Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/57de6bd1-eb2c-3268-9d16-f8cfe4845767.roa
File:                     57de6bd1-eb2c-3268-9d16-f8cfe4845767.roa (raw, json)
Hash identifier:          kXzHWqbw7FLeuhQGjXh+JKlzC8waZTg42KH0f4nujno=
Subject key identifier:   27:BD:E0:65:B9:51:6D:00:2F:03:31:18:2D:1F:BE:2E:23:15:CB:F2
Certificate issuer:       /CN=f8838580-1598-45e5-8353-b551ae78b110
Certificate serial:       010D0C9F432858457A486C49A204333563005F00
Authority key identifier: DE:86:FB:F2:FD:F0:F5:78:BE:83:FB:65:0F:14:BB:E7:FE:75:7C:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/57de6bd1-eb2c-3268-9d16-f8cfe4845767.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        64.190.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:6c:49:a2:04:33:35:63:00:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8838580-1598-45e5-8353-b551ae78b110
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=f5072144-0f8c-4c7b-af3a-7f2b4568580c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ea:d2:85:f3:4d:9a:bf:68:4b:f7:13:07:a1:
                    9a:c2:a9:d8:cd:b3:f4:a4:9d:eb:0c:da:ff:0e:09:
                    a8:1e:48:38:a5:39:34:7f:5d:bd:19:4d:82:71:9d:
                    60:9f:d0:12:b3:4d:ff:d0:bb:73:f0:c8:e9:27:b7:
                    a7:ff:1e:56:f8:8a:c6:5e:7b:6d:54:80:25:e8:65:
                    da:50:d8:e2:ee:a1:77:9f:ef:d9:55:f4:64:0f:06:
                    06:a6:fb:c5:ee:75:ea:5d:a8:ce:62:31:64:a7:b9:
                    00:4e:8f:e9:2a:90:d6:4a:c5:0a:05:87:c2:86:40:
                    a6:e0:59:dd:fa:86:61:b6:e6:70:10:8f:16:57:09:
                    b8:3d:eb:b6:bd:74:02:2f:31:70:2e:e8:1e:ba:1f:
                    89:1f:db:2d:16:e7:1b:c8:cf:36:e2:26:68:36:7d:
                    6d:7e:04:4a:99:03:af:8f:76:7e:83:1d:ce:27:a6:
                    08:2d:07:8c:99:bf:46:66:c2:8c:70:cb:ef:4d:61:
                    7f:e8:62:5a:ba:96:1c:7f:07:bc:d9:d1:11:b6:75:
                    8c:c4:99:33:a6:96:de:cf:de:f5:9e:32:6b:7b:ae:
                    70:be:a6:3e:02:48:21:c0:0f:2d:c5:50:cd:81:b0:
                    62:44:cb:a6:ad:3b:86:3a:21:a4:59:57:9d:bd:4b:
                    02:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BD:E0:65:B9:51:6D:00:2F:03:31:18:2D:1F:BE:2E:23:15:CB:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/57de6bd1-eb2c-3268-9d16-f8cfe4845767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.crl

            X509v3 Authority Key Identifier:
                keyid:DE:86:FB:F2:FD:F0:F5:78:BE:83:FB:65:0F:14:BB:E7:FE:75:7C:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:98:6c:f3:1c:62:2a:a1:ff:85:a0:69:f3:5d:d0:cc:41:a0:
         fa:35:19:b0:1f:2c:d8:ac:76:5b:a2:8c:02:37:85:87:c9:90:
         b2:d2:8f:ca:0c:85:23:a8:06:1d:aa:ce:ca:1e:a3:a5:0a:39:
         f6:55:8d:70:98:77:d0:0a:f6:89:ab:e8:d8:82:5f:9d:94:55:
         c6:d5:56:b5:50:c4:58:b7:95:18:65:ce:c4:df:8f:0a:fd:23:
         5e:dd:a7:97:57:e5:46:45:01:d7:ae:ad:1f:71:18:21:59:05:
         8c:60:f3:98:a0:4c:9d:23:4f:84:6d:9f:aa:f9:2f:5a:2a:4b:
         e1:d6:66:f9:db:8a:ae:fd:18:65:13:10:a3:0f:70:12:02:e4:
         f3:82:7d:10:3c:ba:b0:a1:c9:07:c5:c3:12:bf:85:d3:68:ba:
         e1:03:ba:ee:0d:6c:3d:b0:62:f3:77:11:7d:57:80:5d:49:1c:
         28:7e:98:2f:25:35:dc:a4:5a:28:10:1e:d3:3b:fe:6b:a2:f2:
         ab:84:d2:6a:2b:a0:03:0a:99:a4:f4:cb:63:43:40:38:f7:bd:
         76:de:a7:42:1f:65:f1:2d:60:76:d3:91:4b:03:07:e4:8c:27:
         76:6f:46:43:56:bc:a7:01:df:e3:b5:4a:e7:a3:6b:bb:2b:15:
         56:f6:f4:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV6SGxJogQzNWMAXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg4Mzg1ODAtMTU5OC00NWU1LTgzNTMtYjU1MWFlNzhi
MTEwMB4XDTI0MDQwODEzMDAzNFoXDTI0MDcwNzEzMDAzNFowLzEtMCsGA1UEAxMk
ZjUwNzIxNDQtMGY4Yy00YzdiLWFmM2EtN2YyYjQ1Njg1ODBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnurShfNNmr9oS/cTB6GawqnYzbP0pJ3rDNr/
DgmoHkg4pTk0f129GU2CcZ1gn9ASs03/0Ltz8MjpJ7en/x5W+IrGXnttVIAl6GXa
UNji7qF3n+/ZVfRkDwYGpvvF7nXqXajOYjFkp7kATo/pKpDWSsUKBYfChkCm4Fnd
+oZhtuZwEI8WVwm4Peu2vXQCLzFwLugeuh+JH9stFucbyM824iZoNn1tfgRKmQOv
j3Z+gx3OJ6YILQeMmb9GZsKMcMvvTWF/6GJaupYcfwe82dERtnWMxJkzppbez971
njJre65wvqY+AkghwA8txVDNgbBiRMumrTuGOiGkWVedvUsCCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCe94GW5UW0ALwMxGC0fvi4jFcvyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mODgz
ODU4MC0xNTk4LTQ1ZTUtODM1My1iNTUxYWU3OGIxMTAvNTdkZTZiZDEtZWIyYy0z
MjY4LTlkMTYtZjhjZmU0ODQ1NzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjg4Mzg1ODAtMTU5OC00NWU1LTgz
NTMtYjU1MWFlNzhiMTEwL2Y4ODM4NTgwLTE1OTgtNDVlNS04MzUzLWI1NTFhZTc4
YjExMC5jcmwwHwYDVR0jBBgwFoAU3ob78v3w9Xi+g/tlDxS75/51fNQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mODgzODU4MC0xNTk4LTQ1ZTUtODM1My1iNTUx
YWU3OGIxMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL4qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHSYbPMcYiqh/4WgafNd0MxBoPo1GbAfLNisdluijAI3hYfJkLLSj8oM
hSOoBh2qzsoeo6UKOfZVjXCYd9AK9omr6NiCX52UVcbVVrVQxFi3lRhlzsTfjwr9
I17dp5dX5UZFAdeurR9xGCFZBYxg85igTJ0jT4Rtn6r5L1oqS+HWZvnbiq79GGUT
EKMPcBIC5POCfRA8urChyQfFwxK/hdNouuEDuu4NbD2wYvN3EX1XgF1JHCh+mC8l
NdykWigQHtM7/mui8quE0moroAMKmaT0y2NDQDj3vXbep0IfZfEtYHbTkUsDB+SM
J3ZvRkNWvKcB3+O1Sueja7srFVb29G8=
-----END CERTIFICATE-----
Generated at Sun May 5 22:38:08 2024 by rpki-client on console-ams.rpki-client.org