Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/8b05c8dc-a95c-3ba2-bf5d-345bfeca771d.roa
File:                     8b05c8dc-a95c-3ba2-bf5d-345bfeca771d.roa (raw, json)
Hash identifier:          XpMxPLbHH2WbiQW7CXF3dwpfqrYrdfx4Scr0INiMuxg=
Subject key identifier:   C9:93:C8:0E:43:57:F7:B7:CF:B7:C6:5E:72:EB:B2:47:59:3F:11:01
Certificate issuer:       /CN=000bd43e-168e-4afa-8dc5-47948687933d
Certificate serial:       010D0C9F43285845D668FD5F255890F8A1593700
Authority key identifier: 89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/8b05c8dc-a95c-3ba2-bf5d-345bfeca771d.roa
Signing time:             Sat 11 May 2024 13:00:34 +0000
ROA not before:           Sat 11 May 2024 13:00:34 +0000
ROA not after:            Fri 09 Aug 2024 13:00:34 +0000
asID:                     8075
IP address blocks:        69.52.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d6:68:fd:5f:25:58:90:f8:a1:59:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000bd43e-168e-4afa-8dc5-47948687933d
        Validity
            Not Before: May 11 13:00:34 2024 GMT
            Not After : Aug  9 13:00:34 2024 GMT
        Subject: CN=14cd9255-c44f-474a-b213-86b9d386b226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:83:86:bd:15:f2:41:42:23:0b:b7:85:ec:57:
                    3e:5c:6b:42:a5:59:97:a5:95:d8:e9:85:5f:cd:6e:
                    42:12:1d:fe:5a:c8:74:12:a1:e4:8e:19:28:9c:c8:
                    06:44:3d:24:2d:17:e8:f6:9d:7a:68:81:07:90:6e:
                    47:eb:9b:b8:db:1a:ac:6b:9f:13:c7:b0:0e:78:06:
                    ac:55:f3:50:40:47:e4:02:5c:1e:a3:ec:9d:05:dc:
                    96:e8:58:5d:d8:44:0f:30:fa:90:bb:09:b5:cc:9b:
                    43:42:da:34:de:b0:28:7a:79:73:7e:ac:c4:e9:04:
                    f9:09:ce:3f:fd:55:c0:36:28:b1:ef:dc:7e:f4:90:
                    a3:5e:a4:c2:c0:1c:f8:29:a7:57:a6:80:d2:3f:88:
                    02:a7:bd:33:94:3c:38:e8:7d:fd:36:9d:2c:23:41:
                    83:10:7b:ba:d2:9c:a6:ca:d0:d0:6a:41:66:70:45:
                    0c:dd:a8:f6:1d:9c:11:8a:d7:c7:82:7c:20:36:5c:
                    39:28:5d:09:e5:7b:11:fa:e7:92:dd:e1:68:0f:03:
                    a0:3a:1f:e3:9a:64:ee:d4:3a:17:cd:ae:71:0c:b4:
                    93:02:49:e1:20:b6:cb:67:04:62:9d:19:0e:30:89:
                    b7:aa:91:bf:af:94:5c:5c:0c:41:86:96:e2:eb:2f:
                    89:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:93:C8:0E:43:57:F7:B7:CF:B7:C6:5E:72:EB:B2:47:59:3F:11:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/8b05c8dc-a95c-3ba2-bf5d-345bfeca771d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.crl

            X509v3 Authority Key Identifier:
