Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/71a3e12f-fbf7-3372-a45d-b1090c83489c.roa
File:                     71a3e12f-fbf7-3372-a45d-b1090c83489c.roa (raw, json)
Hash identifier:          APKbeTDMc0RVRSIm2r1V5ZX+lIeDp/lsMn7gSJY9s/M=
Subject key identifier:   DE:29:BB:AF:FE:82:C3:33:07:2D:91:2D:3B:B7:3C:9A:DF:1B:99:4A
Certificate issuer:       /CN=7a9c27a4-fe2b-4b21-8288-edfc10a93f26
Certificate serial:       010D0C9F432858459FF8939614BD96B2C9C10680
Authority key identifier: 73:E8:E1:8C:A8:F6:D1:73:1B:9A:33:F4:4B:9A:06:75:66:96:1E:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/71a3e12f-fbf7-3372-a45d-b1090c83489c.roa
Signing time:             Mon 22 Apr 2024 01:00:25 +0000
ROA not before:           Mon 22 Apr 2024 01:00:25 +0000
ROA not after:            Sun 21 Jul 2024 01:00:25 +0000
asID:                     15026
IP address blocks:        139.61.160.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9f:f8:93:96:14:bd:96:b2:c9:c1:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a9c27a4-fe2b-4b21-8288-edfc10a93f26
        Validity
            Not Before: Apr 22 01:00:25 2024 GMT
            Not After : Jul 21 01:00:25 2024 GMT
        Subject: CN=0c483127-f9f5-4fca-a410-108eedf847f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:da:41:55:ea:c0:e5:76:e0:75:ca:62:67:a3:
                    cc:c4:80:e8:27:c9:05:32:d7:fd:c4:6d:39:e6:d2:
                    ca:7f:13:25:cd:0a:3d:61:e3:de:1e:7d:d5:44:ea:
                    3c:1f:7c:62:dc:3a:a4:f5:a4:c3:7f:4a:1b:c0:16:
                    74:6f:93:b7:b9:38:c6:26:a5:25:9e:83:0f:6c:48:
                    c5:f2:7a:d3:f8:ef:e0:9d:d5:71:cf:e4:88:f6:4d:
                    7b:0c:af:01:09:83:7a:f9:29:3d:bc:c3:95:3f:0e:
                    d2:5e:f1:e8:09:3a:39:64:ef:cd:9b:6f:05:1d:7e:
                    dc:a2:dc:f1:69:c3:11:65:8b:a5:ee:d9:86:4e:28:
                    5f:5a:c4:1f:63:47:be:0a:9d:be:b3:cf:84:5d:16:
                    81:02:99:c6:08:b5:e2:f7:b0:4f:3c:b0:dc:eb:a0:
                    60:e8:c9:d2:7c:52:39:e9:1a:ce:a7:b4:a6:b4:c3:
                    84:7d:41:3f:3f:a3:1c:1a:dc:e9:e2:07:0d:70:c1:
                    84:a8:c2:5d:02:4d:14:30:7f:6b:09:61:3e:94:e9:
                    5f:0e:ad:8c:6f:18:41:0d:eb:2b:a4:e3:61:da:6f:
                    e7:b3:4b:0a:6b:e0:7f:dc:8f:de:3e:06:01:4a:73:
                    6a:94:8f:f7:a4:c8:f7:84:9b:db:2b:ad:b4:ca:8c:
                    85:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:29:BB:AF:FE:82:C3:33:07:2D:91:2D:3B:B7:3C:9A:DF:1B:99:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/71a3e12f-fbf7-3372-a45d-b1090c83489c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.crl

            X509v3 Authority Key Identifier:
