Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/796a8503-13ba-3800-8978-3da85e63b13a.roa
File:                     796a8503-13ba-3800-8978-3da85e63b13a.roa (raw, json)
Hash identifier:          vDECqFJWmrxvcNN3/5Dl0FXwPqOFdKPQWeu4GwuOjOA=
Subject key identifier:   87:23:86:CD:E2:1D:54:5F:F8:D9:19:23:9A:5B:C1:05:42:94:C0:34
Certificate issuer:       /CN=a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0
Certificate serial:       010D0C9F43285845DBFE61539AD624BBB93FB080
Authority key identifier: 95:0E:F3:FC:09:32:41:BA:87:2F:DD:36:4C:32:2D:CA:15:15:3D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/796a8503-13ba-3800-8978-3da85e63b13a.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     952
IP address blocks:        185.167.182.0/24 maxlen: 24
                          172.110.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:61:53:9a:d6:24:bb:b9:3f:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=be538288-2cb5-43c2-ae84-95575b24cc0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a9:fb:32:9e:d0:55:32:be:45:fd:d6:8b:1c:
                    21:78:1f:08:7a:88:6e:85:9c:b6:d5:b8:b3:6e:5e:
                    3a:98:47:e4:67:59:ad:6a:6f:7e:12:f4:42:40:70:
                    cc:3f:a0:5f:86:ff:62:18:5e:07:ff:cd:da:5d:9e:
                    ac:43:9c:20:25:28:7e:f0:f2:89:d4:47:45:20:23:
                    a8:46:03:f6:74:c8:88:3e:c3:00:cb:fa:eb:20:16:
                    ad:09:62:0f:bb:6b:2e:1b:cb:de:da:3b:42:9f:52:
                    1e:bc:ea:a3:5f:bd:6b:17:27:8c:54:b8:1c:0a:4f:
                    b0:aa:d8:97:4f:1a:40:95:79:46:77:13:bd:f5:71:
                    0a:21:64:f2:e3:5a:09:c9:82:38:27:49:25:75:8a:
                    13:97:de:bb:4a:46:16:99:83:82:08:6b:f3:75:05:
                    ed:69:c0:28:88:a5:a6:f4:d6:38:4b:6d:1b:0b:75:
                    12:81:dc:e0:e9:73:ca:2d:0e:f8:a0:93:0d:38:b9:
                    5b:bc:0f:d1:15:2e:2d:c3:09:ae:fe:88:eb:6e:7a:
                    40:95:5d:33:1c:d7:cd:8f:b8:ba:35:90:f9:43:32:
                    54:08:a4:a5:b8:90:cf:3e:ae:04:78:03:ad:a4:51:
                    0d:62:9c:20:02:f8:15:eb:8e:a0:99:99:40:6e:52:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:23:86:CD:E2:1D:54:5F:F8:D9:19:23:9A:5B:C1:05:42:94:C0:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/796a8503-13ba-3800-8978-3da85e63b13a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.crl

            X509v3 Authority Key Identifier:
                keyid:95:0E:F3:FC:09:32:41:BA:87:2F:DD:36:4C:32:2D:CA:15:15:3D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.130.0/24
                  185.167.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:59:1c:8c:85:27:a7:d3:fb:d6:8a:5d:67:25:39:39:9a:8c:
