Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa
File:                     6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa (raw, json)
Hash identifier:          YpGGU/S/g9RNlSVoyBTg6kZFWXfV+l6hD5uebev5VZo=
Subject key identifier:   25:AE:65:D4:02:29:11:5F:07:09:1E:E8:2D:5A:EF:E9:66:0E:B5:A5
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F43285844FCC5699CF4B6758B6DD37D80
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa
Signing time:             Fri 23 Feb 2024 14:00:31 +0000
ROA not before:           Fri 23 Feb 2024 14:00:31 +0000
ROA not after:            Thu 23 May 2024 13:00:31 +0000
asID:                     1239
IP address blocks:        149.143.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:c5:69:9c:f4:b6:75:8b:6d:d3:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Feb 23 14:00:31 2024 GMT
            Not After : May 23 13:00:31 2024 GMT
        Subject: CN=70f1fbcc-b9d0-4395-904c-4c472259ac0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:d0:9b:30:04:72:48:b5:0e:95:30:2d:3e:
                    64:7b:33:1b:57:36:41:c9:b6:e9:f8:e3:20:79:f4:
                    e7:41:58:65:bc:ca:93:75:b9:aa:52:a5:73:6e:54:
                    f3:5f:11:71:c0:60:08:b7:d1:65:d8:2f:d3:80:e4:
                    bc:1b:2b:0b:7a:fb:cf:91:03:b4:dd:c0:43:f2:3d:
                    65:a1:4b:c7:2d:ba:3c:01:5b:72:5c:b0:c7:47:d6:
                    e0:25:1c:e1:dd:e4:72:ec:0e:89:15:ae:fa:87:43:
                    b3:d1:20:18:4f:57:23:a7:ac:22:5b:5d:c5:9a:9a:
                    c7:60:59:0f:5b:8d:b8:a9:dc:92:4a:22:fb:92:f3:
                    52:c9:34:a9:8d:41:23:d0:90:59:54:a5:95:c5:56:
                    cd:e4:07:26:1e:ea:cf:8f:e6:8a:db:71:09:5f:75:
                    e2:73:48:7c:28:86:0f:5b:9f:cd:f0:c2:26:9f:32:
                    39:cb:58:bf:1f:d9:41:76:83:b2:96:56:9c:9b:19:
                    d4:d8:fb:9c:a4:cf:5f:fb:57:f6:24:05:dc:94:3d:
                    0c:c4:01:ec:61:90:31:7e:63:13:94:2c:48:df:d6:
                    ce:31:ee:12:0e:6a:99:c7:57:3d:d8:f6:50:7e:ba:
                    1a:bf:94:fa:5a:4d:2f:2f:e9:f0:8f:8b:27:45:38:
                    50:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AE:65:D4:02:29:11:5F:07:09:1E:E8:2D:5A:EF:E9:66:0E:B5:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.143.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:76:33:52:38:ca:b8:2f:75:c1:2e:d2:65:1c:89:c9:23:02:
         be:a4:ee:12:0a:f0:e2:5f:ba:e7:13:e2:bf:41:0b:91:0f:7b:
         07:ed:33:dd:53:d5:40:fa:99:99:4f:83:76:e2:8c:3c:38:34:
         dc:46:dc:86:98:c9:3b:f0:9f:0e:94:f2:80:5d:ee:49:10:ad:
         6b:6c:00:a8:ee:b9:4a:aa:df:4e:b4:88:99:c8:90:21:fd:fc:
         05:72:d6:15:9b:5a:a9:36:50:e7:5f:b5:89:0f:47:09:46:4e:
         1e:64:03:a4:fc:8f:f5:94:82:f3:4d:37:37:c6:04:6f:df:16:
         5b:81:9a:7d:3d:a0:a6:92:04:a6:99:19:05:2d:79:cd:d8:c2:
         0d:ef:e6:59:fc:e0:ad:a9:ea:43:b2:6d:c2:89:17:d5:a9:3e:
         d1:50:1d:31:6b:aa:ef:25:e5:07:fd:b8:77:3b:11:45:eb:e7:
         4d:c6:9c:fb:79:90:8a:fa:63:2b:9d:ad:a8:60:74:30:f4:5e:
         89:4c:fe:f6:3d:07:87:df:6d:92:3a:84:ac:7e:33:6c:6b:71:
         de:ee:f3:91:4f:bc:d7:09:51:68:35:8c:d3:d0:22:4d:f4:e9:
         5b:a6:0b:53:1d:58:d2:3a:d9:c6:8b:f3:8d:36:3f:b6:cf:c5:
         08:fa:bb:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET8xWmc9LZ1i23TfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI0MDIyMzE0MDAzMVoXDTI0MDUyMzEzMDAzMVowLzEtMCsGA1UEAxMk
NzBmMWZiY2MtYjlkMC00Mzk1LTkwNGMtNGM0NzIyNTlhYzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta7QmzAEcki1DpUwLT5kezMbVzZBybbp+OMg
efTnQVhlvMqTdbmqUqVzblTzXxFxwGAIt9Fl2C/TgOS8GysLevvPkQO03cBD8j1l
oUvHLbo8AVtyXLDHR9bgJRzh3eRy7A6JFa76h0Oz0SAYT1cjp6wiW13FmprHYFkP
W424qdySSiL7kvNSyTSpjUEj0JBZVKWVxVbN5AcmHurPj+aK23EJX3Xic0h8KIYP
W5/N8MImnzI5y1i/H9lBdoOyllacmxnU2PucpM9f+1f2JAXclD0MxAHsYZAxfmMT
lCxI39bOMe4SDmqZx1c92PZQfroav5T6Wk0vL+nwj4snRThQrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCWuZdQCKRFfBwke6C1a7+lmDrWlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNmQ3YTE4MTgtYjAzZi0z
NDRkLWJhNmYtZDJmNDhkNmQ0YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAd2M1I4yrgvdcEu0mUcickjAr6k7hIK8OJfuucT4r9BC5EPewftM91T
1UD6mZlPg3bijDw4NNxG3IaYyTvwnw6U8oBd7kkQrWtsAKjuuUqq3060iJnIkCH9
/AVy1hWbWqk2UOdftYkPRwlGTh5kA6T8j/WUgvNNNzfGBG/fFluBmn09oKaSBKaZ
GQUtec3Ywg3v5ln84K2p6kOybcKJF9WpPtFQHTFrqu8l5Qf9uHc7EUXr503GnPt5
kIr6YyudrahgdDD0XolM/vY9B4ffbZI6hKx+M2xrcd7u85FPvNcJUWg1jNPQIk30
6VumC1MdWNI62caL8402P7bPxQj6u7s=
-----END CERTIFICATE-----
Generated at Thu Mar 28 02:17:17 2024 by rpki-client on console-ams.rpki-client.org