Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/b012a3db-318f-34a5-8e9d-74105cfce13e.roa
File:                     b012a3db-318f-34a5-8e9d-74105cfce13e.roa (raw, json)
Hash identifier:          leshICRB0xPFN+7WBnutsHWRrUrfWHHXC28mckI2icY=
Subject key identifier:   74:1D:46:FD:41:C8:EB:0F:55:91:5C:27:13:37:2C:86:CC:04:6D:7F
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584566BDB03BC19BB6643DB747C0
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/b012a3db-318f-34a5-8e9d-74105cfce13e.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     209
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:b0:3b:c1:9b:b6:64:3d:b7:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=026914ad-49bf-42ef-8069-44b42c3c6802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:93:14:b8:d9:02:f1:b9:ec:be:ce:9e:4c:54:
                    da:c7:73:b7:6a:bb:3a:99:60:ae:99:66:5c:58:12:
                    b0:44:a3:fe:a7:0d:42:01:b0:b4:f3:f2:6c:44:2f:
                    4c:ff:52:2a:16:b8:ba:f7:c0:19:82:31:c2:2d:24:
                    a0:a9:0d:69:29:4f:b6:32:99:4b:ad:31:f8:f1:c1:
                    66:b8:54:99:3f:04:55:66:88:e3:1a:cd:5a:74:d8:
                    dc:cd:b5:d7:61:a5:bc:22:54:af:8b:43:c1:dc:b3:
                    c7:db:9c:21:2b:51:bd:81:6e:2e:e7:7f:65:8a:e6:
                    a5:1f:31:29:33:1e:bc:c7:3f:f0:69:c9:0c:dc:d3:
                    91:ad:df:68:92:86:84:5e:b8:96:a8:22:38:3f:c9:
                    96:06:f9:9c:e1:8b:26:af:52:f7:c1:30:a4:8e:93:
                    8e:73:9d:66:19:4f:80:23:6a:98:a7:39:7b:09:41:
                    3f:11:9a:0b:2b:f6:59:96:10:1b:e1:80:30:ff:9c:
                    f7:59:c8:7b:34:83:c8:09:a3:cc:6a:22:95:ea:15:
                    93:b8:63:e5:c5:36:f3:3a:fa:4b:7e:4e:15:c3:0f:
                    fe:1e:4c:d7:ee:41:90:0b:98:5e:c7:de:20:f4:6c:
                    36:c8:36:2f:45:59:00:a2:97:2b:cb:c4:74:6b:61:
                    b9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1D:46:FD:41:C8:EB:0F:55:91:5C:27:13:37:2C:86:CC:04:6D:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/b012a3db-318f-34a5-8e9d-74105cfce13e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:44:99:27:af:4e:64:b2:98:ce:80:3e:07:67:9e:35:74:a4:
         e3:bf:dd:30:a6:40:ec:0b:4e:60:cb:b8:e9:52:10:60:56:f3:
         d1:1f:3c:aa:c2:25:16:be:5a:90:00:93:23:60:0b:fe:c2:5d:
         4a:87:9e:51:a5:95:2e:cd:2e:8b:ce:e9:da:5a:91:9d:68:48:
         8f:ea:74:94:f9:50:f5:37:f7:b7:dd:1b:19:8f:8a:9c:da:8e:
         0e:88:9b:63:a8:e6:01:0d:78:09:ac:fd:12:f0:0b:36:97:81:
         ed:06:fe:32:8f:d1:a1:9d:9c:80:07:f5:1a:33:64:dd:bd:19:
         c9:cf:19:1a:99:a0:13:ba:13:fa:26:82:22:06:51:ce:02:b9:
         49:e7:a0:86:66:05:f0:97:d7:98:c9:4e:b1:e6:50:83:4c:1b:
         10:14:47:b5:ed:27:6f:90:ae:5b:70:ba:f2:aa:80:bc:8d:b8:
         61:1c:ef:66:8c:49:71:3c:46:71:21:c1:b3:9d:f1:88:53:a9:
         81:27:88:d4:81:4d:a0:00:0d:d4:b4:ba:05:16:8c:3a:8f:f7:
         ab:f1:a2:19:8f:ec:e3:94:90:b8:b8:75:01:06:90:ef:e1:a4:
         f9:7e:43:58:68:58:7e:ad:02:b0:01:c9:c1:66:9c:36:d9:fc:
         51:ed:74:1e
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEVmvbA7wZu2ZD23R8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODcz
YjU3MB4XDTI0MDQwMTEzMDAzNloXDTI0MDYzMDEzMDAzNlowLzEtMCsGA1UEAxMk
MDI2OTE0YWQtNDliZi00MmVmLTgwNjktNDRiNDJjM2M2ODAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpMUuNkC8bnsvs6eTFTax3O3ars6mWCumWZc
WBKwRKP+pw1CAbC08/JsRC9M/1IqFri698AZgjHCLSSgqQ1pKU+2MplLrTH48cFm
uFSZPwRVZojjGs1adNjczbXXYaW8IlSvi0PB3LPH25whK1G9gW4u539liualHzEp
Mx68xz/wackM3NORrd9okoaEXriWqCI4P8mWBvmc4Ysmr1L3wTCkjpOOc51mGU+A
I2qYpzl7CUE/EZoLK/ZZlhAb4YAw/5z3Wch7NIPICaPMaiKV6hWTuGPlxTbzOvpL
fk4Vww/+HkzX7kGQC5hex94g9Gw2yDYvRVkAopcry8R0a2G5XQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFHQdRv1ByOsPVZFcJxM3LIbMBG1/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1
ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvYjAxMmEzZGItMzE4Zi0z
NGE1LThlOWQtNzQxMDVjZmNlMTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzlkNWZlZDgtOWM4Ny00NzQ1LWI2
OGItMzkwYjE0ODczYjU3L2M5ZDVmZWQ4LTljODctNDc0NS1iNjhiLTM5MGIxNDg3
M2I1Ny5jcmwwHwYDVR0jBBgwFoAUDWYM/fDvH6VLnSRcuWeReR/q26AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBi
MTQ4NzNiNTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCizyYAwQC
ovfYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBANBEmSevTmSymM6APgdnnjV0pOO/3TCmQOwLTmDLuOlSEGBW
89EfPKrCJRa+WpAAkyNgC/7CXUqHnlGllS7NLovO6dpakZ1oSI/qdJT5UPU397fd
GxmPipzajg6Im2Oo5gENeAms/RLwCzaXge0G/jKP0aGdnIAH9RozZN29GcnPGRqZ
oBO6E/omgiIGUc4CuUnnoIZmBfCX15jJTrHmUINMGxAUR7XtJ2+QrltwuvKqgLyN
uGEc72aMSXE8RnEhwbOd8YhTqYEniNSBTaAADdS0ugUWjDqP96vxohmP7OOUkLi4
dQEGkO/hpPl+Q1hoWH6tArABycFmnDbZ/FHtdB4=
-----END CERTIFICATE-----
Generated at Sat May 11 15:30:50 2024 by rpki-client on console-fra.rpki-client.org