Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3d41eee-1866-48b2-913f-cffb9d8550ce/5ebd963b-8ed9-3d24-b150-881195814f25.roa
File:                     5ebd963b-8ed9-3d24-b150-881195814f25.roa (raw, json)
Hash identifier:          wkcnziZrzicBmN7wYqY4//hKs6KvOqIgcAkYYvii65o=
Subject key identifier:   C5:6E:B6:E6:44:93:7B:4F:E0:F0:0A:14:13:5E:E2:BB:3F:6F:D8:6A
Certificate issuer:       /CN=f3d41eee-1866-48b2-913f-cffb9d8550ce
Certificate serial:       010D0C9F43285845304D39EF706999ED55126000
Authority key identifier: 0B:FC:E6:47:2D:91:CF:EA:6D:C6:79:FC:20:34:38:4E:71:B5:B5:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3d41eee-1866-48b2-913f-cffb9d8550ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3d41eee-1866-48b2-913f-cffb9d8550ce/5ebd963b-8ed9-3d24-b150-881195814f25.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        161.129.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3d41eee-1866-48b2-913f-cffb9d8550ce/f3d41eee-1866-48b2-913f-cffb9d8550ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3d41eee-1866-48b2-913f-cffb9d8550ce/f3d41eee-1866-48b2-913f-cffb9d8550ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3d41eee-1866-48b2-913f-cffb9d8550ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:39:ef:70:69:99:ed:55:12:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3d41eee-1866-48b2-913f-cffb9d8550ce
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=413d9074-a123-4f21-8aa4-77fa2eb9f75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:48:e7:86:d2:21:84:76:54:fe:82:0a:ce:
                    a2:70:fa:f4:a8:01:97:75:ac:8e:fa:44:e0:fa:2f:
                    53:0f:4c:73:67:c1:86:03:25:ec:a9:e0:d2:90:ff:
                    4d:3a:c4:5a:29:8c:1f:1d:c8:c5:69:06:d8:73:b3:
                    a5:20:da:14:ec:1b:a1:79:9d:80:da:c8:44:63:c6:
                    c2:70:fc:73:68:22:0e:56:94:0f:ac:eb:56:e5:b7:
                    49:f2:d2:dd:81:44:db:f1:07:3f:3e:b6:59:8b:bc:
                    62:fa:3c:e0:8f:c3:fe:b4:16:cc:14:52:08:92:6d:
                    ef:56:13:50:71:79:e2:75:3d:03:48:fc:e5:0e:ad:
                    bf:5a:db:28:7b:93:6c:30:58:aa:b7:21:b4:db:68:
                    c0:12:a3:ca:b2:d4:2b:2f:a2:a6:de:d4:be:d8:cd:
                    5c:b2:b1:a9:cf:f7:a5:3f:04:c6:97:c3:3f:66:a7:
                    5d:af:6d:f9:c7:9c:35:ce:7c:22:2e:38:6f:16:14:
                    eb:0d:63:f7:75:d3:cb:db:a6:a0:3e:0a:73:ce:7e:
                    6a:d4:4a:65:b9:73:ec:ed:3c:45:ee:58:47:b8:42:
                    d7:c9:33:4f:fa:c3:09:d8:f9:38:2a:ed:ad:22:2f:
                    2c:04:ec:f4:54:fe:fc:6c:dc:a8:08:22:8e:7d:7e:
                    bd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6E:B6:E6:44:93:7B:4F:E0:F0:0A:14:13:5E:E2:BB:3F:6F:D8:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3d41eee-1866-48b2-913f-cffb9d8550ce/5ebd963b-8ed9-3d24-b150-881195814f25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3d41eee-1866-48b2-913f-cffb9d8550ce/f3d41eee-1866-48b2-913f-cffb9d8550ce.crl