                keyid:89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:fa:6b:21:69:20:96:42:5b:a2:c7:8c:71:c2:62:56:6a:62:
         4b:cd:6f:03:a6:d6:f3:cb:07:5f:ab:12:41:66:c3:ad:6e:9d:
         60:2c:4e:ba:59:35:b7:83:e6:8b:7f:d0:6d:92:7e:10:57:34:
         a5:f6:b2:ab:94:dc:92:a7:1d:d0:70:43:a1:db:fb:dd:04:85:
         72:19:cc:b5:32:d1:9e:a1:74:77:d2:cb:80:9f:3b:6a:5c:96:
         fa:ee:2e:18:e6:55:ef:14:e6:fe:fd:44:6e:de:35:21:6a:0f:
         74:4c:47:df:4d:89:70:0b:b0:4a:87:1f:6e:57:1c:fd:b6:18:
         88:a1:b7:ba:f1:72:7b:97:7e:ad:8f:ad:b6:15:d1:ec:dc:fe:
         5a:59:48:0b:4b:a6:ff:89:f8:00:4b:8b:04:96:7b:15:c6:f8:
         2a:7b:fe:3f:c3:bc:05:89:ed:bd:a5:94:0d:02:b2:8a:cc:ab:
         6f:50:95:65:8c:f7:69:d8:06:9f:40:8a:8c:1e:b2:ff:4e:dd:
         ee:f8:b0:6f:a5:58:63:56:52:e6:97:b4:a6:21:1a:90:0a:e7:
         78:56:93:29:38:19:4f:e5:41:9e:3e:c3:bf:de:d0:7e:c3:e9:
         58:a5:cb:c5:58:94:6b:5e:93:2b:81:b1:84:d4:b7:08:27:6c:
         7e:08:64:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXWaP1fJViQ+KFZNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDAwYmQ0M2UtMTY4ZS00YWZhLThkYzUtNDc5NDg2ODc5
MzNkMB4XDTI0MDUxMTEzMDAzNFoXDTI0MDgwOTEzMDAzNFowLzEtMCsGA1UEAxMk
MTRjZDkyNTUtYzQ0Zi00NzRhLWIyMTMtODZiOWQzODZiMjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4OGvRXyQUIjC7eF7Fc+XGtCpVmXpZXY6YVf
zW5CEh3+Wsh0EqHkjhkonMgGRD0kLRfo9p16aIEHkG5H65u42xqsa58Tx7AOeAas
VfNQQEfkAlweo+ydBdyW6Fhd2EQPMPqQuwm1zJtDQto03rAoenlzfqzE6QT5Cc4/
/VXANiix79x+9JCjXqTCwBz4KadXpoDSP4gCp70zlDw46H39Np0sI0GDEHu60pym
ytDQakFmcEUM3aj2HZwRitfHgnwgNlw5KF0J5XsR+ueS3eFoDwOgOh/jmmTu1DoX
za5xDLSTAknhILbLZwRinRkOMIm3qpG/r5RcXAxBhpbi6y+JkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMmTyA5DV/e3z7fGXnLrskdZPxEBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wMDBi
ZDQzZS0xNjhlLTRhZmEtOGRjNS00Nzk0ODY4NzkzM2QvOGIwNWM4ZGMtYTk1Yy0z
YmEyLWJmNWQtMzQ1YmZlY2E3NzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDAwYmQ0M2UtMTY4ZS00YWZhLThk
YzUtNDc5NDg2ODc5MzNkLzAwMGJkNDNlLTE2OGUtNGFmYS04ZGM1LTQ3OTQ4Njg3
OTMzZC5jcmwwHwYDVR0jBBgwFoAUiagPt6elyYgQiGSpSHJaWrotZAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wMDBiZDQzZS0xNjhlLTRhZmEtOGRjNS00Nzk0
ODY4NzkzM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTTGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABv6ayFpIJZCW6LHjHHCYlZqYkvNbwOm1vPLB1+rEkFmw61unWAsTrpZ
NbeD5ot/0G2SfhBXNKX2squU3JKnHdBwQ6Hb+90EhXIZzLUy0Z6hdHfSy4CfO2pc
lvruLhjmVe8U5v79RG7eNSFqD3RMR99NiXALsEqHH25XHP22GIiht7rxcnuXfq2P
rbYV0ezc/lpZSAtLpv+J+ABLiwSWexXG+Cp7/j/DvAWJ7b2llA0CsorMq29QlWWM
92nYBp9Aiowesv9O3e74sG+lWGNWUuaXtKYhGpAK53hWkyk4GU/lQZ4+w7/e0H7D
6Vily8VYlGtekyuBsYTUtwgnbH4IZHI=
-----END CERTIFICATE-----
Generated at Wed May 22 07:21:28 2024 by rpki-client on console-ams.rpki-client.org