Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78e3ef7f-b704-3188-b391-c99f90e43a2e.roa
File:                     78e3ef7f-b704-3188-b391-c99f90e43a2e.roa (raw, json)
Hash identifier:          J/GcZQSGinqLOVTFtw1e/WT7pxSCHyRIUaSyaxLWgyo=
Subject key identifier:   21:10:0B:7A:A4:A6:BB:B9:86:B1:8D:F7:C4:B4:D4:BD:80:DC:05:37
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DEAEC0BF172B3A7DE52C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78e3ef7f-b704-3188-b391-c99f90e43a2e.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        198.45.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:ea:ec:0b:f1:72:b3:a7:de:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=05c489d8-2047-430f-8f79-1918beb2c78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:0a:fa:e4:4d:c6:30:b1:c3:43:5a:d2:e5:
                    88:be:77:76:75:c7:57:bc:da:97:f6:cb:bb:7d:7c:
                    cc:0f:81:c4:b5:ef:4e:34:fc:31:f5:8d:e3:ec:11:
                    6f:c9:37:06:00:33:33:fc:52:4f:88:4a:fc:d5:3a:
                    c3:f1:86:14:70:ef:86:20:83:7e:81:27:33:6e:55:
                    cf:90:98:72:d0:45:a5:f5:c3:06:a5:cc:74:ba:8d:
                    38:b1:18:7a:a9:3c:c2:7b:c7:5f:b1:b6:ce:b3:ff:
                    7f:4f:ad:a2:11:80:ae:df:45:bf:ed:22:c0:92:9f:
                    a7:5d:18:36:cb:7d:7c:2b:e9:62:88:f6:8f:99:4c:
                    68:eb:94:ab:4a:38:8a:7c:e3:4f:be:a0:c6:b2:c0:
                    9d:11:b9:cb:19:42:d9:ef:98:9c:44:74:9a:27:2c:
                    a5:f8:47:9e:91:b3:1f:21:a9:8a:dd:6c:cc:a5:62:
                    6e:2f:83:99:c8:4a:95:3e:62:2f:83:b8:4f:64:ec:
                    4e:7c:01:23:03:2a:ec:55:bb:64:8e:54:15:70:3c:
                    db:ce:9b:af:21:2a:d9:18:5b:85:3b:49:c6:7a:56:
                    30:b0:e4:08:5c:c8:8d:06:60:41:9e:50:aa:b2:ab:
                    b9:a9:be:8a:1c:c2:2d:73:3a:88:b9:47:04:df:df:
                    7d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:10:0B:7A:A4:A6:BB:B9:86:B1:8D:F7:C4:B4:D4:BD:80:DC:05:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78e3ef7f-b704-3188-b391-c99f90e43a2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:5a:75:03:67:36:ed:f2:33:4b:24:04:c5:86:2b:3c:48:fa:
         45:be:d4:cf:fb:04:46:e3:a9:37:15:24:69:ae:92:e6:35:3a:
         40:15:a6:c9:13:55:9c:98:ee:55:03:7e:39:4d:a1:c4:5e:61:
         91:0a:11:df:89:bd:2d:53:b0:01:05:00:29:c3:85:56:05:60:
         82:1a:a3:1c:d7:59:01:d8:c7:dc:8d:3a:2c:e2:48:a5:70:4f:
         01:54:0b:5e:82:b7:51:ce:6a:51:e0:56:1c:b7:e4:cc:f5:7a:
         a8:3d:61:fe:34:12:fa:78:5d:64:0e:ad:3a:7f:00:e6:6e:50:
         d0:27:3c:34:c3:b1:c6:41:25:ff:c5:8c:d1:26:0e:66:5d:b5:
         dd:4d:b6:ed:6e:5b:b7:f4:8b:c6:62:0c:3a:95:2e:6a:5b:a5:
         fd:25:c1:5e:5c:16:01:76:0c:13:62:e1:a4:81:34:d6:e2:cd:
         1d:9e:91:24:12:a4:40:cb:5b:ec:74:c0:32:44:71:7a:c6:76:
         7c:50:ad:6b:a3:4c:c8:b7:7a:3c:c5:89:02:30:46:e0:11:99:
         19:99:fd:45:f8:2c:59:96:c6:de:56:38:df:40:11:0a:49:36:
         16:8e:fa:f1:5d:34:34:52:ce:3e:1c:a2:c9:d0:9e:0d:00:60:
         60:89:0a:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPersC/Fys6feUsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
MDVjNDg5ZDgtMjA0Ny00MzBmLThmNzktMTkxOGJlYjJjNzhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKYK+uRNxjCxw0Na0uWIvnd2dcdXvNqX9su7
fXzMD4HEte9ONPwx9Y3j7BFvyTcGADMz/FJPiEr81TrD8YYUcO+GIIN+gSczblXP
kJhy0EWl9cMGpcx0uo04sRh6qTzCe8dfsbbOs/9/T62iEYCu30W/7SLAkp+nXRg2
y318K+liiPaPmUxo65SrSjiKfONPvqDGssCdEbnLGULZ75icRHSaJyyl+EeekbMf
IamK3WzMpWJuL4OZyEqVPmIvg7hPZOxOfAEjAyrsVbtkjlQVcDzbzpuvISrZGFuF
O0nGelYwsOQIXMiNBmBBnlCqsqu5qb6KHMItczqIuUcE3999YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCEQC3qkpru5hrGN98S01L2A3AU3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzhlM2VmN2YtYjcwNC0z
MTg4LWIzOTEtYzk5ZjkwZTQzYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADladQNnNu3yM0skBMWGKzxI+kW+1M/7BEbjqTcVJGmukuY1OkAVpskT
VZyY7lUDfjlNocReYZEKEd+JvS1TsAEFACnDhVYFYIIaoxzXWQHYx9yNOiziSKVw
TwFUC16Ct1HOalHgVhy35Mz1eqg9Yf40Evp4XWQOrTp/AOZuUNAnPDTDscZBJf/F
jNEmDmZdtd1Ntu1uW7f0i8ZiDDqVLmpbpf0lwV5cFgF2DBNi4aSBNNbizR2ekSQS
pEDLW+x0wDJEcXrGdnxQrWujTMi3ejzFiQIwRuARmRmZ/UX4LFmWxt5WON9AEQpJ
NhaO+vFdNDRSzj4cosnQng0AYGCJCnQ=
-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:38 2024 by rpki-client on console-ams.rpki-client.org