Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/dc04b1c3-67b4-3531-afdf-7c1d39073812.roa
File:                     dc04b1c3-67b4-3531-afdf-7c1d39073812.roa (raw, json)
Hash identifier:          oRlyB57sHUVUHy4XX+5vJuJmLVuFUDMEtXyAP4JNTc8=
Subject key identifier:   D6:02:34:A7:7F:E8:DD:07:4D:2B:CD:6F:FA:17:50:F8:AB:5C:B3:95
Certificate issuer:       /CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71
Certificate serial:       010D0C9F43285845B21E24FCC4F1FA108546B400
Authority key identifier: 6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/dc04b1c3-67b4-3531-afdf-7c1d39073812.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     10490
IP address blocks:        128.61.0.0/16 maxlen: 24
                          130.207.0.0/16 maxlen: 24
                          143.215.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:24:fc:c4:f1:fa:10:85:46:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=7df170c4-5743-4311-9ec1-65140e7a9568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ea:4c:41:dc:d0:95:68:db:40:81:f8:42:73:
                    3f:cc:7b:20:a6:ab:99:e3:58:9f:2b:a7:5b:39:c1:
                    7b:1d:87:df:c5:b5:27:51:59:c7:81:dd:d0:62:70:
                    a4:d3:b8:17:9e:a5:b4:23:30:e6:7d:66:a2:e4:78:
                    9f:2c:f5:61:e2:d9:92:67:db:f2:2d:3a:ce:5e:30:
                    eb:6f:c0:57:ba:30:59:45:6b:c5:41:44:8e:fb:27:
                    b4:90:ea:ce:ac:c8:85:00:2a:e9:a9:16:19:46:a9:
                    9b:38:9b:32:80:6b:c3:21:8d:6b:85:02:01:93:9c:
                    eb:9f:b1:88:f2:3f:b9:82:a4:8f:d0:b1:6e:ed:dc:
                    2b:ff:1e:45:1f:85:6c:6a:71:32:7a:9a:db:a6:9c:
                    d0:40:41:85:d1:d8:1f:12:73:d6:68:2b:9d:6e:51:
                    57:a1:ae:32:f6:87:aa:0c:02:23:83:79:e0:32:bf:
                    72:e4:bd:7c:8f:b3:e2:9f:a0:c6:21:9e:9a:51:28:
                    97:3a:ff:8e:85:33:76:76:ac:b1:81:54:23:b8:f8:
                    bf:04:24:90:a5:8d:f3:a7:48:54:39:a9:3f:d5:7f:
                    66:33:50:7a:74:0d:d7:4a:a3:c9:18:91:5f:f0:09:
                    6d:b4:99:d1:a9:e3:1b:94:02:a2:67:51:cf:a7:da:
                    45:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:02:34:A7:7F:E8:DD:07:4D:2B:CD:6F:FA:17:50:F8:AB:5C:B3:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/dc04b1c3-67b4-3531-afdf-7c1d39073812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.crl

            X509v3 Authority Key Identifier:
                keyid:6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.61.0.0/16
                  130.207.0.0/16
                  143.215.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:65:99:fb:c7:f2:8c:3f:9c:d5:3e:8d:53:63:66:05:c5:62:
         f0:f3:02:13:6f:22:66:a1:a6:f7:8b:6f:9e:00:e6:ee:99:d1:
         39:7c:8a:09:19:45:c4:0f:8e:ff:34:09:ad:21:1d:5e:1a:2a:
         ce:22:6e:9b:68:da:5e:52:94:11:bc:75:b2:af:cb:e5:24:be:
         f3:72:5c:85:bd:a0:46:1a:14:32:a2:14:19:b7:d1:33:1c:8e:
         b0:c4:50:c0:aa:d2:49:d4:6b:f1:17:b1:a2:c0:c4:f1:80:6d:
         84:9f:62:dc:a6:b9:9a:31:46:68:05:78:9e:12:51:b4:9e:95:
         b5:ae:5a:23:63:4c:e0:26:d1:ee:33:83:21:bc:66:09:82:51:
         5d:48:d5:c9:1c:e9:4f:20:e3:82:ea:7f:1a:2a:85:bf:f6:6d:
         f5:39:44:11:29:f3:09:43:7d:fb:7f:51:1c:4b:0e:c3:53:89:
         85:e8:9f:a5:40:ac:39:79:30:82:9e:fc:1a:e1:54:76:e0:26:
         e5:42:33:b6:65:13:05:1e:65:ae:03:ee:bb:d8:e3:f7:a4:21:
         f5:8a:b2:e1:28:2b:ad:3e:8f:8c:1f:f5:1e:d7:fc:77:a7:35:
         9f:64:a0:51:19:48:61:fc:1b:04:de:d5:06:4e:a5:56:9a:37:
         21:a5:59:5c
-----BEGIN CERTIFICATE-----
MIIGTDCCBTSgAwIBAgIUAQ0Mn0MoWEWyHiT8xPH6EIVGtAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTMxYmE3YjktNzBhNS00ZTdlLWJiYTQtMWE1YzIwNDg4
YzcxMB4XDTI0MDQyODEzMDAzNFoXDTI0MDcyNzEzMDAzNFowLzEtMCsGA1UEAxMk
N2RmMTcwYzQtNTc0My00MzExLTllYzEtNjUxNDBlN2E5NTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjupMQdzQlWjbQIH4QnM/zHsgpquZ41ifK6db
OcF7HYffxbUnUVnHgd3QYnCk07gXnqW0IzDmfWai5HifLPVh4tmSZ9vyLTrOXjDr
b8BXujBZRWvFQUSO+ye0kOrOrMiFACrpqRYZRqmbOJsygGvDIY1rhQIBk5zrn7GI
8j+5gqSP0LFu7dwr/x5FH4VsanEyeprbppzQQEGF0dgfEnPWaCudblFXoa4y9oeq
DAIjg3ngMr9y5L18j7Pin6DGIZ6aUSiXOv+OhTN2dqyxgVQjuPi/BCSQpY3zp0hU
Oak/1X9mM1B6dA3XSqPJGJFf8AlttJnRqeMblAKiZ1HPp9pFkwIDAQABo4IDXjCC
A1owHQYDVR0OBBYEFNYCNKd/6N0HTSvNb/oXUPirXLOVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMzFi
YTdiOS03MGE1LTRlN2UtYmJhNC0xYTVjMjA0ODhjNzEvZGMwNGIxYzMtNjdiNC0z
NTMxLWFmZGYtN2MxZDM5MDczODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTMxYmE3YjktNzBhNS00ZTdlLWJi
YTQtMWE1YzIwNDg4YzcxLzEzMWJhN2I5LTcwYTUtNGU3ZS1iYmE0LTFhNWMyMDQ4
OGM3MS5jcmwwHwYDVR0jBBgwFoAUawYQaOFd4AD9aYEVHHxDxPlGoJIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xMzFiYTdiOS03MGE1LTRlN2UtYmJhNC0xYTVj
MjA0ODhjNzEuY2VyMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAATAPAwMAgD0DAwCC
zwMDAI/XMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBAJBlmfvH8ow/nNU+jVNjZgXFYvDzAhNvImahpveLb54A
5u6Z0Tl8igkZRcQPjv80Ca0hHV4aKs4ibpto2l5SlBG8dbKvy+UkvvNyXIW9oEYa
FDKiFBm30TMcjrDEUMCq0knUa/EXsaLAxPGAbYSfYtymuZoxRmgFeJ4SUbSelbWu
WiNjTOAm0e4zgyG8ZgmCUV1I1ckc6U8g44Lqfxoqhb/2bfU5RBEp8wlDfft/URxL
DsNTiYXon6VArDl5MIKe/BrhVHbgJuVCM7ZlEwUeZa4D7rvY4/ekIfWKsuEoK60+
j4wf9R7X/HenNZ9koFEZSGH8GwTe1QZOpVaaNyGlWVw=
-----END CERTIFICATE-----
Generated at Mon Jun 3 21:55:33 2024 by rpki-client on console-fra.rpki-client.org