Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/cace7e8a-0b09-3209-ae9c-30f977b1282c.roa
File:                     cace7e8a-0b09-3209-ae9c-30f977b1282c.roa (raw, json)
Hash identifier:          T1H0YY6KmJxN/JThUAvVIygsLSLYPXs1rGN+zuS41zE=
Subject key identifier:   6D:03:4B:F2:97:74:7B:E2:C8:D5:CB:17:40:F7:0D:02:D9:02:75:B6
Certificate issuer:       /CN=5fb6f799-d584-48a1-9c74-50e91497918a
Certificate serial:       010D0C9F43285847EBBF826F683538E46A822E00
Authority key identifier: B4:66:3F:CE:6F:9C:67:45:04:4A:C3:43:91:B7:37:A9:FC:E2:26:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/cace7e8a-0b09-3209-ae9c-30f977b1282c.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     0
IP address blocks:        138.112.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/5fb6f799-d584-48a1-9c74-50e91497918a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/5fb6f799-d584-48a1-9c74-50e91497918a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:82:6f:68:35:38:e4:6a:82:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fb6f799-d584-48a1-9c74-50e91497918a
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=6fa5a89a-0efd-444e-9cea-5b66df8c79c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f5:1e:f6:ce:f2:ba:ab:a4:59:28:6d:1b:82:
                    aa:48:d9:58:d0:74:7d:5a:03:14:bb:69:e4:4c:44:
                    bb:39:c8:92:cd:eb:1e:4a:84:f6:c7:a1:b0:1c:0a:
                    cf:cc:66:20:ad:9c:91:de:17:aa:bf:18:48:2c:b6:
                    bf:51:ba:ba:38:de:f2:84:6a:a7:cd:66:a4:bc:ed:
                    94:c9:34:3a:b8:2e:4a:5c:8c:f0:6f:f6:d9:de:07:
                    8d:43:84:dd:67:a1:7c:31:78:6f:1b:69:28:73:bd:
                    81:f9:3b:45:1b:b0:21:12:74:22:e6:ff:09:2c:7b:
                    92:9b:15:b8:91:bf:2d:95:6b:74:eb:5b:91:48:00:
                    92:22:52:34:0a:6c:0b:34:1f:e4:e9:88:b9:2a:19:
                    fa:6e:07:08:f0:32:e9:54:46:61:9f:37:e9:d5:12:
                    70:72:4b:40:e1:3f:5a:43:75:be:eb:f6:2d:8d:fc:
                    47:41:83:f9:41:9c:7b:cc:19:7d:f8:07:86:42:ca:
                    b9:db:6c:c3:a6:87:a4:97:e6:8c:e4:b0:33:32:08:
                    95:3c:a4:d4:90:90:8c:83:28:ea:2e:c5:04:dd:b4:
                    7d:f2:d6:54:9f:ec:e9:e6:bb:64:f4:41:e4:ad:4f:
                    6d:3f:bb:ad:88:36:05:31:c5:ce:58:cd:ae:20:62:
                    88:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:03:4B:F2:97:74:7B:E2:C8:D5:CB:17:40:F7:0D:02:D9:02:75:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/cace7e8a-0b09-3209-ae9c-30f977b1282c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/5fb6f799-d584-48a1-9c74-50e91497918a.crl

            X509v3 Authority Key Identifier:
