Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ea1d94da-b9ef-3726-8fd3-2c2e03ba8c70.roa
File:                     ea1d94da-b9ef-3726-8fd3-2c2e03ba8c70.roa (raw, json)
Hash identifier:          0IjXX0frOlrBmF6R0FzQzbD+J9JzJbUHB7g/71GRHAY=
Subject key identifier:   F3:74:0D:0D:57:D6:DA:23:DB:7B:7C:B2:52:2F:E4:2F:70:6C:5B:DA
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F43285845D39E6480A1B474F21AEB9580
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ea1d94da-b9ef-3726-8fd3-2c2e03ba8c70.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     21559
IP address blocks:        204.77.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:64:80:a1:b4:74:f2:1a:eb:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=f117a718-7262-4e0c-9ebb-84e6aa8be701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f5:90:79:ea:39:1b:a7:4f:74:d2:58:d0:53:
                    35:aa:b0:a2:9a:0f:84:c2:9e:01:5d:3c:f4:41:85:
                    02:d6:08:5c:2c:8f:d3:96:87:26:66:68:57:48:8a:
                    22:14:74:1b:84:f5:b4:5d:85:9a:41:ff:5b:46:57:
                    9b:3e:8d:7f:5b:f8:0a:a7:4f:d5:6f:7b:d6:ff:85:
                    25:98:9b:82:75:94:94:ce:59:7e:51:fc:4f:b0:8a:
                    6e:74:03:a2:9f:59:e1:37:9c:3b:49:94:d9:de:dc:
                    a0:43:b1:25:9e:5c:a5:30:e5:da:87:c6:e0:18:fe:
                    82:f4:81:aa:f5:f1:73:f7:60:c5:b9:60:56:09:6b:
                    64:a6:a2:c0:71:e4:7f:c5:ca:9d:1d:dc:cc:78:21:
                    5b:e2:f5:31:b2:55:df:00:df:51:a7:8b:61:75:d5:
                    e4:c5:8c:04:cb:34:55:22:18:37:12:11:54:7e:a8:
                    f5:7b:e4:13:14:12:4b:14:7b:18:15:bd:e1:06:70:
                    d0:6b:74:6e:89:1d:1c:42:d2:05:f8:b0:e6:e1:0a:
                    5d:98:7d:bd:36:98:18:84:77:8e:2f:2f:d1:f6:f8:
                    08:74:30:aa:c6:6b:f2:08:07:c9:be:9e:ca:4c:a9:
                    bf:a1:37:9b:ab:17:a0:0c:46:fa:12:ca:0d:97:7f:
                    da:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:74:0D:0D:57:D6:DA:23:DB:7B:7C:B2:52:2F:E4:2F:70:6C:5B:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ea1d94da-b9ef-3726-8fd3-2c2e03ba8c70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.77.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ae:4c:58:22:b8:02:3a:42:42:a0:b9:0e:cb:06:72:c5:77:
         44:60:9c:02:04:8f:77:25:7d:d5:e3:ff:40:a3:3a:f4:40:e4:
         96:0d:3e:ee:46:b0:09:84:99:fc:28:c9:bc:34:40:5f:12:cd:
         82:ee:04:03:c1:ec:9a:26:56:11:e4:ef:73:4f:73:48:ab:67:
         0b:41:d4:bb:86:1d:a4:48:19:61:7e:cd:e4:82:c8:da:12:1b:
         a1:e4:a5:88:d2:39:ae:f8:8c:3d:f4:2e:31:e7:91:6e:90:a1:
         ef:32:06:af:c7:c7:db:6a:7d:92:ca:0c:72:fa:38:76:43:66:
         14:c4:a2:f5:19:59:5e:fc:da:c6:70:be:5b:ac:d2:6e:7e:b8:
         27:50:ae:9d:53:91:34:87:db:d1:17:4d:d6:ff:fd:4a:dc:a5:
         db:ec:7f:e0:63:0f:b5:9f:ee:84:27:4b:50:16:df:99:2d:1c:
         90:b7:2a:41:65:08:66:a7:f9:41:1f:2b:23:db:29:4a:85:b5:
         91:5b:71:79:78:31:0a:46:fa:25:24:3e:1e:e3:00:1b:1a:b7:
         6c:dc:0e:1b:a4:21:ef:48:78:37:68:46:0b:75:50:03:4a:76:
         6f:fc:7b:58:b7:93:55:30:17:ca:57:66:89:f2:68:ea:5d:35:
         66:68:0a:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXTnmSAobR08hrrlYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh
YTNjMB4XDTI0MDUxMDEzMDAzNloXDTI0MDgwODEzMDAzNlowLzEtMCsGA1UEAxMk
ZjExN2E3MTgtNzI2Mi00ZTBjLTllYmItODRlNmFhOGJlNzAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PWQeeo5G6dPdNJY0FM1qrCimg+Ewp4BXTz0
QYUC1ghcLI/TlocmZmhXSIoiFHQbhPW0XYWaQf9bRlebPo1/W/gKp0/Vb3vW/4Ul
mJuCdZSUzll+UfxPsIpudAOin1nhN5w7SZTZ3tygQ7ElnlylMOXah8bgGP6C9IGq
9fFz92DFuWBWCWtkpqLAceR/xcqdHdzMeCFb4vUxslXfAN9Rp4thddXkxYwEyzRV
Ihg3EhFUfqj1e+QTFBJLFHsYFb3hBnDQa3RuiR0cQtIF+LDm4QpdmH29NpgYhHeO
Ly/R9vgIdDCqxmvyCAfJvp7KTKm/oTebqxegDEb6EsoNl3/a5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPN0DQ1X1toj23t8slIv5C9wbFvaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx
YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvZWExZDk0ZGEtYjllZi0z
NzI2LThmZDMtMmMyZTAzYmE4YzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh
ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw
YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2
YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE0LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKuTFgiuAI6QkKguQ7LBnLFd0RgnAIEj3clfdXj/0CjOvRA5JYNPu5G
sAmEmfwoybw0QF8SzYLuBAPB7JomVhHk73NPc0irZwtB1LuGHaRIGWF+zeSCyNoS
G6HkpYjSOa74jD30LjHnkW6Qoe8yBq/Hx9tqfZLKDHL6OHZDZhTEovUZWV782sZw
vlus0m5+uCdQrp1TkTSH29EXTdb//Urcpdvsf+BjD7Wf7oQnS1AW35ktHJC3KkFl
CGan+UEfKyPbKUqFtZFbcXl4MQpG+iUkPh7jABsat2zcDhukIe9IeDdoRgt1UANK
dm/8e1i3k1UwF8pXZonyaOpdNWZoCsM=
-----END CERTIFICATE-----
Generated at Thu May 16 02:04:44 2024 by rpki-client on console-ams.rpki-client.org