Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/e9c12cb6-83c6-36c7-9163-89ab2f55a7fa.roa
File:                     e9c12cb6-83c6-36c7-9163-89ab2f55a7fa.roa (raw, json)
Hash identifier:          /ZWZTS+KXuu+elos1HqEaYNewdejCEi/zxLFL+qHS9w=
Subject key identifier:   C9:36:89:8C:1C:FD:3C:96:EE:97:33:14:AF:38:1C:A1:61:5B:86:05
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285845777DE3A537B88CFA819F8780
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/e9c12cb6-83c6-36c7-9163-89ab2f55a7fa.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     12129
IP address blocks:        199.231.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:e3:a5:37:b8:8c:fa:81:9f:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=4502d1b5-9493-4574-93a3-ae5b2edfb318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6f:76:39:a1:3c:79:a2:3f:60:49:cc:15:b6:
                    5f:26:b8:9d:d7:0c:c4:19:13:97:ab:fe:f0:b9:34:
                    90:a0:49:57:4b:d8:98:09:fa:bb:d9:0e:db:e8:9c:
                    00:d9:d3:15:fd:ee:1c:44:fa:87:43:37:50:d6:14:
                    bd:92:c5:d6:af:f5:df:e2:54:05:08:ab:d3:82:b9:
                    33:23:c0:49:56:a7:7d:17:9e:c7:72:41:87:99:90:
                    e5:49:15:3f:5c:d0:70:67:9e:11:a6:96:e0:64:fc:
                    a8:4c:48:35:62:3c:e8:7b:bf:0f:05:3e:35:d9:73:
                    86:d7:af:12:37:37:3b:56:66:1f:b2:23:90:bd:7a:
                    d7:14:02:de:a3:2a:76:24:6d:ae:09:9c:ea:ac:65:
                    31:77:3d:e9:2a:95:65:83:11:e7:be:76:27:9f:ef:
                    e7:69:37:8c:f3:20:c6:25:d0:12:70:ac:9c:42:35:
                    e1:62:8f:c2:31:a9:4c:fc:f5:7d:90:f0:c2:fa:9b:
                    d3:fc:eb:6e:6c:86:f0:0c:83:07:b8:4e:a5:4b:ae:
                    18:1c:63:3c:bf:55:a1:e8:4a:f0:0a:15:8d:e5:06:
                    45:2e:8f:e0:72:2d:4b:2e:15:f4:db:6c:68:91:9a:
                    d4:12:ea:9c:9f:b1:13:bf:1e:0c:fa:23:68:ab:b8:
                    83:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:36:89:8C:1C:FD:3C:96:EE:97:33:14:AF:38:1C:A1:61:5B:86:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/e9c12cb6-83c6-36c7-9163-89ab2f55a7fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:0b:98:91:8f:39:11:c1:7e:ac:d5:3d:7c:1e:5a:d3:9d:b4:
         37:9d:33:d5:b9:5c:08:3b:28:7d:0e:43:d8:04:33:89:2f:87:
         dc:a8:30:0b:0c:26:ac:fb:1d:56:74:77:5d:31:c9:29:eb:e0:
         3b:1d:4c:ca:8f:a9:ac:d5:af:2e:94:61:c2:cc:d2:c3:2a:9b:
         bb:f1:57:b9:b9:78:5c:c7:86:6f:88:26:0c:a8:b8:39:b6:2e:
         de:d9:b5:7f:07:7d:7e:8b:b9:68:54:3d:25:69:59:fc:db:61:
         22:ed:07:94:7d:7d:7b:fc:1a:6f:78:fb:20:80:4a:42:f9:5f:
         ea:ba:55:aa:10:10:b9:96:3f:2a:ea:05:5b:b0:59:ff:f4:58:
         ca:e1:6e:9f:95:92:5a:7d:c0:32:43:0d:64:e2:e9:08:e0:d0:
         58:43:ca:89:00:ab:3f:fb:98:59:12:d6:56:f7:0f:88:ff:f8:
         10:f8:52:76:11:c9:d8:e9:96:ce:12:44:b7:ad:35:32:b4:1f:
         18:5e:7e:55:06:1d:e8:ee:7f:7f:f3:22:69:34:dd:81:77:fa:
         3e:7a:dd:48:c4:66:9d:01:50:7b:6e:ed:c9:b3:ea:74:f2:1b:
         b1:c3:7c:8a:88:67:b5:ff:67:9a:89:89:5d:fa:6b:d2:ad:69:
         90:27:c6:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV3feOlN7iM+oGfh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3
MWRlMB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk
NDUwMmQxYjUtOTQ5My00NTc0LTkzYTMtYWU1YjJlZGZiMzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW92OaE8eaI/YEnMFbZfJrid1wzEGROXq/7w
uTSQoElXS9iYCfq72Q7b6JwA2dMV/e4cRPqHQzdQ1hS9ksXWr/Xf4lQFCKvTgrkz
I8BJVqd9F57HckGHmZDlSRU/XNBwZ54RppbgZPyoTEg1Yjzoe78PBT412XOG168S
Nzc7VmYfsiOQvXrXFALeoyp2JG2uCZzqrGUxdz3pKpVlgxHnvnYnn+/naTeM8yDG
JdAScKycQjXhYo/CMalM/PV9kPDC+pvT/OtubIbwDIMHuE6lS64YHGM8v1Wh6Erw
ChWN5QZFLo/gci1LLhX022xokZrUEuqcn7ETvx4M+iNoq7iDowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMk2iYwc/TyW7pczFK84HKFhW4YFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2
OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvZTljMTJjYjYtODNjNi0z
NmM3LTkxNjMtODlhYjJmNTVhN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy
OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2
NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm
NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+c0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4LmJGPORHBfqzVPXweWtOdtDedM9W5XAg7KH0OQ9gEM4kvh9yoMAsM
Jqz7HVZ0d10xySnr4DsdTMqPqazVry6UYcLM0sMqm7vxV7m5eFzHhm+IJgyouDm2
Lt7ZtX8HfX6LuWhUPSVpWfzbYSLtB5R9fXv8Gm94+yCASkL5X+q6VaoQELmWPyrq
BVuwWf/0WMrhbp+Vklp9wDJDDWTi6Qjg0FhDyokAqz/7mFkS1lb3D4j/+BD4UnYR
ydjpls4SRLetNTK0HxheflUGHejuf3/zImk03YF3+j563UjEZp0BUHtu7cmz6nTy
G7HDfIqIZ7X/Z5qJiV36a9KtaZAnxsI=
-----END CERTIFICATE-----
Generated at Wed May 1 23:06:01 2024 by rpki-client on console-ams.rpki-client.org