Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a936f59c-530b-3701-8514-dcc669422914.roa
File:                     a936f59c-530b-3701-8514-dcc669422914.roa (raw, json)
Hash identifier:          FJXOUxRPJqQ9LtuRwGHD/G7kNvFFzMhkYATTsRgTuN4=
Subject key identifier:   9F:68:96:9B:70:52:B2:E6:17:AC:25:FF:70:BA:7C:EA:94:06:A2:4C
Certificate issuer:       /CN=61e7cca0-e65d-417d-a651-371c91be9c95
Certificate serial:       010D0C9F43285845909DECC50A02924B572D8500
Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a936f59c-530b-3701-8514-dcc669422914.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     1448
IP address blocks:        158.41.128.0/19 maxlen: 19
                          156.146.208.0/20 maxlen: 20
                          158.41.240.0/20 maxlen: 20
                          156.146.192.0/20 maxlen: 20
                          158.41.224.0/20 maxlen: 20
                          156.146.128.0/18 maxlen: 18
                          158.41.208.0/20 maxlen: 20
                          156.146.224.0/19 maxlen: 19
                          158.41.192.0/20 maxlen: 20
                          158.41.184.0/21 maxlen: 21
                          158.41.176.0/21 maxlen: 21
                          158.41.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:ec:c5:0a:02:92:4b:57:2d:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=d3440a92-5fb9-471b-9ee9-8083a09d0e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:88:2e:fb:8e:5e:1b:79:7c:a4:2b:51:4f:3c:
                    58:dd:5b:d1:14:70:6a:c0:a4:9a:65:b1:7d:a3:56:
                    a2:95:ae:1c:07:41:03:19:29:0a:7c:f0:a2:36:ef:
                    a2:0c:e4:fb:fa:dd:84:a0:c3:d3:3d:77:fe:8e:98:
                    dc:0f:88:a4:fe:a0:29:e8:d4:13:af:25:8d:47:4e:
                    4c:bf:da:fb:4d:c1:d2:50:20:a4:f7:52:a6:e4:97:
                    fc:d8:ed:d1:ac:c2:ba:e5:55:d4:9c:ab:ac:7d:a9:
                    48:0b:7b:b4:00:e8:c3:0d:c1:bc:42:80:44:36:1f:
                    4e:02:a8:95:b3:8c:f2:3b:ba:26:21:c0:14:10:05:
                    5d:8d:30:89:f3:f4:01:b2:d9:e9:9a:a0:0a:ca:23:
                    ba:15:bc:4c:be:31:b7:47:b1:a2:3b:cc:d7:05:22:
                    c4:0e:3b:06:bf:a4:22:eb:ed:73:a5:8c:af:53:ac:
                    7b:6f:33:01:19:70:bb:2a:c5:21:0b:39:44:7d:ad:
                    36:69:63:27:38:6d:c8:8c:c6:fc:90:f6:06:f0:b6:
                    9d:2d:1b:8b:71:84:0a:3c:b9:fb:15:d5:11:72:57:
                    ca:c9:28:2c:e5:cb:9c:49:9e:c7:0f:32:92:9a:26:
                    0f:45:c6:83:05:aa:41:fc:9f:d4:cd:86:6f:a3:6e:
                    10:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:68:96:9B:70:52:B2:E6:17:AC:25:FF:70:BA:7C:EA:94:06:A2:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a936f59c-530b-3701-8514-dcc669422914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl

            X509v3 Authority Key Identifier:
                keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.146.128.0/17
                  158.41.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:b5:04:6b:b7:1b:d2:c4:33:dd:b6:fc:e9:da:4d:c3:d8:c6:
         be:c8:27:8e:61:c2:ce:7d:7b:07:67:68:cf:0b:59:38:e9:cc:
         b3:af:f2:70:a6:17:ce:db:2b:bf:fa:fe:83:1f:17:e5:c4:0b:
         2b:fc:d6:b1:58:d4:00:94:e6:1e:44:aa:5a:73:1d:55:81:39:
         43:29:a2:3a:d0:04:80:3d:27:3b:3d:b7:55:9a:e2:99:8d:8e:
         19:fd:cf:d2:bd:15:8d:87:51:25:07:85:56:3a:86:42:55:79:
         f9:d0:29:1a:17:07:10:8c:87:16:5f:71:e3:6b:23:c9:f8:c8:
         a5:2a:61:a5:7d:24:80:20:f2:72:9a:f3:7c:7b:00:07:2e:96:
         07:44:2d:b8:5b:ce:16:87:46:22:cd:99:ee:d8:91:e1:50:02:
         26:6d:8e:4f:49:f8:df:f3:28:6e:52:cd:2d:e6:ac:8c:b1:3d:
         f1:ed:bf:10:42:5c:b6:2c:72:89:9b:37:3f:da:1a:b9:34:d4:
         f1:5f:78:2c:ed:89:29:6a:ce:50:16:4f:5b:11:db:02:f9:19:
         fa:fd:d2:ad:c8:c8:b3:dd:f4:5c:87:4d:9f:f2:62:3e:b9:c9:
         da:2e:bf:bd:4b:47:ca:67:bf:64:ab:12:d0:04:c0:f6:39:8d:
         ab:01:46:35
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEWQnezFCgKSS1cthQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFlN2NjYTAtZTY1ZC00MTdkLWE2NTEtMzcxYzkxYmU5
Yzk1MB4XDTI0MDQxNjEzMDAzM1oXDTI0MDcxNTEzMDAzM1owLzEtMCsGA1UEAxMk
ZDM0NDBhOTItNWZiOS00NzFiLTllZTktODA4M2EwOWQwZTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjogu+45eG3l8pCtRTzxY3VvRFHBqwKSaZbF9
o1aila4cB0EDGSkKfPCiNu+iDOT7+t2EoMPTPXf+jpjcD4ik/qAp6NQTryWNR05M
v9r7TcHSUCCk91Km5Jf82O3RrMK65VXUnKusfalIC3u0AOjDDcG8QoBENh9OAqiV
s4zyO7omIcAUEAVdjTCJ8/QBstnpmqAKyiO6FbxMvjG3R7GiO8zXBSLEDjsGv6Qi
6+1zpYyvU6x7bzMBGXC7KsUhCzlEfa02aWMnOG3IjMb8kPYG8LadLRuLcYQKPLn7
FdURclfKySgs5cucSZ7HDzKSmiYPRcaDBapB/J/UzYZvo24QgwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJ9olptwUrLmF6wl/3C6fOqUBqJMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3
Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFjOTFiZTljOTUvYTkzNmY1OWMtNTMwYi0z
NzAxLTg1MTQtZGNjNjY5NDIyOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjFlN2NjYTAtZTY1ZC00MTdkLWE2
NTEtMzcxYzkxYmU5Yzk1LzYxZTdjY2EwLWU2NWQtNDE3ZC1hNjUxLTM3MWM5MWJl
OWM5NS5jcmwwHwYDVR0jBBgwFoAUZKKfsBKjdPIJ4gOO6+LG02MkVyEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFj
OTFiZTljOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHnJKAAwQH
nimAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJe1BGu3G9LEM922/OnaTcPYxr7IJ45hws59ewdnaM8LWTjp
zLOv8nCmF87bK7/6/oMfF+XECyv81rFY1ACU5h5EqlpzHVWBOUMpojrQBIA9Jzs9
t1Wa4pmNjhn9z9K9FY2HUSUHhVY6hkJVefnQKRoXBxCMhxZfceNrI8n4yKUqYaV9
JIAg8nKa83x7AAculgdELbhbzhaHRiLNme7YkeFQAiZtjk9J+N/zKG5SzS3mrIyx
PfHtvxBCXLYscombNz/aGrk01PFfeCztiSlqzlAWT1sR2wL5Gfr90q3IyLPd9FyH
TZ/yYj65ydouv71LR8pnv2SrEtAEwPY5jasBRjU=
-----END CERTIFICATE-----
Generated at Sat May 18 01:32:34 2024 by rpki-client on console-fra.rpki-client.org