Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5e0f9f66-ff2e-34e7-a568-e277748b2558.roa
File:                     5e0f9f66-ff2e-34e7-a568-e277748b2558.roa (raw, json)
Hash identifier:          0dhLtrex3rfh2vCHzfYPPq+1LUm9WJMLuZfPJ2dTQkc=
Subject key identifier:   BE:98:E1:11:F9:A7:A5:EE:98:28:FD:7B:71:D2:2D:D2:1F:48:4C:36
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F43285845B4E8D0A1086387FC4BC718C0
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5e0f9f66-ff2e-34e7-a568-e277748b2558.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     198949
IP address blocks:        216.99.216.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d0:a1:08:63:87:fc:4b:c7:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=ea48392f-9d87-482f-90e7-95e05ac984cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:0a:40:6b:cf:43:6a:63:bb:fb:cd:c2:8a:
                    64:48:d1:82:5f:1e:78:89:e7:22:75:39:35:15:34:
                    4a:bc:30:2a:f1:c5:2a:15:5d:c4:4f:a8:2c:18:87:
                    c3:6a:e8:71:91:50:b8:55:1c:1f:ca:98:05:55:a0:
                    da:72:f2:dc:9b:12:de:78:11:bd:8a:45:d6:3a:8d:
                    36:76:00:e8:1f:64:a1:82:2a:61:d5:6e:56:3a:65:
                    07:97:a2:a0:12:bb:e0:67:a7:39:4a:24:9b:cc:85:
                    c8:51:7a:3b:0e:e3:c2:53:ca:a4:37:10:2e:b2:56:
                    60:0f:24:bd:0f:1e:ac:ff:78:b5:52:0e:d1:4e:cc:
                    1e:c5:c3:d4:45:13:10:ee:8c:04:c4:00:21:79:f3:
                    c6:c1:79:ef:4b:1b:04:ef:4d:44:af:d5:26:02:b9:
                    f7:a6:46:54:42:0d:bb:11:a2:91:96:16:90:63:2b:
                    24:5e:1f:b7:77:37:e6:69:fe:92:e2:88:f6:fb:b5:
                    2d:37:d7:b4:3c:2b:69:42:97:e8:73:34:f5:2a:21:
                    27:98:d8:a0:ff:bf:e7:a7:fc:f7:ca:45:d5:4e:40:
                    81:9d:20:b8:68:66:a4:fa:10:47:ad:28:5f:18:6c:
                    81:24:48:6f:cd:f7:b1:4f:ff:5d:83:13:33:7d:58:
                    6b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:98:E1:11:F9:A7:A5:EE:98:28:FD:7B:71:D2:2D:D2:1F:48:4C:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5e0f9f66-ff2e-34e7-a568-e277748b2558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b1:42:c7:99:17:50:72:e0:11:57:ec:0c:12:9a:96:89:8e:
         dc:f6:94:67:02:da:88:9a:e6:ce:35:f8:56:4a:b2:a1:e0:af:
         d1:a6:4d:77:d8:ad:dd:07:42:74:3b:1d:50:a0:b7:94:b8:88:
         46:ba:3c:5c:c4:a5:fb:1e:85:d4:7f:74:57:ce:d7:87:08:1b:
         86:2b:c2:ce:77:69:ee:1e:a1:66:ae:d2:61:aa:9b:be:10:b5:
         82:4c:91:60:b9:06:87:11:51:17:b4:24:91:e3:5a:d1:5f:29:
         c5:79:07:78:cf:7e:6f:4d:0d:99:68:a4:b3:25:58:77:76:a8:
         c9:a0:63:18:04:3d:e4:95:27:55:7c:56:a0:f4:01:07:dc:1a:
         38:be:8f:b1:66:41:db:4c:e4:c7:03:da:05:71:89:29:11:af:
         d8:57:96:76:88:11:77:4a:cf:68:3c:eb:fa:15:93:dd:52:69:
         3d:36:d7:12:85:25:e1:16:6a:03:79:b3:89:d6:7f:99:66:65:
         69:33:86:82:20:14:06:d4:db:b6:57:0d:a9:dd:eb:ee:c3:6c:
         ee:98:2a:9e:13:0f:54:ff:1f:22:74:f2:47:0e:35:b9:a1:c7:
         42:01:9c:1d:c4:98:d9:f1:42:2c:39:ef:5a:9a:77:8b:5c:79:
         4a:c2:bc:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW06NChCGOH/EvHGMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5
NzdmMB4XDTI0MDQyOTEzMDAzM1oXDTI0MDcyODEzMDAzM1owLzEtMCsGA1UEAxMk
ZWE0ODM5MmYtOWQ4Ny00ODJmLTkwZTctOTVlMDVhYzk4NGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9AKQGvPQ2pju/vNwopkSNGCXx54iecidTk1
FTRKvDAq8cUqFV3ET6gsGIfDauhxkVC4VRwfypgFVaDacvLcmxLeeBG9ikXWOo02
dgDoH2Shgiph1W5WOmUHl6KgErvgZ6c5SiSbzIXIUXo7DuPCU8qkNxAuslZgDyS9
Dx6s/3i1Ug7RTswexcPURRMQ7owExAAhefPGwXnvSxsE701Er9UmArn3pkZUQg27
EaKRlhaQYyskXh+3dzfmaf6S4oj2+7UtN9e0PCtpQpfoczT1KiEnmNig/7/np/z3
ykXVTkCBnSC4aGak+hBHrShfGGyBJEhvzfexT/9dgxMzfVhrrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL6Y4RH5p6XumCj9e3HSLdIfSEw2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm
ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvNWUwZjlmNjYtZmYyZS0z
NGU3LWE1NjgtZTI3Nzc0OGIyNTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj
MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5
OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk
ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GPYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHaxQseZF1By4BFX7AwSmpaJjtz2lGcC2oia5s41+FZKsqHgr9GmTXfY
rd0HQnQ7HVCgt5S4iEa6PFzEpfsehdR/dFfO14cIG4Yrws53ae4eoWau0mGqm74Q
tYJMkWC5BocRURe0JJHjWtFfKcV5B3jPfm9NDZlopLMlWHd2qMmgYxgEPeSVJ1V8
VqD0AQfcGji+j7FmQdtM5McD2gVxiSkRr9hXlnaIEXdKz2g86/oVk91SaT021xKF
JeEWagN5s4nWf5lmZWkzhoIgFAbU27ZXDand6+7DbO6YKp4TD1T/HyJ08kcONbmh
x0IBnB3EmNnxQiw571qad4tceUrCvOQ=
-----END CERTIFICATE-----
Generated at Sun May 19 01:56:20 2024 by rpki-client on console-fra.rpki-client.org