Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5fb81d22-1791-338a-913c-9bad033a2199.roa
File:                     5fb81d22-1791-338a-913c-9bad033a2199.roa (raw, json)
Hash identifier:          qpIUmfZsHHixrA3IJzZRqpVc7c7wXlVMHndWz+Tv09A=
Subject key identifier:   79:5F:CB:2E:DC:ED:45:82:C2:93:06:A5:FA:B8:C3:72:1C:8B:E0:E9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583847A6E1EB4AAB720DA931C280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5fb81d22-1791-338a-913c-9bad033a2199.roa
Signing time:             Tue 15 Dec 2020 05:00:00 +0000
ROA not before:           Tue 15 Dec 2020 05:00:00 +0000
ROA not after:            Tue 08 Dec 2026 05:00:00 +0000
asID:                     7843
IP address blocks:        131.150.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:47:a6:e1:eb:4a:ab:72:0d:a9:31:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Dec 15 05:00:00 2020 GMT
            Not After : Dec  8 05:00:00 2026 GMT
        Subject: CN=d2d1c5e4-57f7-4881-b1d7-dd0232b35dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:d5:8d:bc:c9:22:e0:e5:8c:bc:12:c9:60:
                    93:a2:0d:0a:f7:f6:45:6a:92:1b:5d:ae:a6:69:94:
                    04:1e:81:a5:ea:2c:87:cb:b5:5d:c5:b1:fc:d2:a7:
                    45:de:8c:3b:18:6d:6a:61:9c:dd:d4:2b:f2:48:11:
                    01:7e:6e:26:c0:bb:7d:07:40:4a:d4:0b:c6:7e:44:
                    27:4d:93:d7:33:70:f0:49:91:06:e4:fe:91:76:11:
                    d3:ea:f2:08:7d:61:2c:3e:6c:05:46:05:9f:8e:ae:
                    0a:18:f7:6d:97:18:5b:6d:92:8e:f2:98:83:1a:88:
                    52:c6:3c:3e:f0:38:c3:d8:3c:53:ff:1f:bd:71:3f:
                    81:bc:ce:dd:36:8f:7b:52:50:ba:dc:42:66:52:ee:
                    97:c5:8b:43:d9:97:32:88:38:a6:db:e5:60:f9:a0:
                    de:2a:73:2c:52:2a:9d:48:69:dd:8c:2a:9d:b5:af:
                    b3:ba:8f:e5:38:21:38:9f:a0:d5:d8:e7:34:81:08:
                    85:a6:85:07:94:c5:82:e0:6a:89:1a:50:6a:25:8b:
                    9f:52:c6:e2:06:6f:07:9b:89:19:2b:40:d2:c9:db:
                    a5:54:81:3b:63:87:aa:5b:d9:e8:24:0a:ff:03:e5:
                    e6:30:50:a1:84:eb:9a:d7:e9:14:bc:ed:e2:17:8c:
                    35:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5F:CB:2E:DC:ED:45:82:C2:93:06:A5:FA:B8:C3:72:1C:8B:E0:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5fb81d22-1791-338a-913c-9bad033a2199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:88:9e:5f:3b:b1:9d:ae:6e:49:8e:15:57:44:0e:c8:53:7f:
         f8:48:7a:dd:f3:03:97:55:bf:a7:50:88:7b:48:c1:64:5e:0d:
         1e:20:c6:4c:b5:37:28:83:90:b8:cc:49:2e:0e:cf:01:4f:c3:
         4b:7f:fb:f7:cb:55:0a:2c:89:33:78:9f:53:de:6f:b3:7d:e8:
         59:df:f9:f8:19:96:46:e7:3a:57:46:92:21:6e:22:c0:44:56:
         e1:4c:21:00:6c:83:bc:8b:55:2e:d6:d4:0d:51:4f:8d:95:ac:
         e6:35:02:2f:53:c0:1d:57:f1:10:df:de:5c:0e:90:07:71:54:
         39:88:82:39:64:24:75:a3:cb:e6:bb:7e:a5:b2:ed:fa:1e:24:
         e3:c1:25:35:a7:69:86:2c:b8:e0:c7:a1:a3:ae:2b:32:d2:3f:
         13:a5:d6:5b:43:36:68:e2:4e:19:db:ee:e0:0d:41:40:81:5e:
         24:a8:2c:d9:e4:10:0d:49:2d:1e:22:26:04:f4:42:65:29:46:
         d9:31:06:4a:5e:51:5c:6b:e7:56:56:a6:7a:a8:ce:6e:89:f2:
         c8:52:09:78:fe:bb:bc:da:28:9c:7e:b2:69:e0:d0:71:9c:3c:
         a7:19:51:5b:a9:4c:3f:b5:fd:fd:9e:98:88:02:86:da:7e:d1:
         6b:bc:99:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDhHpuHrSqtyDakxwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTIwMTIxNTA1MDAwMFoXDTI2MTIwODA1MDAwMFowLzEtMCsGA1UEAxMk
ZDJkMWM1ZTQtNTdmNy00ODgxLWIxZDctZGQwMjMyYjM1ZGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR3VjbzJIuDljLwSyWCTog0K9/ZFapIbXa6m
aZQEHoGl6iyHy7VdxbH80qdF3ow7GG1qYZzd1CvySBEBfm4mwLt9B0BK1AvGfkQn
TZPXM3DwSZEG5P6RdhHT6vIIfWEsPmwFRgWfjq4KGPdtlxhbbZKO8piDGohSxjw+
8DjD2DxT/x+9cT+BvM7dNo97UlC63EJmUu6XxYtD2ZcyiDim2+Vg+aDeKnMsUiqd
SGndjCqdta+zuo/lOCE4n6DV2Oc0gQiFpoUHlMWC4GqJGlBqJYufUsbiBm8Hm4kZ
K0DSydulVIE7Y4eqW9noJAr/A+XmMFChhOua1+kUvO3iF4w13wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHlfyy7c7UWCwpMGpfq4w3Ici+DpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNWZiODFkMjItMTc5MS0z
MzhhLTkxM2MtOWJhZDAzM2EyMTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5YoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK+Inl87sZ2ubkmOFVdEDshTf/hIet3zA5dVv6dQiHtIwWReDR4gxky1
NyiDkLjMSS4OzwFPw0t/+/fLVQosiTN4n1Peb7N96Fnf+fgZlkbnOldGkiFuIsBE
VuFMIQBsg7yLVS7W1A1RT42VrOY1Ai9TwB1X8RDf3lwOkAdxVDmIgjlkJHWjy+a7
fqWy7foeJOPBJTWnaYYsuODHoaOuKzLSPxOl1ltDNmjiThnb7uANQUCBXiSoLNnk
EA1JLR4iJgT0QmUpRtkxBkpeUVxr51ZWpnqozm6J8shSCXj+u7zaKJx+smng0HGc
PKcZUVupTD+1/f2emIgChtp+0Wu8mYU=
-----END CERTIFICATE-----