Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/193adb60-54b1-357d-b43a-abb5a4bd0a33.roa
File:                     193adb60-54b1-357d-b43a-abb5a4bd0a33.roa (raw, json)
Hash identifier:          YG2m4FjOfpj3j4t0J64i60vbnaEe8M87RSetRfzjrQw=
Subject key identifier:   26:22:50:AC:49:44:CD:E3:2C:8C:22:F6:59:F1:8B:26:E6:4E:40:4B
Certificate issuer:       /CN=135a25e4-6a94-45c6-b694-2d6e8256166a
Certificate serial:       010D0C9F432858455E5DA173C222B3EADD4CFEC0
Authority key identifier: DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/193adb60-54b1-357d-b43a-abb5a4bd0a33.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     16509
IP address blocks:        143.192.50.0/24 maxlen: 24
                          143.192.51.0/24 maxlen: 24
                          143.192.40.0/24 maxlen: 24
                          143.192.54.0/24 maxlen: 24
                          143.192.41.0/24 maxlen: 24
                          143.192.55.0/24 maxlen: 24
                          143.192.52.0/24 maxlen: 24
                          143.192.43.0/24 maxlen: 24
                          143.192.53.0/24 maxlen: 24
                          143.192.45.0/24 maxlen: 24
                          143.192.42.0/24 maxlen: 24
                          143.192.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:a1:73:c2:22:b3:ea:dd:4c:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135a25e4-6a94-45c6-b694-2d6e8256166a
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=7d50d0eb-1d97-43fb-8556-6a095d405dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dd:15:c4:01:f7:7c:8c:03:0a:51:1b:63:ae:
                    cc:14:c6:db:a9:88:29:98:3e:cb:ea:02:18:48:a0:
                    19:ff:fc:92:2f:b8:73:37:58:55:b2:32:77:d0:63:
                    3a:ac:36:2a:09:f5:49:bf:3d:79:93:9d:1f:3c:a9:
                    9a:1f:e3:3b:84:16:2f:ab:ce:a0:c6:85:39:65:2a:
                    52:b5:91:a5:80:05:7b:f6:24:90:56:ae:bc:be:bd:
                    7c:2c:c8:d3:c0:5c:f3:08:33:a7:69:31:ef:06:5b:
                    b4:56:1c:1a:40:94:ae:46:cc:cd:3f:78:d0:73:11:
                    1d:c4:48:56:f7:9f:8d:9c:1c:f8:c5:b8:3d:62:69:
                    73:10:76:f1:15:5f:06:62:0e:e0:ba:8d:c7:11:25:
                    f3:02:42:1a:0f:48:0d:c7:f9:53:44:ba:7c:e8:64:
                    31:87:01:5f:b4:7d:89:00:4f:e8:ed:b8:8e:d1:5d:
                    96:00:06:44:52:53:ac:d3:92:a1:df:95:e0:61:73:
                    af:07:10:a3:4a:57:30:af:ba:fc:e3:a2:11:aa:59:
                    b1:5c:8d:52:1c:e4:f9:11:c1:a2:a1:10:08:c1:df:
                    07:19:3a:a5:8f:82:d5:4a:c3:9e:43:38:a7:e8:db:
                    ce:f1:26:15:82:66:10:42:a3:a2:98:82:57:50:73:
                    fc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:22:50:AC:49:44:CD:E3:2C:8C:22:F6:59:F1:8B:26:E6:4E:40:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/193adb60-54b1-357d-b43a-abb5a4bd0a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl

            X509v3 Authority Key Identifier:
                keyid:DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.192.40.0-143.192.45.255
                  143.192.50.0-143.192.55.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:f5:4e:ab:c2:e0:fe:33:79:c8:f7:9a:c2:09:69:2e:ec:04:
         b9:64:ac:37:ab:85:bf:15:0e:a0:f2:53:fa:3e:b2:25:14:6d:
         7c:f2:38:31:e6:d7:bd:6e:3f:34:5d:d5:43:81:b2:43:c5:fa:
         8d:a7:3b:f8:59:85:7f:dd:43:ae:5b:c8:90:e6:03:3c:33:2c:
         3a:0b:9e:c0:06:14:6e:0a:bc:6a:5e:4d:de:a3:ea:26:a9:2e:
         43:6b:23:0c:a8:1d:b7:3b:83:ce:cc:0f:e4:6a:e2:64:c6:03:
         63:9b:fd:8b:93:b7:2f:90:9f:1d:67:dc:07:c6:bb:ad:32:44:
         4b:aa:27:70:b9:fd:f5:c6:00:92:7d:f1:66:4e:c3:5a:e4:69:
         43:0f:28:ec:4c:3f:15:6e:21:1d:fc:46:ae:d1:c6:86:19:9f:
         95:77:be:e0:a0:0b:4e:4d:7d:31:41:19:50:69:db:f7:d3:15:
         10:57:d4:8c:55:6d:9f:67:fd:9f:1f:95:e5:61:7d:7f:12:6e:
         1b:a9:2d:3f:33:a9:08:0b:9b:06:4a:47:98:f4:25:87:40:bc:
         80:71:5d:a6:3c:93:9a:57:10:5d:19:f0:15:8b:99:f6:ae:e8:
         11:a6:46:6f:b1:4f:01:33:d0:23:d4:d1:c5:1f:42:17:15:bc:
         11:39:a2:47
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEVeXaFzwiKz6t1M/sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTM1YTI1ZTQtNmE5NC00NWM2LWI2OTQtMmQ2ZTgyNTYx
NjZhMB4XDTI0MDMyOTEzMDAzN1oXDTI0MDYyNzEzMDAzN1owLzEtMCsGA1UEAxMk
N2Q1MGQwZWItMWQ5Ny00M2ZiLTg1NTYtNmEwOTVkNDA1ZGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd0VxAH3fIwDClEbY67MFMbbqYgpmD7L6gIY
SKAZ//ySL7hzN1hVsjJ30GM6rDYqCfVJvz15k50fPKmaH+M7hBYvq86gxoU5ZSpS
tZGlgAV79iSQVq68vr18LMjTwFzzCDOnaTHvBlu0VhwaQJSuRszNP3jQcxEdxEhW
95+NnBz4xbg9YmlzEHbxFV8GYg7guo3HESXzAkIaD0gNx/lTRLp86GQxhwFftH2J
AE/o7biO0V2WAAZEUlOs05Kh35XgYXOvBxCjSlcwr7r846IRqlmxXI1SHOT5EcGi
oRAIwd8HGTqlj4LVSsOeQzin6NvO8SYVgmYQQqOimIJXUHP8mwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFCYiUKxJRM3jLIwi9lnxiybmTkBLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMzVh
MjVlNC02YTk0LTQ1YzYtYjY5NC0yZDZlODI1NjE2NmEvMTkzYWRiNjAtNTRiMS0z
NTdkLWI0M2EtYWJiNWE0YmQwYTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTM1YTI1ZTQtNmE5NC00NWM2LWI2
OTQtMmQ2ZTgyNTYxNjZhLzEzNWEyNWU0LTZhOTQtNDVjNi1iNjk0LTJkNmU4MjU2
MTY2YS5jcmwwHwYDVR0jBBgwFoAU3z6ArD0AzzQWeNXZQvPiHb3A8b0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xMzVhMjVlNC02YTk0LTQ1YzYtYjY5NC0yZDZl
ODI1NjE2NmEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAOPwCgD
BAGPwCwwDAMEAY/AMgMEA4/AMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA19U6rwuD+M3nI95rCCWku7AS5
ZKw3q4W/FQ6g8lP6PrIlFG188jgx5te9bj80XdVDgbJDxfqNpzv4WYV/3UOuW8iQ
5gM8Myw6C57ABhRuCrxqXk3eo+omqS5DayMMqB23O4POzA/kauJkxgNjm/2Lk7cv
kJ8dZ9wHxrutMkRLqidwuf31xgCSffFmTsNa5GlDDyjsTD8VbiEd/Eau0caGGZ+V
d77goAtOTX0xQRlQadv30xUQV9SMVW2fZ/2fH5XlYX1/Em4bqS0/M6kIC5sGSkeY
9CWHQLyAcV2mPJOaVxBdGfAVi5n2rugRpkZvsU8BM9Aj1NHFH0IXFbwROaJH
-----END CERTIFICATE-----
Generated at Fri May 3 01:53:57 2024 by rpki-client on console-fra.rpki-client.org