Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/4ae15aa0-8ed0-3263-a261-654538e7cf78.roa
File:                     4ae15aa0-8ed0-3263-a261-654538e7cf78.roa (raw, json)
Hash identifier:          lTEupKcske/NFmFcLMUJm6+5ltqBN2WPbKCZE1Ea46w=
Subject key identifier:   0E:42:B2:95:BB:7D:B8:D0:72:46:45:13:EB:F6:E3:DB:D2:90:3E:40
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F4328584582A87A76934504566ECD0070
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/4ae15aa0-8ed0-3263-a261-654538e7cf78.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        136.175.106.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:7a:76:93:45:04:56:6e:cd:00:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=0d07a8f7-eeb7-4510-b2af-8c2baeb87cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:55:b2:1c:89:4a:e1:7a:f5:34:17:a0:ab:56:
                    6f:29:b3:1d:8a:cf:52:e9:f9:e6:22:b1:3c:21:ce:
                    29:84:a9:11:3b:f5:b6:34:c7:76:bc:15:f5:e3:01:
                    69:9b:99:b8:a7:98:65:1c:60:05:51:e1:d9:1f:b4:
                    81:72:3f:b7:b6:ae:35:6a:96:80:ba:b1:3b:bd:c6:
                    8e:4e:2b:f8:d5:87:f4:46:05:31:25:e0:9a:27:16:
                    c4:07:69:29:d3:e4:95:67:a2:72:75:3e:d7:08:71:
                    70:21:e9:06:81:9a:9e:1d:7d:1d:1a:8b:08:a2:92:
                    12:65:82:50:54:4d:f6:25:27:59:4c:98:03:e1:4e:
                    a3:52:b1:1c:e9:43:2a:5b:27:2c:14:a5:b8:79:74:
                    94:b8:90:85:a4:b3:ab:19:81:50:24:c3:56:0d:b2:
                    17:63:3f:d9:be:98:61:70:72:f2:31:24:d6:aa:d5:
                    8d:e0:d2:b6:b6:8a:33:20:a1:50:65:c4:59:f5:be:
                    55:a2:53:99:4a:13:a0:f4:cf:f2:b9:8d:e0:73:3a:
                    3a:d7:31:97:fb:35:39:5a:ed:69:26:79:a9:8d:e1:
                    22:a0:50:1d:64:5a:3f:96:91:c1:f4:60:24:b5:83:
                    95:07:54:b8:d1:5b:89:2a:88:3e:f0:6b:87:93:bb:
                    1a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:42:B2:95:BB:7D:B8:D0:72:46:45:13:EB:F6:E3:DB:D2:90:3E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/4ae15aa0-8ed0-3263-a261-654538e7cf78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:6b:c6:b7:a9:22:d1:de:dd:1b:fc:ef:ee:89:ac:20:e8:35:
         c3:2a:ed:be:0a:50:dd:35:e0:ec:a8:07:6f:1a:30:64:29:38:
         fb:b7:c1:1e:99:98:3a:d6:7f:e3:e1:2a:3d:31:54:fb:34:25:
         8a:04:07:c7:7f:27:1f:c6:35:dd:f6:0f:da:47:31:96:93:2c:
         ab:d0:45:b5:b3:cd:27:0b:13:14:8e:d6:a8:12:35:de:74:c8:
         7d:54:54:c8:be:6c:bd:f9:b5:27:0a:24:59:48:4e:d0:6c:49:
         1b:81:aa:a3:45:d8:a1:6b:d6:90:69:d6:a4:e4:66:5d:f5:c1:
         a3:97:8d:bd:61:68:11:1b:15:0e:ce:a8:e9:c6:ab:9f:e2:71:
         60:18:11:97:48:27:ce:ee:a9:11:86:5f:ff:51:7f:3c:02:df:
         99:74:f8:c5:77:01:dd:f4:a2:9f:69:e8:9a:6e:6e:01:c6:7e:
         c5:f2:19:8c:b6:ba:0e:7d:38:46:ec:9f:07:a5:77:95:33:01:
         2f:65:59:3b:11:64:f8:f9:95:a2:2c:eb:5f:bb:17:ee:2d:47:
         2d:71:73:fd:22:5d:d4:79:97:11:82:20:5e:cf:ea:55:98:77:
         f8:c3:04:ba:1d:4f:84:7b:2b:f3:da:79:08:70:14:eb:39:a9:
         50:34:39:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqHp2k0UEVm7NAHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTI4NmZkMjgtMDkzOS00OGI5LTg2YmEtY2JlNzkxNDk3
ZDE1MB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk
MGQwN2E4ZjctZWViNy00NTEwLWIyYWYtOGMyYmFlYjg3Y2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1WyHIlK4Xr1NBegq1ZvKbMdis9S6fnmIrE8
Ic4phKkRO/W2NMd2vBX14wFpm5m4p5hlHGAFUeHZH7SBcj+3tq41apaAurE7vcaO
Tiv41Yf0RgUxJeCaJxbEB2kp0+SVZ6JydT7XCHFwIekGgZqeHX0dGosIopISZYJQ
VE32JSdZTJgD4U6jUrEc6UMqWycsFKW4eXSUuJCFpLOrGYFQJMNWDbIXYz/Zvphh
cHLyMSTWqtWN4NK2toozIKFQZcRZ9b5VolOZShOg9M/yuY3gczo61zGX+zU5Wu1p
JnmpjeEioFAdZFo/lpHB9GAktYOVB1S40VuJKog+8GuHk7saewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA5CspW7fbjQckZFE+v249vSkD5AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMjg2
ZmQyOC0wOTM5LTQ4YjktODZiYS1jYmU3OTE0OTdkMTUvNGFlMTVhYTAtOGVkMC0z
MjYzLWEyNjEtNjU0NTM4ZTdjZjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTI4NmZkMjgtMDkzOS00OGI5LTg2
YmEtY2JlNzkxNDk3ZDE1L2UyODZmZDI4LTA5MzktNDhiOS04NmJhLWNiZTc5MTQ5
N2QxNS5jcmwwHwYDVR0jBBgwFoAUGqScGIN6ivabySjfM0Qw8t1xDpwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lMjg2ZmQyOC0wOTM5LTQ4YjktODZiYS1jYmU3
OTE0OTdkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiK9qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9rxrepItHe3Rv87+6JrCDoNcMq7b4KUN014OyoB28aMGQpOPu3wR6Z
mDrWf+PhKj0xVPs0JYoEB8d/Jx/GNd32D9pHMZaTLKvQRbWzzScLExSO1qgSNd50
yH1UVMi+bL35tScKJFlITtBsSRuBqqNF2KFr1pBp1qTkZl31waOXjb1haBEbFQ7O
qOnGq5/icWAYEZdIJ87uqRGGX/9RfzwC35l0+MV3Ad30op9p6JpubgHGfsXyGYy2
ug59OEbsnweld5UzAS9lWTsRZPj5laIs61+7F+4tRy1xc/0iXdR5lxGCIF7P6lWY
d/jDBLodT4R7K/PaeQhwFOs5qVA0OXY=
-----END CERTIFICATE-----
Generated at Thu May 2 15:01:37 2024 by rpki-client on console-ams.rpki-client.org