Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa
File:                     5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa (raw, json)
Hash identifier:          xsIr2DKcskC6da5jfhNDMAAACIIQc5/M1A1JOcHY+Mo=
Subject key identifier:   DC:DD:7E:EC:3F:21:FD:CF:33:89:D0:27:1E:BA:78:54:B9:C0:5D:23
Certificate issuer:       /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
Certificate serial:       010D0C9F432858473D25F5D3546D14A2487E4380
Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     21766
IP address blocks:        152.97.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:f5:d3:54:6d:14:a2:48:7e:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=43c03874-7cb1-41a6-9473-bf3489d36116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d1:d1:05:a4:05:2f:c4:fc:88:f0:16:66:60:
                    f1:0a:58:cd:66:4a:92:f8:4c:4f:53:fd:5a:4a:28:
                    d6:6a:15:81:51:fc:7e:99:0f:77:4d:59:f6:65:18:
                    8a:2e:50:2b:f8:ea:b9:2d:b4:73:c1:17:e4:57:7c:
                    35:58:98:ce:45:53:88:0d:d0:27:48:2f:ac:cc:87:
                    05:87:a0:60:66:23:85:3d:c3:e3:32:25:c5:a7:b0:
                    16:17:97:70:9b:35:0a:84:3d:3f:db:f0:7c:2e:ff:
                    af:1b:de:be:8b:e2:75:01:5a:95:fc:1b:39:aa:54:
                    ef:73:e7:fb:8a:d7:f4:50:32:f9:b7:d5:fd:e7:a3:
                    65:e4:e7:0a:ba:78:de:d0:d1:6f:19:32:54:7d:37:
                    30:dc:39:11:73:1f:c8:00:90:76:26:e5:bc:ec:d3:
                    b6:65:f5:22:1e:52:6e:9e:cd:2f:aa:53:42:70:9a:
                    33:5b:5e:a3:87:bb:37:59:b5:05:59:f2:80:f3:86:
                    38:4c:60:70:75:44:e9:4a:99:48:a1:2b:16:e2:42:
                    8f:0c:89:bf:42:f1:ff:d1:88:15:e4:b8:f3:a0:fc:
                    53:ec:a5:fa:c5:0a:28:e4:38:b5:9c:91:2a:7f:45:
                    f2:0c:2c:2e:43:50:79:6d:fc:a5:cd:9f:58:cc:27:
                    19:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DD:7E:EC:3F:21:FD:CF:33:89:D0:27:1E:BA:78:54:B9:C0:5D:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.97.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:dc:fb:10:90:8b:1c:0a:48:a7:06:8a:5c:2c:3e:3a:6a:8e:
         a7:e0:27:0c:bc:0e:dd:34:10:5b:a0:dc:2b:cb:45:9d:ba:03:
         0b:0d:da:4d:3d:7d:e4:f7:5b:23:35:81:10:25:68:23:d5:15:
         5c:cf:0e:a6:bc:81:76:ca:ce:7a:cc:de:cd:2f:a8:a0:69:2c:
         5e:df:c9:fc:fd:29:0b:93:bf:59:6f:93:8f:55:4b:63:f8:41:
         40:55:a3:4f:ee:e4:c0:90:05:95:81:de:3c:9f:c5:de:06:74:
         0e:b6:18:0a:8b:4e:68:f7:9a:e7:ed:2e:76:55:d4:ad:dd:1d:
         23:2e:75:62:37:14:2f:e5:03:52:c9:65:f8:89:66:4d:4c:0e:
         2a:73:ee:02:07:b4:89:d7:99:8d:2c:73:0d:d9:49:e1:fe:99:
         da:63:70:4a:42:be:58:53:e3:cc:76:2e:fc:0a:be:c1:a3:fe:
         ad:61:00:28:55:f8:4e:8d:1e:07:3e:35:ae:fb:1b:a9:c8:96:
         c6:4f:ce:49:19:9f:4e:54:05:91:1f:4d:6f:ef:0f:be:a3:77:
         ff:a0:6b:de:f5:55:51:54:bf:74:62:e1:bc:bf:dd:cd:6c:7b:
         dc:f3:80:07:26:03:99:32:c9:60:9e:87:40:ca:69:38:31:22:
         d5:63:b0:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc9JfXTVG0Uokh+Q4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj
N2IxMB4XDTI0MDkxNzAxMDAzMVoXDTI0MTIxNjAyMDAzMVowLzEtMCsGA1UEAxMk
NDNjMDM4NzQtN2NiMS00MWE2LTk0NzMtYmYzNDg5ZDM2MTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9HRBaQFL8T8iPAWZmDxCljNZkqS+ExPU/1a
SijWahWBUfx+mQ93TVn2ZRiKLlAr+Oq5LbRzwRfkV3w1WJjORVOIDdAnSC+szIcF
h6BgZiOFPcPjMiXFp7AWF5dwmzUKhD0/2/B8Lv+vG96+i+J1AVqV/Bs5qlTvc+f7
itf0UDL5t9X956Nl5OcKunje0NFvGTJUfTcw3DkRcx/IAJB2JuW87NO2ZfUiHlJu
ns0vqlNCcJozW16jh7s3WbUFWfKA84Y4TGBwdUTpSplIoSsW4kKPDIm/QvH/0YgV
5LjzoPxT7KX6xQoo5Di1nJEqf0XyDCwuQ1B5bfylzZ9YzCcZaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNzdfuw/If3PM4nQJx66eFS5wF0jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3
ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNWI1MWE3MTAtZDkwMy0z
YTlmLTk4YTItMWYyOWRhMDZlYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk
MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0
YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3
MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmGGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAjc+xCQixwKSKcGilwsPjpqjqfgJwy8Dt00EFug3CvLRZ26AwsN2k09
feT3WyM1gRAlaCPVFVzPDqa8gXbKznrM3s0vqKBpLF7fyfz9KQuTv1lvk49VS2P4
QUBVo0/u5MCQBZWB3jyfxd4GdA62GAqLTmj3muftLnZV1K3dHSMudWI3FC/lA1LJ
ZfiJZk1MDipz7gIHtInXmY0scw3ZSeH+mdpjcEpCvlhT48x2LvwKvsGj/q1hAChV
+E6NHgc+Na77G6nIlsZPzkkZn05UBZEfTW/vD76jd/+ga971VVFUv3Ri4by/3c1s
e9zzgAcmA5kyyWCeh0DKaTgxItVjsGA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:19 2024 by rpki-client on console-ams.rpki-client.org