                keyid:73:E8:E1:8C:A8:F6:D1:73:1B:9A:33:F4:4B:9A:06:75:66:96:1E:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.61.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:40:3d:85:4c:39:c7:00:0f:38:c4:1f:f0:02:84:4f:5e:2e:
         c7:03:11:8a:13:8d:be:7e:0b:f8:33:f3:08:7b:36:15:0d:a5:
         20:29:a8:3c:a7:02:57:a5:af:97:51:37:18:6e:90:6a:2d:7f:
         56:fd:0f:cc:62:fe:f4:7f:5e:47:7b:e7:62:2c:71:19:8a:67:
         bf:53:6f:ec:ec:cd:4d:b8:24:1d:e4:b8:d1:cc:dc:cd:08:aa:
         c0:e3:3b:38:78:2e:45:ba:35:d9:4e:f1:7a:40:29:14:2b:ff:
         22:85:d6:21:4c:16:95:a9:93:80:6a:dd:b6:54:d8:c0:7e:43:
         8f:c2:84:05:2c:d4:92:7c:a0:43:80:ec:38:82:0e:22:48:a5:
         e8:6c:7f:3b:56:4a:32:31:4d:20:9b:3b:34:d9:6a:87:04:6f:
         20:b6:6c:41:63:50:8b:43:0a:a0:bd:eb:a4:58:d5:2a:8c:04:
         96:ac:d0:15:de:03:f9:54:b4:c0:13:ed:32:e5:12:d0:9e:45:
         82:a0:ea:c1:bd:63:6f:d9:d4:b8:74:ad:e5:01:f5:db:50:0a:
         29:01:6c:3b:25:97:b4:f0:d4:86:d3:9a:16:44:94:8b:dc:3a:
         29:13:65:18:c9:01:db:71:4e:ba:0d:e5:c8:10:04:8b:d0:4f:
         80:b0:f0:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWf+JOWFL2WssnBBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2E5YzI3YTQtZmUyYi00YjIxLTgyODgtZWRmYzEwYTkz
ZjI2MB4XDTI0MDQyMjAxMDAyNVoXDTI0MDcyMTAxMDAyNVowLzEtMCsGA1UEAxMk
MGM0ODMxMjctZjlmNS00ZmNhLWE0MTAtMTA4ZWVkZjg0N2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9pBVerA5XbgdcpiZ6PMxIDoJ8kFMtf9xG05
5tLKfxMlzQo9YePeHn3VROo8H3xi3Dqk9aTDf0obwBZ0b5O3uTjGJqUlnoMPbEjF
8nrT+O/gndVxz+SI9k17DK8BCYN6+Sk9vMOVPw7SXvHoCTo5ZO/Nm28FHX7cotzx
acMRZYul7tmGTihfWsQfY0e+Cp2+s8+EXRaBApnGCLXi97BPPLDc66Bg6MnSfFI5
6RrOp7SmtMOEfUE/P6McGtzp4gcNcMGEqMJdAk0UMH9rCWE+lOlfDq2MbxhBDesr
pONh2m/ns0sKa+B/3I/ePgYBSnNqlI/3pMj3hJvbK620yoyFPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4pu6/+gsMzBy2RLTu3PJrfG5lKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83YTlj
MjdhNC1mZTJiLTRiMjEtODI4OC1lZGZjMTBhOTNmMjYvNzFhM2UxMmYtZmJmNy0z
MzcyLWE0NWQtYjEwOTBjODM0ODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2E5YzI3YTQtZmUyYi00YjIxLTgy
ODgtZWRmYzEwYTkzZjI2LzdhOWMyN2E0LWZlMmItNGIyMS04Mjg4LWVkZmMxMGE5
M2YyNi5jcmwwHwYDVR0jBBgwFoAUc+jhjKj20XMbmjP0S5oGdWaWHsEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83YTljMjdhNC1mZTJiLTRiMjEtODI4OC1lZGZj
MTBhOTNmMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiz2gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtAPYVMOccADzjEH/AChE9eLscDEYoTjb5+C/gz8wh7NhUNpSApqDyn
Alelr5dRNxhukGotf1b9D8xi/vR/Xkd752IscRmKZ79Tb+zszU24JB3kuNHM3M0I
qsDjOzh4LkW6NdlO8XpAKRQr/yKF1iFMFpWpk4Bq3bZU2MB+Q4/ChAUs1JJ8oEOA
7DiCDiJIpehsfztWSjIxTSCbOzTZaocEbyC2bEFjUItDCqC966RY1SqMBJas0BXe
A/lUtMAT7TLlEtCeRYKg6sG9Y2/Z1Lh0reUB9dtQCikBbDsll7Tw1IbTmhZElIvc
OikTZRjJAdtxTroN5cgQBIvQT4Cw8GE=
-----END CERTIFICATE-----
Generated at Sun May 12 14:57:26 2024 by rpki-client on console-fra.rpki-client.org