         97:00:9c:e8:7f:1c:99:d9:f1:e2:52:3a:ab:a1:7c:e8:a9:6e:
         b0:60:af:c8:9b:e0:27:01:9f:ae:70:92:42:00:ad:a8:b8:7c:
         10:4b:ab:01:cf:f7:91:1e:be:6b:20:80:8e:f4:b2:1f:21:97:
         95:25:24:de:a3:71:c3:c9:87:33:bc:ea:63:94:87:e6:da:7f:
         ed:88:f5:f4:8c:cd:40:ef:d4:fb:03:94:e4:a7:66:7a:4b:05:
         56:bf:f1:bc:36:bc:3d:cd:ea:34:99:58:de:bd:43:6d:11:57:
         e1:25:0a:83:3f:13:bf:ed:7c:a8:2b:da:6c:8a:e6:54:be:59:
         f4:b2:34:86:42:84:26:84:c8:88:a6:47:83:16:28:0e:3b:1c:
         1f:d2:c7:c8:a0:22:e0:e1:9b:fb:9d:d6:44:b4:50:bc:53:95:
         c0:1c:de:da:ce:5c:b8:a7:75:a0:7b:39:3b:e2:8e:19:ea:57:
         ba:22:d9:4f:98:9f:f3:eb:85:ea:e1:a1:e4:0b:71:46:b6:7c:
         dd:d9:bb:b0:10:58:37:be:7f:15:45:9f:dd:42:65:14:ce:75:
         88:49:87:9e:f3:49:c9:a4:05:45:1f:32:b5:8d:de:83:75:e4:
         df:60:c0:27
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEXb/mFTmtYku7k/sIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTYwZmJkMGQtMWUwYS00YjhhLWI0NjctMGI2MTk3ZDhi
NWQwMB4XDTI0MDUxMzEzMDAzNFoXDTI0MDgxMTEzMDAzNFowLzEtMCsGA1UEAxMk
YmU1MzgyODgtMmNiNS00M2MyLWFlODQtOTU1NzViMjRjYzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Kn7Mp7QVTK+Rf3WixwheB8IeohuhZy21biz
bl46mEfkZ1mtam9+EvRCQHDMP6Bfhv9iGF4H/83aXZ6sQ5wgJSh+8PKJ1EdFICOo
RgP2dMiIPsMAy/rrIBatCWIPu2suG8ve2jtCn1IevOqjX71rFyeMVLgcCk+wqtiX
TxpAlXlGdxO99XEKIWTy41oJyYI4J0kldYoTl967SkYWmYOCCGvzdQXtacAoiKWm
9NY4S20bC3USgdzg6XPKLQ74oJMNOLlbvA/RFS4twwmu/ojrbnpAlV0zHNfNj7i6
NZD5QzJUCKSluJDPPq4EeAOtpFENYpwgAvgV646gmZlAblI1LwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFIcjhs3iHVRf+NkZI5pbwQVClMA0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNjBm
YmQwZC0xZTBhLTRiOGEtYjQ2Ny0wYjYxOTdkOGI1ZDAvNzk2YTg1MDMtMTNiYS0z
ODAwLTg5NzgtM2RhODVlNjNiMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTYwZmJkMGQtMWUwYS00YjhhLWI0
NjctMGI2MTk3ZDhiNWQwL2E2MGZiZDBkLTFlMGEtNGI4YS1iNDY3LTBiNjE5N2Q4
YjVkMC5jcmwwHwYDVR0jBBgwFoAUlQ7z/AkyQbqHL902TDItyhUVPeEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNjBmYmQwZC0xZTBhLTRiOGEtYjQ2Ny0wYjYx
OTdkOGI1ZDAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArG6CAwQA
uae2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIVZHIyFJ6fT+9aKXWclOTmajJcAnOh/HJnZ8eJSOquhfOip
brBgr8ib4CcBn65wkkIArai4fBBLqwHP95EevmsggI70sh8hl5UlJN6jccPJhzO8
6mOUh+baf+2I9fSMzUDv1PsDlOSnZnpLBVa/8bw2vD3N6jSZWN69Q20RV+ElCoM/
E7/tfKgr2myK5lS+WfSyNIZChCaEyIimR4MWKA47HB/Sx8igIuDhm/ud1kS0ULxT
lcAc3trOXLindaB7OTvijhnqV7oi2U+Yn/PrherhoeQLcUa2fN3Zu7AQWDe+fxVF
n91CZRTOdYhJh57zScmkBUUfMrWN3oN15N9gwCc=
-----END CERTIFICATE-----
Generated at Sun May 19 01:47:31 2024 by rpki-client on console-ams.rpki-client.org