Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7ed13295-9fa0-3a0d-8af0-6919933f3c94.roa
File:                     7ed13295-9fa0-3a0d-8af0-6919933f3c94.roa (raw, json)
Hash identifier:          3jPzwVjbX2F/9Q4j6q1A/eJd/BnUpXY/vVUVEMdDp6A=
Subject key identifier:   05:14:61:C4:A3:B5:6E:30:9E:54:36:98:39:81:C9:72:C9:C1:30:89
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285845DEC9171D14B17C541BFC9580
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7ed13295-9fa0-3a0d-8af0-6919933f3c94.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     393249
IP address blocks:        128.189.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:17:1d:14:b1:7c:54:1b:fc:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=2b001713-8082-495c-a44c-0e5c8d3893bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d5:8d:d6:58:c0:ec:db:49:56:f8:07:2d:32:
                    0e:45:ac:fd:69:1c:f9:c0:5b:b5:41:b4:16:88:ff:
                    0f:f7:64:82:23:98:37:b2:d2:68:e9:2e:d8:1d:0a:
                    b0:9a:d0:5a:1d:14:a3:08:90:53:0c:c2:90:51:e1:
                    0f:38:a8:38:66:9e:b7:52:b3:74:91:3c:ea:d2:08:
                    78:09:28:09:ac:d0:b3:b9:0d:be:55:57:75:c5:56:
                    09:1b:f2:4f:7d:9d:9f:e9:5d:98:41:eb:c4:6c:39:
                    38:6f:80:e7:f7:41:1a:b7:51:8c:f3:eb:bf:3d:01:
                    c5:95:55:43:12:e0:ba:4f:a6:88:26:af:a8:08:9e:
                    bb:1e:a1:8f:65:b5:17:13:07:fc:32:3e:78:f6:65:
                    60:8e:11:de:41:d4:b3:69:c5:8e:26:cd:f1:9e:c0:
                    41:a1:93:93:19:0c:99:45:78:61:3a:9b:0c:7c:dc:
                    f9:15:46:e9:bd:18:78:b5:09:86:d8:80:fb:a0:5d:
                    5d:b0:33:ed:60:8d:0c:20:69:87:93:1f:48:a4:04:
                    81:4a:bd:0b:ad:0a:14:b2:b4:b7:15:3c:52:79:aa:
                    86:61:23:df:2b:8c:44:6d:8f:47:61:d1:df:5f:cf:
                    06:ca:8c:73:13:7c:8f:89:50:57:0b:72:a3:fc:e1:
                    ae:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:14:61:C4:A3:B5:6E:30:9E:54:36:98:39:81:C9:72:C9:C1:30:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7ed13295-9fa0-3a0d-8af0-6919933f3c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.189.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d6:a0:ca:f5:aa:c4:d7:4c:bc:3f:a7:c1:2f:dc:a4:20:1b:
         22:41:5e:06:f8:5d:ec:d8:de:aa:50:6d:00:25:81:7f:1f:63:
         dc:a0:ee:f2:bf:48:0d:03:13:c5:ae:65:6b:5e:7a:97:91:5c:
         6c:b9:77:a4:13:36:97:21:9c:fc:9a:d9:84:cd:e5:38:1f:ff:
         ee:0f:e1:71:2d:64:29:ae:48:ab:f1:5d:5b:ee:50:5c:36:9b:
         9e:a5:87:30:bf:d1:ef:81:3a:2a:c7:89:55:00:8e:38:e5:12:
         3b:96:f7:57:49:6c:dc:72:4d:f4:42:8a:e7:43:99:a1:a7:1a:
         ae:f5:70:ec:a3:3d:81:c5:2d:16:81:8d:a5:1b:2f:2a:02:36:
         83:4f:f5:f7:a1:06:b7:2f:4b:8c:71:1b:fc:e5:5a:46:8e:2c:
         6a:c1:68:2c:ba:02:cd:b0:c4:a1:5d:02:8e:e1:53:50:ff:26:
         31:8d:f8:04:35:53:f4:cf:78:38:11:13:70:17:71:06:c2:4d:
         5d:a3:e9:c4:06:9c:fd:02:59:2c:c3:e9:3e:cb:18:cf:cc:10:
         c2:04:8a:47:e1:f3:9a:6a:f0:b9:97:3f:e5:99:63:87:20:8a:
         9e:5a:c1:91:e5:75:0a:fe:de:09:3b:dd:df:83:ca:7a:bf:90:
         29:9a:e7:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXeyRcdFLF8VBv8lYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI0MDUxNDEzMDAzNFoXDTI0MDgxMjEzMDAzNFowLzEtMCsGA1UEAxMk
MmIwMDE3MTMtODA4Mi00OTVjLWE0NGMtMGU1YzhkMzg5M2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNWN1ljA7NtJVvgHLTIORaz9aRz5wFu1QbQW
iP8P92SCI5g3stJo6S7YHQqwmtBaHRSjCJBTDMKQUeEPOKg4Zp63UrN0kTzq0gh4
CSgJrNCzuQ2+VVd1xVYJG/JPfZ2f6V2YQevEbDk4b4Dn90Eat1GM8+u/PQHFlVVD
EuC6T6aIJq+oCJ67HqGPZbUXEwf8Mj549mVgjhHeQdSzacWOJs3xnsBBoZOTGQyZ
RXhhOpsMfNz5FUbpvRh4tQmG2ID7oF1dsDPtYI0MIGmHkx9IpASBSr0LrQoUsrS3
FTxSeaqGYSPfK4xEbY9HYdHfX88GyoxzE3yPiVBXC3Kj/OGu2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAUUYcSjtW4wnlQ2mDmByXLJwTCJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvN2VkMTMyOTUtOWZhMC0z
YTBkLThhZjAtNjkxOTkzM2YzYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgL1AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEPWoMr1qsTXTLw/p8Ev3KQgGyJBXgb4XezY3qpQbQAlgX8fY9yg7vK/
SA0DE8WuZWteepeRXGy5d6QTNpchnPya2YTN5Tgf/+4P4XEtZCmuSKvxXVvuUFw2
m56lhzC/0e+BOirHiVUAjjjlEjuW91dJbNxyTfRCiudDmaGnGq71cOyjPYHFLRaB
jaUbLyoCNoNP9fehBrcvS4xxG/zlWkaOLGrBaCy6As2wxKFdAo7hU1D/JjGN+AQ1
U/TPeDgRE3AXcQbCTV2j6cQGnP0CWSzD6T7LGM/MEMIEikfh85pq8LmXP+WZY4cg
ip5awZHldQr+3gk73d+Dynq/kCma58M=
-----END CERTIFICATE-----
Generated at Fri Jun 21 21:31:06 2024 by rpki-client on console-ams.rpki-client.org