Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/8b382f3e-0a6f-3191-9031-1a3ebc624c59.roa
File:                     8b382f3e-0a6f-3191-9031-1a3ebc624c59.roa (raw, json)
Hash identifier:          le7LTnsE6vFgfYJts0AnfWT4Nd0bfO131VJroPy0Rq4=
Subject key identifier:   AF:AD:FB:07:61:96:DE:5D:3F:2C:71:AA:53:22:EA:09:80:4D:FD:3E
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F432858458C6DCACA6862863B0E13FE00
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/8b382f3e-0a6f-3191-9031-1a3ebc624c59.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     13472
IP address blocks:        209.51.128.0/24 maxlen: 24
                          209.51.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:ca:ca:68:62:86:3b:0e:13:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=8a77f0e9-759a-49d9-a5c1-9bc3b0f08152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:99:27:0d:a9:e6:1a:63:14:7f:0f:2b:c7:0e:
                    f5:82:9c:8b:c5:16:d3:5e:bf:30:07:85:41:f8:af:
                    8b:39:ba:14:f6:25:09:2d:db:8b:b5:45:c8:c1:f2:
                    97:6c:7f:07:52:a6:41:19:0e:52:8e:11:de:8b:87:
                    87:8d:88:51:3b:4a:18:c8:08:1e:94:d3:ae:ed:e3:
                    bd:22:fb:d8:da:f4:7c:00:ce:28:a9:43:57:b0:be:
                    c5:c1:cc:d5:32:b8:42:bc:13:5b:f9:52:f2:32:72:
                    7b:67:16:39:21:5c:44:9e:ef:f1:b2:ad:e1:9e:5f:
                    9d:34:7a:ce:c5:6b:5c:fa:d0:89:6a:52:21:eb:90:
                    47:ef:c5:4d:58:6b:3c:e5:44:2d:82:92:ec:1b:72:
                    6d:a6:f1:ce:f3:68:94:a4:63:04:bc:64:0f:aa:65:
                    72:cc:1e:d8:52:7f:df:a5:ee:96:05:af:e6:d0:79:
                    07:0a:02:9d:21:ca:2d:ea:29:17:61:fe:bd:03:70:
                    c9:23:03:3b:62:7c:b5:2a:86:70:4e:fc:5b:28:d7:
                    2d:b6:c3:d1:e2:08:a3:f4:96:7a:25:7c:51:e4:d8:
                    86:ba:03:c3:48:62:a4:0f:4f:a7:04:26:9a:82:ba:
                    a5:b7:e4:ea:1e:64:bc:ec:1d:07:02:b3:19:ca:bb:
                    b4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AD:FB:07:61:96:DE:5D:3F:2C:71:AA:53:22:EA:09:80:4D:FD:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/8b382f3e-0a6f-3191-9031-1a3ebc624c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.128.0/24
                  209.51.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:65:ee:b9:bc:a7:4c:30:1a:f3:8b:ad:c0:4b:84:06:ea:86:
         9e:55:02:fa:11:67:e7:fb:d6:33:87:d5:73:2b:c6:ef:33:f5:
         00:03:71:61:f0:92:c1:52:07:ce:f2:40:6b:04:17:8e:d1:79:
         26:5b:c5:0b:63:84:95:ec:f2:4a:0b:19:17:b9:77:2d:e9:bb:
         1a:88:e8:b8:5a:4d:02:31:3b:1d:e5:78:52:44:cb:77:ca:16:
         69:1c:49:90:63:c6:6d:46:ce:ff:57:fe:19:a9:3a:a1:54:f8:
         3a:8a:00:4f:9b:27:7b:4f:74:79:04:57:a2:9f:f4:5f:87:fc:
         f9:66:f3:29:7a:72:8c:07:ff:1c:64:cc:61:e0:73:fb:a0:5b:
         03:3f:04:ec:a5:b7:23:ab:dd:52:58:3a:9f:e4:5b:89:e0:99:
         ed:14:ea:45:4f:95:d0:c2:0b:e6:5d:69:c8:09:64:67:fa:ac:
         00:85:75:5e:74:3a:48:e4:b5:a5:97:2a:dd:7b:6b:1a:d0:c0:
         6f:e4:da:20:2f:a6:96:8c:fd:0f:b4:60:93:07:e6:04:32:89:
         89:40:43:43:44:54:31:bf:4a:6a:25:2a:4c:1a:65:73:48:e9:
         d3:f3:a4:46:d2:f9:7c:d2:b2:a1:57:92:7b:fa:fd:2a:f3:95:
         1e:8b:66:b2
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEWMbcrKaGKGOw4T/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk
ZjgwMB4XDTI0MDQxNTAxMDAyNloXDTI0MDcxNDAxMDAyNlowLzEtMCsGA1UEAxMk
OGE3N2YwZTktNzU5YS00OWQ5LWE1YzEtOWJjM2IwZjA4MTUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZknDanmGmMUfw8rxw71gpyLxRbTXr8wB4VB
+K+LOboU9iUJLduLtUXIwfKXbH8HUqZBGQ5SjhHei4eHjYhRO0oYyAgelNOu7eO9
IvvY2vR8AM4oqUNXsL7FwczVMrhCvBNb+VLyMnJ7ZxY5IVxEnu/xsq3hnl+dNHrO
xWtc+tCJalIh65BH78VNWGs85UQtgpLsG3JtpvHO82iUpGMEvGQPqmVyzB7YUn/f
pe6WBa/m0HkHCgKdIcot6ikXYf69A3DJIwM7Yny1KoZwTvxbKNcttsPR4gij9JZ6
JXxR5NiGugPDSGKkD0+nBCaagrqlt+TqHmS87B0HArMZyru0sQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFK+t+wdhlt5dPyxxqlMi6gmATf0+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh
NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvOGIzODJmM2UtMGE2Zi0z
MTkxLTkwMzEtMWEzZWJjNjI0YzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj
NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0
ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5
MDI3NGRmODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0TOAAwQA
0TOGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHll7rm8p0wwGvOLrcBLhAbqhp5VAvoRZ+f71jOH1XMrxu8z
9QADcWHwksFSB87yQGsEF47ReSZbxQtjhJXs8koLGRe5dy3puxqI6LhaTQIxOx3l
eFJEy3fKFmkcSZBjxm1Gzv9X/hmpOqFU+DqKAE+bJ3tPdHkEV6Kf9F+H/Plm8yl6
cowH/xxkzGHgc/ugWwM/BOyltyOr3VJYOp/kW4ngme0U6kVPldDCC+ZdacgJZGf6
rACFdV50OkjktaWXKt17axrQwG/k2iAvppaM/Q+0YJMH5gQyiYlAQ0NEVDG/Smol
KkwaZXNI6dPzpEbS+XzSsqFXknv6/SrzlR6LZrI=
-----END CERTIFICATE-----
Generated at Fri May 17 17:50:28 2024 by rpki-client on console-ams.rpki-client.org