Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1e72d23f-9a00-3a26-8dfa-b0ae01740e81.roa
File:                     1e72d23f-9a00-3a26-8dfa-b0ae01740e81.roa (raw, json)
Hash identifier:          pDNOq8iZpg0KNdDb/xVRdGKb2bWsvCmpvgHVfrVProg=
Subject key identifier:   65:C6:6B:34:3D:00:DB:11:18:9E:59:76:65:81:93:88:E2:11:D8:A2
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285844D44A707F3F6DBEBE386334C0
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1e72d23f-9a00-3a26-8dfa-b0ae01740e81.roa
Signing time:             Fri 09 Feb 2024 02:00:25 +0000
ROA not before:           Fri 09 Feb 2024 02:00:25 +0000
ROA not after:            Thu 09 May 2024 01:00:25 +0000
asID:                     36351
IP address blocks:        206.190.155.0/24 maxlen: 24
                          206.190.156.0/24 maxlen: 24
                          206.190.157.0/24 maxlen: 24
                          206.190.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d4:4a:70:7f:3f:6d:be:be:38:63:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Feb  9 02:00:25 2024 GMT
            Not After : May  9 01:00:25 2024 GMT
        Subject: CN=4d8a4f9d-77d9-48dd-a180-7b3d1425c752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ec:e6:21:a5:51:ee:11:4c:09:72:4e:3f:da:
                    cc:98:cb:2e:88:be:c0:bc:49:fd:fb:32:aa:c0:b7:
                    ed:5b:1c:b6:ae:54:2a:28:ef:1b:e1:c6:9a:bd:47:
                    66:61:3b:e1:46:b0:a9:62:a0:36:19:6a:9d:94:5e:
                    2f:78:3f:71:97:e4:5c:e1:d3:e6:4a:b1:75:1b:e8:
                    1f:61:d0:f6:37:f6:ef:db:90:6c:69:e3:c0:84:8c:
                    0d:0d:e4:a2:7e:a9:de:53:60:15:68:5e:5e:32:72:
                    83:da:95:26:52:3f:1f:aa:b9:6c:d9:5f:ae:99:40:
                    6b:5d:93:cb:95:7c:9a:17:1d:f7:68:55:5e:85:cc:
                    e4:25:67:66:50:7a:d2:b0:a0:6a:cf:0b:b2:ae:7a:
                    fe:ee:ff:33:f5:f3:cf:8d:5f:51:62:4e:19:41:61:
                    8c:75:03:a1:2f:e9:4f:a0:5c:e4:95:79:eb:f5:13:
                    2f:b0:2a:33:4a:5b:9a:a8:91:c8:ca:ae:af:08:7c:
                    63:e5:10:ed:e3:ee:33:8d:ad:b8:41:99:01:9f:ad:
                    d6:85:45:b5:0f:69:b5:38:dc:08:84:2e:f3:45:2d:
                    8a:14:b2:09:87:42:91:63:04:39:16:9b:21:fa:1c:
                    79:db:43:0b:3e:4d:43:42:51:0a:4d:18:ab:7a:09:
                    fd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C6:6B:34:3D:00:DB:11:18:9E:59:76:65:81:93:88:E2:11:D8:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1e72d23f-9a00-3a26-8dfa-b0ae01740e81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.190.155.0-206.190.158.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:43:58:5a:fa:6a:52:91:b6:c2:6f:cf:c5:64:d0:7b:82:08:
