Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/bc7ae3e2-f5df-3d7b-b37b-35bbeca01918.roa
File:                     bc7ae3e2-f5df-3d7b-b37b-35bbeca01918.roa (raw, json)
Hash identifier:          yFcej5dupslMq2dAlxtFLMn5EmE7L66GOdUnRPy66Ys=
Subject key identifier:   81:5F:05:17:21:8F:B0:6E:9C:0A:3E:81:94:57:DF:5B:93:09:6E:25
Certificate issuer:       /CN=0c23b672-82ba-4697-9783-b36dad570d90
Certificate serial:       010D0C9F432858452110502E4C2A81F5DFAA9FA0
Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/bc7ae3e2-f5df-3d7b-b37b-35bbeca01918.roa
Signing time:             Thu 07 Mar 2024 14:00:32 +0000
ROA not before:           Thu 07 Mar 2024 14:00:32 +0000
ROA not after:            Wed 05 Jun 2024 13:00:32 +0000
asID:                     36136
IP address blocks:        131.201.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:21:10:50:2e:4c:2a:81:f5:df:aa:9f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90
        Validity
            Not Before: Mar  7 14:00:32 2024 GMT
            Not After : Jun  5 13:00:32 2024 GMT
        Subject: CN=3fbc03be-e903-499d-a7a6-e3903e8213b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:59:7e:d7:52:62:73:67:b7:3d:3a:88:cc:1e:
                    ea:48:16:30:1c:e7:68:0c:b5:8f:e6:ad:28:8a:a7:
                    49:71:b7:9c:38:82:84:0f:44:2e:87:f9:88:bb:8b:
                    85:6d:6b:f6:cf:ef:cd:50:ff:82:2e:53:44:30:93:
                    64:d3:9b:2b:5b:ff:f1:67:03:14:e4:cb:db:56:88:
                    f3:2c:59:9f:b1:62:1a:6e:30:9a:bf:af:66:1b:51:
                    5d:d4:0e:27:57:3c:37:b3:af:50:e4:3c:86:cb:d0:
                    48:aa:d3:76:db:8b:48:e1:f1:f7:08:e7:a4:a7:40:
                    99:7a:60:0f:9c:32:ec:8c:e2:a6:c1:73:1a:f1:5e:
                    9d:35:72:23:88:75:5f:dd:41:05:07:aa:79:3f:18:
                    f0:c4:af:20:0e:3b:27:41:48:8c:ba:58:97:33:c1:
                    3b:87:d6:9d:25:e0:57:17:49:15:98:fb:10:d1:c8:
                    f4:75:5d:a4:da:f4:e0:82:d5:bc:f1:ba:00:f1:b0:
                    26:f2:bb:5e:2d:46:c2:30:ee:b0:9d:df:48:58:f9:
                    41:35:0e:ca:5b:d7:46:cf:ac:53:0a:d1:46:93:07:
                    31:d2:2c:87:05:58:93:2f:76:be:b6:3c:2b:ae:fb:
                    96:cb:68:3b:d2:17:7e:17:33:99:3c:8c:be:c1:52:
                    d5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5F:05:17:21:8F:B0:6E:9C:0A:3E:81:94:57:DF:5B:93:09:6E:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/bc7ae3e2-f5df-3d7b-b37b-35bbeca01918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl

            X509v3 Authority Key Identifier:
                keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.201.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:7d:26:53:96:5b:12:93:b5:19:c4:b3:25:94:c5:ad:e6:68:
         3d:5b:78:95:e0:bb:9f:3b:67:bb:bc:b0:6e:4b:a0:a9:b8:ca:
         cf:20:f9:ed:9c:47:2a:ab:74:b7:6d:44:84:7a:8e:82:5e:52:
         66:8d:6b:13:ab:b2:33:46:ee:54:5e:4e:72:e9:42:72:2b:eb:
         81:03:c0:96:a5:1f:1e:b5:8c:56:e1:53:1f:5b:e8:36:f9:2b:
         49:5c:65:71:fb:07:f0:e1:ef:e0:16:0a:70:7d:e3:3b:ee:97:
         00:7d:39:a1:10:a3:aa:b3:44:a0:a5:49:b8:bc:f9:da:4f:bb:
         07:ea:a9:7b:7c:02:38:6a:1d:1b:08:d0:69:01:50:2f:0f:4c:
         95:e8:01:4c:57:a4:7d:92:fa:1d:1b:03:f7:ff:5a:c8:0a:1a:
         94:45:ad:9d:5c:e6:78:f0:88:1a:31:bc:10:5a:dd:5c:33:91:
         22:f7:f0:13:2c:69:57:73:0b:fb:6d:02:83:eb:4d:53:ba:70:
         98:5a:dc:26:44:26:f4:82:cd:08:9e:f4:c8:02:25:f8:5e:1b:
         1c:bd:cf:fd:2d:ef:3f:5f:40:bd:11:e7:1d:ea:75:fe:c2:34:
         7c:77:0d:dd:a0:aa:21:39:8f:78:c1:52:f6:07:a9:39:b6:36:
         8a:5e:e9:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUhEFAuTCqB9d+qn6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw
ZDkwMB4XDTI0MDMwNzE0MDAzMloXDTI0MDYwNTEzMDAzMlowLzEtMCsGA1UEAxMk
M2ZiYzAzYmUtZTkwMy00OTlkLWE3YTYtZTM5MDNlODIxM2IxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1l+11Jic2e3PTqIzB7qSBYwHOdoDLWP5q0o
iqdJcbecOIKED0Quh/mIu4uFbWv2z+/NUP+CLlNEMJNk05srW//xZwMU5MvbVojz
LFmfsWIabjCav69mG1Fd1A4nVzw3s69Q5DyGy9BIqtN224tI4fH3COekp0CZemAP
nDLsjOKmwXMa8V6dNXIjiHVf3UEFB6p5PxjwxK8gDjsnQUiMuliXM8E7h9adJeBX
F0kVmPsQ0cj0dV2k2vTggtW88boA8bAm8rteLUbCMO6wnd9IWPlBNQ7KW9dGz6xT
CtFGkwcx0iyHBViTL3a+tjwrrvuWy2g70hd+FzOZPIy+wVLVNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIFfBRchj7BunAo+gZRX31uTCW4lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz
YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvYmM3YWUzZTItZjVkZi0z
ZDdiLWIzN2ItMzViYmVjYTAxOTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3
ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3
MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk
YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8ntMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAR9JlOWWxKTtRnEsyWUxa3maD1beJXgu587Z7u8sG5LoKm4ys8g+e2c
RyqrdLdtRIR6joJeUmaNaxOrsjNG7lReTnLpQnIr64EDwJalHx61jFbhUx9b6Db5
K0lcZXH7B/Dh7+AWCnB94zvulwB9OaEQo6qzRKClSbi8+dpPuwfqqXt8AjhqHRsI
0GkBUC8PTJXoAUxXpH2S+h0bA/f/WsgKGpRFrZ1c5njwiBoxvBBa3VwzkSL38BMs
aVdzC/ttAoPrTVO6cJha3CZEJvSCzQie9MgCJfheGxy9z/0t7z9fQL0R5x3qdf7C
NHx3Dd2gqiE5j3jBUvYHqTm2Nope6cI=
-----END CERTIFICATE-----
Generated at Sat May 18 01:43:30 2024 by rpki-client on console-fra.rpki-client.org