Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/a2fa6cbd-b516-3ab6-8945-a7c405e8c5c1.roa
File:                     a2fa6cbd-b516-3ab6-8945-a7c405e8c5c1.roa (raw, json)
Hash identifier:          Zgi8DGfQ9JH6XyWI4F/AbJ2//5x9i7gDo86asmnWISg=
Subject key identifier:   AF:26:7B:8D:83:60:80:57:37:7B:6E:36:4B:38:B3:1D:ED:7B:47:BC
Certificate issuer:       /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
Certificate serial:       010D0C9F4328576D51CC73C042CFC1734E2E313A
Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/a2fa6cbd-b516-3ab6-8945-a7c405e8c5c1.roa
Signing time:             Tue 14 Jul 2020 16:35:16 +0000
ROA not before:           Tue 14 Jul 2020 04:00:00 +0000
ROA not after:            Sun 02 Jun 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        131.253.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:4e:2e:31:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
        Validity
            Not Before: Jul 14 04:00:00 2020 GMT
            Not After : Jun  2 04:00:00 2030 GMT
        Subject: CN=5882c7d8-ffc3-4d11-9859-219de159a304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5e:f9:6b:35:56:be:1f:ea:7c:62:25:63:9e:
                    a0:76:b5:6b:42:89:38:fa:f5:04:ac:72:c7:64:0b:
                    7e:f5:57:d9:c2:8b:2b:50:38:f8:7c:e7:5a:0a:92:
                    3e:14:c2:6a:28:bf:17:40:b8:34:c0:73:a8:3e:9f:
                    8d:ad:8a:ba:24:6f:36:d2:e5:df:f4:dc:97:53:ed:
                    f1:79:ea:c2:56:06:6c:eb:83:3c:c3:a8:4d:2f:75:
                    0a:32:c8:69:cd:e0:d8:5d:de:ba:f1:34:53:8a:70:
                    cf:f2:bc:fd:63:45:4a:31:34:6b:e0:2d:f1:32:6a:
                    91:8f:a0:8c:05:51:a9:cc:67:cb:84:a4:06:f0:41:
                    29:84:32:db:3f:12:56:14:ff:88:10:3a:be:53:26:
                    95:fb:79:86:d3:c5:79:6a:13:0b:17:28:b9:37:5a:
                    37:1f:55:8e:5f:b4:ba:31:90:8b:10:0c:b1:fc:34:
                    ba:1c:5c:03:cb:ff:8b:b7:1e:df:26:1e:ba:3c:b4:
                    9e:80:b3:a9:54:d8:f2:7c:88:8a:ce:1c:c5:8e:f8:
                    45:fb:43:09:04:47:33:8a:31:36:39:89:b9:55:a2:
                    5b:91:77:9d:17:0c:eb:2d:62:64:c9:77:87:4e:2e:
                    69:34:98:72:e6:70:7f:97:aa:6d:83:5e:85:6b:17:
                    c0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:26:7B:8D:83:60:80:57:37:7B:6E:36:4B:38:B3:1D:ED:7B:47:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/a2fa6cbd-b516-3ab6-8945-a7c405e8c5c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.253.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d3:22:44:3e:98:41:75:ef:ac:1e:ac:40:e4:b1:30:24:26:
         7b:cd:bf:83:99:e9:36:89:58:13:3b:b5:28:75:09:49:de:66:
         15:d4:3e:90:60:16:01:ea:c8:df:ca:11:42:4e:87:f2:11:1c:
         41:46:f7:1b:4f:03:30:b6:e1:4a:e5:9a:82:bf:be:12:fa:6c:
         c1:20:cd:55:e8:e6:00:2b:f9:f5:76:91:eb:80:47:dc:54:92:
         b9:11:54:5d:64:cf:03:0e:b8:b3:71:b9:b6:58:54:12:b8:dd:
         8f:61:91:71:6e:62:f3:53:a3:04:b2:98:74:2f:e2:a2:8f:ec:
         ab:85:f0:7c:c9:79:a6:e4:0a:f0:e0:65:50:cd:f9:0c:b0:7e:
         4f:d8:bf:7c:db:c2:b0:f2:32:ea:9f:48:2d:a8:1d:ab:64:77:
         aa:7f:f3:ce:ba:e2:3a:51:0f:7a:f7:ef:48:ec:93:46:d9:c1:
         cd:c7:b9:4b:aa:00:01:8c:2a:b4:b1:6d:4f:52:61:45:9d:2b:
         cf:be:ec:a1:db:eb:be:e3:75:81:33:ba:35:6b:eb:b4:95:1e:
         75:52:63:b6:55:f5:ea:73:49:7f:2b:15:cd:4a:f2:ff:b3:8c:
         82:19:1a:01:93:eb:16:db:99:02:1d:b8:c3:60:48:6f:fd:b9:
         45:5f:5a:7e
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc04uMTowCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4LTFiNjQxY2FiNzQz
ZDAeFw0yMDA3MTQwNDAwMDBaFw0zMDA2MDIwNDAwMDBaMC8xLTArBgNVBAMTJDU4
ODJjN2Q4LWZmYzMtNGQxMS05ODU5LTIxOWRlMTU5YTMwNDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAPZe+Ws1Vr4f6nxiJWOeoHa1a0KJOPr1BKxyx2QL
fvVX2cKLK1A4+HznWgqSPhTCaii/F0C4NMBzqD6fja2KuiRvNtLl3/Tcl1Pt8Xnq
wlYGbOuDPMOoTS91CjLIac3g2F3euvE0U4pwz/K8/WNFSjE0a+At8TJqkY+gjAVR
qcxny4SkBvBBKYQy2z8SVhT/iBA6vlMmlft5htPFeWoTCxcouTdaNx9Vjl+0ujGQ
ixAMsfw0uhxcA8v/i7ce3yYeujy0noCzqVTY8nyIis4cxY74RftDCQRHM4oxNjmJ
uVWiW5F3nRcM6y1iZMl3h04uaTSYcuZwf5eqbYNehWsXwBMCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSvJnuNg2CAVzd7bjZLOLMd7XtHvDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUz
ZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFjYWI3NDNkL2EyZmE2Y2JkLWI1MTYtM2Fi
Ni04OTQ1LWE3YzQwNWU4YzVjMS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2ZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4
LTFiNjQxY2FiNzQzZC9mZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNhYjc0
M2QuY3JsMB8GA1UdIwQYMBaAFLmj0JFWAovB8vJ3QS2CG87Sv9tDMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUzZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFj
YWI3NDNkLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIP9FTBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAI9MiRD6YQXXvrB6sQOSxMCQme82/g5npNolYEzu1KHUJSd5mFdQ+kGAWAerI
38oRQk6H8hEcQUb3G08DMLbhSuWagr++EvpswSDNVejmACv59XaR64BH3FSSuRFU
XWTPAw64s3G5tlhUErjdj2GRcW5i81OjBLKYdC/ioo/sq4XwfMl5puQK8OBlUM35
DLB+T9i/fNvCsPIy6p9ILagdq2R3qn/zzrriOlEPevfvSOyTRtnBzce5S6oAAYwq
tLFtT1JhRZ0rz77sodvrvuN1gTO6NWvrtJUedVJjtlX16nNJfysVzUry/7OMghka
AZPrFtuZAh24w2BIb/25RV9afg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:53 2024 by rpki-client on console-fra.rpki-client.org