Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/96ca9d18-2c83-33c9-9b41-f895b1903751.roa
File:                     96ca9d18-2c83-33c9-9b41-f895b1903751.roa (raw, json)
Hash identifier:          eB1sXHWi58ocW0sXyQa1Bdnn6WQrIhOt919IGo7W3n0=
Subject key identifier:   EC:CF:06:6C:8E:9A:3F:50:1A:A7:B3:0B:12:A0:75:CC:8F:2C:8D:E5
Certificate issuer:       /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
Certificate serial:       010D0C9F4328576D51CC73C042CFC1734E32EAF4
Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/96ca9d18-2c83-33c9-9b41-f895b1903751.roa
Signing time:             Tue 14 Jul 2020 16:40:26 +0000
ROA not before:           Tue 14 Jul 2020 04:00:00 +0000
ROA not after:            Wed 22 May 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        131.253.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:4e:32:ea:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
        Validity
            Not Before: Jul 14 04:00:00 2020 GMT
            Not After : May 22 04:00:00 2030 GMT
        Subject: CN=ff2a22d6-e854-45cd-b38c-f48aea9815f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a7:e7:ac:46:87:45:0c:1c:60:52:1c:d4:7d:
                    8a:bc:9b:93:f5:6d:92:4f:cf:43:26:fc:9c:e7:a5:
                    ac:af:ee:57:0e:65:8b:b4:2d:d9:05:05:5d:6a:d0:
                    98:02:84:61:11:93:cf:af:35:54:7f:3c:f6:ae:a1:
                    2e:e4:81:e4:ca:5b:71:7c:1f:bc:cb:a8:49:f7:37:
                    ee:0a:22:83:19:2c:ac:e5:e2:df:d7:5d:a1:65:21:
                    fe:a0:c8:04:f3:3a:a4:f7:7b:14:a1:bf:c3:81:cb:
                    a4:0d:07:06:e5:c5:0b:75:e1:67:83:fd:cf:90:eb:
                    94:3e:0f:b2:0f:39:f6:3a:9c:63:93:4b:01:c5:ef:
                    db:3f:6a:70:92:ec:a3:ea:c8:6c:d6:09:6f:40:d1:
                    8c:4a:47:5c:7b:b8:04:b3:58:7a:33:52:fc:9f:f0:
                    73:50:18:be:8d:c1:1c:31:3f:f4:73:50:f9:34:15:
                    2d:4e:af:8a:41:2c:38:b3:05:ac:ef:18:bc:76:b5:
                    39:76:26:65:5a:fe:fb:a2:9c:55:22:1d:6a:ec:08:
                    c6:a9:b4:a7:a7:b2:10:89:cc:bc:c2:f0:54:e7:5d:
                    a9:e4:28:e3:2d:40:e2:e5:e9:0c:82:e6:d9:33:3a:
                    c5:4a:59:5d:82:16:45:04:a3:1f:c6:8c:6a:03:4c:
                    50:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CF:06:6C:8E:9A:3F:50:1A:A7:B3:0B:12:A0:75:CC:8F:2C:8D:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/96ca9d18-2c83-33c9-9b41-f895b1903751.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.253.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:54:de:50:54:45:e8:5f:3c:74:23:3f:3a:41:27:31:a0:9d:
         43:93:14:25:e4:d4:2b:bc:a6:a8:a5:47:7c:f1:ee:38:a1:1d:
         80:02:a6:d8:01:53:90:ab:73:66:6a:4e:eb:9b:1c:40:1b:d7:
         33:e1:55:b6:fc:90:81:02:8f:ff:f9:43:05:27:1d:ae:fd:db:
         68:26:e8:de:67:f1:b7:90:74:b0:bf:01:95:44:ee:16:68:ac:
         d0:1a:6a:7a:21:0a:e1:4d:d9:f9:48:91:35:e1:b7:8b:e7:44:
         ae:29:e9:84:eb:79:ee:29:37:28:15:73:fa:85:20:ad:5a:3c:
         b2:db:29:7b:2a:a2:96:2f:47:dd:93:96:52:dd:05:a5:12:8e:
         0f:4a:d6:b4:f6:ce:ec:b7:f4:eb:8d:43:42:05:4e:71:98:66:
         47:ee:c6:ac:5a:0a:28:d1:36:59:15:60:4e:17:29:c4:7c:33:
         4d:42:98:b1:c5:48:a5:d6:3b:ea:2b:9a:d6:fa:3a:d1:0b:98:
         5e:41:a2:81:c9:54:05:b1:b4:06:04:7e:f2:47:c8:fe:d5:32:
         22:a4:df:dd:cd:d6:8a:eb:c1:fb:4a:c1:c1:21:6c:94:e0:99:
         58:e3:5a:3e:06:a1:56:35:5f:ea:07:c0:c2:bb:83:75:ed:03:
         3a:27:71:4f
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc04y6vQwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4LTFiNjQxY2FiNzQz
ZDAeFw0yMDA3MTQwNDAwMDBaFw0zMDA1MjIwNDAwMDBaMC8xLTArBgNVBAMTJGZm
MmEyMmQ2LWU4NTQtNDVjZC1iMzhjLWY0OGFlYTk4MTVmMjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANKn56xGh0UMHGBSHNR9irybk/Vtkk/PQyb8nOel
rK/uVw5li7Qt2QUFXWrQmAKEYRGTz681VH889q6hLuSB5MpbcXwfvMuoSfc37goi
gxksrOXi39ddoWUh/qDIBPM6pPd7FKG/w4HLpA0HBuXFC3XhZ4P9z5DrlD4Psg85
9jqcY5NLAcXv2z9qcJLso+rIbNYJb0DRjEpHXHu4BLNYejNS/J/wc1AYvo3BHDE/
9HNQ+TQVLU6vikEsOLMFrO8YvHa1OXYmZVr++6KcVSIdauwIxqm0p6eyEInMvMLw
VOddqeQo4y1A4uXpDILm2TM6xUpZXYIWRQSjH8aMagNMUD0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTszwZsjpo/UBqnswsSoHXMjyyN5TCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUz
ZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFjYWI3NDNkLzk2Y2E5ZDE4LTJjODMtMzNj
OS05YjQxLWY4OTViMTkwMzc1MS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2ZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4
LTFiNjQxY2FiNzQzZC9mZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNhYjc0
M2QuY3JsMB8GA1UdIwQYMBaAFLmj0JFWAovB8vJ3QS2CG87Sv9tDMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUzZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFj
YWI3NDNkLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIP9PTBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEANlTeUFRF6F88dCM/OkEnMaCdQ5MUJeTUK7ymqKVHfPHuOKEdgAKm2AFTkKtz
ZmpO65scQBvXM+FVtvyQgQKP//lDBScdrv3baCbo3mfxt5B0sL8BlUTuFmis0Bpq
eiEK4U3Z+UiRNeG3i+dErinphOt57ik3KBVz+oUgrVo8stspeyqili9H3ZOWUt0F
pRKOD0rWtPbO7Lf0641DQgVOcZhmR+7GrFoKKNE2WRVgThcpxHwzTUKYscVIpdY7
6iua1vo60QuYXkGigclUBbG0BgR+8kfI/tUyIqTf3c3WiuvB+0rBwSFslOCZWONa
PgahVjVf6gfAwruDde0DOidxTw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:57 2024 by rpki-client on console-ams.rpki-client.org