Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/10a0ef14-86bd-3548-84d8-358dafa8bdb0.roa
File:                     10a0ef14-86bd-3548-84d8-358dafa8bdb0.roa (raw, json)
Hash identifier:          hb/2AFd2nnn5064Jt3QHF08VMyqBTN568hh4TB6eDDE=
Subject key identifier:   CF:A3:23:E2:69:CF:BB:27:A3:6A:CD:27:74:5D:BC:D0:EE:BE:7D:C5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628DE5CB1215D5B62CFD1780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/10a0ef14-86bd-3548-84d8-358dafa8bdb0.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     7843
IP address blocks:        131.150.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:e5:cb:12:15:d5:b6:2c:fd:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=cb46ef71-c41c-4ef9-bd44-554acf37d01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:80:b7:13:ca:d0:90:bf:2c:95:29:80:b3:f9:
                    40:47:78:43:72:33:1e:94:3c:00:72:c4:b7:9a:6e:
                    86:74:3c:24:7b:75:e7:a7:42:1f:63:35:41:f1:9d:
                    d0:2c:55:11:66:bc:d9:4f:1d:5b:c3:f8:a1:14:06:
                    d0:e9:9a:18:34:bb:aa:db:ab:05:30:13:93:4e:26:
                    9f:f7:d4:a4:d1:8b:49:c6:85:23:26:27:f6:2f:23:
                    59:eb:0c:54:03:9d:b5:af:18:61:17:93:ec:f9:cd:
                    64:ee:1c:af:49:81:82:28:01:1e:db:65:51:fa:8f:
                    3a:48:e1:f8:34:d7:31:93:06:60:22:02:40:0e:ad:
                    07:e0:a8:6c:40:1e:4a:9f:c6:02:8c:13:d7:0f:41:
                    20:54:17:fc:93:7b:cf:60:42:ba:20:7c:cd:e8:dd:
                    12:bc:d6:29:6d:e9:09:93:b4:a3:da:c4:61:e6:8c:
                    b1:75:f2:33:c7:15:6a:d5:cd:ee:94:79:7e:49:16:
                    91:2a:be:7b:97:65:28:ac:3e:3d:ca:f4:94:e7:f7:
                    18:84:84:e7:89:6f:ea:fe:96:ab:62:d8:af:0e:5c:
                    f5:38:fe:5c:97:d4:bc:60:8d:ba:9c:39:46:25:3d:
                    3e:d6:36:6a:37:49:82:53:f1:db:45:a7:b1:56:22:
                    8e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A3:23:E2:69:CF:BB:27:A3:6A:CD:27:74:5D:BC:D0:EE:BE:7D:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/10a0ef14-86bd-3548-84d8-358dafa8bdb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:c7:bb:7f:59:39:13:0b:cd:b0:0c:1a:e6:b6:fd:86:b2:5e:
         29:53:f4:a2:26:1f:ba:c9:1d:01:53:29:55:1f:1e:f8:51:ec:
         d8:ab:3f:eb:5f:7e:6c:4e:ed:a7:f1:45:7d:0c:ae:7e:a7:a3:
         06:ac:92:8e:a3:62:2c:f2:85:be:30:24:22:69:c4:60:0d:e9:
         ae:41:51:cf:c3:d2:10:4d:87:c0:b9:fa:65:54:22:93:f2:36:
         2e:ae:39:8a:5e:ca:ff:c8:b7:1c:51:9c:26:af:c8:09:5b:c3:
         47:32:f7:1f:3d:e7:73:aa:27:65:38:66:9a:f6:c8:15:c7:f6:
         0c:96:67:a3:ae:0c:81:e0:54:c4:7c:a1:79:0d:6f:7b:fd:d1:
         c7:c1:33:ea:01:0b:1b:f4:2a:ff:c8:af:c3:c1:a4:07:47:02:
         28:ef:89:59:06:f5:a0:03:87:99:eb:c0:d6:93:14:e1:b2:44:
         31:c7:24:58:52:76:fe:b0:8d:f3:77:4c:61:fa:45:b3:64:9a:
         bb:fc:dc:83:b7:49:d7:8b:28:05:7a:44:02:a4:11:5c:36:95:
         02:95:bf:6a:a4:7c:dc:fb:b0:82:47:68:16:6a:ab:ea:24:e3:
         a5:96:76:fe:d4:d7:d5:0f:43:e9:db:fd:75:96:49:9a:d5:c7:
         1c:b1:82:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijeXLEhXVtiz9F4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
Y2I0NmVmNzEtYzQxYy00ZWY5LWJkNDQtNTU0YWNmMzdkMDFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYC3E8rQkL8slSmAs/lAR3hDcjMelDwAcsS3
mm6GdDwke3Xnp0IfYzVB8Z3QLFURZrzZTx1bw/ihFAbQ6ZoYNLuq26sFMBOTTiaf
99Sk0YtJxoUjJif2LyNZ6wxUA521rxhhF5Ps+c1k7hyvSYGCKAEe22VR+o86SOH4
NNcxkwZgIgJADq0H4KhsQB5Kn8YCjBPXD0EgVBf8k3vPYEK6IHzN6N0SvNYpbekJ
k7Sj2sRh5oyxdfIzxxVq1c3ulHl+SRaRKr57l2UorD49yvSU5/cYhITniW/q/par
YtivDlz1OP5cl9S8YI26nDlGJT0+1jZqN0mCU/HbRaexViKOPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM+jI+Jpz7sno2rNJ3RdvNDuvn3FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMTBhMGVmMTQtODZiZC0z
NTQ4LTg0ZDgtMzU4ZGFmYThiZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5YmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/Hu39ZORMLzbAMGua2/YayXilT9KImH7rJHQFTKVUfHvhR7NirP+tf
fmxO7afxRX0Mrn6nowasko6jYizyhb4wJCJpxGAN6a5BUc/D0hBNh8C5+mVUIpPy
Ni6uOYpeyv/ItxxRnCavyAlbw0cy9x8953OqJ2U4Zpr2yBXH9gyWZ6OuDIHgVMR8
oXkNb3v90cfBM+oBCxv0Kv/Ir8PBpAdHAijviVkG9aADh5nrwNaTFOGyRDHHJFhS
dv6wjfN3TGH6RbNkmrv83IO3SdeLKAV6RAKkEVw2lQKVv2qkfNz7sIJHaBZqq+ok
46WWdv7U19UPQ+nb/XWWSZrVxxyxgik=
-----END CERTIFICATE-----
Generated at Sun May 12 15:25:25 2024 by rpki-client on console-ams.rpki-client.org