:bd:6d:0f:97:ba:ea:5b:08:a4:8f:ea:b3:1d:57:93:70:
         21:fc:a8:e2:e7:1c:c9:88:de:91:24:ff:c7:30:57:43:67:78:
         d4:43:c1:54:fa:6b:ac:75:e8:36:91:96:f9:3e:78:1e:8a:6d:
         79:4c:80:e2:ea:69:86:b2:de:11:54:e7:8e:c5:3a:95:fe:05:
         aa:88:ff:5e:d9:78:c4:9f:e5:3a:fd:5c:20:f9:94:63:62:62:
         ba:7c:bc:0d:87:07:6d:6b:bb:8d:b0:0c:84:77:86:0e:da:66:
         6b:02:52:52:2c:f1:c0:30:d5:6d:5a:fa:a1:c9:d3:fb:79:ee:
         b8:a9:9e:81:f4:c4:d0:13:0d:90:a7:20:86:fe:1a:f5:8c:3d:
         bc:3d:21:0f:f8:2b:70:83:36:e4:7e:26:d5:72:94:67:cf:67:
         cc:f2:33:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeUnJxNn1c6pFfxmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz
N2U2MB4XDTI0MTAxODA4NTUwOFoXDTI1MDExNjA5NTUwOFowLzEtMCsGA1UEAxMk
NWIxMmIxNzUtMDFjMi00YTgxLWIwM2QtNTgxM2JjNTM2NWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW7/Q2ClB4d9gY6Sg4gMY29G0Ft7c3tOa7QC
WQTBJ9Jy4sBZM0qP2tXXwvvNnlYp54ogRDWZDNB1CAQbz7aPcHOOLs+YvJpYFNzo
U0uR4huOJI2oNCs11128y16N7GxaDjyztBcy7cE21V5WT/4Qz1MJ/ZUZH3ZgMoSU
Hr/+GdfvdV3W3LRXUvJjwj0gPettRc3gahpAs5v17r+rCgWTGbkz4Ro/BrHMI1c8
FR4rTzxgMgt3L59oZsk+dTPSPCkwEZuKZA0VmIGqoXoByRF4ye8FDHwTj6m7QH7S
XhZp+LkN3Agg34t92EySSUY8Ml+GZbTjQt+XDiM2D5MnyKAcnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLTGwyE9VublCOj+N1IHNYBdepvqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw
NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYTZhZjE4NTItM2I3Ni0z
MTJiLThkMmMtMzc0M2M0ZmQ1MTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm
NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl
MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz
YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4NCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZlNbtbk9xDxbj6t5sGLAZvaekf/luyV9Gf3Zzr3GzeuKmjVthVs5f4
jg8vWXUwHHYoMsD8kYJNVnFA958GNvf5QrYBMthEMATyPuVrz/2uhSRlBQWMxoZs
VjIjvW0Pl7rqWwikj+qzHVeTcCH8qOLnHMmI3pEk/8cwV0NneNRDwVT6a6x16DaR
lvk+eB6KbXlMgOLqaYay3hFU547FOpX+BaqI/17ZeMSf5Tr9XCD5lGNiYrp8vA2H
B21ru42wDIR3hg7aZmsCUlIs8cAw1W1a+qHJ0/t57ripnoH0xNATDZCnIIb+GvWM
Pbw9IQ/4K3CDNuR+JtVylGfPZ8zyM+w=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:56 2024 by rpki-client on console-fra.rpki-client.org