Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/0c4283ac-14aa-387e-b239-7dcb28c3a3d6.roa
File:                     0c4283ac-14aa-387e-b239-7dcb28c3a3d6.roa (raw, json)
Hash identifier:          WuZRtrYZwa1hG7DlQjghAyxhkx5k9SKF1Ve2r7wX+58=
Subject key identifier:   46:CA:A5:C2:4E:ED:5D:EB:49:CF:7A:A1:E0:2D:B3:49:7C:8E:81:F2
Certificate issuer:       /CN=7d556317-cc4f-4b83-86b0-25d4f92c6d02
Certificate serial:       010D0C9F432858459BC8A12F61F3DC1E14C9F200
Authority key identifier: DC:9F:B7:A1:34:BF:07:73:0D:1A:DD:4D:25:46:CA:54:4E:43:B0:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/0c4283ac-14aa-387e-b239-7dcb28c3a3d6.roa
Signing time:             Sat 20 Apr 2024 13:00:34 +0000
ROA not before:           Sat 20 Apr 2024 13:00:34 +0000
ROA not after:            Fri 19 Jul 2024 13:00:34 +0000
asID:                     2497
IP address blocks:        192.70.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/7d556317-cc4f-4b83-86b0-25d4f92c6d02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/7d556317-cc4f-4b83-86b0-25d4f92c6d02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9b:c8:a1:2f:61:f3:dc:1e:14:c9:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d556317-cc4f-4b83-86b0-25d4f92c6d02
        Validity
            Not Before: Apr 20 13:00:34 2024 GMT
            Not After : Jul 19 13:00:34 2024 GMT
        Subject: CN=1c7882e1-f085-4479-abfc-ecc3716073dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:b5:bb:72:75:77:81:4b:be:51:db:16:2b:
                    3a:00:4e:18:f0:38:f5:c5:7c:e5:81:51:a3:d0:9a:
                    69:9b:50:20:2f:bf:54:61:d4:22:32:f6:0a:ef:2e:
                    e0:71:44:9e:a1:ea:db:b3:d2:99:47:eb:ba:e8:94:
                    5a:a8:26:47:1f:64:21:83:0e:5d:b4:85:c7:87:27:
                    29:57:17:a2:28:55:c0:00:6d:df:a5:65:b6:0c:32:
                    12:32:b1:e8:fb:f7:a8:7f:25:e5:83:45:92:0d:b6:
                    a9:48:bb:7b:15:90:29:ee:76:c4:6f:b8:d9:a9:bd:
                    37:72:e6:b3:68:46:18:09:a9:70:d7:93:c1:40:cd:
                    e9:95:ca:a6:a5:f2:b1:d5:a5:44:2b:cc:53:65:96:
                    e0:db:cf:7c:7e:18:54:f5:30:99:0b:79:1a:fc:56:
                    95:dc:91:88:59:01:2e:da:97:10:43:d5:04:29:1c:
                    0b:b3:df:3e:54:79:a1:67:89:99:38:8b:cd:37:15:
                    f6:e6:d0:8c:7c:7a:92:c9:8c:76:8e:5d:d7:8d:d9:
                    c0:74:a6:ac:b5:dc:71:1a:07:f2:d1:c2:d8:68:32:
                    fb:5d:21:d2:f6:ec:40:9d:fc:9b:41:15:77:19:e9:
                    0b:f6:a6:71:99:3c:a6:c5:fa:cf:58:bb:78:dd:2b:
                    5b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CA:A5:C2:4E:ED:5D:EB:49:CF:7A:A1:E0:2D:B3:49:7C:8E:81:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/0c4283ac-14aa-387e-b239-7dcb28c3a3d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/7d556317-cc4f-4b83-86b0-25d4f92c6d02.crl