         e6:2e:da:38:5c:66:4a:b4:f9:be:b0:ac:aa:67:d8:bc:bc:48:
         ba:e0:b1:a4:d1:7c:60:dc:af:25:ac:82:5b:6c:0b:0a:30:59:
         be:25:0d:19:0c:6d:1a:65:22:5a:b5:bf:d3:52:19:54:5f:19:
         6a:27:e2:d0:9f:18:b9:f8:50:14:18:3e:66:bb:48:7e:b0:66:
         88:ee:88:01:0b:4b:66:7a:b9:aa:4e:e5:1c:c2:5b:14:c6:57:
         21:16:35:04:fd:47:75:fa:d3:4d:eb:d6:67:b4:d3:c0:7b:79:
         25:1c:9b:92:0a:ab:a3:b9:12:42:55:77:5d:9b:7d:f3:31:37:
         4b:43:5c:5f:4b:e1:29:6a:11:80:6c:68:2b:1f:da:42:17:fe:
         b7:ef:1e:ba:eb:52:09:09:80:68:36:97:70:d0:cc:36:c2:a7:
         d5:93:c3:1e:98:98:44:31:8a:82:23:b2:72:13:13:15:b8:61:
         fc:93:0d:c0:ab:14:81:f2:1e:8f:07:a0:81:8e:55:ec:cf:31:
         11:14:03:53:09:63:6b:90:a4:44:80:10:df:88:b1:39:e8:19:
         e8:02:05:9a:f9:75:b8:fa:f6:7c:1e:88:1b:7f:65:46:80:73:
         fc:77:6d:e8
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWETUSnB/P22+vjhjNMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0MDdjZDgtYzgzMC00OWU2LTlkYjQtN2RkYWM3NWVi
MDNmMB4XDTI0MDIwOTAyMDAyNVoXDTI0MDUwOTAxMDAyNVowLzEtMCsGA1UEAxMk
NGQ4YTRmOWQtNzdkOS00OGRkLWExODAtN2IzZDE0MjVjNzUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluzmIaVR7hFMCXJOP9rMmMsuiL7AvEn9+zKq
wLftWxy2rlQqKO8b4caavUdmYTvhRrCpYqA2GWqdlF4veD9xl+Rc4dPmSrF1G+gf
YdD2N/bv25BsaePAhIwNDeSifqneU2AVaF5eMnKD2pUmUj8fqrls2V+umUBrXZPL
lXyaFx33aFVehczkJWdmUHrSsKBqzwuyrnr+7v8z9fPPjV9RYk4ZQWGMdQOhL+lP
oFzklXnr9RMvsCozSluaqJHIyq6vCHxj5RDt4+4zja24QZkBn63WhUW1D2m1ONwI
hC7zRS2KFLIJh0KRYwQ5Fpsh+hx520MLPk1DQlEKTRiregn9nwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFGXGazQ9ANsRGJ5ZdmWBk4jiEdiiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MTQw
N2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1ZWIwM2YvMWU3MmQyM2YtOWEwMC0z
YTI2LThkZmEtYjBhZTAxNzQwZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTE0MDdjZDgtYzgzMC00OWU2LTlk
YjQtN2RkYWM3NWViMDNmLzUxNDA3Y2Q4LWM4MzAtNDllNi05ZGI0LTdkZGFjNzVl
YjAzZi5jcmwwHwYDVR0jBBgwFoAUy7XVgkiqTdjWioVCA8Spu4nGVq4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRh
Yzc1ZWIwM2YuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADOvpsD
BADOvp4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAWUNYWvpqUpG2wm/PxWTQe4II5i7aOFxmSrT5vrCsqmfY
vLxIuuCxpNF8YNyvJayCW2wLCjBZviUNGQxtGmUiWrW/01IZVF8Zaifi0J8YufhQ
FBg+ZrtIfrBmiO6IAQtLZnq5qk7lHMJbFMZXIRY1BP1HdfrTTevWZ7TTwHt5JRyb
kgqro7kSQlV3XZt98zE3S0NcX0vhKWoRgGxoKx/aQhf+t+8euutSCQmAaDaXcNDM
NsKn1ZPDHpiYRDGKgiOychMTFbhh/JMNwKsUgfIejweggY5V7M8xERQDUwlja5Ck
RIAQ34ixOegZ6AIFmvl1uPr2fB6IG39lRoBz/Hdt6A==
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:24:53 2024 by rpki-client on console-ams.rpki-client.org