            X509v3 Authority Key Identifier:
                keyid:0B:FC:E6:47:2D:91:CF:EA:6D:C6:79:FC:20:34:38:4E:71:B5:B5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3d41eee-1866-48b2-913f-cffb9d8550ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:52:b0:ac:4a:b9:ee:23:3e:5e:d8:35:45:28:e9:2b:b3:01:
         f8:5b:14:d0:e0:c3:e9:b5:28:01:e2:1b:c1:20:8d:c2:53:a9:
         ad:48:79:cf:f1:0e:e6:24:09:62:ba:1f:8f:a6:eb:61:84:8a:
         de:0e:98:fc:41:6d:e0:5b:f8:1d:ad:58:b6:3b:8d:33:e9:dd:
         3f:63:b8:19:15:a0:8a:4a:87:2a:45:56:b1:6d:29:b6:2e:b9:
         2d:44:54:cf:26:62:7a:e4:85:9d:1d:21:88:7e:b3:16:23:f9:
         bd:43:04:52:0c:b0:78:14:14:e0:57:8c:27:56:15:f8:3e:c9:
         53:b7:7d:96:0c:65:cb:0d:17:d7:9a:e9:27:1e:bd:d6:64:2b:
         72:6f:ef:9e:6a:2d:06:9c:c8:4d:94:02:ff:02:8b:e4:0a:3e:
         c1:0a:6f:ab:55:6e:61:7b:83:2b:6d:b7:83:e3:97:f1:f1:7e:
         85:20:16:a3:6f:bd:c8:4d:bb:e3:38:1f:bc:fa:88:88:58:63:
         97:03:6f:ac:df:97:9f:d6:a1:b5:83:6a:36:d2:0e:75:00:f0:
         37:c0:53:e0:6a:8f:55:9a:79:fa:bf:7c:2c:40:f7:4a:4b:bb:
         53:49:ad:90:3d:43:cd:00:97:66:66:8e:df:a2:3e:99:67:43:
         56:97:c1:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUwTTnvcGmZ7VUSYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjNkNDFlZWUtMTg2Ni00OGIyLTkxM2YtY2ZmYjlkODU1
MGNlMB4XDTI0MDMxMzAxMDAyNloXDTI0MDYxMTAxMDAyNlowLzEtMCsGA1UEAxMk
NDEzZDkwNzQtYTEyMy00ZjIxLThhYTQtNzdmYTJlYjlmNzVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLZI54bSIYR2VP6CCs6icPr0qAGXdayO+kTg
+i9TD0xzZ8GGAyXsqeDSkP9NOsRaKYwfHcjFaQbYc7OlINoU7BuheZ2A2shEY8bC
cPxzaCIOVpQPrOtW5bdJ8tLdgUTb8Qc/PrZZi7xi+jzgj8P+tBbMFFIIkm3vVhNQ
cXnidT0DSPzlDq2/Wtsoe5NsMFiqtyG022jAEqPKstQrL6Km3tS+2M1csrGpz/el
PwTGl8M/Zqddr235x5w1znwiLjhvFhTrDWP3ddPL26agPgpzzn5q1EpluXPs7TxF
7lhHuELXyTNP+sMJ2Pk4Ku2tIi8sBOz0VP78bNyoCCKOfX69wwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMVutuZEk3tP4PAKFBNe4rs/b9hqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mM2Q0
MWVlZS0xODY2LTQ4YjItOTEzZi1jZmZiOWQ4NTUwY2UvNWViZDk2M2ItOGVkOS0z
ZDI0LWIxNTAtODgxMTk1ODE0ZjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjNkNDFlZWUtMTg2Ni00OGIyLTkx
M2YtY2ZmYjlkODU1MGNlL2YzZDQxZWVlLTE4NjYtNDhiMi05MTNmLWNmZmI5ZDg1
NTBjZS5jcmwwHwYDVR0jBBgwFoAUC/zmRy2Rz+ptxnn8IDQ4TnG1teIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mM2Q0MWVlZS0xODY2LTQ4YjItOTEzZi1jZmZi
OWQ4NTUwY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYETMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJJSsKxKue4jPl7YNUUo6SuzAfhbFNDgw+m1KAHiG8EgjcJTqa1Iec/x
DuYkCWK6H4+m62GEit4OmPxBbeBb+B2tWLY7jTPp3T9juBkVoIpKhypFVrFtKbYu
uS1EVM8mYnrkhZ0dIYh+sxYj+b1DBFIMsHgUFOBXjCdWFfg+yVO3fZYMZcsNF9ea
6ScevdZkK3Jv755qLQacyE2UAv8Ci+QKPsEKb6tVbmF7gyttt4Pjl/HxfoUgFqNv
vchNu+M4H7z6iIhYY5cDb6zfl5/WobWDajbSDnUA8DfAU+Bqj1Waefq/fCxA90pL
u1NJrZA9Q80Al2Zmjt+iPplnQ1aXwTM=
-----END CERTIFICATE-----
Generated at Thu May 2 08:06:28 2024 by rpki-client on console-ams.rpki-client.org