Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/2173f68c-b59a-3132-8a96-0bf15dff1b15.roa
File:                     2173f68c-b59a-3132-8a96-0bf15dff1b15.roa (raw, json)
Hash identifier:          oY6TO+dfsdrvL2CuEWdDiYcvL+KMxDx2Jimx01PAkZU=
Subject key identifier:   DA:69:70:5A:0C:C8:0A:CB:DE:52:9F:B2:43:B7:F3:5A:3D:4D:C4:BA
Certificate issuer:       /CN=77dc753c-bede-4a42-99ae-484402f9795c
Certificate serial:       010D0C9F4328584523DAFAF9C1654D5E8490ED00
Authority key identifier: A1:E7:A3:EA:9E:9C:B6:3D:C9:5D:7D:E3:16:97:55:46:51:9D:20:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/2173f68c-b59a-3132-8a96-0bf15dff1b15.roa
Signing time:             Fri 08 Mar 2024 14:00:30 +0000
ROA not before:           Fri 08 Mar 2024 14:00:30 +0000
ROA not after:            Thu 06 Jun 2024 13:00:30 +0000
asID:                     399337
IP address blocks:        216.73.176.0/22 maxlen: 22
                          172.110.176.0/22 maxlen: 22
                          208.81.16.0/22 maxlen: 22
                          2606:9340::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:da:fa:f9:c1:65:4d:5e:84:90:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dc753c-bede-4a42-99ae-484402f9795c
        Validity
            Not Before: Mar  8 14:00:30 2024 GMT
            Not After : Jun  6 13:00:30 2024 GMT
        Subject: CN=6c4cc598-6003-4b2e-b85b-34a355ccb9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fa:1b:a3:3b:fc:d4:c8:19:18:2f:e3:45:45:
                    95:08:4b:4e:37:41:a6:df:25:c4:c5:5a:3d:2b:38:
                    8f:ec:a5:e4:07:e4:ac:99:9b:5a:7b:3e:ea:77:a8:
                    48:d8:cd:bc:f4:81:86:6e:4c:27:f1:42:c3:75:a9:
                    e7:d2:2f:f6:88:16:cb:8a:3e:83:1f:bd:20:ca:9c:
                    0a:0a:af:98:f2:af:e1:c9:d1:08:fd:92:2f:a4:bb:
                    b3:c1:d1:66:5c:97:20:6c:87:5b:d5:72:9b:12:88:
                    12:51:b6:a6:1c:82:4b:f0:cd:b4:a0:ff:fd:8b:e7:
                    d0:c1:29:a4:45:7d:4e:0d:f7:db:82:b6:b6:8b:0f:
                    d6:6e:c4:a7:28:9a:2f:cd:46:41:17:9d:6b:98:de:
                    24:10:1f:7f:51:ab:0f:64:7b:72:cd:d0:26:8a:bf:
                    fb:82:9f:56:18:14:a1:72:64:35:70:c0:8f:c2:45:
                    01:78:7a:15:8a:b6:62:03:a0:d7:21:bc:64:e9:80:
                    a5:9e:e7:42:79:b6:c3:e4:65:09:a8:88:23:49:a9:
                    b4:b4:52:d7:bc:cc:d5:55:7f:04:89:3d:e8:5d:17:
                    f8:d4:2e:9a:d4:de:2d:91:48:10:00:85:3f:0d:5a:
                    18:35:49:3d:9e:49:fe:ef:3f:d9:da:46:06:f1:ce:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:69:70:5A:0C:C8:0A:CB:DE:52:9F:B2:43:B7:F3:5A:3D:4D:C4:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/2173f68c-b59a-3132-8a96-0bf15dff1b15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:E7:A3:EA:9E:9C:B6:3D:C9:5D:7D:E3:16:97:55:46:51:9D:20:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.176.0/22
