Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e650ec6f-555a-3073-8abb-72c4f3d294dd.roa
File:                     e650ec6f-555a-3073-8abb-72c4f3d294dd.roa (raw, json)
Hash identifier:          YjFyOUDCFF+HZAvIBcCYz7TuMATmJhm2mOiA7c19XGg=
Subject key identifier:   3D:56:58:6A:A5:97:A6:58:DC:43:18:DD:FC:AF:12:7D:73:C6:75:FE
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584582A88617D5554DC8323D9880
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e650ec6f-555a-3073-8abb-72c4f3d294dd.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     14297
IP address blocks:        139.131.64.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:86:17:d5:55:4d:c8:32:3d:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=b254c07c-c062-46c0-9d70-55708052380a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:8f:d7:2d:5c:f4:ca:de:6e:7e:31:9b:dd:
                    f0:9b:a5:3e:b1:0c:48:eb:ab:e2:df:90:a8:4c:51:
                    30:0d:87:d6:aa:67:43:58:d6:1e:c6:b2:c6:da:83:
                    ef:55:ec:1c:13:7a:d0:bd:f7:65:16:f6:8a:d6:9b:
                    ea:f6:03:d6:27:ea:8e:8a:b9:e7:59:ef:f8:44:1e:
                    a8:7a:94:25:ae:ea:6a:51:55:e6:be:e1:18:71:b0:
                    6a:81:5e:4e:09:d7:b9:09:dc:b8:a2:f7:81:24:2c:
                    c6:c6:77:6f:93:45:ab:e6:d6:72:c4:5d:85:52:4a:
                    15:8f:94:6f:96:6d:47:53:a7:1c:5e:07:07:b4:de:
                    22:ce:b1:e8:27:11:08:c5:30:f7:46:b3:fa:fa:02:
                    ae:e2:65:f9:c7:f4:3d:ac:58:78:52:95:37:33:e9:
                    ee:bb:d6:44:c0:da:79:e6:c8:53:06:ba:33:35:82:
                    a1:a1:84:5a:be:7c:a5:49:3f:fa:f1:ee:2e:31:e2:
                    15:ee:95:9c:51:d1:5d:58:0c:74:15:86:3d:44:b3:
                    2a:d1:9f:09:88:37:ec:cb:3a:ff:79:9d:ff:50:e0:
                    f0:5e:a9:91:11:7f:83:ce:6d:d3:43:ef:39:6b:be:
                    94:bf:4c:81:ae:ea:be:bc:27:18:06:a6:a4:03:96:
                    42:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:56:58:6A:A5:97:A6:58:DC:43:18:DD:FC:AF:12:7D:73:C6:75:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e650ec6f-555a-3073-8abb-72c4f3d294dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:b8:77:3a:f0:01:56:e2:48:83:48:40:b4:d3:5c:00:32:fd:
         a9:ee:47:90:0f:60:26:8b:54:a8:6f:d1:99:0e:70:aa:92:20:
         b5:65:a5:c9:e3:21:f9:9e:0f:67:34:4b:e0:9d:95:60:8a:a1:
         71:48:02:7f:e4:74:cf:dc:a1:ab:bd:28:44:65:fb:87:ae:bc:
         4d:28:54:20:d8:c3:b5:2e:f3:a6:d0:6d:2f:00:3f:fe:65:80:
         26:5e:1b:f4:9c:31:f4:95:ac:3e:5a:27:3d:68:7a:d3:89:5e:
         25:ba:28:0f:ba:f5:f7:97:88:48:b7:c7:1a:f9:77:80:d1:09:
         44:58:c4:67:fe:15:86:b9:73:20:ab:88:43:ff:03:bd:d7:f8:
         14:4a:f2:06:3e:78:1c:b1:43:96:b4:06:28:bc:22:d0:08:7a:
         88:f7:83:ff:1e:1e:62:56:e2:6c:30:2c:c8:db:ff:19:f6:43:
         94:1e:6d:9e:0e:e7:e4:b4:96:54:f2:ed:d6:8c:a2:bf:c1:a2:
         b7:e7:a7:f2:99:9f:d3:b9:c7:6c:1c:1a:b5:ca:c7:47:6d:9e:
         2a:d0:25:1c:c1:ea:a3:1d:54:d7:86:4f:15:8a:d4:a3:e4:d6:
         98:37:fa:df:6d:18:83:bb:3c:aa:f4:9a:f8:a4:fb:b8:d9:64:
         3d:44:62:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqIYX1VVNyDI9mIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz
N2U2MB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk
YjI1NGMwN2MtYzA2Mi00NmMwLTlkNzAtNTU3MDgwNTIzODBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW6P1y1c9Mrebn4xm93wm6U+sQxI66vi35Co
TFEwDYfWqmdDWNYexrLG2oPvVewcE3rQvfdlFvaK1pvq9gPWJ+qOirnnWe/4RB6o
epQlrupqUVXmvuEYcbBqgV5OCde5Cdy4oveBJCzGxndvk0Wr5tZyxF2FUkoVj5Rv
lm1HU6ccXgcHtN4izrHoJxEIxTD3RrP6+gKu4mX5x/Q9rFh4UpU3M+nuu9ZEwNp5
5shTBrozNYKhoYRavnylST/68e4uMeIV7pWcUdFdWAx0FYY9RLMq0Z8JiDfsyzr/
eZ3/UODwXqmREX+Dzm3TQ+85a76Uv0yBruq+vCcYBqakA5ZCvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD1WWGqll6ZY3EMY3fyvEn1zxnX+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw
NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvZTY1MGVjNmYtNTU1YS0z
MDczLThhYmItNzJjNGYzZDI5NGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm
NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl
MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz
YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDi4NAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABy4dzrwAVbiSINIQLTTXAAy/anuR5APYCaLVKhv0ZkOcKqSILVlpcnj
IfmeD2c0S+CdlWCKoXFIAn/kdM/coau9KERl+4euvE0oVCDYw7Uu86bQbS8AP/5l
gCZeG/ScMfSVrD5aJz1oetOJXiW6KA+69feXiEi3xxr5d4DRCURYxGf+FYa5cyCr
iEP/A73X+BRK8gY+eByxQ5a0Bii8ItAIeoj3g/8eHmJW4mwwLMjb/xn2Q5QebZ4O
5+S0llTy7daMor/Borfnp/KZn9O5x2wcGrXKx0dtnirQJRzB6qMdVNeGTxWK1KPk
1pg3+t9tGIO7PKr0mvik+7jZZD1EYr8=
-----END CERTIFICATE-----
Generated at Sun May 5 15:36:57 2024 by rpki-client on console-fra.rpki-client.org