Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/02f4ba5f-4dce-3a3a-a4e2-e09129a0114f.roa
File:                     02f4ba5f-4dce-3a3a-a4e2-e09129a0114f.roa (raw, json)
Hash identifier:          5e2okeGpG8xcOa3L1Eg7wjw8dK7jdhIQNi/CD6BaDB8=
Subject key identifier:   25:8E:C4:B1:23:7C:8D:73:40:5D:61:EE:FB:B1:40:11:A5:77:49:4B
Certificate issuer:       /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial:       010D0C9F43285847D6CF49F64BF78F3F0550FC00
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/02f4ba5f-4dce-3a3a-a4e2-e09129a0114f.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     1411
IP address blocks:        137.155.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:49:f6:4b:f7:8f:3f:05:50:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=91346acb-9ad1-4b50-8b01-3b428bc2ad1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:af:b4:0a:41:aa:bb:f3:bd:5c:cb:d5:e1:d9:
                    d9:d9:ca:6c:5e:01:71:aa:b8:b0:14:9b:1d:dd:53:
                    11:52:62:4f:fb:75:5b:55:30:ee:a5:80:d3:14:b9:
                    be:46:d6:7f:5d:49:f7:44:d2:b1:ee:a6:07:3e:b0:
                    2f:45:b4:50:f7:18:f9:7a:10:9f:bf:f8:a4:db:51:
                    ce:40:66:15:54:3c:e5:82:03:d6:34:86:72:b1:c3:
                    98:0d:f4:12:3c:b9:f1:7d:fa:5a:08:d4:97:b5:a8:
                    2a:e4:d3:ad:1f:ec:5a:69:8e:bc:47:35:40:c3:6e:
                    2f:11:1e:03:60:5d:54:1a:da:ab:57:e2:6a:da:27:
                    0d:1a:e2:5e:f7:16:49:9b:c7:da:44:94:14:29:d2:
                    a0:48:7b:95:a9:64:09:62:ef:d1:34:92:dc:85:0b:
                    d1:9c:a5:6a:4d:e4:55:82:ba:b9:6e:0b:9c:91:44:
                    10:30:ed:1d:4b:00:8f:5e:88:88:4d:6a:f1:e7:9e:
                    4d:06:e4:11:5a:fa:8e:bc:df:41:38:89:7f:12:ff:
                    ec:42:f5:2c:2f:37:c7:9d:88:f4:7c:1c:e8:3b:fa:
                    d2:68:1f:f4:c3:12:11:c4:c2:40:b5:35:02:eb:5c:
                    4e:a5:c4:be:bb:9e:7d:b2:26:b4:30:a8:98:ab:02:
                    a2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8E:C4:B1:23:7C:8D:73:40:5D:61:EE:FB:B1:40:11:A5:77:49:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/02f4ba5f-4dce-3a3a-a4e2-e09129a0114f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl

            X509v3 Authority Key Identifier:
                keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.155.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:8d:ec:4e:a9:d8:6e:f2:ae:66:78:19:4d:71:73:d2:b9:70:
         74:02:83:a1:29:8f:4c:82:8d:b6:0d:d8:b6:e6:35:f6:c9:80:
         08:7d:7c:4b:e6:f9:9d:a1:2a:5c:81:7e:d9:de:3b:22:6d:dc:
         1b:d8:66:ab:de:d0:6b:47:89:fa:bf:98:f5:3f:19:a3:d3:97:
         8a:f2:f6:7b:1c:40:ec:5d:ad:46:f4:36:ec:31:46:cd:51:92:
         ac:82:e4:6c:20:5e:80:fa:48:1c:c8:f9:2f:2b:18:d1:37:af:
         89:f9:10:68:b0:e8:e4:1b:14:86:c4:bc:be:86:fb:09:86:e2:
         4a:2f:97:9c:c5:47:90:b8:e9:a6:e4:12:5b:6c:a4:f4:b3:35:
         b8:0a:f4:fc:31:4e:a0:69:ec:9e:02:86:67:5e:88:43:91:36:
         15:5d:7c:65:99:6a:78:d0:f1:f6:37:3f:86:cc:39:0f:e3:1e:
         c0:9a:90:9d:f3:14:4a:44:ae:07:a2:1b:aa:ca:c5:d5:2a:b4:
         e6:fd:ec:fa:7a:e4:41:0a:ba:3a:57:8f:ac:f8:f6:f7:dc:21:
         8a:83:f0:cf:b8:77:86:a7:3e:65:9a:54:9f:ce:5f:d4:07:3c:
         82:5e:71:f6:ff:7b:b0:ef:96:35:d6:c0:b1:dc:42:c7:e6:bb:
         3d:94:33:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfWz0n2S/ePPwVQ/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg3NTA1OGYtNTM2My00YmJjLTlkZTctYmZkNjY5Yzg4
YmQ5MB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk
OTEzNDZhY2ItOWFkMS00YjUwLThiMDEtM2I0MjhiYzJhZDFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq+0CkGqu/O9XMvV4dnZ2cpsXgFxqriwFJsd
3VMRUmJP+3VbVTDupYDTFLm+RtZ/XUn3RNKx7qYHPrAvRbRQ9xj5ehCfv/ik21HO
QGYVVDzlggPWNIZyscOYDfQSPLnxffpaCNSXtagq5NOtH+xaaY68RzVAw24vER4D
YF1UGtqrV+Jq2icNGuJe9xZJm8faRJQUKdKgSHuVqWQJYu/RNJLchQvRnKVqTeRV
grq5bguckUQQMO0dSwCPXoiITWrx555NBuQRWvqOvN9BOIl/Ev/sQvUsLzfHnYj0
fBzoO/rSaB/0wxIRxMJAtTUC61xOpcS+u559sia0MKiYqwKiEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCWOxLEjfI1zQF1h7vuxQBGld0lLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ODc1
MDU4Zi01MzYzLTRiYmMtOWRlNy1iZmQ2NjljODhiZDkvMDJmNGJhNWYtNGRjZS0z
YTNhLWE0ZTItZTA5MTI5YTAxMTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzg3NTA1OGYtNTM2My00YmJjLTlk
ZTctYmZkNjY5Yzg4YmQ5Lzc4NzUwNThmLTUzNjMtNGJiYy05ZGU3LWJmZDY2OWM4
OGJkOS5jcmwwHwYDVR0jBBgwFoAUYPhZmnlWN01F4ALtWMCNGRhbrAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ODc1MDU4Zi01MzYzLTRiYmMtOWRlNy1iZmQ2
NjljODhiZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHiZuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2N7E6p2G7yrmZ4GU1xc9K5cHQCg6Epj0yCjbYN2LbmNfbJgAh9fEvm
+Z2hKlyBftneOyJt3BvYZqve0GtHifq/mPU/GaPTl4ry9nscQOxdrUb0NuwxRs1R
kqyC5GwgXoD6SBzI+S8rGNE3r4n5EGiw6OQbFIbEvL6G+wmG4kovl5zFR5C46abk
EltspPSzNbgK9PwxTqBp7J4ChmdeiEORNhVdfGWZanjQ8fY3P4bMOQ/jHsCakJ3z
FEpErgeiG6rKxdUqtOb97Pp65EEKujpXj6z49vfcIYqD8M+4d4anPmWaVJ/OX9QH
PIJecfb/e7DvljXWwLHcQsfmuz2UM08=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org