Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b99ab2ab-3369-34bc-b63f-7c57501869fe.roa
File:                     b99ab2ab-3369-34bc-b63f-7c57501869fe.roa (raw, json)
Hash identifier:          QNHEA+CHXACaUuZFVPxfNxq/v+Vx8CyBqPngWV4QOrw=
Subject key identifier:   EB:8D:D2:A3:03:85:8E:2C:27:39:4E:F3:F3:1B:D3:E2:39:37:C4:CC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628DEAD172F1AD5EEFC3CB50
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b99ab2ab-3369-34bc-b63f-7c57501869fe.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        131.150.88.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:ea:d1:72:f1:ad:5e:ef:c3:cb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=0e8aba83-8ed5-4dec-915b-cceb84cadb6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d0:fc:fa:70:bc:16:c3:dc:35:9a:84:4e:cc:
                    84:55:3d:62:65:85:d9:09:dc:3a:fb:ad:58:e4:cc:
                    e7:b1:54:64:b4:be:74:f6:a1:2d:b8:fc:2e:d9:06:
                    a3:56:9d:2e:b9:f9:ca:0a:2a:c1:ef:3a:0b:b0:a3:
                    86:28:d5:4d:5e:05:c2:39:e7:e6:a0:ef:0e:2f:8d:
                    9c:cf:2f:bf:fd:65:97:20:f8:c6:cd:80:7a:d8:a9:
                    62:73:d4:83:72:39:80:1a:48:18:34:41:a8:80:f2:
                    35:c8:ac:01:eb:df:3c:41:dc:0e:ac:1d:20:a8:ad:
                    73:21:e1:9f:85:b6:03:63:5c:06:21:c3:2b:ba:09:
                    44:04:c1:d3:0d:2e:c4:3e:8e:a9:af:af:62:95:7d:
                    42:6e:38:0f:f2:89:95:d1:c1:b9:64:4d:bf:e7:aa:
                    01:21:01:01:19:7b:56:05:47:92:61:a5:8e:d6:72:
                    9b:7b:d6:1f:43:41:7a:7f:f5:17:1a:47:ca:31:73:
                    6e:1c:74:f3:58:19:39:63:a6:b1:e0:5e:f5:cd:a7:
                    b1:d8:2c:b8:c7:1d:be:c4:d2:f3:09:2c:1b:45:b3:
                    29:2a:32:e6:ea:11:d6:bb:0d:89:02:4b:76:7c:21:
                    1e:6f:cd:23:e8:6a:5a:fa:a2:75:c8:b3:1c:1e:e2:
                    df:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8D:D2:A3:03:85:8E:2C:27:39:4E:F3:F3:1B:D3:E2:39:37:C4:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b99ab2ab-3369-34bc-b63f-7c57501869fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e0:58:d8:e9:d9:3a:be:62:51:5c:f9:c2:50:05:8e:88:b8:
         8c:39:c9:45:d4:bf:bc:42:6e:1b:28:5b:60:11:fb:f8:c9:7b:
         26:9f:8a:c1:a6:c8:55:c0:b3:d0:36:dc:ee:ce:16:dc:34:46:
         d8:a1:00:fb:ff:17:86:b8:68:7b:c2:e9:92:95:b6:a1:0a:77:
         d9:dc:c6:df:c7:d4:44:3e:9e:ae:28:05:f9:29:9d:0a:a3:9e:
         88:66:d0:fd:ac:0f:24:a0:ea:8d:39:b9:97:31:b0:22:98:48:
         f0:9d:e3:bd:30:3a:7c:0c:1c:17:27:fe:09:91:9e:8c:b2:70:
         3f:49:7e:75:38:54:e5:08:8f:65:8b:8f:ba:ed:c7:91:d9:2d:
         50:e6:53:6f:9b:96:60:6d:e1:ad:8e:c1:23:9e:9b:a7:12:b7:
         55:05:86:b1:cf:a7:dc:df:ce:e4:74:fd:ef:90:4f:d3:60:ab:
         6d:00:22:f9:f9:72:f3:10:ff:50:c1:7a:fd:bb:cf:20:88:5d:
         fb:86:d6:0d:35:7e:1b:e3:f1:de:90:1f:8a:82:ec:a5:83:ec:
         64:a3:e9:fc:35:2c:b2:a6:96:6d:9f:83:9c:d2:c9:ea:b6:30:
         df:18:ca:ed:fb:ab:5e:f3:d4:af:cf:0c:d1:93:0d:e4:aa:5b:
         74:c0:f4:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijerRcvGtXu/Dy1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
MGU4YWJhODMtOGVkNS00ZGVjLTkxNWItY2NlYjg0Y2FkYjZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltD8+nC8FsPcNZqETsyEVT1iZYXZCdw6+61Y
5MznsVRktL509qEtuPwu2QajVp0uufnKCirB7zoLsKOGKNVNXgXCOefmoO8OL42c
zy+//WWXIPjGzYB62Klic9SDcjmAGkgYNEGogPI1yKwB6988QdwOrB0gqK1zIeGf
hbYDY1wGIcMruglEBMHTDS7EPo6pr69ilX1CbjgP8omV0cG5ZE2/56oBIQEBGXtW
BUeSYaWO1nKbe9YfQ0F6f/UXGkfKMXNuHHTzWBk5Y6ax4F71zaex2Cy4xx2+xNLz
CSwbRbMpKjLm6hHWuw2JAkt2fCEeb80j6Gpa+qJ1yLMcHuLfDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOuN0qMDhY4sJzlO8/Mb0+I5N8TMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjk5YWIyYWItMzM2OS0z
NGJjLWI2M2YtN2M1NzUwMTg2OWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5ZYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGTgWNjp2Tq+YlFc+cJQBY6IuIw5yUXUv7xCbhsoW2AR+/jJeyafisGm
yFXAs9A23O7OFtw0RtihAPv/F4a4aHvC6ZKVtqEKd9ncxt/H1EQ+nq4oBfkpnQqj
nohm0P2sDySg6o05uZcxsCKYSPCd470wOnwMHBcn/gmRnoyycD9JfnU4VOUIj2WL
j7rtx5HZLVDmU2+blmBt4a2OwSOem6cSt1UFhrHPp9zfzuR0/e+QT9Ngq20AIvn5
cvMQ/1DBev27zyCIXfuG1g01fhvj8d6QH4qC7KWD7GSj6fw1LLKmlm2fg5zSyeq2
MN8Yyu37q17z1K/PDNGTDeSqW3TA9Dg=
-----END CERTIFICATE-----
Generated at Sun May 12 17:46:05 2024 by rpki-client on console-fra.rpki-client.org