                  208.81.16.0/22
                  216.73.176.0/22
                IPv6:
                  2606:9340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:84:5f:d4:cb:01:aa:bc:ac:c5:4c:c0:b0:b1:d1:d2:b7:62:
         67:b0:a3:13:4f:34:5e:aa:85:d3:ab:27:64:e9:c2:c0:fa:58:
         d0:20:eb:7b:64:df:49:40:f3:5b:46:4b:95:a7:8b:fa:fc:aa:
         2f:41:fd:6d:7c:8b:69:ff:e2:5f:32:1b:7d:57:79:7e:07:c8:
         b0:32:b8:42:aa:cc:45:dd:86:d2:62:4d:b3:2e:72:20:4b:7e:
         9d:f6:c8:8b:d1:96:bb:eb:91:f9:d1:a0:cd:df:43:ff:93:6c:
         05:dd:2d:6d:74:ac:8a:c1:bc:9a:19:ba:d8:ce:4f:f7:74:84:
         9c:12:69:6f:2d:1d:54:3e:ab:da:7b:36:e5:24:e0:34:16:d1:
         01:d1:15:11:17:e4:f2:4e:c3:d5:fe:6f:6c:7b:2e:22:1c:6c:
         1d:55:26:14:b4:71:50:a4:b8:0a:97:db:c7:f6:2f:a3:0d:08:
         6e:6a:79:24:6c:d8:2d:d8:0c:9b:45:8a:c3:6a:65:74:3d:76:
         3f:47:3a:d9:db:bb:c0:2a:cc:12:ba:93:0c:6a:28:47:1d:a8:
         a7:b5:ec:06:b4:43:ea:db:bf:92:2d:61:39:25:c3:bd:68:04:
         71:a0:a4:73:32:c6:5b:15:06:72:64:b1:ae:1d:ba:42:56:93:
         96:74:12:7f
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEUj2vr5wWVNXoSQ7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzdkYzc1M2MtYmVkZS00YTQyLTk5YWUtNDg0NDAyZjk3
OTVjMB4XDTI0MDMwODE0MDAzMFoXDTI0MDYwNjEzMDAzMFowLzEtMCsGA1UEAxMk
NmM0Y2M1OTgtNjAwMy00YjJlLWI4NWItMzRhMzU1Y2NiOWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvobozv81MgZGC/jRUWVCEtON0Gm3yXExVo9
KziP7KXkB+SsmZtaez7qd6hI2M289IGGbkwn8ULDdann0i/2iBbLij6DH70gypwK
Cq+Y8q/hydEI/ZIvpLuzwdFmXJcgbIdb1XKbEogSUbamHIJL8M20oP/9i+fQwSmk
RX1ODffbgra2iw/WbsSnKJovzUZBF51rmN4kEB9/UasPZHtyzdAmir/7gp9WGBSh
cmQ1cMCPwkUBeHoVirZiA6DXIbxk6YClnudCebbD5GUJqIgjSam0tFLXvMzVVX8E
iT3oXRf41C6a1N4tkUgQAIU/DVoYNUk9nkn+7z/Z2kYG8c5y/wIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFNppcFoMyArL3lKfskO381o9TcS6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83N2Rj
NzUzYy1iZWRlLTRhNDItOTlhZS00ODQ0MDJmOTc5NWMvMjE3M2Y2OGMtYjU5YS0z
MTMyLThhOTYtMGJmMTVkZmYxYjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzdkYzc1M2MtYmVkZS00YTQyLTk5
YWUtNDg0NDAyZjk3OTVjLzc3ZGM3NTNjLWJlZGUtNGE0Mi05OWFlLTQ4NDQwMmY5
Nzk1Yy5jcmwwHwYDVR0jBBgwFoAUoeej6p6ctj3JXX3jFpdVRlGdIA8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83N2RjNzUzYy1iZWRlLTRhNDItOTlhZS00ODQ0
MDJmOTc5NWMuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCrG6wAwQC
0FEQAwQC2EmwMA0EAgACMAcDBQAmBpNAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFqEX9TLAaq8rMVMwLCx
0dK3YmewoxNPNF6qhdOrJ2TpwsD6WNAg63tk30lA81tGS5Wni/r8qi9B/W18i2n/
4l8yG31XeX4HyLAyuEKqzEXdhtJiTbMuciBLfp32yIvRlrvrkfnRoM3fQ/+TbAXd
LW10rIrBvJoZutjOT/d0hJwSaW8tHVQ+q9p7NuUk4DQW0QHRFREX5PJOw9X+b2x7
LiIcbB1VJhS0cVCkuAqX28f2L6MNCG5qeSRs2C3YDJtFisNqZXQ9dj9HOtnbu8Aq
zBK6kwxqKEcdqKe17Aa0Q+rbv5ItYTklw71oBHGgpHMyxlsVBnJksa4dukJWk5Z0
En8=
-----END CERTIFICATE-----
Generated at Wed May 15 16:06:07 2024 by rpki-client on console-ams.rpki-client.org