Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/28735348-6cda-374a-978a-a2aabf659d86.roa
File:                     28735348-6cda-374a-978a-a2aabf659d86.roa (raw, json)
Hash identifier:          3cNJdMgfqk1jR5KTcWTKMRHJ9oELuj1fn+Y6k8ddRXI=
Subject key identifier:   4D:66:20:96:D3:EF:F0:CC:C1:63:3A:17:1A:06:ED:7A:49:99:92:6C
Certificate issuer:       /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial:       010D0C9F432858477396609655D8000FAD795300
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/28735348-6cda-374a-978a-a2aabf659d86.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     8075
IP address blocks:        138.32.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:60:96:55:d8:00:0f:ad:79:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=6eb310d6-a9cb-4c6a-b409-64fbb135b0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:db:4e:ea:57:59:31:97:4d:e0:45:1b:68:09:
                    a1:06:17:9f:09:9e:db:ff:52:b5:77:11:5f:3e:39:
                    34:12:66:96:74:f9:7b:cc:e1:43:3f:23:8d:a9:5b:
                    2e:1d:08:f9:b1:01:ea:fe:13:c8:76:06:7a:21:cc:
                    0e:91:ca:fc:6f:9a:ac:df:c4:33:03:52:53:81:08:
                    7e:34:e7:9f:2b:96:9f:ab:d1:e9:13:ec:f0:98:ea:
                    7a:95:5a:a1:04:4a:29:57:cb:42:b7:4d:60:2c:75:
                    8f:64:bd:2d:5e:6a:8d:60:be:a5:5a:57:dc:c2:e6:
                    0f:45:b5:5e:57:88:a7:1c:0a:b3:2f:04:ad:a4:b4:
                    b0:df:12:b0:39:d0:5d:c8:23:e5:44:c4:9c:fa:e7:
                    cd:12:54:9b:99:03:e4:03:72:f8:93:c5:4f:ec:29:
                    0f:af:02:1f:01:6c:32:bd:ed:11:c7:28:a4:19:50:
                    b0:bc:35:82:fb:a8:26:a7:00:f0:f4:cb:8b:24:21:
                    28:e9:db:69:8d:ff:3b:d7:4f:9d:61:32:be:28:5a:
                    dd:df:56:f7:1a:7d:2b:10:0c:ea:2f:be:89:cf:af:
                    a1:e6:86:84:3e:52:ae:5d:eb:28:6b:be:94:8d:15:
                    06:cd:73:d1:d9:e8:c7:6b:11:97:9e:9d:35:9d:0e:
                    c2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:66:20:96:D3:EF:F0:CC:C1:63:3A:17:1A:06:ED:7A:49:99:92:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/28735348-6cda-374a-978a-a2aabf659d86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.32.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:ee:ed:18:dc:cb:77:25:99:f7:df:cf:4a:d5:f5:b3:ce:88:
         54:ba:a8:43:5a:1f:7c:2c:1c:31:3e:88:c3:93:d1:6a:11:c0:
         8a:61:d7:6c:ef:0b:c7:71:a3:47:ec:cf:f4:f6:9e:c2:05:47:
         29:71:97:0d:ae:ab:5c:9e:86:27:90:49:19:47:ad:bf:68:9e:
         57:ca:fc:36:63:fd:2a:58:ff:15:62:75:e4:c7:a3:db:c2:12:
         39:31:92:d9:14:d4:a8:36:76:f6:6e:12:10:2e:3a:59:e4:33:
         c3:49:40:89:dd:7d:4f:9e:fd:72:92:36:8b:8c:4a:50:0d:4f:
         63:b7:ec:2a:b3:02:17:86:2c:05:43:ca:d6:d2:73:b3:0d:d2:
         75:47:2f:83:49:33:49:d6:0d:67:5b:49:bd:86:89:a5:3e:92:
         41:82:f3:52:d3:a1:3a:f3:73:3a:1e:45:30:79:52:2a:fd:45:
         1f:6c:af:d6:a7:59:96:11:7a:c7:b8:2c:26:ac:f5:dd:73:5e:
         81:84:00:0e:4f:86:92:4f:bd:63:2a:cb:1c:5f:6f:7b:93:f9:
         02:c9:7c:3a:3a:6a:ea:01:0b:c3:66:93:da:61:5e:1c:ad:29:
         0d:34:50:54:e2:25:8f:78:c6:09:bb:f9:74:a3:ba:81:23:1c:
         5b:7a:f0:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdzlmCWVdgAD615UwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2
NmYzMB4XDTI0MTAwNjEzMDA0MVoXDTI1MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
NmViMzEwZDYtYTljYi00YzZhLWI0MDktNjRmYmIxMzViMGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNtO6ldZMZdN4EUbaAmhBhefCZ7b/1K1dxFf
Pjk0EmaWdPl7zOFDPyONqVsuHQj5sQHq/hPIdgZ6IcwOkcr8b5qs38QzA1JTgQh+
NOefK5afq9HpE+zwmOp6lVqhBEopV8tCt01gLHWPZL0tXmqNYL6lWlfcwuYPRbVe
V4inHAqzLwStpLSw3xKwOdBdyCPlRMSc+ufNElSbmQPkA3L4k8VP7CkPrwIfAWwy
ve0RxyikGVCwvDWC+6gmpwDw9MuLJCEo6dtpjf8710+dYTK+KFrd31b3Gn0rEAzq
L76Jz6+h5oaEPlKuXesoa76UjRUGzXPR2ejHaxGXnp01nQ7CSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE1mIJbT7/DMwWM6FxoG7XpJmZJsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz
OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvMjg3MzUzNDgtNmNkYS0z
NzRhLTk3OGEtYTJhYWJmNjU5ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi
ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex
NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy
YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiiBtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGHu7Rjcy3clmfffz0rV9bPOiFS6qENaH3wsHDE+iMOT0WoRwIph12zv
C8dxo0fsz/T2nsIFRylxlw2uq1yehieQSRlHrb9onlfK/DZj/SpY/xVideTHo9vC
EjkxktkU1Kg2dvZuEhAuOlnkM8NJQIndfU+e/XKSNouMSlANT2O37CqzAheGLAVD
ytbSc7MN0nVHL4NJM0nWDWdbSb2GiaU+kkGC81LToTrzczoeRTB5Uir9RR9sr9an
WZYRese4LCas9d1zXoGEAA5PhpJPvWMqyxxfb3uT+QLJfDo6auoBC8Nmk9phXhyt
KQ00UFTiJY94xgm7+XSjuoEjHFt68BI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:46:01 2024 by rpki-client on console-ams.rpki-client.org