Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/13a40295-ddd8-3d23-bffc-0787858cfa1c.roa
File:                     13a40295-ddd8-3d23-bffc-0787858cfa1c.roa (raw, json)
Hash identifier:          QLduWND2eQ2WBIXfavd6DsRSy51KMRWQ4ND5AH3ZB1Q=
Subject key identifier:   B1:12:8C:49:A2:52:47:09:4B:AB:FE:52:D9:60:B5:16:53:8D:E7:5D
Certificate issuer:       /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Certificate serial:       010D0C9F4328584589A31D1DB2FE3455E1C193E0
Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/13a40295-ddd8-3d23-bffc-0787858cfa1c.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     16580
IP address blocks:        131.232.240.0/24 maxlen: 24
                          131.232.30.0/24 maxlen: 24
                          131.232.72.0/24 maxlen: 24
                          131.232.27.0/24 maxlen: 24
                          131.232.7.0/24 maxlen: 24
                          131.232.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:1d:1d:b2:fe:34:55:e1:c1:93:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=4adeb2e5-7160-4769-9db4-c077954b5765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3f:b3:77:1a:36:bf:09:e8:d6:eb:4f:04:f8:
                    38:70:fa:ef:fd:cc:9e:40:37:a5:d4:1d:ae:b1:71:
                    88:1c:b5:47:14:35:f2:2b:75:ae:5d:a4:35:2c:73:
                    ba:fe:fd:67:c7:8e:a1:b5:3b:1d:47:8a:3c:1f:a1:
                    8a:5b:c8:eb:48:40:f5:fd:17:20:6c:26:9c:21:08:
                    10:75:b8:7f:97:04:94:cf:94:8b:25:f1:d0:9d:e2:
                    6e:e4:77:dc:3e:89:71:69:9e:2b:11:b0:f9:3a:d8:
                    ad:1b:6e:3d:cf:87:c4:c6:35:08:35:34:8a:57:c9:
                    c6:04:15:bd:f1:69:af:f7:00:96:95:ca:38:b7:98:
                    7d:80:31:e5:2e:fc:ea:59:c9:4a:09:1e:9b:94:51:
                    34:8d:f4:32:23:7e:ec:af:cc:f8:c3:93:8f:e2:45:
                    79:65:25:9f:4c:c3:6e:05:f2:15:4d:38:ee:2b:06:
                    62:cf:89:ee:8d:96:4e:1d:c4:f5:38:ff:9a:da:8b:
                    10:9f:70:a7:8c:0a:4c:85:41:93:f1:9d:d8:86:3c:
                    8f:20:7e:18:58:fe:1e:0a:9d:10:db:13:9e:02:94:
                    89:53:c9:b8:f7:6e:b1:6b:0c:5b:51:af:a3:92:dc:
                    c8:4a:3a:b2:51:13:0c:13:e4:b4:74:2f:03:2a:be:
                    f9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:12:8C:49:A2:52:47:09:4B:AB:FE:52:D9:60:B5:16:53:8D:E7:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/13a40295-ddd8-3d23-bffc-0787858cfa1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl

            X509v3 Authority Key Identifier:
                keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.232.7.0/24
                  131.232.10.0/24
                  131.232.27.0/24
                  131.232.30.0/24
                  131.232.72.0/24
