Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa
File:                     6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa (raw, json)
Hash identifier:          HX3/h3aIIZqrmPWkL1ZzWL+E177CR9e6/GrkscfnrvI=
Subject key identifier:   85:0B:46:D9:3D:50:45:79:DF:CB:82:8C:97:D1:3A:5A:30:17:28:F4
Certificate issuer:       /CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247
Certificate serial:       010D0C9F43285845734DB38211A2F3353C98F340
Authority key identifier: 42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     17216
IP address blocks:        192.151.136.0/21 maxlen: 24
                          198.24.12.0/22 maxlen: 24
                          199.47.224.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b3:82:11:a2:f3:35:3c:98:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=40f7ae40-f28f-4f46-8f14-69ecf75f77ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c4:46:87:5d:cb:e5:af:9f:42:bd:dc:c6:5e:
                    9f:2b:5d:06:84:87:f2:44:04:07:63:1e:77:4d:6e:
                    95:a2:6f:e6:6c:6f:11:18:e2:6d:be:b8:49:b7:6f:
                    e9:0e:0a:81:f0:7a:53:70:69:87:cd:3b:fb:bd:d7:
                    0d:cb:da:cb:84:0a:5e:e5:98:99:2b:51:2e:cd:7e:
                    0f:6b:f6:2d:c9:97:5f:cb:49:e7:fd:c8:e0:d6:ef:
                    83:6e:8e:75:6f:9b:dc:6e:6a:6a:20:1a:d7:79:b5:
                    bd:b5:e7:2a:19:f8:75:49:67:62:3e:93:cc:d5:7f:
                    11:9e:75:0a:88:ed:1a:d9:59:11:5e:64:53:da:25:
                    6a:d2:67:09:2c:9e:4b:af:53:be:e0:07:d1:0e:a4:
                    a0:2f:43:c8:be:46:07:e9:25:bb:96:6d:99:d5:c4:
                    4c:94:22:84:2d:a5:0f:91:f5:a9:50:cc:c0:20:99:
                    d0:65:c8:1f:06:92:39:a9:0b:ab:0c:47:22:9c:67:
                    45:3c:ff:00:6a:33:a4:84:da:73:6b:80:78:ad:8e:
                    2b:df:ae:04:04:7c:66:ad:a7:16:3b:30:59:c5:85:
                    d7:6f:d5:fc:25:d4:4d:4e:a7:6a:74:79:4e:b3:09:
                    50:81:17:f5:7c:91:a5:46:dc:10:5f:e2:4b:0b:4f:
                    3e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0B:46:D9:3D:50:45:79:DF:CB:82:8C:97:D1:3A:5A:30:17:28:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl

            X509v3 Authority Key Identifier:
                keyid:42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.151.136.0/21
                  198.24.12.0/22
                  199.47.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:77:e4:c1:30:a3:e1:01:5c:5c:64:bf:8b:95:2c:fa:7a:0e:
         1d:8b:8a:ec:93:06:f4:f7:4a:be:68:61:7b:8c:58:9f:62:c9:
         8c:e3:1e:7c:3a:2a:fc:4e:6b:81:d7:53:34:fb:99:d2:df:35:
         7c:b7:ff:47:81:e2:a9:f1:4c:be:a5:ee:79:77:33:f5:15:c9:
         7e:40:c0:46:32:53:a0:b3:76:eb:18:ec:3e:73:52:61:57:e2:
         2e:29:d5:f5:9d:c4:4d:67:fc:0d:a2:97:da:b9:22:31:a4:cc:
         e3:6d:61:dd:49:39:17:d9:ae:fa:0b:50:f5:7e:6f:14:2b:53:
         32:9f:29:da:61:86:ff:10:a9:62:db:8b:64:8e:b9:01:72:60:
         f2:a0:3d:ef:4e:48:b8:7f:9d:90:7d:e4:7d:f0:18:8d:45:4f:
         1b:3f:13:0e:02:19:5e:07:08:01:ab:31:8f:72:ec:3e:40:09:
         cc:83:ba:b2:03:bf:44:88:48:42:ce:7a:a5:b4:2c:6b:fa:05:
         37:dc:ae:35:67:ef:07:12:49:14:b9:ae:0b:fb:1c:7a:03:13:
         bd:29:3b:03:22:8c:2d:ce:bf:d9:3d:bc:63:6d:32:ae:fa:3e:
         51:32:8d:dc:78:60:69:01:c3:ea:a9:85:f7:90:e0:be:76:57:
         47:ca:7e:64
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEVzTbOCEaLzNTyY80AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiYjk3NzUtOTYzMS00YmU0LWE5YzYtMTFiOGRkZmU2
MjQ3MB4XDTI0MDQwNjAxMDAyNloXDTI0MDcwNTAxMDAyNlowLzEtMCsGA1UEAxMk
NDBmN2FlNDAtZjI4Zi00ZjQ2LThmMTQtNjllY2Y3NWY3N2VkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8RGh13L5a+fQr3cxl6fK10GhIfyRAQHYx53
TW6Vom/mbG8RGOJtvrhJt2/pDgqB8HpTcGmHzTv7vdcNy9rLhApe5ZiZK1EuzX4P
a/YtyZdfy0nn/cjg1u+Dbo51b5vcbmpqIBrXebW9tecqGfh1SWdiPpPM1X8RnnUK
iO0a2VkRXmRT2iVq0mcJLJ5Lr1O+4AfRDqSgL0PIvkYH6SW7lm2Z1cRMlCKELaUP
kfWpUMzAIJnQZcgfBpI5qQurDEcinGdFPP8AajOkhNpza4B4rY4r364EBHxmracW
OzBZxYXXb9X8JdRNTqdqdHlOswlQgRf1fJGlRtwQX+JLC08+owIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFIULRtk9UEV538uCjJfROlowFyj0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2Ji
OTc3NS05NjMxLTRiZTQtYTljNi0xMWI4ZGRmZTYyNDcvNmEzZGZmOTktMmY2Mi0z
MDRlLWFlMWYtYWEwM2VhYmU3ZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTdiYjk3NzUtOTYzMS00YmU0LWE5
YzYtMTFiOGRkZmU2MjQ3L2U3YmI5Nzc1LTk2MzEtNGJlNC1hOWM2LTExYjhkZGZl
NjI0Ny5jcmwwHwYDVR0jBBgwFoAUQs7CZnUe84HwJTWBQIOwBNdo65kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2JiOTc3NS05NjMxLTRiZTQtYTljNi0xMWI4
ZGRmZTYyNDcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDwJeIAwQC
xhgMAwQDxy/gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAEV35MEwo+EBXFxkv4uVLPp6Dh2LiuyTBvT3Sr5o
YXuMWJ9iyYzjHnw6KvxOa4HXUzT7mdLfNXy3/0eB4qnxTL6l7nl3M/UVyX5AwEYy
U6CzdusY7D5zUmFX4i4p1fWdxE1n/A2il9q5IjGkzONtYd1JORfZrvoLUPV+bxQr
UzKfKdphhv8QqWLbi2SOuQFyYPKgPe9OSLh/nZB95H3wGI1FTxs/Ew4CGV4HCAGr
MY9y7D5ACcyDurIDv0SISELOeqW0LGv6BTfcrjVn7wcSSRS5rgv7HHoDE70pOwMi
jC3Ov9k9vGNtMq76PlEyjdx4YGkBw+qphfeQ4L52V0fKfmQ=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:42:01 2024 by rpki-client on console-fra.rpki-client.org