Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/be3a8932-5a74-3864-9cfd-670de871133d.roa
File:                     be3a8932-5a74-3864-9cfd-670de871133d.roa (raw, json)
Hash identifier:          TYgGxJA3HKUWlTs8f0iPJbQVbdY9qJEezsbzaxv/eO0=
Subject key identifier:   DB:F1:90:B5:24:E3:5D:1D:BA:30:59:91:DC:B6:94:F7:F5:26:FC:48
Certificate issuer:       /CN=d001dd1f-946b-457b-98d8-41701665309e
Certificate serial:       010D0C9F4328584518B04403419CCFB7829E1900
Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/be3a8932-5a74-3864-9cfd-670de871133d.roa
Signing time:             Mon 04 Mar 2024 14:00:33 +0000
ROA not before:           Mon 04 Mar 2024 14:00:33 +0000
ROA not after:            Sun 02 Jun 2024 13:00:33 +0000
asID:                     23465
IP address blocks:        76.164.15.0/24 maxlen: 24
                          76.164.48.0/23 maxlen: 23
                          76.164.61.0/24 maxlen: 24
                          76.164.59.0/24 maxlen: 24
                          76.164.60.0/24 maxlen: 24
                          76.164.52.0/23 maxlen: 23
                          76.164.56.0/23 maxlen: 23
                          76.164.51.0/24 maxlen: 24
                          76.164.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:18:b0:44:03:41:9c:cf:b7:82:9e:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e
        Validity
            Not Before: Mar  4 14:00:33 2024 GMT
            Not After : Jun  2 13:00:33 2024 GMT
        Subject: CN=925b8c01-a973-4522-83bd-b369a48077c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e6:5e:f0:2b:4f:2d:89:c5:52:82:0a:98:8b:
                    da:f9:6f:ef:5c:29:3f:f7:eb:89:27:ac:f7:d8:33:
                    49:36:44:62:f9:58:ac:d0:96:7c:bd:76:38:d8:bf:
                    81:0c:0b:2d:1b:80:bb:75:7a:1d:b6:fe:14:99:64:
                    0c:77:3e:ca:96:5c:f8:86:fd:04:f7:d0:b8:dd:b9:
                    27:f5:7a:30:8d:92:9d:ce:d6:d2:3d:47:a3:0c:6b:
                    33:29:01:91:da:65:5d:03:88:98:ce:f3:4c:11:5e:
                    78:f0:1e:85:c7:76:17:58:61:9f:86:46:61:70:fc:
                    24:b8:66:e0:3c:4a:3c:88:2b:74:17:49:c2:e6:99:
                    8e:30:11:9e:73:cc:98:d4:38:23:d7:c2:9b:df:60:
                    86:44:bc:de:77:11:90:8c:4e:08:b5:94:52:4a:4d:
                    fd:2f:91:41:40:06:03:ce:8f:e6:f5:a5:66:ca:72:
                    51:38:87:c6:fb:f0:6b:59:fb:fb:fd:94:d2:83:97:
                    2b:dc:97:f1:61:62:14:50:84:ee:ec:3f:5b:7b:1d:
                    cb:50:bc:95:0a:b4:7b:1c:5c:4c:f6:a9:08:7c:31:
                    cd:72:9e:13:7d:98:df:e6:88:da:24:a0:d0:1c:bb:
                    25:9f:fd:9f:42:bf:f7:b3:89:3e:ae:08:1e:f4:b6:
                    8e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F1:90:B5:24:E3:5D:1D:BA:30:59:91:DC:B6:94:F7:F5:26:FC:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/be3a8932-5a74-3864-9cfd-670de871133d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl

            X509v3 Authority Key Identifier:
                keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.15.0/24
                  76.164.48.0/23
                  76.164.51.0-76.164.53.255
                  76.164.56.0/23
                  76.164.59.0-76.164.61.255
                  76.164.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:4a:c7:d8:b8:58:ff:c1:96:e4:ac:ad:cd:75:fe:88:8c:4e:
         d1:36:c8:97:fa:a4:c5:f8:65:84:3d:9d:7d:9f:32:2f:2b:58:
         f4:a2:83:18:4d:26:a2:83:25:4f:ad:b6:22:3b:01:21:eb:8c:
         ba:06:62:10:15:69:ab:74:e1:ad:1c:46:5d:90:7f:d5:fa:dd:
         4f:04:9b:ba:e6:16:81:5a:96:5c:0e:30:56:3b:1f:8c:a5:a7:
         1f:75:87:29:6e:4b:d7:bb:3a:47:cd:06:ca:31:db:0d:b0:35:
         6a:e8:68:d2:6b:d1:c2:6e:dd:5f:e9:72:99:2c:c7:59:f3:ce:
         40:52:a8:1c:5d:3f:ee:44:24:00:ea:fb:5e:3b:0a:4b:e4:cd:
         82:13:40:b0:5e:22:2f:a0:71:c5:3e:d3:61:9e:e8:18:ec:b3:
         5b:6d:fe:13:5c:d4:23:80:a1:90:5a:a3:01:59:a4:8c:b6:c1:
         9b:5b:f2:77:3b:2a:be:dd:ff:50:ad:89:db:9d:e3:b0:f1:b3:
         a9:45:05:87:89:7c:f8:96:e0:98:ce:35:ba:54:f6:52:07:ed:
         7f:88:67:e8:f7:3a:d9:6e:16:2e:c8:79:c1:83:4c:4f:b9:de:
         c6:28:03:67:64:36:cd:df:91:8e:fc:86:80:c5:b6:c1:99:2b:
         66:11:98:ef
-----BEGIN CERTIFICATE-----
MIIGcTCCBVmgAwIBAgIUAQ0Mn0MoWEUYsEQDQZzPt4KeGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz
MDllMB4XDTI0MDMwNDE0MDAzM1oXDTI0MDYwMjEzMDAzM1owLzEtMCsGA1UEAxMk
OTI1YjhjMDEtYTk3My00NTIyLTgzYmQtYjM2OWE0ODA3N2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+Ze8CtPLYnFUoIKmIva+W/vXCk/9+uJJ6z3
2DNJNkRi+Vis0JZ8vXY42L+BDAstG4C7dXodtv4UmWQMdz7Kllz4hv0E99C43bkn
9XowjZKdztbSPUejDGszKQGR2mVdA4iYzvNMEV548B6Fx3YXWGGfhkZhcPwkuGbg
PEo8iCt0F0nC5pmOMBGec8yY1Dgj18Kb32CGRLzedxGQjE4ItZRSSk39L5FBQAYD
zo/m9aVmynJROIfG+/BrWfv7/ZTSg5cr3JfxYWIUUITu7D9bex3LULyVCrR7HFxM
9qkIfDHNcp4TfZjf5ojaJKDQHLsln/2fQr/3s4k+rgge9LaOPQIDAQABo4IDgzCC
A38wHQYDVR0OBBYEFNvxkLUk410dujBZkdy2lPf1JvxIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx
ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvYmUzYTg5MzItNWE3NC0z
ODY0LTljZmQtNjcwZGU4NzExMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4
ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1
MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw
MTY2NTMwOWUuY2VyME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQATKQPAwQB
TKQwMAwDBABMpDMDBAFMpDQDBAFMpDgwDAMEAEykOwMEAUykPAMEAEykPzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA
A4IBAQC5SsfYuFj/wZbkrK3Ndf6IjE7RNsiX+qTF+GWEPZ19nzIvK1j0ooMYTSai
gyVPrbYiOwEh64y6BmIQFWmrdOGtHEZdkH/V+t1PBJu65haBWpZcDjBWOx+Mpacf
dYcpbkvXuzpHzQbKMdsNsDVq6GjSa9HCbt1f6XKZLMdZ885AUqgcXT/uRCQA6vte
OwpL5M2CE0CwXiIvoHHFPtNhnugY7LNbbf4TXNQjgKGQWqMBWaSMtsGbW/J3Oyq+
3f9QrYnbneOw8bOpRQWHiXz4luCYzjW6VPZSB+1/iGfo9zrZbhYuyHnBg0xPud7G
KANnZDbN35GO/IaAxbbBmStmEZjv
-----END CERTIFICATE-----
Generated at Wed May 22 14:40:19 2024 by rpki-client on console-fra.rpki-client.org