                  131.232.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:8e:d8:48:2d:47:dd:d3:b3:7b:02:da:f0:59:c0:ea:2e:3f:
         06:cb:0c:48:5f:ae:80:4a:6b:63:20:5f:a2:8f:7e:04:e6:ec:
         eb:cb:8f:95:be:24:57:01:31:76:01:9d:ce:59:3f:65:66:cf:
         7e:82:f5:5a:8f:d1:42:f5:4a:d6:ec:29:ba:f1:27:e8:c4:34:
         7f:47:b2:68:df:d0:e4:aa:c4:5e:39:c0:0e:e5:c0:cb:c5:9c:
         bc:ff:9f:b2:dd:5d:df:c0:d0:ec:ed:0c:09:f5:b7:0d:5d:d4:
         44:cf:10:bf:96:5d:3d:3a:72:96:21:bc:d9:7b:1a:9a:6b:87:
         11:ad:9b:bd:0f:a8:3d:2f:70:64:89:28:a0:f6:74:b2:98:6d:
         68:a7:ee:fc:4f:47:c3:a8:75:72:1b:5f:84:fc:94:85:a9:52:
         79:a5:3e:66:b0:b3:4c:e0:bd:f3:6a:4e:92:94:1b:8b:56:0e:
         66:ef:41:09:42:f9:c2:f0:6a:d8:36:f7:90:b3:4d:11:41:b0:
         d4:c1:8a:df:2a:98:b1:7c:7b:2e:3d:17:b1:28:2e:4d:49:99:
         f2:e4:5a:db:f7:fa:f8:ed:e3:ae:4e:ad:f3:04:46:13:d0:c6:
         79:26:94:f0:de:ee:4c:c1:4d:c3:4e:4b:2c:c2:6a:63:6b:a1:
         db:3d:cb:5b
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEWJox0dsv40VeHBk+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTdlNjRiNjYtODRkZi00NjY1LWE0ZmItZWIzYjhhZGQz
NjVlMB4XDTI0MDQxNDAxMDAyNFoXDTI0MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk
NGFkZWIyZTUtNzE2MC00NzY5LTlkYjQtYzA3Nzk1NGI1NzY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz+zdxo2vwno1utPBPg4cPrv/cyeQDel1B2u
sXGIHLVHFDXyK3WuXaQ1LHO6/v1nx46htTsdR4o8H6GKW8jrSED1/RcgbCacIQgQ
dbh/lwSUz5SLJfHQneJu5HfcPolxaZ4rEbD5OtitG249z4fExjUINTSKV8nGBBW9
8Wmv9wCWlco4t5h9gDHlLvzqWclKCR6blFE0jfQyI37sr8z4w5OP4kV5ZSWfTMNu
BfIVTTjuKwZiz4nujZZOHcT1OP+a2osQn3CnjApMhUGT8Z3YhjyPIH4YWP4eCp0Q
2xOeApSJU8m4926xawxbUa+jktzISjqyURMME+S0dC8DKr75YQIDAQABo4IDczCC
A28wHQYDVR0OBBYEFLESjEmiUkcJS6v+UtlgtRZTjeddMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2
NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNiOGFkZDM2NWUvMTNhNDAyOTUtZGRkOC0z
ZDIzLWJmZmMtMDc4Nzg1OGNmYTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdlNjRiNjYtODRkZi00NjY1LWE0
ZmItZWIzYjhhZGQzNjVlL2E3ZTY0YjY2LTg0ZGYtNDY2NS1hNGZiLWViM2I4YWRk
MzY1ZS5jcmwwHwYDVR0jBBgwFoAURD98KgLjgWbdKUOAz3Mgib/DGEAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNi
OGFkZDM2NWUuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAg+gHAwQA
g+gKAwQAg+gbAwQAg+geAwQAg+hIAwQAg+jwMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADuO2EgtR93Ts3sC
2vBZwOouPwbLDEhfroBKa2MgX6KPfgTm7OvLj5W+JFcBMXYBnc5ZP2Vmz36C9VqP
0UL1StbsKbrxJ+jENH9Hsmjf0OSqxF45wA7lwMvFnLz/n7LdXd/A0OztDAn1tw1d
1ETPEL+WXT06cpYhvNl7GpprhxGtm70PqD0vcGSJKKD2dLKYbWin7vxPR8OodXIb
X4T8lIWpUnmlPmaws0zgvfNqTpKUG4tWDmbvQQlC+cLwatg295CzTRFBsNTBit8q
mLF8ey49F7EoLk1JmfLkWtv3+vjt465OrfMERhPQxnkmlPDe7kzBTcNOSyzCamNr
ods9y1s=
-----END CERTIFICATE-----
Generated at Sun May 26 02:55:46 2024 by rpki-client on console-fra.rpki-client.org