Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/cd0060f5-e37a-3324-8658-1489af29e5de.roa
File:                     cd0060f5-e37a-3324-8658-1489af29e5de.roa (raw, json)
Hash identifier:          qQ/42SvhaZ6c07pvrUETxMv8lBhNLj0Mdx4NVnl/COE=
Subject key identifier:   EA:A1:90:08:F9:7D:58:F2:ED:DF:F4:F3:12:0C:CA:75:26:5E:81:38
Certificate issuer:       /CN=2805bc8b-434a-454a-85db-2fe9075e8548
Certificate serial:       010D0C9F432858448784AD36D57BCB29CDAE6DC0
Authority key identifier: A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/cd0060f5-e37a-3324-8658-1489af29e5de.roa
Signing time:             Fri 12 Jan 2024 14:00:28 +0000
ROA not before:           Fri 12 Jan 2024 14:00:28 +0000
ROA not after:            Thu 11 Apr 2024 13:00:28 +0000
asID:                     397299
IP address blocks:        139.60.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:87:84:ad:36:d5:7b:cb:29:cd:ae:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2805bc8b-434a-454a-85db-2fe9075e8548
        Validity
            Not Before: Jan 12 14:00:28 2024 GMT
            Not After : Apr 11 13:00:28 2024 GMT
        Subject: CN=adcbdbd3-effd-44d0-87ed-8debd9324e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5b:d8:0f:00:42:f1:2d:53:f2:51:21:20:73:
                    65:60:c5:95:17:b6:20:c8:ca:82:fa:59:11:76:32:
                    52:55:9d:bb:4d:39:01:ec:97:b9:64:99:c2:3a:11:
                    18:28:5b:0f:4f:6d:29:2f:d3:cd:18:23:f4:65:03:
                    86:54:c6:f1:29:d0:2a:33:19:a5:1c:c4:c0:e4:a6:
                    82:b5:1e:71:8a:72:68:fc:97:ec:60:60:ae:79:3b:
                    0e:f6:43:c0:0f:5c:1b:03:04:a0:fb:ec:9e:81:96:
                    17:5b:50:28:47:ca:1a:7c:98:cc:09:44:b3:03:eb:
                    da:37:9b:54:ea:26:4a:fc:c8:1a:64:88:6a:38:aa:
                    14:ac:43:cb:83:15:78:68:3f:71:97:d8:5a:d5:87:
                    98:e3:d1:36:2d:ea:60:57:34:31:1f:10:7f:86:0e:
                    e1:26:37:53:7a:eb:5b:33:6c:a7:0f:1b:e6:8c:69:
                    2e:70:d4:33:da:26:51:56:0f:36:2e:ba:3e:f4:38:
                    00:b2:65:3f:83:4c:99:58:d2:07:b9:46:34:29:b2:
                    e0:75:65:a0:0d:3a:85:e7:86:e8:ef:94:37:76:03:
                    4e:74:5e:2e:d6:fc:b7:87:ce:99:79:50:e7:6e:56:
                    f3:69:dc:f9:50:6d:58:64:dc:7b:75:72:f2:b8:1b:
                    02:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A1:90:08:F9:7D:58:F2:ED:DF:F4:F3:12:0C:CA:75:26:5E:81:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/cd0060f5-e37a-3324-8658-1489af29e5de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.crl

            X509v3 Authority Key Identifier:
