Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa
File:                     2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa (raw, json)
Hash identifier:          z2Eh9jlsqcra++K1e1UsnpflMuuJdM+idLiPt7cClU8=
Subject key identifier:   E7:53:3D:9D:B7:89:41:7A:80:8E:F8:FB:6C:EF:1D:B3:00:A2:BF:C7
Certificate issuer:       /CN=0c71d09c-b853-44b9-8b34-8d5283774a5a
Certificate serial:       010D0C9F43285845F51E8921EB53241DAAFE22C0
Authority key identifier: 32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa
Signing time:             Wed 22 May 2024 13:00:33 +0000
ROA not before:           Wed 22 May 2024 13:00:33 +0000
ROA not after:            Tue 20 Aug 2024 13:00:33 +0000
asID:                     14721
IP address blocks:        208.91.152.0/22 maxlen: 24
                          208.86.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f5:1e:89:21:eb:53:24:1d:aa:fe:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c71d09c-b853-44b9-8b34-8d5283774a5a
        Validity
            Not Before: May 22 13:00:33 2024 GMT
            Not After : Aug 20 13:00:33 2024 GMT
        Subject: CN=cab276d1-9e34-463a-90b2-5280dc52205c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:be:fd:8d:ea:6a:19:00:8e:91:b1:49:c7:e7:
                    8f:90:be:bd:9d:29:76:57:91:fe:95:56:de:2e:6d:
                    33:71:a3:ea:f9:7b:09:ab:5a:36:49:f8:16:36:84:
                    7e:00:06:d3:ad:47:6d:2b:72:2b:4f:f4:26:40:e2:
                    9d:d4:03:a8:d4:11:fb:b5:d9:e8:f6:90:86:6d:70:
                    f9:22:a1:60:a9:60:08:61:10:cf:31:0e:67:57:16:
                    fc:c8:25:fc:3d:6b:ab:5b:18:a4:fd:31:e4:d0:18:
                    b5:b5:0c:26:a5:5a:99:7b:14:2a:71:e4:f4:11:83:
                    c4:2e:68:dd:4e:2d:81:65:a7:d5:46:2a:b8:4e:2e:
                    14:c8:c8:7b:a7:65:6c:ea:1d:f8:1f:74:c7:a2:73:
                    99:54:ba:21:52:2a:56:72:46:95:7e:ae:08:1a:2e:
                    c6:ad:ea:f0:7c:6f:53:52:07:a3:30:8c:52:fe:d3:
                    81:00:d0:e5:b0:2b:fa:bd:bf:b7:6d:be:7d:1f:ab:
                    54:ee:1e:7c:98:74:4d:fb:c5:5e:6f:21:d8:4a:1f:
                    70:18:e7:ba:47:80:37:b8:2a:bc:fc:41:5d:a3:b2:
                    18:fd:d8:6d:c7:ba:80:f6:25:82:04:27:0c:2c:9d:
                    09:97:5e:0b:d5:1a:6b:94:13:d7:6c:60:94:f9:76:
                    b9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:53:3D:9D:B7:89:41:7A:80:8E:F8:FB:6C:EF:1D:B3:00:A2:BF:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl

            X509v3 Authority Key Identifier:
                keyid:32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.116.0/22
                  208.91.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:7d:44:f0:a8:47:e4:f6:63:e5:15:fc:55:98:c2:8d:81:cb:
         81:07:90:30:f9:80:4d:a2:32:2a:de:91:91:f7:38:c1:74:c6:
         e6:22:a4:15:32:ef:07:ca:81:9d:43:1e:c3:f0:11:c0:11:62:
         02:8c:9f:96:79:e0:20:6c:cc:f1:a7:e6:35:a0:84:b3:9e:9d:
         01:69:ee:da:e6:1c:91:05:4d:f8:60:d0:bb:71:5e:d3:8e:f7:
         1e:1d:35:2b:70:01:94:7d:28:eb:df:79:9c:04:20:b4:58:9b:
         0a:d7:5f:d6:c2:ca:98:11:a3:32:df:af:5f:bb:57:33:d2:bf:
         f2:0b:7f:65:25:bc:51:56:db:ed:9c:13:71:27:25:86:ae:34:
         bc:bf:19:3d:69:c7:c5:17:af:19:02:4d:01:6d:75:e5:c9:32:
         3d:b3:20:42:1d:b7:c0:db:fa:53:f2:40:f2:77:00:49:78:f4:
         90:ae:ec:3b:59:c0:6a:d2:38:b0:80:b1:57:f5:1b:05:d4:d4:
         0f:f0:ce:59:a6:5d:05:06:1b:cc:ee:0b:d5:5d:51:8c:7f:7f:
         90:c9:5a:77:71:da:9d:61:fb:df:80:37:b4:7d:ac:09:f9:9e:
         d9:82:98:7c:49:bc:26:36:ab:ee:75:eb:9d:fa:0a:eb:03:05:
         56:44:89:06
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEX1Hokh61MkHar+IsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGM3MWQwOWMtYjg1My00NGI5LThiMzQtOGQ1MjgzNzc0
YTVhMB4XDTI0MDUyMjEzMDAzM1oXDTI0MDgyMDEzMDAzM1owLzEtMCsGA1UEAxMk
Y2FiMjc2ZDEtOWUzNC00NjNhLTkwYjItNTI4MGRjNTIyMDVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb79jepqGQCOkbFJx+ePkL69nSl2V5H+lVbe
Lm0zcaPq+XsJq1o2SfgWNoR+AAbTrUdtK3IrT/QmQOKd1AOo1BH7tdno9pCGbXD5
IqFgqWAIYRDPMQ5nVxb8yCX8PWurWxik/THk0Bi1tQwmpVqZexQqceT0EYPELmjd
Ti2BZafVRiq4Ti4UyMh7p2Vs6h34H3THonOZVLohUipWckaVfq4IGi7GrerwfG9T
UgejMIxS/tOBANDlsCv6vb+3bb59H6tU7h58mHRN+8VebyHYSh9wGOe6R4A3uCq8
/EFdo7IY/dhtx7qA9iWCBCcMLJ0Jl14L1RprlBPXbGCU+Xa5IwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFOdTPZ23iUF6gI74+2zvHbMAor/HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzcx
ZDA5Yy1iODUzLTQ0YjktOGIzNC04ZDUyODM3NzRhNWEvMmEyZjA1OWQtZTE4MS0z
M2JmLThiYmQtMmM0YTVkMDkwODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM3MWQwOWMtYjg1My00NGI5LThi
MzQtOGQ1MjgzNzc0YTVhLzBjNzFkMDljLWI4NTMtNDRiOS04YjM0LThkNTI4Mzc3
NGE1YS5jcmwwHwYDVR0jBBgwFoAUMjrJJt0I/JfknfYqpMDA+iarQNswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzcxZDA5Yy1iODUzLTQ0YjktOGIzNC04ZDUy
ODM3NzRhNWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC0FZ0AwQC
0FuYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHl9RPCoR+T2Y+UV/FWYwo2By4EHkDD5gE2iMirekZH3OMF0
xuYipBUy7wfKgZ1DHsPwEcARYgKMn5Z54CBszPGn5jWghLOenQFp7trmHJEFTfhg
0LtxXtOO9x4dNStwAZR9KOvfeZwEILRYmwrXX9bCypgRozLfr1+7VzPSv/ILf2Ul
vFFW2+2cE3EnJYauNLy/GT1px8UXrxkCTQFtdeXJMj2zIEIdt8Db+lPyQPJ3AEl4
9JCu7DtZwGrSOLCAsVf1GwXU1A/wzlmmXQUGG8zuC9VdUYx/f5DJWndx2p1h+9+A
N7R9rAn5ntmCmHxJvCY2q+516536CusDBVZEiQY=
-----END CERTIFICATE-----
Generated at Wed May 22 20:44:21 2024 by rpki-client on console-fra.rpki-client.org