Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/141d92d4-996c-39d3-8fbe-2d67d6f2a189.roa
File:                     141d92d4-996c-39d3-8fbe-2d67d6f2a189.roa (raw, json)
Hash identifier:          7XeNTgu9b/Tgqig0pz+8OLxS9m68DNterMCglINxANQ=
Subject key identifier:   AA:F3:1A:2D:D6:24:4F:AE:D8:36:8B:A8:3C:04:5E:D6:D2:8D:86:74
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285845CF6E35C825FF15B782711AC0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/141d92d4-996c-39d3-8fbe-2d67d6f2a189.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     21859
IP address blocks:        128.1.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:35:c8:25:ff:15:b7:82:71:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=aeba2c0b-e4a2-43d9-9a82-0333efe7bec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3a:d2:8e:12:d4:7d:e1:e9:e8:d3:ca:f2:12:
                    45:64:8b:23:6b:ee:2a:1c:6f:42:6f:7a:f8:11:b3:
                    f8:59:5a:41:87:cd:bf:d5:d6:b9:e3:d1:68:6d:08:
                    6c:c2:11:6e:ad:d6:ba:d3:66:3c:99:4a:71:b1:d8:
                    54:8e:ce:76:49:72:b1:2e:fa:a0:ed:7f:fb:e1:7b:
                    b5:ad:24:12:50:14:d1:16:aa:3e:98:c8:09:54:5a:
                    50:2f:66:a3:ce:33:90:d2:9b:6a:81:ef:3f:4a:e3:
                    52:3c:d2:76:75:eb:fc:96:0a:13:e2:6e:ef:ae:71:
                    92:4b:39:e4:ac:f1:6d:77:47:26:26:58:44:24:56:
                    fb:d6:5f:2e:69:18:b0:70:66:ee:75:53:17:c4:27:
                    9a:ce:b9:46:5b:13:01:a5:7f:8a:35:5e:87:ae:2a:
                    25:7c:eb:c1:8c:9d:39:f1:ec:db:9d:a9:66:42:fc:
                    2c:1a:a0:d2:d5:35:ef:61:bc:ab:7a:82:37:2a:51:
                    24:28:19:fc:44:bc:3a:be:7a:70:ab:a9:36:2f:e8:
                    64:79:8c:a7:f4:d8:8c:69:06:a3:10:3e:29:b0:74:
                    fc:72:6b:f9:a5:c4:91:97:9b:22:17:0d:6c:67:cd:
                    7b:1b:4c:bc:96:71:78:3a:7d:4f:fa:37:3d:21:83:
                    83:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F3:1A:2D:D6:24:4F:AE:D8:36:8B:A8:3C:04:5E:D6:D2:8D:86:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/141d92d4-996c-39d3-8fbe-2d67d6f2a189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:2e:fb:15:79:4c:e0:bf:6a:c2:8c:9b:95:7b:1b:6d:22:a2:
         40:08:33:3d:47:08:34:74:81:7b:f7:6e:77:57:1a:bf:7d:21:
         d5:b2:c8:e0:de:1d:7a:91:7f:4d:48:53:8a:23:16:53:d6:10:
         18:4a:28:0c:ba:57:3b:69:4e:21:22:ae:9e:9e:bb:ba:a8:5d:
         30:f4:7d:7f:e2:77:13:7a:5b:1e:ce:59:8a:08:bb:3d:10:fd:
         c3:a3:19:00:f2:a1:00:25:39:48:a8:71:1c:d2:26:72:b0:67:
         ca:db:45:cd:46:f7:c3:8d:b2:10:a5:d9:48:40:c8:0a:4e:a8:
         9e:34:8a:f0:8b:69:b4:99:c4:4c:d5:25:d2:e9:c3:c6:e6:90:
         ce:c3:ea:5f:5c:a3:5d:d1:80:fd:1c:77:f5:f9:36:6e:dd:bb:
         15:22:69:2a:81:f8:8b:65:cb:90:7c:ec:04:30:7a:36:fc:72:
         65:bb:98:75:ed:cf:4c:39:47:81:28:8a:6d:91:67:1f:86:b5:
         ee:b2:6a:40:8a:f2:d1:ef:49:f0:53:0d:44:62:d5:87:20:5e:
         7a:a2:1a:ac:b2:b1:ae:1e:c4:f4:41:72:7a:90:4c:6c:2e:64:
         06:7c:9f:28:0f:51:bf:2b:6b:3e:a8:7f:1a:0a:b3:73:d6:d8:
         de:16:20:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXPbjXIJf8Vt4JxGsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI0MDUwOTAxMDAyNloXDTI0MDgwNzAxMDAyNlowLzEtMCsGA1UEAxMk
YWViYTJjMGItZTRhMi00M2Q5LTlhODItMDMzM2VmZTdiZWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTrSjhLUfeHp6NPK8hJFZIsja+4qHG9Cb3r4
EbP4WVpBh82/1da549FobQhswhFurda602Y8mUpxsdhUjs52SXKxLvqg7X/74Xu1
rSQSUBTRFqo+mMgJVFpQL2ajzjOQ0ptqge8/SuNSPNJ2dev8lgoT4m7vrnGSSznk
rPFtd0cmJlhEJFb71l8uaRiwcGbudVMXxCeazrlGWxMBpX+KNV6HriolfOvBjJ05
8ezbnalmQvwsGqDS1TXvYbyreoI3KlEkKBn8RLw6vnpwq6k2L+hkeYyn9NiMaQaj
ED4psHT8cmv5pcSRl5siFw1sZ817G0y8lnF4On1P+jc9IYODdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKrzGi3WJE+u2DaLqDwEXtbSjYZ0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMTQxZDkyZDQtOTk2Yy0z
OWQzLThmYmUtMmQ2N2Q2ZjJhMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADUu+xV5TOC/asKMm5V7G20iokAIMz1HCDR0gXv3bndXGr99IdWyyODe
HXqRf01IU4ojFlPWEBhKKAy6VztpTiEirp6eu7qoXTD0fX/idxN6Wx7OWYoIuz0Q
/cOjGQDyoQAlOUiocRzSJnKwZ8rbRc1G98ONshCl2UhAyApOqJ40ivCLabSZxEzV
JdLpw8bmkM7D6l9co13RgP0cd/X5Nm7duxUiaSqB+Itly5B87AQwejb8cmW7mHXt
z0w5R4Eoim2RZx+Gte6yakCK8tHvSfBTDURi1YcgXnqiGqyysa4exPRBcnqQTGwu
ZAZ8nygPUb8raz6ofxoKs3PW2N4WILM=
-----END CERTIFICATE-----
Generated at Fri May 17 08:14:34 2024 by rpki-client on console-fra.rpki-client.org