Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa
File:                     6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa (raw, json)
Hash identifier:          O5VltTjTyNBB4V18cb/HPMF7H/rVxfpL59Zd9t/k06o=
Subject key identifier:   88:FD:1A:03:AC:A4:6A:A1:CE:BA:B0:8F:2E:78:BF:E1:F0:83:2D:6E
Certificate issuer:       /CN=c3e3599f-a90f-4544-a440-c15eca99db7f
Certificate serial:       010D0C9F43285845C01390C1BA44A768F308FF00
Authority key identifier: 66:2D:F9:A3:3C:93:D0:EE:E2:AC:8B:F7:04:D9:73:D5:15:6C:7F:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     22952
IP address blocks:        66.187.200.0/22 maxlen: 24
                          162.246.208.0/21 maxlen: 24
                          2604:c240::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:90:c1:ba:44:a7:68:f3:08:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e3599f-a90f-4544-a440-c15eca99db7f
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=1f6d1c93-17cc-48be-a746-d4180a185723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:77:89:64:22:c3:7b:86:71:2d:27:14:9b:b4:
                    85:9e:12:80:88:82:55:7f:42:20:bf:9c:1d:6d:b1:
                    4e:49:61:44:e5:13:40:18:52:99:a0:4b:ea:78:76:
                    88:41:6d:5b:86:16:7f:18:d4:0f:51:bd:c1:81:4d:
                    b0:7b:5a:88:c6:53:64:0f:10:3e:63:68:24:ca:66:
                    fb:4c:c4:d7:67:c6:ce:7c:a2:e6:c5:eb:ba:eb:ea:
                    61:12:7e:51:dc:b3:9d:2e:96:68:85:09:80:87:61:
                    45:fc:03:0a:26:49:1b:e2:a8:6c:15:4a:fe:3a:83:
                    90:aa:52:ea:55:e4:c1:62:2f:b1:5d:26:e3:02:38:
                    d6:f9:1b:6a:43:f7:bc:66:5b:08:0e:7c:f5:24:05:
                    7b:b4:69:60:ca:7a:59:a4:39:2f:7b:59:61:6d:86:
                    5c:55:af:2f:8c:63:b8:db:0c:f9:32:aa:83:9b:22:
                    97:b5:f2:bb:20:f2:93:35:4d:f7:4d:5d:58:af:a9:
                    8d:b0:00:38:22:0e:3e:65:2b:f6:ed:9a:49:d7:d7:
                    39:aa:ef:e5:36:88:d7:7c:71:b0:bc:52:13:f2:38:
                    c3:2a:28:1c:fb:5e:e4:59:63:95:17:98:14:83:f9:
                    cb:7e:d2:11:0d:38:aa:07:99:57:6b:ad:b6:0d:46:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FD:1A:03:AC:A4:6A:A1:CE:BA:B0:8F:2E:78:BF:E1:F0:83:2D:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.crl

            X509v3 Authority Key Identifier:
                keyid:66:2D:F9:A3:3C:93:D0:EE:E2:AC:8B:F7:04:D9:73:D5:15:6C:7F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.200.0/22
                  162.246.208.0/21
                IPv6:
                  2604:c240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d4:39:de:e3:4f:4c:e5:c6:f3:55:b7:60:5c:d5:d8:16:d3:
         f0:02:7b:41:d9:2b:f5:5b:20:e7:be:2a:f0:41:f6:33:3e:2f:
         b3:8f:8e:93:56:8d:c5:b2:96:14:b6:bb:23:e5:dd:ff:c2:3d:
         c3:03:25:6e:0f:78:2c:c0:a2:95:f5:2f:73:43:c9:78:3d:87:
         23:2c:9b:70:0b:ee:1b:5a:87:68:d3:e5:1d:e4:8d:2c:cc:01:
         68:aa:fc:e5:ee:bb:0c:00:fa:5f:6c:05:89:16:1d:ea:ee:ce:
         11:ba:67:89:bf:61:e9:cf:1d:76:14:fc:0f:0c:98:56:f4:da:
         84:28:18:4e:64:ae:4e:a8:53:43:17:ce:8f:36:9d:3a:0a:8a:
         92:5f:26:81:75:8a:a4:99:40:b0:6f:02:44:c8:a2:d0:90:4f:
         90:81:8f:8f:1a:c1:83:1c:87:3d:cd:82:d1:fc:57:0e:33:f2:
         17:89:37:2b:3c:ed:4f:cf:c2:2f:e8:f1:56:8d:98:42:6c:a8:
         ab:b5:72:6c:42:1b:e1:10:2c:f0:d3:a8:f9:d3:4f:6b:b2:a5:
         5d:8a:a2:0a:d4:82:26:d9:a5:e9:c3:b4:5e:41:d0:f8:46:3b:
         e2:25:6a:cf:21:16:ce:be:6a:ad:06:17:78:7d:2d:c3:c9:20:
         c1:46:5c:96
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEXAE5DBukSnaPMI/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzNlMzU5OWYtYTkwZi00NTQ0LWE0NDAtYzE1ZWNhOTlk
YjdmMB4XDTI0MDUwMzEzMDAzNFoXDTI0MDgwMTEzMDAzNFowLzEtMCsGA1UEAxMk
MWY2ZDFjOTMtMTdjYy00OGJlLWE3NDYtZDQxODBhMTg1NzIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3neJZCLDe4ZxLScUm7SFnhKAiIJVf0Igv5wd
bbFOSWFE5RNAGFKZoEvqeHaIQW1bhhZ/GNQPUb3BgU2we1qIxlNkDxA+Y2gkymb7
TMTXZ8bOfKLmxeu66+phEn5R3LOdLpZohQmAh2FF/AMKJkkb4qhsFUr+OoOQqlLq
VeTBYi+xXSbjAjjW+RtqQ/e8ZlsIDnz1JAV7tGlgynpZpDkve1lhbYZcVa8vjGO4
2wz5MqqDmyKXtfK7IPKTNU33TV1Yr6mNsAA4Ig4+ZSv27ZpJ19c5qu/lNojXfHGw
vFIT8jjDKigc+17kWWOVF5gUg/nLftIRDTiqB5lXa622DUYnJQIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFIj9GgOspGqhzrqwjy54v+Hwgy1uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jM2Uz
NTk5Zi1hOTBmLTQ1NDQtYTQ0MC1jMTVlY2E5OWRiN2YvNmZjNWIyMGEtZjg1Yi0z
ZjlhLTkyNzQtMmRmZDkwYTc4ODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzNlMzU5OWYtYTkwZi00NTQ0LWE0
NDAtYzE1ZWNhOTlkYjdmL2MzZTM1OTlmLWE5MGYtNDU0NC1hNDQwLWMxNWVjYTk5
ZGI3Zi5jcmwwHwYDVR0jBBgwFoAUZi35ozyT0O7irIv3BNlz1RVsf1UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jM2UzNTk5Zi1hOTBmLTQ1NDQtYTQ0MC1jMTVl
Y2E5OWRiN2YuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCQrvIAwQD
ovbQMA0EAgACMAcDBQAmBMJAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFnUOd7jT0zlxvNVt2Bc1dgW0/AC
e0HZK/VbIOe+KvBB9jM+L7OPjpNWjcWylhS2uyPl3f/CPcMDJW4PeCzAopX1L3ND
yXg9hyMsm3AL7htah2jT5R3kjSzMAWiq/OXuuwwA+l9sBYkWHeruzhG6Z4m/YenP
HXYU/A8MmFb02oQoGE5krk6oU0MXzo82nToKipJfJoF1iqSZQLBvAkTIotCQT5CB
j48awYMchz3NgtH8Vw4z8heJNys87U/Pwi/o8VaNmEJsqKu1cmxCG+EQLPDTqPnT
T2uypV2KogrUgibZpenDtF5B0PhGO+Ilas8hFs6+aq0GF3h9LcPJIMFGXJY=
-----END CERTIFICATE-----
Generated at Fri May 17 01:48:03 2024 by rpki-client on console-fra.rpki-client.org