Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/df871738-5e35-3002-9112-c507cc9ddafc.roa
File:                     df871738-5e35-3002-9112-c507cc9ddafc.roa (raw, json)
Hash identifier:          +QN5l64cWgvSPz117awwVyWb7a6XR7OTvKrOc3ZHVSw=
Subject key identifier:   32:48:89:9D:F9:43:EB:35:6F:CF:6B:B7:6D:49:6C:B8:1A:03:10:AB
Certificate issuer:       /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338
Certificate serial:       010D0C9F43285847C8D9E058A0A9F89518CD4F60
Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/df871738-5e35-3002-9112-c507cc9ddafc.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     17326
IP address blocks:        138.129.16.0/22 maxlen: 22
                          138.129.64.0/18 maxlen: 18
                          138.129.96.0/19 maxlen: 19
                          138.129.128.0/17 maxlen: 17
                          138.129.217.0/24 maxlen: 24
                          138.129.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e0:58:a0:a9:f8:95:18:cd:4f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=4b441e6e-50b9-4444-8dd2-01a8f392fa65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9c:b6:db:00:8f:b1:af:ae:52:0a:e0:5e:70:
                    b9:ae:31:e3:21:20:7b:1c:ca:48:5c:91:5e:5d:68:
                    40:af:85:6d:ef:b4:2c:d9:9f:48:2e:57:c3:86:68:
                    86:cc:bd:ed:7e:60:e5:30:a3:43:c8:30:dd:41:69:
                    7f:53:9c:83:d9:69:07:0c:80:61:47:a2:f5:70:60:
                    36:71:16:50:9f:04:28:d7:9c:74:0b:10:6a:bd:36:
                    5f:d9:f9:11:94:64:c5:9b:43:55:0c:81:65:c7:c6:
                    03:d7:97:9c:80:b6:15:c1:9a:e4:c2:72:ff:ac:24:
                    e9:79:03:09:89:75:ec:bb:03:df:86:45:a0:f7:11:
                    01:f3:7c:7b:a7:9f:6a:cb:a5:10:7f:5d:ef:7a:66:
                    bb:a8:ef:aa:dd:c7:2e:87:8f:16:80:c0:66:60:f1:
                    d7:71:08:b0:58:a4:11:da:a4:ad:43:06:dc:98:ee:
                    01:ff:5f:47:98:33:f8:9c:3c:b5:df:45:51:eb:7c:
                    8c:46:81:88:cf:6c:3c:73:bd:e1:3b:11:6f:8d:88:
                    82:79:cf:20:56:4f:3b:38:96:f0:3f:f8:17:a0:ad:
                    ff:90:55:75:38:e8:6e:42:14:eb:0d:b4:2b:c7:3c:
                    35:c2:d2:40:07:b9:35:f4:d8:66:97:85:b3:7c:ee:
                    e5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:48:89:9D:F9:43:EB:35:6F:CF:6B:B7:6D:49:6C:B8:1A:03:10:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/df871738-5e35-3002-9112-c507cc9ddafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl

            X509v3 Authority Key Identifier:
                keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.129.16.0/22
