Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/12ebbe99-e362-32a8-8699-fc9edff1beab.roa
File:                     12ebbe99-e362-32a8-8699-fc9edff1beab.roa (raw, json)
Hash identifier:          zb+G57BB+l3njunyBDUyepI2TgmvmcVj1KhIXzRBMJs=
Subject key identifier:   73:AF:11:78:6A:8B:9A:93:0C:FB:9F:2D:07:7F:07:D6:A8:78:2C:44
Certificate issuer:       /CN=35dd34c4-644d-463f-8aba-5a3d509d5560
Certificate serial:       010D0C9F432858457D1333ED8E5AAD25932F6480
Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/12ebbe99-e362-32a8-8699-fc9edff1beab.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        139.64.234.0/24 maxlen: 24
                          139.64.235.0/24 maxlen: 24
                          139.64.232.0/24 maxlen: 24
                          139.64.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:33:ed:8e:5a:ad:25:93:2f:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=3a1e5aa7-45a2-42fe-83af-0ee51c396602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4b:0f:80:38:ee:bb:ba:5f:d8:02:28:d2:bb:
                    10:32:21:fa:81:18:08:dd:a2:9a:b7:21:79:73:79:
                    a9:f9:31:f8:83:58:bc:56:ac:3b:4d:d9:96:3d:67:
                    f9:a6:97:72:85:cb:39:49:c8:05:ef:0c:70:a4:fd:
                    d3:54:75:9f:7c:9b:ec:64:89:65:1d:ee:d3:54:b9:
                    65:29:37:87:99:ac:f0:3d:2a:a7:ea:e0:b4:e3:9d:
                    b6:11:70:91:e6:b0:b3:5d:c2:7d:ed:9e:48:23:af:
                    41:64:98:1d:61:a0:d2:33:fb:83:b9:b5:01:7f:4e:
                    9e:52:98:f6:97:50:76:50:e7:d4:7e:b7:e1:c9:20:
                    0b:11:17:8a:38:e8:9b:cb:8d:65:a1:ef:e8:9c:29:
                    6c:91:a2:a1:f6:f2:bb:65:17:ba:73:6b:24:d3:bf:
                    9c:87:1f:2f:2a:a2:dc:d5:a8:7b:6f:d2:88:48:c7:
                    3c:64:0e:e5:f4:c3:d3:aa:db:01:54:d2:1a:e4:77:
                    f3:35:00:4f:c8:c1:c3:7c:44:ab:5a:25:90:ce:22:
                    4d:89:50:89:bc:ec:50:bb:cb:7c:b9:b2:bb:02:39:
                    6f:b7:e2:12:2f:ec:18:3e:9c:a6:cc:84:c4:51:49:
                    78:09:f3:ad:ae:5a:92:67:61:3d:12:a5:1d:75:7a:
                    8d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AF:11:78:6A:8B:9A:93:0C:FB:9F:2D:07:7F:07:D6:A8:78:2C:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/12ebbe99-e362-32a8-8699-fc9edff1beab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl

            X509v3 Authority Key Identifier:
                keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.64.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:9b:2f:3d:00:2d:7a:18:ce:f3:4e:09:85:7b:38:87:7e:d6:
         0c:df:1d:63:2d:eb:7d:50:75:52:53:1d:41:f9:92:79:ca:27:
         6f:11:aa:4d:d4:32:08:88:6f:ec:31:7c:96:d1:58:c3:02:51:
         a8:0d:67:09:55:38:02:e7:d3:5a:57:6b:1a:55:c5:91:51:dc:
         a4:1f:a9:aa:5b:67:57:f9:2f:42:d2:50:d4:61:80:3e:ee:d0:
         33:3d:5d:0f:fa:7e:5a:75:79:b2:e4:65:5c:ea:e6:32:08:d2:
         5f:51:b4:cd:cd:ae:79:af:90:b3:a4:f2:41:29:e9:eb:65:91:
         8d:0d:20:52:dc:ec:7e:05:34:93:2b:b5:c1:c9:a4:7b:43:87:
         61:b5:2e:50:e7:7b:a5:35:ed:c7:da:11:d4:c9:ef:4f:1c:97:
         c7:0b:a7:81:57:23:2f:81:5a:d2:6f:79:28:53:97:fc:d9:6d:
         71:1a:74:c4:2a:61:50:6f:50:4f:43:d3:2b:3e:12:ef:e4:9b:
         74:10:2f:d8:53:9d:ff:11:63:9a:de:24:f8:e2:9d:5f:a9:5a:
         f8:26:7b:dd:6e:35:2a:79:9a:35:11:e4:39:66:85:8e:ed:c6:
         d1:29:e6:74:32:94:b0:41:03:db:59:a2:e5:80:bb:7c:8f:72:
         bb:3d:66:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV9EzPtjlqtJZMvZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVkZDM0YzQtNjQ0ZC00NjNmLThhYmEtNWEzZDUwOWQ1
NTYwMB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk
M2ExZTVhYTctNDVhMi00MmZlLTgzYWYtMGVlNTFjMzk2NjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ksPgDjuu7pf2AIo0rsQMiH6gRgI3aKatyF5
c3mp+TH4g1i8Vqw7TdmWPWf5ppdyhcs5ScgF7wxwpP3TVHWffJvsZIllHe7TVLll
KTeHmazwPSqn6uC04522EXCR5rCzXcJ97Z5II69BZJgdYaDSM/uDubUBf06eUpj2
l1B2UOfUfrfhySALEReKOOiby41loe/onClskaKh9vK7ZRe6c2sk07+chx8vKqLc
1ah7b9KISMc8ZA7l9MPTqtsBVNIa5HfzNQBPyMHDfESrWiWQziJNiVCJvOxQu8t8
ubK7Ajlvt+ISL+wYPpymzITEUUl4CfOtrlqSZ2E9EqUddXqNdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOvEXhqi5qTDPufLQd/B9aoeCxEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRk
MzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5ZDU1NjAvMTJlYmJlOTktZTM2Mi0z
MmE4LTg2OTktZmM5ZWRmZjFiZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzVkZDM0YzQtNjQ0ZC00NjNmLThh
YmEtNWEzZDUwOWQ1NTYwLzM1ZGQzNGM0LTY0NGQtNDYzZi04YWJhLTVhM2Q1MDlk
NTU2MC5jcmwwHwYDVR0jBBgwFoAU3mi1RTB62gtzbhXuYImcL57uHD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNk
NTA5ZDU1NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0DoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABubLz0ALXoYzvNOCYV7OId+1gzfHWMt631QdVJTHUH5knnKJ28Rqk3U
MgiIb+wxfJbRWMMCUagNZwlVOALn01pXaxpVxZFR3KQfqapbZ1f5L0LSUNRhgD7u
0DM9XQ/6flp1ebLkZVzq5jII0l9RtM3NrnmvkLOk8kEp6etlkY0NIFLc7H4FNJMr
tcHJpHtDh2G1LlDne6U17cfaEdTJ708cl8cLp4FXIy+BWtJveShTl/zZbXEadMQq
YVBvUE9D0ys+Eu/km3QQL9hTnf8RY5reJPjinV+pWvgme91uNSp5mjUR5DlmhY7t
xtEp5nQylLBBA9tZouWAu3yPcrs9ZnM=
-----END CERTIFICATE-----
Generated at Fri Apr 19 03:48:49 2024 by rpki-client on console-fra.rpki-client.org