Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/ebeb1cdf-1c18-3586-a3f2-5fd7d09fdd09.roa
File:                     ebeb1cdf-1c18-3586-a3f2-5fd7d09fdd09.roa (raw, json)
Hash identifier:          86jQlg+NwwZMS3zAaI0vY5+foUZqjD0W1tVRrTMIVTc=
Subject key identifier:   03:A9:9D:CE:0A:48:49:18:10:6F:DA:37:C6:46:74:A4:8C:01:7A:DE
Certificate issuer:       /CN=39bc904e-c316-4e84-92fb-2339457361b2
Certificate serial:       010D0C9F43285847CE6F3E0175E41D3DE2A6A680
Authority key identifier: 6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/ebeb1cdf-1c18-3586-a3f2-5fd7d09fdd09.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     40102
IP address blocks:        160.253.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:3e:01:75:e4:1d:3d:e2:a6:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39bc904e-c316-4e84-92fb-2339457361b2
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=705d0078-3872-4995-a78b-273fe75b8da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d9:91:c9:88:8d:11:e1:12:c0:76:06:7a:6a:
                    46:ed:fd:89:b2:14:35:e2:d0:bb:43:cd:48:00:78:
                    9e:02:04:6a:69:73:ad:de:d0:e9:90:6d:c9:e4:dc:
                    08:b6:77:4f:2c:e5:4e:5e:14:c7:d9:9c:1a:5f:a7:
                    5a:a4:81:64:90:4d:57:99:c1:59:11:46:7b:9d:fd:
                    c6:23:47:49:ea:9d:a1:9b:0b:70:8e:cb:78:56:cf:
                    ff:b3:76:88:93:1d:38:4f:3d:56:0b:35:50:ba:5f:
                    52:38:1d:bf:ba:03:1a:c1:aa:bf:7f:37:57:e7:33:
                    4b:8a:b4:c0:62:d3:ec:d0:75:8e:75:fe:15:ab:38:
                    a8:b2:d5:7a:07:e1:97:20:4e:c1:03:a2:32:18:24:
                    21:d0:07:be:9d:a2:6b:de:9e:be:2a:ed:9a:45:31:
                    04:a5:e5:97:63:76:a9:77:c6:09:f9:e0:9b:41:ac:
                    8d:70:c0:ed:c2:d0:67:ed:7d:1d:77:d2:80:9f:39:
                    14:b7:e3:7a:65:d5:6a:f3:da:fb:e5:c2:08:67:70:
                    03:be:51:e7:35:5c:b0:4f:14:84:cb:0a:b2:bc:7b:
                    83:7d:94:8d:fc:b3:30:5c:76:00:ee:40:3f:9a:c9:
                    50:43:39:f3:53:90:57:ea:bc:2a:f7:cc:d2:7f:02:
                    cb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A9:9D:CE:0A:48:49:18:10:6F:DA:37:C6:46:74:A4:8C:01:7A:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/ebeb1cdf-1c18-3586-a3f2-5fd7d09fdd09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl

            X509v3 Authority Key Identifier:
                keyid:6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.253.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:2a:69:b6:6a:db:7e:f6:29:e3:89:da:1f:13:6e:ec:cf:8e:
         c8:3d:ae:a0:f1:b0:1e:2d:bb:8c:de:ec:19:bf:0b:f3:5d:19:
         51:fa:2e:b8:f2:65:eb:06:1a:a4:3e:0c:ce:9a:1a:c7:c5:3b:
         93:70:00:8c:b8:b9:cc:d4:71:6c:78:fe:a8:b2:a5:da:7e:fc:
         7d:85:73:21:c5:aa:7e:a5:74:f6:5a:c6:9c:ba:59:38:e1:9f:
         44:da:54:47:2b:2d:cb:d0:16:fe:9c:a9:71:b5:e8:8f:4f:fe:
         b7:6e:8f:65:22:a1:e3:c3:f9:0c:59:5c:26:c5:d5:e6:68:58:
         56:f5:36:bb:7e:0a:90:89:8b:70:3e:db:8d:98:37:c2:6c:e8:
         97:82:82:62:af:b1:3e:28:eb:44:63:a8:9a:8f:72:eb:82:6c:
         a6:3c:1f:8f:d6:a3:07:6a:5d:f0:a1:63:d6:20:68:9b:e0:42:
         4c:9f:f7:a9:05:e8:8c:1b:1f:74:96:70:74:c2:37:02:a7:83:
         69:b9:de:cc:12:9a:15:22:18:e5:ae:a5:9c:6e:71:62:26:96:
         ec:54:24:f8:e0:c0:45:dc:09:ba:97:97:78:a4:c1:36:c8:3a:
         07:2f:14:09:49:72:eb:47:86:fa:4d:4d:36:58:12:0f:90:67:
         61:b0:6f:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfObz4BdeQdPeKmpoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzliYzkwNGUtYzMxNi00ZTg0LTkyZmItMjMzOTQ1NzM2
MWIyMB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk
NzA1ZDAwNzgtMzg3Mi00OTk1LWE3OGItMjczZmU3NWI4ZGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydmRyYiNEeESwHYGempG7f2JshQ14tC7Q81I
AHieAgRqaXOt3tDpkG3J5NwItndPLOVOXhTH2ZwaX6dapIFkkE1XmcFZEUZ7nf3G
I0dJ6p2hmwtwjst4Vs//s3aIkx04Tz1WCzVQul9SOB2/ugMawaq/fzdX5zNLirTA
YtPs0HWOdf4VqziostV6B+GXIE7BA6IyGCQh0Ae+naJr3p6+Ku2aRTEEpeWXY3ap
d8YJ+eCbQayNcMDtwtBn7X0dd9KAnzkUt+N6ZdVq89r75cIIZ3ADvlHnNVywTxSE
ywqyvHuDfZSN/LMwXHYA7kA/mslQQznzU5BX6rwq98zSfwLLywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAOpnc4KSEkYEG/aN8ZGdKSMAXreMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zOWJj
OTA0ZS1jMzE2LTRlODQtOTJmYi0yMzM5NDU3MzYxYjIvZWJlYjFjZGYtMWMxOC0z
NTg2LWEzZjItNWZkN2QwOWZkZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzliYzkwNGUtYzMxNi00ZTg0LTky
ZmItMjMzOTQ1NzM2MWIyLzM5YmM5MDRlLWMzMTYtNGU4NC05MmZiLTIzMzk0NTcz
NjFiMi5jcmwwHwYDVR0jBBgwFoAUbfN0ZIQ+Wp5nQIOp6FOkMjiucYMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zOWJjOTA0ZS1jMzE2LTRlODQtOTJmYi0yMzM5
NDU3MzYxYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoP1AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHAqabZq2372KeOJ2h8TbuzPjsg9rqDxsB4tu4ze7Bm/C/NdGVH6Lrjy
ZesGGqQ+DM6aGsfFO5NwAIy4uczUcWx4/qiypdp+/H2FcyHFqn6ldPZaxpy6WTjh
n0TaVEcrLcvQFv6cqXG16I9P/rduj2UioePD+QxZXCbF1eZoWFb1Nrt+CpCJi3A+
242YN8Js6JeCgmKvsT4o60RjqJqPcuuCbKY8H4/WowdqXfChY9YgaJvgQkyf96kF
6IwbH3SWcHTCNwKng2m53swSmhUiGOWupZxucWImluxUJPjgwEXcCbqXl3ikwTbI
OgcvFAlJcutHhvpNTTZYEg+QZ2Gwb70=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org