            X509v3 Authority Key Identifier:
                keyid:DC:9F:B7:A1:34:BF:07:73:0D:1A:DD:4D:25:46:CA:54:4E:43:B0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.70.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:8a:1b:76:b1:b0:56:5f:03:96:4f:c7:c5:96:91:dd:3b:1e:
         02:fe:4e:41:41:53:a7:b3:88:a2:d0:a2:c7:ac:91:36:4d:e5:
         89:8f:bc:95:f9:34:c3:e5:ee:9a:95:f6:36:fb:55:5a:f8:ef:
         21:14:32:14:6b:3e:78:fc:3e:26:2c:09:7e:40:48:62:f2:c7:
         93:f3:33:ba:4f:dd:57:31:a8:89:f7:da:9c:b5:f7:51:be:93:
         b9:0f:f3:54:13:bf:19:18:a6:3d:24:bf:d7:cb:75:8f:29:26:
         1c:ee:35:77:ca:83:4a:aa:4f:83:ed:1a:9c:32:fd:f9:d3:7c:
         45:17:79:59:2a:c2:79:52:c7:3d:80:2f:c9:44:04:80:88:31:
         ae:8f:90:b5:a1:28:f7:9d:df:da:c0:cc:79:8e:76:c4:58:2a:
         71:97:7b:29:66:6f:84:27:35:e6:08:42:51:c2:b5:d6:6a:d8:
         5b:70:2f:4e:b9:ba:a8:41:38:2c:8e:d3:35:ad:a3:e2:1f:ab:
         e5:ff:b6:97:d8:3c:a1:81:04:e5:22:fd:29:f0:c8:ab:5f:d9:
         d2:85:17:a3:e6:91:02:e6:f5:be:1a:cc:93:a8:d0:e9:1a:f4:
         82:72:9d:80:96:6e:74:ef:94:de:2d:54:db:5a:4b:0d:b1:42:
         43:44:6a:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWbyKEvYfPcHhTJ8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2Q1NTYzMTctY2M0Zi00YjgzLTg2YjAtMjVkNGY5MmM2
ZDAyMB4XDTI0MDQyMDEzMDAzNFoXDTI0MDcxOTEzMDAzNFowLzEtMCsGA1UEAxMk
MWM3ODgyZTEtZjA4NS00NDc5LWFiZmMtZWNjMzcxNjA3M2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqji1u3J1d4FLvlHbFis6AE4Y8Dj1xXzlgVGj
0Jppm1AgL79UYdQiMvYK7y7gcUSeoerbs9KZR+u66JRaqCZHH2Qhgw5dtIXHhycp
VxeiKFXAAG3fpWW2DDISMrHo+/eofyXlg0WSDbapSLt7FZAp7nbEb7jZqb03cuaz
aEYYCalw15PBQM3plcqmpfKx1aVEK8xTZZbg2898fhhU9TCZC3ka/FaV3JGIWQEu
2pcQQ9UEKRwLs98+VHmhZ4mZOIvNNxX25tCMfHqSyYx2jl3XjdnAdKastdxxGgfy
0cLYaDL7XSHS9uxAnfybQRV3GekL9qZxmTymxfrPWLt43StbuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEbKpcJO7V3rSc96oeAts0l8joHyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZDU1
NjMxNy1jYzRmLTRiODMtODZiMC0yNWQ0ZjkyYzZkMDIvMGM0MjgzYWMtMTRhYS0z
ODdlLWIyMzktN2RjYjI4YzNhM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Q1NTYzMTctY2M0Zi00YjgzLTg2
YjAtMjVkNGY5MmM2ZDAyLzdkNTU2MzE3LWNjNGYtNGI4My04NmIwLTI1ZDRmOTJj
NmQwMi5jcmwwHwYDVR0jBBgwFoAU3J+3oTS/B3MNGt1NJUbKVE5DsHAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZDU1NjMxNy1jYzRmLTRiODMtODZiMC0yNWQ0
ZjkyYzZkMDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEaDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEqKG3axsFZfA5ZPx8WWkd07HgL+TkFBU6eziKLQoseskTZN5YmPvJX5
NMPl7pqV9jb7VVr47yEUMhRrPnj8PiYsCX5ASGLyx5PzM7pP3VcxqIn32py191G+
k7kP81QTvxkYpj0kv9fLdY8pJhzuNXfKg0qqT4PtGpwy/fnTfEUXeVkqwnlSxz2A
L8lEBICIMa6PkLWhKPed39rAzHmOdsRYKnGXeylmb4QnNeYIQlHCtdZq2FtwL065
uqhBOCyO0zWto+Ifq+X/tpfYPKGBBOUi/SnwyKtf2dKFF6PmkQLm9b4azJOo0Oka
9IJynYCWbnTvlN4tVNtaSw2xQkNEahk=
-----END CERTIFICATE-----
Generated at Fri May 24 14:56:28 2024 by rpki-client on console-ams.rpki-client.org