Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85fa0139-c2d1-37ad-9f20-f3fc7cd73139.roa
File:                     85fa0139-c2d1-37ad-9f20-f3fc7cd73139.roa (raw, json)
Hash identifier:          WbLReqjjDLKhPtttzGqvsb3SFf7LRS87IZ+zxXB4Yvs=
Subject key identifier:   F8:8A:34:4C:F6:56:71:D6:00:01:B0:2F:6C:88:DC:F0:28:39:E0:E8
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455332E647089A09BE3015ECC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85fa0139-c2d1-37ad-9f20-f3fc7cd73139.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        67.140.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:32:e6:47:08:9a:09:be:30:15:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=d7bedb5f-4a10-4980-9ab6-2c767af2c3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:85:4f:5e:8c:7a:b3:cf:ef:61:65:06:16:83:
                    d6:46:91:29:03:53:4f:56:c3:ff:7a:8e:6d:83:03:
                    2a:5c:6d:ee:65:fe:f1:d6:d9:4a:b7:68:de:34:52:
                    98:ac:71:d4:05:26:de:76:31:46:b9:82:3f:a7:85:
                    2d:0a:c7:99:13:00:32:27:6c:46:e8:ee:d0:47:00:
                    49:b2:ab:7f:b1:14:df:db:56:4f:3a:43:85:5b:7f:
                    60:16:ef:44:de:1e:f4:a9:cc:be:5e:26:21:0f:a8:
                    b7:dd:cd:a3:6c:ef:3e:58:be:3f:a6:2c:cd:78:47:
                    96:26:42:66:22:5e:26:a0:cb:f2:3a:db:41:8b:77:
                    4c:6c:26:02:d7:d4:e0:ac:b2:3f:dd:b4:82:66:bc:
                    2d:d5:e4:ad:a6:d5:47:e1:16:63:d2:d5:52:bc:c9:
                    2d:92:82:85:54:c7:12:5a:8b:cf:1b:5b:b4:73:e4:
                    ad:da:1a:17:32:1b:50:02:3a:32:7d:e1:55:e5:d2:
                    fe:5f:11:4d:30:f8:72:33:80:70:e5:d4:19:c8:4d:
                    d7:2c:49:5e:9b:a1:3a:a0:af:66:14:25:9c:0f:ea:
                    c9:8d:4d:f6:2e:e3:75:ff:b6:b5:61:7c:75:d4:dd:
                    8b:9f:a6:fb:5f:e5:cb:1d:f7:2b:27:7e:fa:e8:15:
                    03:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8A:34:4C:F6:56:71:D6:00:01:B0:2F:6C:88:DC:F0:28:39:E0:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85fa0139-c2d1-37ad-9f20-f3fc7cd73139.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.140.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:5c:f7:6a:9e:77:35:23:73:1a:fb:6c:07:b6:24:6d:ce:60:
         ce:c8:28:5e:8b:a4:a3:41:64:4d:40:02:0e:88:a0:89:da:8e:
         49:d7:a0:8e:f1:50:d8:ed:b9:f1:01:20:de:84:df:db:69:3e:
         fa:f7:f2:f4:df:b6:ed:f0:23:79:5f:ba:c6:e9:ea:15:c6:74:
         ba:6b:76:6b:56:59:d2:b9:6e:d4:86:39:ba:da:30:95:84:f8:
         c4:36:9a:ae:c1:a3:de:a8:30:94:01:a2:53:d2:d1:54:b0:a0:
         37:0b:b1:c6:e6:01:e0:10:20:19:55:43:ac:61:28:34:c3:8a:
         a7:d1:8b:29:3b:52:3f:cc:67:69:1f:7c:78:b3:19:7b:51:1f:
         d6:59:01:c9:21:40:64:57:bf:df:f5:37:88:ee:43:67:f9:32:
         8a:bb:dd:ee:ba:8b:88:58:78:13:26:bc:6a:fe:8c:d8:86:02:
         22:d2:41:ae:14:c3:08:73:34:47:87:39:77:a0:ab:d3:9c:1f:
         26:ac:2d:a4:0f:c6:9f:86:5b:6d:68:f4:d9:85:dd:2d:f6:95:
         78:63:99:70:ac:80:c2:8e:b6:10:96:61:75:30:98:0d:9a:39:
         b7:79:5e:76:36:38:30:44:88:8f:b8:67:69:ba:cc:43:d1:4b:
         1b:49:e5:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMuZHCJoJvjAV7MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk
ZDdiZWRiNWYtNGExMC00OTgwLTlhYjYtMmM3NjdhZjJjM2E0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoVPXox6s8/vYWUGFoPWRpEpA1NPVsP/eo5t
gwMqXG3uZf7x1tlKt2jeNFKYrHHUBSbedjFGuYI/p4UtCseZEwAyJ2xG6O7QRwBJ
sqt/sRTf21ZPOkOFW39gFu9E3h70qcy+XiYhD6i33c2jbO8+WL4/pizNeEeWJkJm
Il4moMvyOttBi3dMbCYC19TgrLI/3bSCZrwt1eStptVH4RZj0tVSvMktkoKFVMcS
WovPG1u0c+St2hoXMhtQAjoyfeFV5dL+XxFNMPhyM4Bw5dQZyE3XLElem6E6oK9m
FCWcD+rJjU32LuN1/7a1YXx11N2Ln6b7X+XLHfcrJ3766BUDjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPiKNEz2VnHWAAGwL2yI3PAoOeDoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODVmYTAxMzktYzJkMS0z
N2FkLTlmMjAtZjNmYzdjZDczMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4woMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElc92qedzUjcxr7bAe2JG3OYM7IKF6LpKNBZE1AAg6IoInajknXoI7x
UNjtufEBIN6E39tpPvr38vTftu3wI3lfusbp6hXGdLprdmtWWdK5btSGObraMJWE
+MQ2mq7Bo96oMJQBolPS0VSwoDcLscbmAeAQIBlVQ6xhKDTDiqfRiyk7Uj/MZ2kf
fHizGXtRH9ZZAckhQGRXv9/1N4juQ2f5Moq73e66i4hYeBMmvGr+jNiGAiLSQa4U
wwhzNEeHOXegq9OcHyasLaQPxp+GW21o9NmF3S32lXhjmXCsgMKOthCWYXUwmA2a
Obd5XnY2ODBEiI+4Z2m6zEPRSxtJ5dU=
-----END CERTIFICATE-----
Generated at Thu May 23 13:45:01 2024 by rpki-client on console-fra.rpki-client.org