Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/89b013b9-4351-3157-862d-1980b0ead2ea.roa
File:                     89b013b9-4351-3157-862d-1980b0ead2ea.roa (raw, json)
Hash identifier:          mAb82VsnkcBMAtZxzppabxlTznDG8HnMOQA65WHcrAg=
Subject key identifier:   2E:F2:F0:58:78:89:81:20:30:CE:DC:A3:0C:70:70:31:C5:06:D8:AB
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285844DE0FE052CB5E88A336E4D1C0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/89b013b9-4351-3157-862d-1980b0ead2ea.roa
Signing time:             Mon 12 Feb 2024 14:00:30 +0000
ROA not before:           Mon 12 Feb 2024 14:00:30 +0000
ROA not after:            Sun 12 May 2024 13:00:30 +0000
asID:                     174
IP address blocks:        140.228.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:de:0f:e0:52:cb:5e:88:a3:36:e4:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Feb 12 14:00:30 2024 GMT
            Not After : May 12 13:00:30 2024 GMT
        Subject: CN=83b66461-eace-4852-be71-f07c8a7c49e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:58:1c:d4:2e:27:5c:31:73:92:94:62:22:f7:
                    66:85:15:3b:cc:3c:1f:5b:eb:16:78:a3:4a:b4:25:
                    68:6c:6c:18:26:f9:d8:e7:d8:aa:df:16:2b:ed:60:
                    e0:c0:14:52:09:bd:5c:c7:80:0f:48:6d:10:a2:fd:
                    3a:af:56:b7:0d:e2:8f:f6:3b:17:9f:4e:c2:a1:64:
                    4d:06:58:c1:f1:26:16:7f:59:79:a4:35:a7:c3:67:
                    39:25:a0:52:39:75:ae:6b:91:de:65:d8:9a:1b:fc:
                    81:6c:17:ed:fc:ce:af:24:66:12:0e:ec:5a:be:0a:
                    b1:4c:4d:8a:53:ba:b2:53:a3:a3:2f:c4:7e:21:f7:
                    43:87:21:00:07:52:4a:c4:9a:b8:ed:92:7d:60:4c:
                    23:43:4b:1b:c1:4a:cf:06:95:05:fd:4a:08:a0:ad:
                    cd:6d:07:96:6b:53:08:e7:7e:ed:b4:91:c5:18:72:
                    45:53:71:dd:e6:16:80:34:8e:42:90:f2:b1:04:9d:
                    1e:a4:a3:43:28:7a:9e:5e:ec:8e:35:12:a9:3a:ef:
                    ec:51:01:3c:a3:bb:39:ac:d5:b8:bc:4f:31:16:80:
                    f1:c9:e5:02:75:42:3c:ad:88:fe:95:f3:ab:dd:dc:
                    6d:95:6e:0c:b5:53:8e:5f:20:bb:99:81:b4:4f:b3:
                    77:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F2:F0:58:78:89:81:20:30:CE:DC:A3:0C:70:70:31:C5:06:D8:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/89b013b9-4351-3157-862d-1980b0ead2ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:27:b0:0a:de:7b:04:83:44:3d:5c:b7:e0:eb:ed:26:1b:2b:
         17:3f:80:a5:fc:39:ec:dc:ae:bd:1c:98:29:ee:31:df:d6:fe:
         1c:e6:d8:61:8f:ca:49:eb:d2:12:57:ed:ca:05:ab:82:ad:9f:
         bf:9e:ab:40:f4:4e:32:ca:c2:36:2c:cc:5f:7a:d5:47:59:05:
         7c:2e:7d:a7:61:58:11:38:fb:fb:19:61:1f:77:8b:a4:77:19:
         ea:3b:1e:a0:3a:c0:d3:78:d9:fd:c0:29:e3:7f:da:95:34:ba:
         d3:0d:e1:ea:e1:3d:c7:36:ab:da:b1:a9:ce:40:2b:04:df:aa:
         45:6c:1e:c8:c3:05:d1:19:66:1b:08:47:ca:3c:d9:98:1c:00:
         6e:b8:2b:7e:a2:51:67:0f:39:4c:07:ba:cf:2e:a5:7b:dc:d1:
         57:c3:28:48:ef:e8:7e:7e:1e:ea:92:8f:1c:de:38:c6:9b:2f:
         e3:cf:74:9f:97:e2:43:59:de:3f:40:0b:e9:b3:fe:02:11:8c:
         28:90:32:36:58:d5:9e:04:ab:8f:61:e5:3f:2d:a1:6c:1a:fb:
         2b:6a:94:82:32:66:f1:2b:38:1e:a7:98:d0:da:42:5e:3d:49:
         bb:4a:eb:93:c8:0f:33:29:2e:bc:8a:73:50:e0:25:d5:d7:f1:
         1b:ef:f1:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETeD+BSy16Iozbk0cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI0MDIxMjE0MDAzMFoXDTI0MDUxMjEzMDAzMFowLzEtMCsGA1UEAxMk
ODNiNjY0NjEtZWFjZS00ODUyLWJlNzEtZjA3YzhhN2M0OWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVgc1C4nXDFzkpRiIvdmhRU7zDwfW+sWeKNK
tCVobGwYJvnY59iq3xYr7WDgwBRSCb1cx4APSG0Qov06r1a3DeKP9jsXn07CoWRN
BljB8SYWf1l5pDWnw2c5JaBSOXWua5HeZdiaG/yBbBft/M6vJGYSDuxavgqxTE2K
U7qyU6OjL8R+IfdDhyEAB1JKxJq47ZJ9YEwjQ0sbwUrPBpUF/UoIoK3NbQeWa1MI
537ttJHFGHJFU3Hd5haANI5CkPKxBJ0epKNDKHqeXuyONRKpOu/sUQE8o7s5rNW4
vE8xFoDxyeUCdUI8rYj+lfOr3dxtlW4MtVOOXyC7mYG0T7N3twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC7y8Fh4iYEgMM7cowxwcDHFBtirMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvODliMDEzYjktNDM1MS0z
MTU3LTg2MmQtMTk4MGIwZWFkMmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEInsAreewSDRD1ct+Dr7SYbKxc/gKX8Oezcrr0cmCnuMd/W/hzm2GGP
yknr0hJX7coFq4Ktn7+eq0D0TjLKwjYszF961UdZBXwufadhWBE4+/sZYR93i6R3
Geo7HqA6wNN42f3AKeN/2pU0utMN4erhPcc2q9qxqc5AKwTfqkVsHsjDBdEZZhsI
R8o82ZgcAG64K36iUWcPOUwHus8upXvc0VfDKEjv6H5+HuqSjxzeOMabL+PPdJ+X
4kNZ3j9AC+mz/gIRjCiQMjZY1Z4Eq49h5T8toWwa+ytqlIIyZvErOB6nmNDaQl49
SbtK65PIDzMpLryKc1DgJdXX8Rvv8ZI=
-----END CERTIFICATE-----
Generated at Sun Apr 28 16:15:10 2024 by rpki-client on console-fra.rpki-client.org