Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/700cd8d9-9334-30df-ab76-fc63d7d439f2.roa
File:                     700cd8d9-9334-30df-ab76-fc63d7d439f2.roa (raw, json)
Hash identifier:          CuQca2mpC97069Bz2DlT0Ca0q2jlOA1t3b+xC4GAUT8=
Subject key identifier:   D0:06:C7:45:84:6A:D8:46:3C:43:73:19:E7:73:27:8C:8B:48:3E:F7
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858457D34F66C5583A6DEAF75F880
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/700cd8d9-9334-30df-ab76-fc63d7d439f2.roa
Signing time:             Tue 09 Apr 2024 14:08:50 +0000
ROA not before:           Tue 09 Apr 2024 14:08:50 +0000
ROA not after:            Mon 08 Jul 2024 14:08:50 +0000
asID:                     16696
IP address blocks:        147.185.222.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:34:f6:6c:55:83:a6:de:af:75:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr  9 14:08:50 2024 GMT
            Not After : Jul  8 14:08:50 2024 GMT
        Subject: CN=254554d6-7169-4088-b950-3cacbe101778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8b:47:7a:cc:3d:d0:6a:8a:2a:84:c9:95:e5:
                    33:05:de:8f:17:ae:4a:d8:1a:f0:0d:92:a4:2e:12:
                    a7:44:b5:af:24:63:10:7f:6b:a4:68:34:3d:6a:0e:
                    fd:8d:90:3a:68:47:18:21:1a:49:47:cd:c0:0c:43:
                    94:40:b9:73:02:bc:dc:31:70:0e:d0:ba:59:25:05:
                    a0:7e:af:18:fa:77:94:fe:1b:fb:f8:c3:7a:85:22:
                    42:fd:50:13:79:f5:2b:e6:e5:9b:77:24:9b:b2:84:
                    6c:b0:7f:14:cf:81:82:0d:c8:fc:1b:a2:01:d3:95:
                    2d:5f:b7:49:4d:5b:91:d6:96:ea:42:8c:0c:25:84:
                    9c:95:da:9c:93:7d:05:6f:49:6f:ed:28:9f:e8:a6:
                    4f:9b:a1:f4:53:62:8d:81:55:68:69:9f:f2:01:f5:
                    6c:ed:fd:81:34:cf:25:0a:87:64:77:19:dd:ee:f4:
                    d5:aa:fd:0b:f3:03:eb:3d:7a:6f:68:b9:83:31:37:
                    0c:2b:8b:b2:a1:91:ac:19:0f:46:25:8d:d1:e9:7e:
                    f5:8f:d5:c1:6d:e3:38:20:8f:fa:b9:33:a2:61:73:
                    52:41:7d:61:3f:5f:08:18:40:3f:da:fd:70:4a:52:
                    28:87:91:cf:e5:6c:43:c1:be:a1:67:62:fb:a6:55:
                    a0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:06:C7:45:84:6A:D8:46:3C:43:73:19:E7:73:27:8C:8B:48:3E:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/700cd8d9-9334-30df-ab76-fc63d7d439f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:cc:da:d1:3d:2d:90:4b:23:f7:22:0d:77:0c:85:01:51:2b:
         27:17:0a:86:ff:c6:7f:c2:7a:3c:e0:43:80:43:8d:82:48:c5:
         17:c8:3a:f9:ac:b0:6a:e3:7f:c0:6e:e5:c6:11:e4:2f:bb:93:
         68:8e:cc:c4:d3:60:95:41:2a:0b:dd:19:23:df:ee:1b:77:f6:
         e2:3b:c3:71:7a:5c:dc:35:cf:25:ff:93:2e:26:ff:33:bd:ea:
         09:f1:af:9a:fd:26:71:86:d9:08:2f:43:82:3d:f5:60:2b:39:
         f9:ae:24:a2:e7:a5:cc:4b:cb:f0:e6:da:da:5e:4b:8d:ba:69:
         a3:4b:33:ed:af:d4:20:e0:3a:98:07:6b:04:ca:e7:e5:28:0c:
         2a:52:27:da:19:a7:8d:cd:8f:8a:09:1f:b9:04:8f:6c:74:23:
         1e:80:33:e8:0f:14:20:f1:8a:64:fc:5d:cd:b0:69:d0:38:3f:
         86:12:c6:85:41:55:02:8c:18:0d:e1:58:2e:e0:24:0f:4c:aa:
         62:aa:2c:ce:37:93:77:75:95:cb:96:61:52:28:a6:41:d3:24:
         34:6a:0f:19:5c:41:8b:0c:a6:73:05:13:aa:51:f6:25:0d:68:
         02:02:a4:5b:82:67:f9:dd:df:e3:3f:7e:3e:a7:f0:69:13:53:
         4f:00:3f:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV9NPZsVYOm3q91+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI0MDQwOTE0MDg1MFoXDTI0MDcwODE0MDg1MFowLzEtMCsGA1UEAxMk
MjU0NTU0ZDYtNzE2OS00MDg4LWI5NTAtM2NhY2JlMTAxNzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYtHesw90GqKKoTJleUzBd6PF65K2BrwDZKk
LhKnRLWvJGMQf2ukaDQ9ag79jZA6aEcYIRpJR83ADEOUQLlzArzcMXAO0LpZJQWg
fq8Y+neU/hv7+MN6hSJC/VATefUr5uWbdySbsoRssH8Uz4GCDcj8G6IB05UtX7dJ
TVuR1pbqQowMJYScldqck30Fb0lv7Sif6KZPm6H0U2KNgVVoaZ/yAfVs7f2BNM8l
Codkdxnd7vTVqv0L8wPrPXpvaLmDMTcMK4uyoZGsGQ9GJY3R6X71j9XBbeM4II/6
uTOiYXNSQX1hP18IGEA/2v1wSlIoh5HP5WxDwb6hZ2L7plWgzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNAGx0WEathGPENzGedzJ4yLSD73MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNzAwY2Q4ZDktOTMzNC0z
MGRmLWFiNzYtZmM2M2Q3ZDQzOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk7neMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA/M2tE9LZBLI/ciDXcMhQFRKycXCob/xn/CejzgQ4BDjYJIxRfIOvms
sGrjf8Bu5cYR5C+7k2iOzMTTYJVBKgvdGSPf7ht39uI7w3F6XNw1zyX/ky4m/zO9
6gnxr5r9JnGG2QgvQ4I99WArOfmuJKLnpcxLy/Dm2tpeS426aaNLM+2v1CDgOpgH
awTK5+UoDCpSJ9oZp43Nj4oJH7kEj2x0Ix6AM+gPFCDximT8Xc2wadA4P4YSxoVB
VQKMGA3hWC7gJA9MqmKqLM43k3d1lcuWYVIopkHTJDRqDxlcQYsMpnMFE6pR9iUN
aAICpFuCZ/nd3+M/fj6n8GkTU08APww=
-----END CERTIFICATE-----
Generated at Sun Jun 2 17:02:08 2024 by rpki-client on console-fra.rpki-client.org