Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/aee20d71-0e7d-3df5-a1aa-897f5fcdfe60.roa
File:                     aee20d71-0e7d-3df5-a1aa-897f5fcdfe60.roa (raw, json)
Hash identifier:          G+tUDUYMBCpLy22+Mu26ZsWrshxwL9ZRjQE1Miv5+0U=
Subject key identifier:   5B:2F:35:18:94:E9:9A:ED:2D:3C:57:57:25:FC:11:A8:14:E1:D6:E2
Certificate issuer:       /CN=2805bc8b-434a-454a-85db-2fe9075e8548
Certificate serial:       010D0C9F4328584566BDB7ECB00F3EFFA5BD7EC0
Authority key identifier: A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/aee20d71-0e7d-3df5-a1aa-897f5fcdfe60.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     14618
IP address blocks:        139.60.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:b7:ec:b0:0f:3e:ff:a5:bd:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2805bc8b-434a-454a-85db-2fe9075e8548
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=ec69b748-429c-4244-a414-36c2e0991e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:07:01:17:74:cb:5f:8e:6e:51:ff:fd:61:3c:
                    76:04:0c:49:90:1b:74:21:f8:24:b3:5e:1e:b6:22:
                    fc:bf:04:c1:d3:52:04:20:db:0e:b1:fc:60:0a:09:
                    d4:8c:16:7d:59:4a:07:c8:be:7d:b3:3d:85:c1:02:
                    35:d1:5e:34:d6:9b:44:eb:fd:42:d6:bf:4d:5b:7c:
                    9d:39:fd:f7:76:a3:e7:18:31:a4:85:a2:41:07:ee:
                    6a:17:6e:d8:a0:f1:ef:e4:02:64:ca:dc:72:20:4c:
                    d8:ad:dd:99:b3:83:65:75:b3:09:fe:d4:b0:f2:b5:
                    89:3b:ce:3c:ec:fd:23:f7:a4:c8:21:dc:b0:67:9c:
                    8b:98:d5:5e:eb:67:98:90:64:8e:32:48:56:7f:00:
                    44:30:cf:18:68:ba:ce:ad:2b:50:f6:e2:c0:54:6b:
                    dd:52:23:a2:38:e0:ad:8a:94:86:77:8e:0f:ad:86:
                    f8:2d:1b:52:1b:49:26:9a:7a:f7:d8:f2:74:b3:66:
                    82:cf:09:d0:0f:bd:3b:ba:c6:69:df:a7:33:60:30:
                    26:b0:0e:ff:fb:d4:53:0f:b8:c7:2e:7b:be:89:a4:
                    6e:98:d6:13:7e:3f:4d:3c:21:b1:af:c6:c2:df:70:
                    79:5a:67:d7:f6:b6:2f:fc:cb:46:0c:7a:20:35:c3:
                    89:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2F:35:18:94:E9:9A:ED:2D:3C:57:57:25:FC:11:A8:14:E1:D6:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/aee20d71-0e7d-3df5-a1aa-897f5fcdfe60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.crl

            X509v3 Authority Key Identifier:
                keyid:A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:df:2a:10:2d:2d:5f:92:a4:79:16:4a:7a:10:3e:e7:ca:33:
         8f:e1:33:fe:d9:58:25:98:d4:f5:df:37:b1:e2:bd:30:6d:9f:
         0e:1b:b9:c2:92:df:a8:f0:5c:5e:9c:52:ba:5c:83:7e:2e:b6:
         19:cc:d1:c0:53:b8:83:a1:67:a9:38:4e:0a:c4:1e:ff:fd:ad:
         09:7d:6b:ab:ee:9c:4d:a5:26:9e:b2:a6:66:a1:5b:5b:26:5a:
         f0:d2:6b:b1:d1:7b:35:1e:08:68:87:f1:12:3a:6c:3a:1e:48:
         15:b4:5e:bb:1c:73:f6:a4:50:10:6e:d7:dd:22:e1:0b:6f:a9:
         60:e3:ed:7b:d5:e7:e3:ee:86:3c:6e:be:94:ca:81:81:75:96:
         01:97:89:44:22:03:bb:45:4f:85:c8:c6:22:6c:4c:4f:7a:4f:
         32:63:57:0e:c3:07:22:fd:d7:9d:b0:f0:36:64:ea:2e:a6:81:
         00:72:a0:f4:79:5e:39:c2:b8:73:f9:c1:ec:19:17:e5:74:be:
         72:bf:d9:78:39:b7:b6:11:bc:e9:50:2c:a7:1c:f3:3f:6e:fd:
         55:3b:17:36:cb:c7:b2:25:11:6e:cd:59:cd:dc:0a:7e:73:6c:
         2a:c7:f5:79:0b:8f:3c:f8:72:54:52:9c:fa:0e:2d:31:cd:ef:
         d4:90:57:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:14:08 2024 by rpki-client on console-fra.rpki-client.org