Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/2731d2f0-9541-3aab-bdf8-127310be17f3.roa
File:                     2731d2f0-9541-3aab-bdf8-127310be17f3.roa (raw, json)
Hash identifier:          ixf98h6daS0W8zjeQddFaNDOJ4PjQ+yrbphOdySY578=
Subject key identifier:   EF:C6:87:A0:C9:1E:73:91:BA:97:AD:93:3E:CC:E5:A9:62:BD:16:7C
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F43285845C5A8F6C970E3830B018FE880
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/2731d2f0-9541-3aab-bdf8-127310be17f3.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     6621
IP address blocks:        67.44.48.0/20 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:f6:c9:70:e3:83:0b:01:8f:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=eddd5b97-32dd-4e8e-af31-c821a80b76b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:ed:9f:0c:be:f9:07:cc:e0:88:92:23:d2:
                    0e:fc:5f:ba:25:7b:7f:b5:65:d1:d5:c7:db:6b:1e:
                    93:e2:97:b7:52:3c:b5:dd:84:2d:95:e2:87:02:82:
                    c5:e4:f8:25:10:ff:91:72:a2:08:26:93:07:d2:48:
                    b7:eb:45:87:6e:6e:50:cc:c0:3c:1f:11:73:19:dd:
                    6c:4c:1b:28:98:38:02:0b:93:e5:38:41:11:af:c6:
                    c3:f4:6d:32:c2:51:9b:fd:88:60:eb:72:00:26:c6:
                    48:2c:b3:7c:f2:84:44:48:71:1d:15:f1:77:76:c4:
                    25:26:be:36:15:e7:dd:29:f9:77:9e:98:83:63:c7:
                    0b:fc:7c:d4:98:92:d7:4d:bb:f1:7c:ed:19:8f:0e:
                    00:9a:31:09:ab:de:30:a1:83:50:26:06:f2:dc:53:
                    12:9c:ce:f0:65:78:5b:da:28:23:6f:05:11:cc:93:
                    7a:db:a1:4a:56:af:c0:7a:25:50:cb:d8:e9:0a:62:
                    41:a0:69:0f:21:9a:f5:a1:04:f4:16:69:c9:9a:4f:
                    1b:97:55:9f:be:4a:35:40:0f:bc:c3:21:7e:68:6c:
                    3a:08:a8:fc:83:30:81:7c:03:e6:9b:59:ea:e0:48:
                    59:e6:5b:8f:d3:84:c4:56:4d:53:36:0c:61:61:ed:
                    b8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C6:87:A0:C9:1E:73:91:BA:97:AD:93:3E:CC:E5:A9:62:BD:16:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/2731d2f0-9541-3aab-bdf8-127310be17f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.44.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:39:00:e5:52:bf:af:a1:94:58:ae:e9:36:6d:26:41:82:34:
         9c:ae:54:05:bd:ea:1d:bb:94:0c:65:24:bd:dd:37:fe:5b:93:
         70:02:7d:94:2d:eb:a8:3b:3c:63:39:29:af:d8:53:86:27:34:
         40:ab:f3:40:d7:26:5e:71:3f:51:06:74:33:4e:8e:85:04:5f:
         34:dd:7b:44:93:4d:ac:77:10:d2:e4:a9:8b:29:3c:ad:e6:f8:
         5e:dd:b8:63:03:00:1a:ae:47:f9:44:80:33:a8:4b:37:2e:c5:
         b4:74:82:09:75:ca:cb:11:c4:d4:e5:14:25:24:a9:f6:7b:c5:
         b8:f6:94:cd:54:d8:c6:21:9e:da:9e:9f:1d:52:b4:0e:74:d1:
         a5:37:02:cf:56:33:cf:3e:c0:3a:00:bb:34:4e:2b:d7:5c:80:
         89:f4:e6:1c:14:09:bb:62:6f:f0:61:bf:bc:ce:05:c8:1c:7e:
         19:33:9f:7c:9f:a7:ee:00:5e:43:5f:91:ea:8a:89:d1:2a:99:
         99:5a:4f:c3:78:ac:ad:2a:ed:31:df:b1:8a:a2:a1:fb:9d:49:
         83:82:4c:0f:bf:ab:bc:78:ea:c4:3e:5f:66:51:6a:0c:6b:1e:
         e5:c2:79:80:ca:be:91:d7:4c:19:24:dd:59:c5:19:6e:03:98:
         96:c0:bf:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXFqPbJcOODCwGP6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0
NDYwMB4XDTI0MDUwNTEzMDAzNFoXDTI0MDgwMzEzMDAzNFowLzEtMCsGA1UEAxMk
ZWRkZDViOTctMzJkZC00ZThlLWFmMzEtYzgyMWE4MGI3NmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp3tnwy++QfM4IiSI9IO/F+6JXt/tWXR1cfb
ax6T4pe3Ujy13YQtleKHAoLF5PglEP+RcqIIJpMH0ki360WHbm5QzMA8HxFzGd1s
TBsomDgCC5PlOEERr8bD9G0ywlGb/Yhg63IAJsZILLN88oRESHEdFfF3dsQlJr42
FefdKfl3npiDY8cL/HzUmJLXTbvxfO0Zjw4AmjEJq94woYNQJgby3FMSnM7wZXhb
2igjbwURzJN626FKVq/AeiVQy9jpCmJBoGkPIZr1oQT0FmnJmk8bl1Wfvko1QA+8
wyF+aGw6CKj8gzCBfAPmm1nq4EhZ5luP04TEVk1TNgxhYe24GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/Gh6DJHnORupetkz7M5alivRZ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4
ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvMjczMWQyZjAtOTU0MS0z
YWFiLWJkZjgtMTI3MzEwYmUxN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk
MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy
NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5
ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQywwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQ5AOVSv6+hlFiu6TZtJkGCNJyuVAW96h27lAxlJL3dN/5bk3ACfZQt
66g7PGM5Ka/YU4YnNECr80DXJl5xP1EGdDNOjoUEXzTde0STTax3ENLkqYspPK3m
+F7duGMDABquR/lEgDOoSzcuxbR0ggl1yssRxNTlFCUkqfZ7xbj2lM1U2MYhntqe
nx1StA500aU3As9WM88+wDoAuzROK9dcgIn05hwUCbtib/Bhv7zOBcgcfhkzn3yf
p+4AXkNfkeqKidEqmZlaT8N4rK0q7THfsYqiofudSYOCTA+/q7x46sQ+X2ZRagxr
HuXCeYDKvpHXTBkk3VnFGW4DmJbAv7s=
-----END CERTIFICATE-----
Generated at Sat May 18 01:32:40 2024 by rpki-client on console-fra.rpki-client.org