Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/f1914cbb-2fb5-39e8-a6a3-5a45b0aac437.roa
File:                     f1914cbb-2fb5-39e8-a6a3-5a45b0aac437.roa (raw, json)
Hash identifier:          h6IrIS1XZxXX437bUCApIm6rb3HaHyK7MO6wofOtXx8=
Subject key identifier:   A4:50:A4:F8:A0:4C:41:AF:C2:7B:61:8A:58:07:CA:C4:66:68:46:66
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F432858475910BD3F48A257DFB8FCF828
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/f1914cbb-2fb5-39e8-a6a3-5a45b0aac437.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     198949
IP address blocks:        130.44.212.0/24 maxlen: 24
                          130.44.215.0/24 maxlen: 24
                          139.177.233.0/24 maxlen: 24
                          139.177.234.0/24 maxlen: 24
                          139.177.235.0/24 maxlen: 24
                          147.160.184.0/24 maxlen: 24
                          147.160.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:bd:3f:48:a2:57:df:b8:fc:f8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=4f92a705-70f0-4775-bae4-f872a88396f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:db:ce:ae:08:43:15:40:d8:07:25:46:b0:
                    c5:21:9d:d8:d1:0a:62:ee:71:c5:ce:5e:3d:e9:6d:
                    81:d1:ab:f8:d9:12:69:86:21:56:37:3d:ff:f3:65:
                    35:d3:3c:48:f9:b2:93:fb:8d:3f:83:aa:8b:e7:8e:
                    f0:0e:c3:29:79:da:ab:d2:cd:d3:d1:70:d6:8d:65:
                    38:f7:78:85:fa:3f:e6:15:94:1e:e7:be:98:ba:89:
                    ec:d1:7e:4a:87:71:ff:17:c0:1c:2f:02:ca:21:5b:
                    51:ad:25:ec:79:c7:d6:5e:f3:25:c8:ca:28:b8:cf:
                    d6:67:62:0c:09:6e:02:9c:44:28:0b:f4:83:81:30:
                    1e:ec:a9:8f:cc:29:5f:62:88:f4:4e:18:65:33:44:
                    d0:1d:cc:54:8c:d3:cb:14:6b:1c:3c:1f:45:2f:d0:
                    25:9d:f8:be:4c:cd:ce:89:f1:6d:e3:08:1b:09:a7:
                    b5:ad:98:91:00:3d:82:0d:48:a4:42:db:ab:1a:ef:
                    bb:32:25:06:00:13:f7:ec:fe:c0:ca:7e:0b:b8:84:
                    2f:7b:6f:8b:9f:15:1a:9a:18:33:a9:53:9f:98:16:
                    91:e2:e4:77:5e:5d:3f:66:ea:4c:53:5d:f6:22:0c:
                    18:30:c7:e8:77:1e:e9:7b:db:bb:89:38:70:34:93:
                    af:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:50:A4:F8:A0:4C:41:AF:C2:7B:61:8A:58:07:CA:C4:66:68:46:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/f1914cbb-2fb5-39e8-a6a3-5a45b0aac437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.44.212.0/24
                  130.44.215.0/24
                  139.177.233.0-139.177.235.255
                  147.160.184.0/24
                  147.160.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:6c:97:45:06:58:d0:cf:1f:d3:93:45:ca:a5:26:21:ed:60:
         78:8b:29:a6:49:ba:59:de:8b:58:c5:a9:d5:34:48:84:59:ab:
         d6:31:8f:e6:28:40:72:2f:6f:55:bb:50:c6:3e:f8:93:29:5e:
         06:4a:37:8e:ad:e7:cb:78:aa:38:a8:29:7b:c8:9e:2a:f0:5b:
         68:98:28:c9:e6:78:dd:0e:f5:43:91:cf:a5:d9:16:4b:a3:34:
         3a:46:50:e9:92:e4:e9:29:db:39:59:7d:b6:95:a2:42:42:cc:
         47:f3:cf:27:fb:46:fd:a7:e1:c8:92:a1:fb:4c:70:7b:17:89:
         24:26:fa:ef:5a:34:2c:90:b8:c2:c3:64:81:c8:51:dd:25:4b:
         5d:9d:3c:ec:60:1b:42:d4:31:9a:65:a6:eb:d7:58:2e:b3:9b:
         71:33:57:10:72:64:5d:a5:e6:35:62:14:67:72:99:47:e5:5f:
         9a:72:f9:aa:bc:34:df:25:f3:63:36:ba:e3:e1:3c:8c:9e:b2:
         c9:6f:97:6f:07:61:4d:8b:76:46:f6:f8:39:b8:a1:e7:bb:5a:
         03:c5:66:a9:3b:06:54:97:aa:a4:9b:dc:fd:88:ca:36:bd:ce:
         2e:14:f6:67:b2:ae:7e:60:9f:1f:ef:e0:12:24:3f:69:ce:30:
         52:c5:e2:5f
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEdZEL0/SKJX37j8+CgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm
MzQ1MB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk
NGY5MmE3MDUtNzBmMC00Nzc1LWJhZTQtZjg3MmE4ODM5NmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfTbzq4IQxVA2AclRrDFIZ3Y0Qpi7nHFzl49
6W2B0av42RJphiFWNz3/82U10zxI+bKT+40/g6qL547wDsMpedqr0s3T0XDWjWU4
93iF+j/mFZQe576Yuons0X5Kh3H/F8AcLwLKIVtRrSXsecfWXvMlyMoouM/WZ2IM
CW4CnEQoC/SDgTAe7KmPzClfYoj0ThhlM0TQHcxUjNPLFGscPB9FL9Alnfi+TM3O
ifFt4wgbCae1rZiRAD2CDUikQturGu+7MiUGABP37P7Ayn4LuIQve2+LnxUamhgz
qVOfmBaR4uR3Xl0/ZupMU132IgwYMMfodx7pe9u7iThwNJOvYwIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFKRQpPigTEGvwnthilgHysRmaEZmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz
MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvZjE5MTRjYmItMmZiNS0z
OWU4LWE2YTMtNWE0NWIwYWFjNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx
ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl
ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw
NGE0ZWYzNDUuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAgizUAwQA
gizXMAwDBACLsekDBAKLsegDBACToLgDBACToL4wVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAsGyXRQZY0M8f
05NFyqUmIe1geIsppkm6Wd6LWMWp1TRIhFmr1jGP5ihAci9vVbtQxj74kyleBko3
jq3ny3iqOKgpe8ieKvBbaJgoyeZ43Q71Q5HPpdkWS6M0OkZQ6ZLk6SnbOVl9tpWi
QkLMR/PPJ/tG/afhyJKh+0xwexeJJCb671o0LJC4wsNkgchR3SVLXZ087GAbQtQx
mmWm69dYLrObcTNXEHJkXaXmNWIUZ3KZR+VfmnL5qrw03yXzYza64+E8jJ6yyW+X
bwdhTYt2Rvb4Obih57taA8VmqTsGVJeqpJvc/YjKNr3OLhT2Z7KufmCfH+/gEiQ/
ac4wUsXiXw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:46 2024 by rpki-client on console-ams.rpki-client.org