Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS61138.roa
File:                     AS61138.roa (raw, json)
Hash identifier:          yZNh3fvfPaqgljdkiJ01T88O07hytXwNYiiBAKDssVs=
Subject key identifier:   CE:B2:C9:07:46:75:7E:E2:43:83:3B:48:A0:52:6D:5A:9C:1E:12:71
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       35E2CDBB34D8D4B959EE9005F3ED5CE6CE81E42B
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS61138.roa
Signing time:             Mon 17 Jul 2023 14:30:08 +0000
ROA not before:           Mon 17 Jul 2023 14:25:08 +0000
ROA not after:            Mon 15 Jul 2024 14:30:08 +0000
asID:                     61138
IP address blocks:        216.246.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 04:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e2:cd:bb:34:d8:d4:b9:59:ee:90:05:f3:ed:5c:e6:ce:81:e4:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Jul 17 14:25:08 2023 GMT
            Not After : Jul 15 14:30:08 2024 GMT
        Subject: CN=CEB2C90746757EE243833B48A0526D5A9C1E1271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:17:1a:12:60:c2:61:ae:55:0b:b2:09:3a:
                    52:75:2b:df:fd:13:fa:38:e2:76:0c:46:b6:cb:f9:
                    4d:38:93:c4:d1:4e:15:a3:bb:bc:8d:2b:fb:90:69:
                    60:a0:9b:3e:4f:b5:56:7c:23:75:4d:72:f7:09:83:
                    2b:99:c3:f1:74:ad:bc:dd:a4:a2:e9:e9:4f:b0:ae:
                    52:54:4c:13:56:af:cf:92:9f:06:cc:f3:68:c1:e7:
                    d1:c7:58:c6:1c:2f:44:a9:d3:03:7b:91:76:4c:e7:
                    ea:f9:ff:3e:56:28:a6:63:12:fc:8b:b7:4a:9f:b3:
                    cd:a5:b9:cf:b0:88:68:45:6c:96:94:45:28:f6:3c:
                    20:0c:96:79:75:c5:55:b1:21:72:22:1f:fb:9f:01:
                    d2:fb:ef:29:23:97:fe:04:f5:2d:b6:99:f7:fe:9a:
                    f3:18:ab:3b:e9:c6:ea:a9:e9:51:ff:a8:f3:66:52:
                    7f:4c:38:e3:46:30:0b:7e:f3:86:61:a7:46:dc:a1:
                    83:1d:f7:01:54:44:95:43:d9:66:9a:6c:98:d0:e1:
                    20:b2:26:28:0f:9f:4f:63:18:9b:07:ab:3c:24:9c:
                    73:01:23:6f:f8:c2:95:63:11:be:9a:2e:ec:53:a1:
                    2f:53:fe:a7:27:df:5d:99:9b:8e:f6:f1:7b:b4:76:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B2:C9:07:46:75:7E:E2:43:83:3B:48:A0:52:6D:5A:9C:1E:12:71
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS61138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:c8:67:c8:e5:76:cc:78:45:51:80:ea:cd:5b:7f:3c:11:5f:
         f0:2d:e9:f0:0c:df:86:1c:bc:49:53:d3:9e:18:05:ee:5b:3b:
         09:1a:8d:53:26:f0:3b:49:fe:bb:45:76:f1:99:69:0f:eb:8b:
         3b:1f:9d:f9:31:1a:83:33:0c:c4:7d:b6:bd:67:09:0a:2a:28:
         c9:a9:4e:e8:23:2b:b6:43:83:43:2f:b2:a1:c5:b2:b9:41:c2:
         95:96:d1:6f:28:5f:14:53:cf:27:2f:82:9d:44:89:33:dc:45:
         8a:3b:00:15:c3:89:cd:48:4b:83:bb:1b:40:e9:90:80:03:27:
         19:4b:df:ca:b4:44:45:5d:d0:45:20:9c:3a:85:54:fe:8a:e5:
         77:1d:a2:f9:3f:11:f9:77:5c:ed:e3:71:4b:17:e4:f3:e3:81:
         27:e6:1f:48:ca:6f:47:ec:1a:70:31:74:ea:79:a9:6b:c8:0e:
         17:ab:05:84:a9:33:2b:05:1b:06:b4:8e:14:c0:27:09:d9:d6:
         57:dd:b0:93:23:e1:85:9e:96:70:b2:55:e8:e2:bd:74:52:69:
         b1:47:59:28:52:58:a2:56:87:b3:c5:67:94:f9:e7:6b:d1:a2:
         82:9e:80:94:4c:75:a8:04:d9:ed:a9:12:fa:ed:e2:49:2e:7f:
         af:41:7e:9c
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUNeLNuzTY1LlZ7pAF8+1c5s6B5CswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNzE3MTQyNTA4WhcNMjQwNzE1MTQzMDA4
WjAzMTEwLwYDVQQDEyhDRUIyQzkwNzQ2NzU3RUUyNDM4MzNCNDhBMDUyNkQ1QTlD
MUUxMjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux4XGhJgwmGu
VQuyCTpSdSvf/RP6OOJ2DEa2y/lNOJPE0U4Vo7u8jSv7kGlgoJs+T7VWfCN1TXL3
CYMrmcPxdK283aSi6elPsK5SVEwTVq/Pkp8GzPNowefRx1jGHC9EqdMDe5F2TOfq
+f8+ViimYxL8i7dKn7PNpbnPsIhoRWyWlEUo9jwgDJZ5dcVVsSFyIh/7nwHS++8p
I5f+BPUttpn3/przGKs76cbqqelR/6jzZlJ/TDjjRjALfvOGYadG3KGDHfcBVESV
Q9lmmmyY0OEgsiYoD59PYxibB6s8JJxzASNv+MKVYxG+mi7sU6EvU/6nJ99dmZuO
9vF7tHYLpQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFM6yyQdGdX7iQ4M7SKBSbVqc
HhJxMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NjkzZjA2MDAxODZjNmU3ZmQ4
ZDM2NjAvMC9BUzYxMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PYSMA0GCSqGSIb3DQEBCwUAA4IB
AQAbyGfI5XbMeEVRgOrNW388EV/wLenwDN+GHLxJU9OeGAXuWzsJGo1TJvA7Sf67
RXbxmWkP64s7H535MRqDMwzEfba9ZwkKKijJqU7oIyu2Q4NDL7KhxbK5QcKVltFv
KF8UU88nL4KdRIkz3EWKOwAVw4nNSEuDuxtA6ZCAAycZS9/KtERFXdBFIJw6hVT+
iuV3HaL5PxH5d1zt43FLF+Tz44En5h9Iym9H7BpwMXTqealryA4XqwWEqTMrBRsG
tI4UwCcJ2dZX3bCTI+GFnpZwslXo4r10UmmxR1koUliiVoezxWeU+edr0aKCnoCU
THWoBNntqRL67eJJLn+vQX6c
-----END CERTIFICATE-----
Generated at Wed May 8 02:08:01 2024 by rpki-client on console-ams.rpki-client.org