Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696/8aab8bbf-1f8a-3cdb-aa8c-94cb9fd0d4e5.roa
File:                     8aab8bbf-1f8a-3cdb-aa8c-94cb9fd0d4e5.roa (raw, json)
Hash identifier:          zNzh2lAA2pU2Cc28SeB5Sl64YWznZDW/x1L7bdZm438=
Subject key identifier:   82:B7:04:88:07:6B:6B:D2:42:5B:B7:C6:00:45:9C:D4:FE:CF:D2:12
Certificate issuer:       /CN=3d6e534c-13c8-43aa-8c1b-6ea3c1731696
Certificate serial:       010D0C9F432858483F802A68E4F6FA9F31603080
Authority key identifier: E2:CB:7E:14:50:AC:C8:36:98:CA:31:F9:DA:52:B4:DF:E7:1D:06:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696/8aab8bbf-1f8a-3cdb-aa8c-94cb9fd0d4e5.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     399702
IP address blocks:        140.106.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696/3d6e534c-13c8-43aa-8c1b-6ea3c1731696.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696/3d6e534c-13c8-43aa-8c1b-6ea3c1731696.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:2a:68:e4:f6:fa:9f:31:60:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d6e534c-13c8-43aa-8c1b-6ea3c1731696
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=2755e40b-ed04-4470-893f-f7d44fdfcdb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:9b:82:da:4b:f1:02:cf:83:a3:da:25:d7:
                    15:63:bf:ce:35:b0:49:a5:3e:a0:5c:aa:31:a9:91:
                    da:37:04:5d:e7:01:b5:9d:85:34:15:39:94:d0:2b:
                    ee:f3:64:f8:37:40:62:46:43:d9:d5:76:41:6f:36:
                    22:f2:be:6b:7c:4c:83:25:bd:65:d8:f5:c9:cf:f2:
                    5d:13:d8:03:01:19:67:87:b4:61:8f:ef:44:40:7c:
                    6d:4e:b5:51:b5:f2:40:a1:53:7f:c3:43:a6:38:65:
                    7a:d2:3d:6f:cb:67:4f:f0:9f:c8:6b:cd:a7:06:3a:
                    f1:15:7d:06:ea:25:3b:26:31:4b:56:13:94:97:f0:
                    87:17:c4:27:0d:be:a5:6e:fa:61:bd:5a:24:a2:9b:
                    9b:ba:9b:cc:dd:b6:8d:05:f7:c8:62:51:ec:be:33:
                    2b:ae:af:c2:1a:b7:2a:50:a0:a6:79:2c:6b:13:a4:
                    2c:dd:70:e1:f2:fd:2c:6d:b0:33:b8:e0:e1:4f:9d:
                    c0:a4:57:21:9a:47:98:a9:91:01:d7:f2:bc:94:0e:
                    38:e9:02:a2:d3:9b:49:ec:a1:d6:14:4f:3f:79:52:
                    d9:60:da:03:84:05:de:af:c7:86:96:5d:4f:60:eb:
                    c1:c0:89:10:93:0f:02:82:93:99:19:1c:f3:78:2d:
                    35:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B7:04:88:07:6B:6B:D2:42:5B:B7:C6:00:45:9C:D4:FE:CF:D2:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696/8aab8bbf-1f8a-3cdb-aa8c-94cb9fd0d4e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696/3d6e534c-13c8-43aa-8c1b-6ea3c1731696.crl

            X509v3 Authority Key Identifier:
                keyid:E2:CB:7E:14:50:AC:C8:36:98:CA:31:F9:DA:52:B4:DF:E7:1D:06:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.106.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:fe:9e:58:9f:fe:12:1e:b5:e9:fe:65:59:c1:f0:5b:b0:b2:
         f2:9a:77:40:61:d4:91:f7:1f:d9:21:b7:1f:ef:9f:28:51:cf:
         1c:71:78:2b:08:7f:02:e9:31:f4:59:68:7b:2c:ab:0c:e5:dc:
         0a:97:c1:93:19:87:f5:bc:08:be:8f:ec:a2:bd:1a:3e:40:47:
         a5:8a:99:4d:01:60:cc:9b:7b:ca:3e:10:22:23:2b:0c:7e:f3:
         d6:cd:9f:cf:8c:f9:aa:6c:56:ce:d6:72:48:76:de:c4:78:e0:
         5a:c5:8d:65:59:83:71:73:ed:9a:b8:95:b8:b3:86:ea:51:0d:
         35:38:b9:61:62:dd:c2:54:e6:d1:b5:b5:72:e8:91:20:aa:26:
         17:8c:a1:04:5f:5b:a9:df:b0:8c:db:f6:a9:e1:04:7d:04:55:
         a8:cf:44:e9:1e:f2:86:79:9a:84:ea:43:58:53:31:84:fc:4e:
         e4:91:f4:03:a7:f3:3f:24:90:c7:72:e3:a4:ab:ea:41:1a:a6:
         ba:91:28:c1:05:0f:71:a5:53:d9:b3:e1:f3:19:09:e8:31:8b:
         a0:00:2a:ae:a0:75:4b:5c:a3:60:25:57:87:88:24:5b:11:ca:
         d6:ba:82:90:bc:20:ab:8c:31:4c:4a:f8:c3:e7:08:30:81:80:
         46:84:7b:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gCpo5Pb6nzFgMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q2ZTUzNGMtMTNjOC00M2FhLThjMWItNmVhM2MxNzMx
Njk2MB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
Mjc1NWU0MGItZWQwNC00NDcwLTg5M2YtZjdkNDRmZGZjZGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdWbgtpL8QLPg6PaJdcVY7/ONbBJpT6gXKox
qZHaNwRd5wG1nYU0FTmU0Cvu82T4N0BiRkPZ1XZBbzYi8r5rfEyDJb1l2PXJz/Jd
E9gDARlnh7Rhj+9EQHxtTrVRtfJAoVN/w0OmOGV60j1vy2dP8J/Ia82nBjrxFX0G
6iU7JjFLVhOUl/CHF8QnDb6lbvphvVokopubupvM3baNBffIYlHsvjMrrq/CGrcq
UKCmeSxrE6Qs3XDh8v0sbbAzuODhT53ApFchmkeYqZEB1/K8lA446QKi05tJ7KHW
FE8/eVLZYNoDhAXer8eGll1PYOvBwIkQkw8CgpOZGRzzeC01BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIK3BIgHa2vSQlu3xgBFnNT+z9ISMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZDZl
NTM0Yy0xM2M4LTQzYWEtOGMxYi02ZWEzYzE3MzE2OTYvOGFhYjhiYmYtMWY4YS0z
Y2RiLWFhOGMtOTRjYjlmZDBkNGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Q2ZTUzNGMtMTNjOC00M2FhLThj
MWItNmVhM2MxNzMxNjk2LzNkNmU1MzRjLTEzYzgtNDNhYS04YzFiLTZlYTNjMTcz
MTY5Ni5jcmwwHwYDVR0jBBgwFoAU4st+FFCsyDaYyjH52lK03+cdBq0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZDZlNTM0Yy0xM2M4LTQzYWEtOGMxYi02ZWEz
YzE3MzE2OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjGqgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIf+nlif/hIeten+ZVnB8FuwsvKad0Bh1JH3H9khtx/vnyhRzxxxeCsI
fwLpMfRZaHssqwzl3AqXwZMZh/W8CL6P7KK9Gj5AR6WKmU0BYMybe8o+ECIjKwx+
89bNn8+M+apsVs7Wckh23sR44FrFjWVZg3Fz7Zq4lbizhupRDTU4uWFi3cJU5tG1
tXLokSCqJheMoQRfW6nfsIzb9qnhBH0EVajPROke8oZ5moTqQ1hTMYT8TuSR9AOn
8z8kkMdy46Sr6kEaprqRKMEFD3GlU9mz4fMZCegxi6AAKq6gdUtco2AlV4eIJFsR
yta6gpC8IKuMMUxK+MPnCDCBgEaEe9E=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:04 2025 by rpki-client