Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7395442f-a0fe-3451-b692-69afd3407f29.roa
File:                     7395442f-a0fe-3451-b692-69afd3407f29.roa (raw, json)
Hash identifier:          EyiMjCIjFENo6McrOskAdv8o2lWzRLhPXOS8JvV1WAo=
Subject key identifier:   62:B0:F4:7D:C7:74:45:15:8B:1E:E8:F2:4B:A2:6F:A9:7E:BA:FA:26
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F4328584596334BBAAD712137D36C8580
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7395442f-a0fe-3451-b692-69afd3407f29.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     22925
IP address blocks:        168.235.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:4b:ba:ad:71:21:37:d3:6c:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=d9115546-58ce-40bb-9550-17d3e3b7f4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a6:2e:2e:61:f5:27:a0:0a:c0:a1:6d:2a:4c:
                    de:fe:66:8c:9b:e0:cf:2e:b2:60:f9:c6:7a:f1:bf:
                    23:7b:2a:48:2a:8c:f5:ad:43:b4:80:36:c1:8c:e7:
                    fc:87:d4:29:92:8f:44:47:39:81:43:76:9a:87:51:
                    30:af:6b:b0:0a:29:05:70:f3:89:b9:18:f6:1c:c4:
                    94:fa:bd:d4:f6:bf:33:3b:9d:b9:94:09:f8:9d:f1:
                    7f:ac:4c:e5:3b:1f:ff:4f:7e:d2:ea:a0:5e:a2:22:
                    86:ad:85:9d:4c:4b:5b:d5:47:5f:a9:20:8a:ca:c4:
                    b7:49:d7:32:be:f0:8b:d3:e2:17:3a:1c:ad:cb:55:
                    31:62:96:f9:4f:48:69:14:b7:95:7e:47:5b:3e:20:
                    5c:90:7f:7a:db:25:47:87:9e:63:5f:f5:d8:45:96:
                    a5:81:0c:3f:bc:6a:cb:93:74:6a:aa:de:15:be:39:
                    d3:08:61:1f:6e:e2:a7:13:04:cd:5c:d8:17:e9:f9:
                    69:14:b5:f2:76:4f:9a:c4:db:68:95:9f:b8:26:76:
                    c8:0c:45:23:d6:02:20:16:4c:98:d6:81:d4:2d:0d:
                    8c:2c:c4:1f:6b:f2:2d:e7:06:85:d4:aa:8b:eb:31:
                    a5:18:3e:ff:b9:14:20:3d:a1:2f:be:d4:8e:b1:10:
                    61:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B0:F4:7D:C7:74:45:15:8B:1E:E8:F2:4B:A2:6F:A9:7E:BA:FA:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7395442f-a0fe-3451-b692-69afd3407f29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.235.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:d7:24:aa:6f:e9:b2:80:ed:fb:be:29:c9:35:a2:19:bf:6e:
         b4:bc:b8:04:e4:1b:71:dc:6c:72:6d:95:60:4e:7e:95:73:f5:
         be:8c:41:8a:12:16:6d:fb:3d:ec:36:1a:45:36:ec:e6:31:fe:
         ec:65:91:45:0c:88:6e:fb:5d:f6:f0:06:3b:7f:95:ba:08:4c:
         42:aa:03:7e:a1:22:cf:1d:f0:61:3b:b2:bb:54:79:83:89:36:
         c9:10:ac:eb:0d:dc:87:59:73:09:58:b5:f7:41:01:18:c8:8d:
         ef:0f:6c:90:99:bf:9d:64:e7:b6:70:48:e0:c7:89:dd:7b:1c:
         94:91:3b:7a:f7:1c:24:db:72:df:d4:4d:d6:a2:a9:17:9e:42:
         f5:57:1c:9b:28:cf:71:4b:c4:c7:7a:a1:00:51:b9:d7:de:43:
         c5:fd:0e:65:35:23:88:3c:e2:9e:dd:7b:4c:19:83:70:65:76:
         b6:54:69:38:50:23:2c:68:64:12:b7:fb:e5:ae:ad:a3:61:e7:
         b1:7f:86:ab:d2:b4:75:5f:47:1d:d7:29:89:a6:fb:3b:3a:24:
         de:c6:e6:9b:a7:aa:8f:20:42:05:4e:73:10:d0:ea:ad:41:9f:
         c0:1f:69:2b:b7:dd:56:20:e8:db:13:31:87:92:ea:df:91:3c:
         a5:c9:69:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWWM0u6rXEhN9NshYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc4YTIzNGYtOTU1My00NDZhLTk2NWQtMGJmZmZhNDAy
ZjFiMB4XDTI0MDQxODEzMDAzM1oXDTI0MDcxNzEzMDAzM1owLzEtMCsGA1UEAxMk
ZDkxMTU1NDYtNThjZS00MGJiLTk1NTAtMTdkM2UzYjdmNGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqYuLmH1J6AKwKFtKkze/maMm+DPLrJg+cZ6
8b8jeypIKoz1rUO0gDbBjOf8h9Qpko9ERzmBQ3aah1Ewr2uwCikFcPOJuRj2HMSU
+r3U9r8zO525lAn4nfF/rEzlOx//T37S6qBeoiKGrYWdTEtb1UdfqSCKysS3Sdcy
vvCL0+IXOhyty1UxYpb5T0hpFLeVfkdbPiBckH962yVHh55jX/XYRZalgQw/vGrL
k3Rqqt4VvjnTCGEfbuKnEwTNXNgX6flpFLXydk+axNtolZ+4JnbIDEUj1gIgFkyY
1oHULQ2MLMQfa/It5waF1KqL6zGlGD7/uRQgPaEvvtSOsRBh3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGKw9H3HdEUVix7o8kuib6l+uvomMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhh
MjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZmZmE0MDJmMWIvNzM5NTQ0MmYtYTBmZS0z
NDUxLWI2OTItNjlhZmQzNDA3ZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjc4YTIzNGYtOTU1My00NDZhLTk2
NWQtMGJmZmZhNDAyZjFiL2Y3OGEyMzRmLTk1NTMtNDQ2YS05NjVkLTBiZmZmYTQw
MmYxYi5jcmwwHwYDVR0jBBgwFoAUySL1rL077bzOZt54JOhaPckKjtYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhhMjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZm
ZmE0MDJmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqOuwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADrXJKpv6bKA7fu+Kck1ohm/brS8uATkG3HcbHJtlWBOfpVz9b6MQYoS
Fm37Pew2GkU27OYx/uxlkUUMiG77XfbwBjt/lboITEKqA36hIs8d8GE7srtUeYOJ
NskQrOsN3IdZcwlYtfdBARjIje8PbJCZv51k57ZwSODHid17HJSRO3r3HCTbct/U
TdaiqReeQvVXHJsoz3FLxMd6oQBRudfeQ8X9DmU1I4g84p7de0wZg3BldrZUaThQ
IyxoZBK3++WuraNh57F/hqvStHVfRx3XKYmm+zs6JN7G5punqo8gQgVOcxDQ6q1B
n8AfaSu33VYg6NsTMYeS6t+RPKXJaVQ=
-----END CERTIFICATE-----
Generated at Sun Jun 2 20:01:40 2024 by rpki-client on console-fra.rpki-client.org