Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e52f444-65b3-3cf6-883a-6e7fadd14311.roa
File:                     2e52f444-65b3-3cf6-883a-6e7fadd14311.roa (raw, json)
Hash identifier:          McUwk2Hp4UEaZUpLdsoZwYOoA+X77V1BHm0gpS0UbGY=
Subject key identifier:   D2:02:CD:C6:C5:51:3A:D5:0C:5C:A3:D3:5E:B2:34:8C:99:43:8A:CD
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D933DCC827CB2203F17F6A80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e52f444-65b3-3cf6-883a-6e7fadd14311.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        57.134.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:dc:c8:27:cb:22:03:f1:7f:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=71ee4e42-a922-4800-a9a3-29dcb2d99ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f7:38:0a:db:a8:a9:21:e4:5d:44:e0:15:8c:
                    70:69:df:b6:e6:90:76:30:e2:4d:40:57:11:b8:cb:
                    4a:c1:8a:04:dd:89:b5:7f:57:5f:d1:86:b1:bb:8e:
                    5a:58:5b:22:27:75:d8:cb:04:93:19:15:5e:32:71:
                    11:58:d0:a5:45:11:9a:0e:7a:fc:8c:69:ca:1a:d7:
                    ff:92:ef:0f:0b:4c:db:29:c0:07:d0:50:cd:7a:01:
                    cf:88:82:f3:d7:23:6c:76:61:fe:a5:3e:dd:f5:88:
                    3c:b7:e9:a5:6a:9b:90:64:40:19:e8:50:be:cc:e1:
                    bf:6e:92:f4:30:df:7f:ce:d4:e4:36:b7:31:37:4f:
                    f6:f0:f6:2a:83:a0:e1:09:e0:42:36:ae:6b:53:cb:
                    af:43:9c:e5:ab:9b:dd:38:71:b8:89:6c:55:35:7d:
                    a3:77:7f:b9:db:86:2c:e4:25:5b:69:10:03:3b:3b:
                    e5:88:f2:1e:ca:3e:06:72:f3:c5:c9:72:6b:20:a1:
                    e1:25:a4:13:79:98:ad:64:72:f4:a6:8c:e7:2f:ee:
                    f0:e5:8f:67:93:4b:c8:d2:ab:1a:da:d4:12:db:35:
                    b8:26:49:e1:ab:a9:16:01:59:10:52:5f:50:ba:6c:
                    43:76:83:39:d3:43:33:fd:11:02:b2:be:d1:39:29:
                    80:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:02:CD:C6:C5:51:3A:D5:0C:5C:A3:D3:5E:B2:34:8C:99:43:8A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e52f444-65b3-3cf6-883a-6e7fadd14311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.134.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f7:b0:8b:f4:96:d6:c3:ec:ac:bc:65:04:d7:be:01:6b:f0:
         13:99:48:d9:31:b8:74:da:4b:75:79:9d:25:48:bb:ea:70:a6:
         1c:75:57:f9:ca:ea:ab:52:9d:ed:31:c9:c6:13:ef:03:1c:d0:
         e2:ab:8b:bd:8b:0d:04:e2:37:39:43:69:7c:8d:0b:da:35:5b:
         33:96:1b:da:b4:9b:e4:09:f6:47:d9:06:b1:8d:54:ba:a1:96:
         ea:8d:3b:2f:86:3a:10:58:1e:9c:16:bb:54:5e:8b:cb:a4:13:
         b5:41:ed:df:0a:c6:97:82:c6:0c:5b:d6:8f:8f:2e:a4:2d:e5:
         17:ca:bb:fb:87:ab:52:4e:6c:33:b2:3e:58:1e:0f:6d:97:2b:
         7e:a8:ce:25:51:72:3b:54:fe:86:92:fe:5d:5b:ff:03:be:c5:
         1c:35:d5:4f:2b:fe:2e:23:cf:08:d6:5c:03:68:8f:e3:90:d0:
         d6:33:43:b5:37:c7:c1:75:12:63:9c:aa:12:1e:2f:3d:e1:62:
         d4:78:46:d8:1b:b2:4e:8c:f4:c1:3b:0a:ef:60:75:9a:fc:9e:
         90:44:05:f2:5c:2e:07:db:a2:37:3f:56:fa:77:f2:19:35:e0:
         56:90:8e:46:e6:77:6a:a8:82:2a:0e:6f:90:47:62:23:44:37:
         9e:ad:c5:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXZM9zIJ8siA/F/aoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI0MDUxMjEzMDAzNFoXDTI0MDgxMDEzMDAzNFowLzEtMCsGA1UEAxMk
NzFlZTRlNDItYTkyMi00ODAwLWE5YTMtMjlkY2IyZDk5ZmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPc4CtuoqSHkXUTgFYxwad+25pB2MOJNQFcR
uMtKwYoE3Ym1f1df0Yaxu45aWFsiJ3XYywSTGRVeMnERWNClRRGaDnr8jGnKGtf/
ku8PC0zbKcAH0FDNegHPiILz1yNsdmH+pT7d9Yg8t+mlapuQZEAZ6FC+zOG/bpL0
MN9/ztTkNrcxN0/28PYqg6DhCeBCNq5rU8uvQ5zlq5vdOHG4iWxVNX2jd3+524Ys
5CVbaRADOzvliPIeyj4GcvPFyXJrIKHhJaQTeZitZHL0poznL+7w5Y9nk0vI0qsa
2tQS2zW4Jknhq6kWAVkQUl9QumxDdoM500Mz/RECsr7ROSmAuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNICzcbFUTrVDFyj016yNIyZQ4rNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMmU1MmY0NDQtNjViMy0z
Y2Y2LTg4M2EtNmU3ZmFkZDE0MzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHOYYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACj3sIv0ltbD7Ky8ZQTXvgFr8BOZSNkxuHTaS3V5nSVIu+pwphx1V/nK
6qtSne0xycYT7wMc0OKri72LDQTiNzlDaXyNC9o1WzOWG9q0m+QJ9kfZBrGNVLqh
luqNOy+GOhBYHpwWu1Rei8ukE7VB7d8KxpeCxgxb1o+PLqQt5RfKu/uHq1JObDOy
PlgeD22XK36oziVRcjtU/oaS/l1b/wO+xRw11U8r/i4jzwjWXANoj+OQ0NYzQ7U3
x8F1EmOcqhIeLz3hYtR4Rtgbsk6M9ME7Cu9gdZr8npBEBfJcLgfbojc/Vvp38hk1
4FaQjkbmd2qogioOb5BHYiNEN56txXE=
-----END CERTIFICATE-----
Generated at Mon May 20 15:19:38 2024 by rpki-client on console-fra.rpki-client.org