Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c930b7c0-0757-3149-ba85-fe8cd7c5d650.roa
File:                     c930b7c0-0757-3149-ba85-fe8cd7c5d650.roa (raw, json)
Hash identifier:          JEME/7FDV3ATtds8+HKuzx+H0kf8AsiCU+mY+RJI7Io=
Subject key identifier:   24:F2:0D:B7:A1:B8:F3:8A:35:33:D6:A8:55:26:4E:89:0A:BA:66:6D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285845B7AC043F94FB471C64EE2E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c930b7c0-0757-3149-ba85-fe8cd7c5d650.roa
Signing time:             Tue 30 Apr 2024 12:45:36 +0000
ROA not before:           Tue 30 Apr 2024 12:45:36 +0000
ROA not after:            Mon 29 Jul 2024 12:45:36 +0000
asID:                     7342
IP address blocks:        209.131.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:ac:04:3f:94:fb:47:1c:64:ee:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 30 12:45:36 2024 GMT
            Not After : Jul 29 12:45:36 2024 GMT
        Subject: CN=751a3b97-9afe-4a41-8c13-2e2864447c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:35:4c:ac:b9:2b:95:96:fd:2b:fc:fa:e9:
                    01:5a:ce:73:81:22:a1:34:cc:11:a4:c3:b0:48:5b:
                    27:fc:5e:00:be:1d:f7:21:ec:ae:59:f6:d2:4e:5e:
                    48:cf:76:4b:3f:bb:3d:3f:6c:27:fb:68:bd:2d:b5:
                    bb:d1:f9:4d:1e:ff:b4:fb:ce:59:48:ce:7e:26:41:
                    73:51:d8:6d:2b:da:07:0b:c6:eb:16:54:cb:62:4d:
                    98:26:11:b0:42:d2:94:78:ee:d0:e0:68:78:b4:f9:
                    c2:ad:2c:54:65:37:4a:73:ac:c4:11:01:eb:9e:08:
                    6e:fc:9f:6f:f9:07:7f:4a:fb:98:0b:e0:8f:c0:1a:
                    85:fc:fe:2b:6f:6f:62:e5:f6:9f:3d:58:2f:f9:c0:
                    66:5b:e4:b4:c5:1c:b1:9a:b1:0a:9e:e2:87:62:3d:
                    33:f2:14:d6:dc:f8:3d:47:21:03:83:60:99:16:63:
                    ce:db:c6:d2:04:5d:de:fa:8c:7e:3c:56:92:54:0e:
                    47:27:71:99:ad:a6:8b:60:41:a9:48:9a:15:c3:96:
                    b2:82:9e:ae:78:34:f5:8c:e6:b1:b1:9e:f8:e6:1d:
                    d2:d3:80:d2:6d:f9:d4:19:32:0e:09:bd:4c:f6:e4:
                    bc:56:c2:39:a4:51:e3:cd:ae:96:58:81:54:76:40:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F2:0D:B7:A1:B8:F3:8A:35:33:D6:A8:55:26:4E:89:0A:BA:66:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c930b7c0-0757-3149-ba85-fe8cd7c5d650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:01:c6:1e:79:2d:10:08:01:f6:3d:f0:58:3c:2d:03:35:8b:
         15:a4:81:79:41:6f:d9:21:21:08:11:f8:1d:3f:5d:2e:41:f9:
         30:8a:ca:93:ad:29:05:ba:5d:e3:5a:da:d0:a6:b9:b5:34:2b:
         2f:a7:8e:14:0b:5f:be:ff:da:96:fd:b6:60:0b:87:e3:8f:99:
         b0:46:b5:b1:14:70:d7:60:70:83:f7:9f:6e:4f:db:5f:7e:29:
         b5:a8:e2:42:59:db:6a:8d:25:78:6b:78:0c:d3:88:d6:d7:54:
         66:35:bb:0c:d9:81:a8:40:68:bc:0e:a4:a1:6b:2c:68:82:8f:
         59:94:bd:c7:34:ff:da:36:ca:84:4c:04:64:c3:34:7c:c2:79:
         75:56:d9:d0:b1:3b:e4:0a:02:6c:a3:54:e1:5e:40:d3:75:ab:
         39:86:43:b9:3b:22:42:3b:85:7b:b5:a6:e9:52:66:7f:dd:17:
         f9:a9:14:db:49:c4:e2:29:e5:6b:5b:53:f1:b2:45:c5:3c:2b:
         6f:21:a6:52:80:a8:0c:63:eb:55:aa:dc:20:c5:1c:ee:5e:7d:
         03:1b:35:19:8b:1c:53:71:c0:e0:af:27:3e:dd:d2:62:67:ca:
         37:ca:6d:a7:0f:6a:f5:1c:d8:33:1f:b0:c0:f0:0e:d7:51:e2:
         a5:13:28:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW3rAQ/lPtHHGTuLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MDQzMDEyNDUzNloXDTI0MDcyOTEyNDUzNlowLzEtMCsGA1UEAxMk
NzUxYTNiOTctOWFmZS00YTQxLThjMTMtMmUyODY0NDQ3Yzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps81TKy5K5WW/Sv8+ukBWs5zgSKhNMwRpMOw
SFsn/F4Avh33IeyuWfbSTl5Iz3ZLP7s9P2wn+2i9LbW70flNHv+0+85ZSM5+JkFz
UdhtK9oHC8brFlTLYk2YJhGwQtKUeO7Q4Gh4tPnCrSxUZTdKc6zEEQHrnghu/J9v
+Qd/SvuYC+CPwBqF/P4rb29i5fafPVgv+cBmW+S0xRyxmrEKnuKHYj0z8hTW3Pg9
RyEDg2CZFmPO28bSBF3e+ox+PFaSVA5HJ3GZraaLYEGpSJoVw5aygp6ueDT1jOax
sZ745h3S04DSbfnUGTIOCb1M9uS8VsI5pFHjza6WWIFUdkDyaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCTyDbehuPOKNTPWqFUmTokKumZtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzkzMGI3YzAtMDc1Ny0z
MTQ5LWJhODUtZmU4Y2Q3YzVkNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIsBxh55LRAIAfY98Fg8LQM1ixWkgXlBb9khIQgR+B0/XS5B+TCKypOt
KQW6XeNa2tCmubU0Ky+njhQLX77/2pb9tmALh+OPmbBGtbEUcNdgcIP3n25P219+
KbWo4kJZ22qNJXhreAzTiNbXVGY1uwzZgahAaLwOpKFrLGiCj1mUvcc0/9o2yoRM
BGTDNHzCeXVW2dCxO+QKAmyjVOFeQNN1qzmGQ7k7IkI7hXu1pulSZn/dF/mpFNtJ
xOIp5WtbU/GyRcU8K28hplKAqAxj61Wq3CDFHO5efQMbNRmLHFNxwOCvJz7d0mJn
yjfKbacPavUc2DMfsMDwDtdR4qUTKOM=
-----END CERTIFICATE-----
Generated at Sat May 18 01:53:58 2024 by rpki-client on console-ams.rpki-client.org