                keyid:A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:7f:30:ec:11:07:72:e5:14:e8:50:e5:ed:d3:bd:e4:71:7a:
         da:15:12:97:27:fb:67:c6:b2:1e:ac:9f:9c:9c:90:25:aa:79:
         d5:ee:35:25:29:3c:6e:1a:0e:8f:ad:15:d0:3b:99:84:24:67:
         fa:41:50:27:04:ac:d1:08:80:e8:fe:22:e5:9b:24:51:3e:de:
         06:88:fc:1d:a8:31:aa:dc:28:ec:52:5c:a1:5f:d6:24:d7:fe:
         45:21:60:0a:41:48:17:d0:cb:ae:22:26:9a:16:ba:79:7c:4d:
         b9:14:ea:41:6d:75:a7:c9:9b:de:f0:58:4c:dd:63:72:14:25:
         a8:29:12:35:ba:2e:2e:2b:68:38:c4:df:a6:03:6a:4f:22:01:
         20:d0:9a:9c:b2:29:67:3c:e6:c1:65:b9:dd:71:83:69:0a:8e:
         45:46:65:5b:c3:bd:91:4f:f5:d7:20:a4:6a:5a:8a:d4:58:40:
         6b:4c:70:f0:e8:e6:04:24:52:5e:9c:26:7e:86:99:d9:14:99:
         be:6f:c2:a8:b6:b4:49:80:77:af:50:f2:45:70:4a:88:51:20:
         de:80:b2:19:59:07:44:80:15:8a:65:24:e9:c5:63:e6:8a:4f:
         f6:37:44:2c:d9:90:cb:9e:c3:1a:ac:ca:3e:4c:b4:6d:d3:a8:
         4f:19:bc:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESHhK021XvLKc2ubcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgwNWJjOGItNDM0YS00NTRhLTg1ZGItMmZlOTA3NWU4
NTQ4MB4XDTI0MDExMjE0MDAyOFoXDTI0MDQxMTEzMDAyOFowLzEtMCsGA1UEAxMk
YWRjYmRiZDMtZWZmZC00NGQwLTg3ZWQtOGRlYmQ5MzI0ZTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVvYDwBC8S1T8lEhIHNlYMWVF7YgyMqC+lkR
djJSVZ27TTkB7Je5ZJnCOhEYKFsPT20pL9PNGCP0ZQOGVMbxKdAqMxmlHMTA5KaC
tR5xinJo/JfsYGCueTsO9kPAD1wbAwSg++yegZYXW1AoR8oafJjMCUSzA+vaN5tU
6iZK/MgaZIhqOKoUrEPLgxV4aD9xl9ha1YeY49E2LepgVzQxHxB/hg7hJjdTeutb
M2ynDxvmjGkucNQz2iZRVg82Lro+9DgAsmU/g0yZWNIHuUY0KbLgdWWgDTqF54bo
75Q3dgNOdF4u1vy3h86ZeVDnblbzadz5UG1YZNx7dXLyuBsCJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOqhkAj5fVjy7d/08xIMynUmXoE4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yODA1
YmM4Yi00MzRhLTQ1NGEtODVkYi0yZmU5MDc1ZTg1NDgvY2QwMDYwZjUtZTM3YS0z
MzI0LTg2NTgtMTQ4OWFmMjllNWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjgwNWJjOGItNDM0YS00NTRhLTg1
ZGItMmZlOTA3NWU4NTQ4LzI4MDViYzhiLTQzNGEtNDU0YS04NWRiLTJmZTkwNzVl
ODU0OC5jcmwwHwYDVR0jBBgwFoAUqb0VXP54V+vKV3bJUl/3V7wi31QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yODA1YmM4Yi00MzRhLTQ1NGEtODVkYi0yZmU5
MDc1ZTg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCizwAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALx/MOwRB3LlFOhQ5e3TveRxetoVEpcn+2fGsh6sn5yckCWqedXuNSUp
PG4aDo+tFdA7mYQkZ/pBUCcErNEIgOj+IuWbJFE+3gaI/B2oMarcKOxSXKFf1iTX
/kUhYApBSBfQy64iJpoWunl8TbkU6kFtdafJm97wWEzdY3IUJagpEjW6Li4raDjE
36YDak8iASDQmpyyKWc85sFlud1xg2kKjkVGZVvDvZFP9dcgpGpaitRYQGtMcPDo
5gQkUl6cJn6GmdkUmb5vwqi2tEmAd69Q8kVwSohRIN6AshlZB0SAFYplJOnFY+aK
T/Y3RCzZkMuewxqsyj5MtG3TqE8ZvFM=
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:54:32 2024 by rpki-client on console-fra.rpki-client.org