                  138.129.64.0-138.129.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:66:df:9b:1e:f0:bb:2d:d1:aa:eb:3d:3d:e0:7e:38:26:3b:
         73:39:a0:eb:c1:e2:53:00:57:c8:e9:e9:70:eb:7b:05:26:e3:
         a7:c2:14:bf:81:b9:9a:66:3f:b3:fd:fa:04:eb:95:b8:d0:7f:
         90:95:cd:01:fc:ce:8c:34:32:e5:bf:63:cc:d5:f8:fd:26:92:
         d1:1b:7d:bc:45:06:64:79:e9:1e:81:61:50:ef:28:5d:e5:28:
         54:c5:1e:2f:9e:6c:8a:93:54:e4:66:78:5c:49:40:96:36:77:
         7d:93:14:ff:ec:84:2e:32:5f:02:23:db:a8:f9:de:8e:26:2e:
         1e:bb:b6:26:bd:43:f4:5c:1c:f8:a4:28:83:20:65:1a:b4:72:
         5d:6a:04:f3:c0:d7:28:e5:be:35:5c:a7:9c:ef:88:03:d5:38:
         ff:f0:92:cd:8a:a3:2c:93:c8:b1:05:8d:3d:2b:8f:d7:c1:27:
         d4:da:24:ca:43:e8:be:66:12:be:5f:81:17:59:e4:a3:e1:95:
         69:52:3f:1d:7a:0f:a0:6f:e6:98:ea:cb:04:69:c7:f9:43:be:
         de:cc:07:04:98:f7:7d:75:f1:73:70:ae:82:70:de:0d:61:68:
         0d:75:07:a9:fa:5f:a0:7e:2d:77:5e:0a:53:ad:0e:28:52:b3:
         29:5b:33:e7
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfI2eBYoKn4lRjNT2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTYyYWVlZjgtYjM1Yi00Y2E2LWI3YTMtOTNiZTFhMTgx
MzM4MB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk
NGI0NDFlNmUtNTBiOS00NDQ0LThkZDItMDFhOGYzOTJmYTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJy22wCPsa+uUgrgXnC5rjHjISB7HMpIXJFe
XWhAr4Vt77Qs2Z9ILlfDhmiGzL3tfmDlMKNDyDDdQWl/U5yD2WkHDIBhR6L1cGA2
cRZQnwQo15x0CxBqvTZf2fkRlGTFm0NVDIFlx8YD15ecgLYVwZrkwnL/rCTpeQMJ
iXXsuwPfhkWg9xEB83x7p59qy6UQf13vema7qO+q3ccuh48WgMBmYPHXcQiwWKQR
2qStQwbcmO4B/19HmDP4nDy130VR63yMRoGIz2w8c73hOxFvjYiCec8gVk87OJbw
P/gXoK3/kFV1OOhuQhTrDbQrxzw1wtJAB7k19Nhml4WzfO7liQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDJIiZ35Q+s1b89rt21JbLgaAxCrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjJh
ZWVmOC1iMzViLTRjYTYtYjdhMy05M2JlMWExODEzMzgvZGY4NzE3MzgtNWUzNS0z
MDAyLTkxMTItYzUwN2NjOWRkYWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTYyYWVlZjgtYjM1Yi00Y2E2LWI3
YTMtOTNiZTFhMTgxMzM4L2E2MmFlZWY4LWIzNWItNGNhNi1iN2EzLTkzYmUxYTE4
MTMzOC5jcmwwHwYDVR0jBBgwFoAUJc5b1tIqbFP5lyX2l2HW+cay6IcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hNjJhZWVmOC1iMzViLTRjYTYtYjdhMy05M2Jl
MWExODEzMzguY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQCioEQMAsD
BAaKgUADAwGKgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBSZt+bHvC7LdGq6z094H44JjtzOaDrweJTAFfI
6elw63sFJuOnwhS/gbmaZj+z/foE65W40H+Qlc0B/M6MNDLlv2PM1fj9JpLRG328
RQZkeekegWFQ7yhd5ShUxR4vnmyKk1TkZnhcSUCWNnd9kxT/7IQuMl8CI9uo+d6O
Ji4eu7YmvUP0XBz4pCiDIGUatHJdagTzwNco5b41XKec74gD1Tj/8JLNiqMsk8ix
BY09K4/XwSfU2iTKQ+i+ZhK+X4EXWeSj4ZVpUj8deg+gb+aY6ssEacf5Q77ezAcE
mPd9dfFzcK6CcN4NYWgNdQep+l+gfi13XgpTrQ4oUrMpWzPn
-----END CERTIFICATE-----
Generated at Sat Nov 23 21:54:53 2024 by rpki-client on console-fra.rpki-client.org