                keyid:B4:66:3F:CE:6F:9C:67:45:04:4A:C3:43:91:B7:37:A9:FC:E2:26:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:db:5a:71:59:78:7f:e1:dd:3a:53:bf:e8:4b:42:db:41:f2:
         73:71:45:70:d9:c2:fc:ae:2d:bd:39:15:35:18:f2:e4:9d:9b:
         02:5b:e9:6a:3b:dc:3e:78:3f:7b:5c:0e:e5:b6:53:d0:3b:0d:
         16:0c:2b:e2:74:17:aa:aa:b9:cb:6a:59:73:05:05:3c:ba:bd:
         25:2f:60:b5:48:84:2a:41:e7:62:97:85:f1:2f:81:2e:0d:4d:
         98:90:58:e1:32:3f:99:6d:89:dc:f4:2f:8a:eb:38:e4:e5:40:
         90:9d:43:35:56:90:06:13:e2:65:18:5f:14:b3:5d:bd:61:94:
         75:e5:72:a5:81:03:fc:ae:3d:ed:71:a5:fc:4d:e8:90:c9:58:
         be:60:62:be:76:e5:9e:15:69:42:5c:f4:a8:e9:3d:6e:48:8c:
         fb:a5:a8:32:9d:66:8d:09:6a:95:d9:df:e6:2d:25:17:c0:88:
         6a:f4:22:5c:15:a8:8b:fc:4b:6d:63:e6:d4:6a:8d:f0:97:dc:
         48:e1:24:cd:7a:8f:ff:3b:50:05:47:3c:aa:e7:3a:c8:6a:14:
         a6:c6:cc:1d:2b:17:82:ce:25:11:51:4a:78:8f:c7:e6:21:89:
         69:6b:ef:33:24:20:66:98:45:2a:8c:59:b2:11:2f:48:b2:8e:
         2e:29:6b:6e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfrv4JvaDU45GqCLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWZiNmY3OTktZDU4NC00OGExLTljNzQtNTBlOTE0OTc5
MThhMB4XDTI0MTExODE0MDA0MFoXDTI1MDIxNjE0MDA0MFowLzEtMCsGA1UEAxMk
NmZhNWE4OWEtMGVmZC00NDRlLTljZWEtNWI2NmRmOGM3OWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PUe9s7yuqukWShtG4KqSNlY0HR9WgMUu2nk
TES7OciSzeseSoT2x6GwHArPzGYgrZyR3heqvxhILLa/Ubq6ON7yhGqnzWakvO2U
yTQ6uC5KXIzwb/bZ3geNQ4TdZ6F8MXhvG2koc72B+TtFG7AhEnQi5v8JLHuSmxW4
kb8tlWt061uRSACSIlI0CmwLNB/k6Yi5Khn6bgcI8DLpVEZhnzfp1RJwcktA4T9a
Q3W+6/YtjfxHQYP5QZx7zBl9+AeGQsq522zDpoekl+aM5LAzMgiVPKTUkJCMgyjq
LsUE3bR98tZUn+zp5rtk9EHkrU9tP7utiDYFMcXOWM2uIGKITwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFG0DS/KXdHviyNXLF0D3DQLZAnW2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZmI2
Zjc5OS1kNTg0LTQ4YTEtOWM3NC01MGU5MTQ5NzkxOGEvY2FjZTdlOGEtMGIwOS0z
MjA5LWFlOWMtMzBmOTc3YjEyODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWZiNmY3OTktZDU4NC00OGExLTlj
NzQtNTBlOTE0OTc5MThhLzVmYjZmNzk5LWQ1ODQtNDhhMS05Yzc0LTUwZTkxNDk3
OTE4YS5jcmwwHwYDVR0jBBgwFoAUtGY/zm+cZ0UESsNDkbc3qfziJlowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZmI2Zjc5OS1kNTg0LTQ4YTEtOWM3NC01MGU5
MTQ5NzkxOGEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAinAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAENtacVl4f+HdOlO/6EtC20Hyc3FFcNnC/K4tvTkVNRjy5J2bAlvpajvc
Png/e1wO5bZT0DsNFgwr4nQXqqq5y2pZcwUFPLq9JS9gtUiEKkHnYpeF8S+BLg1N
mJBY4TI/mW2J3PQvius45OVAkJ1DNVaQBhPiZRhfFLNdvWGUdeVypYED/K497XGl
/E3okMlYvmBivnblnhVpQlz0qOk9bkiM+6WoMp1mjQlqldnf5i0lF8CIavQiXBWo
i/xLbWPm1GqN8JfcSOEkzXqP/ztQBUc8quc6yGoUpsbMHSsXgs4lEVFKeI/H5iGJ
aWvvMyQgZphFKoxZshEvSLKOLilrbg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:01 2024 by rpki-client on console-fra.rpki-client.org