Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b81077c7-af1a-3bb3-a276-dbad259b63fc.roa
File:                     b81077c7-af1a-3bb3-a276-dbad259b63fc.roa (raw, json)
Hash identifier:          qFgYqeH90au1gKNLHYc4f8sd2W+zOHjqSfx/RNfcyUU=
Subject key identifier:   A0:44:20:12:CC:D6:87:F0:71:DB:44:F6:E3:E4:72:4B:D0:20:8B:48
Certificate issuer:       /CN=171c42a2-3dc6-43af-b734-e91956bdfe19
Certificate serial:       010D0C9F4328584851A56C5E26DA8BC869968580
Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b81077c7-af1a-3bb3-a276-dbad259b63fc.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     3356
IP address blocks:        135.84.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:6c:5e:26:da:8b:c8:69:96:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=56a10184-0f36-4385-a194-15813741e24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:35:71:43:f0:62:ab:b8:5d:28:46:a6:61:cd:
                    03:ae:ee:84:70:48:9e:d2:4c:27:e7:54:69:2b:0b:
                    59:28:94:b3:3d:4f:e0:d0:22:ef:e3:73:42:41:b4:
                    f8:32:1b:90:a6:1a:fa:cc:ab:d1:01:6e:0a:62:aa:
                    b3:38:ae:ca:2e:08:4c:a1:d7:be:34:04:93:22:10:
                    39:94:6d:04:27:c5:76:a6:19:7c:31:82:37:81:65:
                    83:95:c9:c2:13:3d:f2:2f:40:b7:c3:87:6a:44:71:
                    5d:b9:b6:9d:0e:fb:5f:83:e3:ef:b7:67:8f:59:d4:
                    eb:47:ea:e1:06:b0:c2:37:6c:38:7f:a5:c3:2d:90:
                    85:c0:0e:26:77:dc:c0:7e:70:5d:69:fb:d2:86:50:
                    a7:dd:50:43:15:18:8f:a0:7a:9b:d7:15:7e:d3:64:
                    1d:54:2a:df:c5:2d:61:a2:dd:17:26:62:5a:bf:ff:
                    98:f8:45:5c:ca:53:a8:38:68:72:de:41:4f:8d:20:
                    a9:cd:7f:73:2f:82:0a:4f:57:9c:38:c4:a7:4b:66:
                    69:b2:b3:0c:0c:66:33:d3:6f:cf:ee:b4:c1:e5:ba:
                    18:29:ee:9f:fa:bf:31:ec:ed:27:65:cc:34:95:51:
                    07:bb:59:26:66:c9:02:09:a6:e8:96:e9:6d:f5:3d:
                    52:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:44:20:12:CC:D6:87:F0:71:DB:44:F6:E3:E4:72:4B:D0:20:8B:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b81077c7-af1a-3bb3-a276-dbad259b63fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl

            X509v3 Authority Key Identifier:
                keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:33:b2:5a:cf:2f:d3:43:8f:f5:20:13:1b:0e:9b:dc:7f:56:
         04:be:aa:be:55:7f:b6:e2:9e:f2:23:28:36:7a:25:be:41:38:
         b6:f4:65:4a:aa:70:56:7a:eb:4b:d4:b0:e9:3a:ce:a0:40:7a:
         48:80:bc:0d:b6:9c:b0:84:cc:f9:34:1a:cd:ca:2e:8d:37:f2:
         42:01:79:77:ae:ee:94:53:24:dd:4b:10:2b:be:64:86:1c:a8:
         18:2b:82:97:44:72:b4:cd:fa:64:e7:3a:cd:30:e9:bb:3e:54:
         5f:28:1c:09:12:82:6a:44:c2:28:52:28:80:6f:11:d9:21:98:
         63:f3:3e:3a:48:30:88:c9:86:d4:d5:ae:52:11:e4:fa:c9:0f:
         76:55:5d:df:c9:bd:76:91:97:f9:be:a0:ff:42:fe:ff:1e:73:
         49:9a:f4:6b:4a:16:75:4c:9a:91:f8:db:a5:c6:04:86:6c:d0:
         6a:2d:b1:cf:88:9b:83:ed:dd:d9:b1:a6:3a:65:77:88:03:20:
         81:5d:b9:28:23:63:22:6e:02:c9:52:48:11:9a:e0:d4:d6:e0:
         93:d0:31:3c:8f:43:1f:36:a1:8d:ea:1d:31:f9:31:59:d7:6d:
         d1:08:86:6b:1f:46:d7:bb:47:cf:b3:f2:59:90:ce:3f:50:3a:
         47:70:3d:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpWxeJtqLyGmWhYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm
ZTE5MB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk
NTZhMTAxODQtMGYzNi00Mzg1LWExOTQtMTU4MTM3NDFlMjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzVxQ/Biq7hdKEamYc0Dru6EcEie0kwn51Rp
KwtZKJSzPU/g0CLv43NCQbT4MhuQphr6zKvRAW4KYqqzOK7KLghMode+NASTIhA5
lG0EJ8V2phl8MYI3gWWDlcnCEz3yL0C3w4dqRHFdubadDvtfg+Pvt2ePWdTrR+rh
BrDCN2w4f6XDLZCFwA4md9zAfnBdafvShlCn3VBDFRiPoHqb1xV+02QdVCrfxS1h
ot0XJmJav/+Y+EVcylOoOGhy3kFPjSCpzX9zL4IKT1ecOMSnS2ZpsrMMDGYz02/P
7rTB5boYKe6f+r8x7O0nZcw0lVEHu1kmZskCCabolult9T1SZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKBEIBLM1ofwcdtE9uPkckvQIItIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj
NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvYjgxMDc3YzctYWYxYS0z
YmIzLWEyNzYtZGJhZDI1OWI2M2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3
MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk
ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5
NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBh1R4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJkzslrPL9NDj/UgExsOm9x/VgS+qr5Vf7binvIjKDZ6Jb5BOLb0ZUqq
cFZ660vUsOk6zqBAekiAvA22nLCEzPk0Gs3KLo038kIBeXeu7pRTJN1LECu+ZIYc
qBgrgpdEcrTN+mTnOs0w6bs+VF8oHAkSgmpEwihSKIBvEdkhmGPzPjpIMIjJhtTV
rlIR5PrJD3ZVXd/JvXaRl/m+oP9C/v8ec0ma9GtKFnVMmpH426XGBIZs0Gotsc+I
m4Pt3dmxpjpld4gDIIFduSgjYyJuAslSSBGa4NTW4JPQMTyPQx82oY3qHTH5MVnX
bdEIhmsfRte7R8+z8lmQzj9QOkdwPZU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:43 2025 by rpki-client