Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1509d10a-0780-3a38-8812-94e443d6e293.roa
File:                     1509d10a-0780-3a38-8812-94e443d6e293.roa (raw, json)
Hash identifier:          D8BAPLBBejcuTVjMifCUNVUO/HfJopDtcQJTkkPBP14=
Subject key identifier:   2F:58:0A:7C:E1:4B:30:21:21:D1:4C:5E:4F:9E:8D:98:CA:A5:29:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC284D01F641CA7A826800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1509d10a-0780-3a38-8812-94e443d6e293.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33491
IP address blocks:        66.208.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:28:4d:01:f6:41:ca:7a:82:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=656232a3-7561-4dad-9164-3aba649d449c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b1:5a:52:4d:c5:1c:fa:8c:9d:8e:fe:75:fb:
                    c7:e1:38:1d:33:66:93:32:dd:74:cf:21:77:58:1d:
                    04:4f:88:de:fc:b7:1a:9c:2c:8f:6f:8a:51:da:ca:
                    b3:b2:8b:76:02:85:6a:7f:ef:3a:d8:1e:43:fc:12:
                    84:98:4f:3f:c1:dc:81:73:5f:29:38:e3:ef:48:2e:
                    ee:63:ff:9b:83:3f:7a:1e:29:c5:4f:f0:f9:d9:f6:
                    fc:1f:84:dc:c1:0d:1b:3c:8a:37:e7:49:ee:62:f1:
                    69:d3:4a:1a:71:3e:a5:7c:e0:09:97:7e:92:98:82:
                    a7:d1:8b:ac:d1:fb:37:6e:38:54:eb:7d:44:89:b7:
                    72:22:7e:58:1f:18:05:20:f4:a6:01:ee:ab:fc:a5:
                    ba:9c:68:f3:98:23:b1:02:8c:4e:5b:e3:a8:4f:19:
                    7e:84:d7:ed:03:f6:f5:eb:13:25:89:f6:e4:d9:20:
                    c6:c1:72:72:54:97:f1:94:c8:1c:c0:39:63:6c:54:
                    08:53:25:2e:c5:d0:70:01:87:60:fd:ea:33:7f:71:
                    34:7b:0e:d0:f7:66:8e:cb:af:f3:3c:8a:8d:b2:7f:
                    50:d9:89:0f:4a:da:b5:48:64:72:5b:a9:c9:2e:05:
                    94:62:02:87:5b:e2:e1:cf:65:d3:cd:1b:2e:27:d8:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:58:0A:7C:E1:4B:30:21:21:D1:4C:5E:4F:9E:8D:98:CA:A5:29:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1509d10a-0780-3a38-8812-94e443d6e293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.208.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a6:a6:19:29:56:24:e9:51:96:98:b1:66:77:a4:6c:78:82:
         27:f9:1a:ea:73:0f:54:13:6b:d7:37:bd:1c:ff:19:49:0b:48:
         6b:05:02:d4:be:50:aa:ae:e7:4a:8c:e3:66:aa:83:23:bd:bb:
         dd:06:bd:78:ea:bb:2b:fe:49:d2:71:c6:27:f0:56:51:b7:a8:
         2c:58:ef:b6:da:3d:e6:ac:59:6d:01:bd:64:d7:5f:31:a5:bc:
         b1:49:04:f1:44:b4:f4:60:f8:7d:e0:c6:e8:78:fe:fa:f1:90:
         aa:fb:e3:94:80:86:63:cb:89:72:46:73:de:44:51:22:6a:3a:
         3f:21:97:1a:1d:0f:77:f3:68:73:31:04:a6:58:6a:a3:34:06:
         bf:a6:59:17:b6:7d:88:d0:5c:bb:65:c3:6f:c8:c6:36:73:02:
         5a:8d:ed:50:51:24:a5:70:01:24:d7:98:4e:17:5e:8f:fb:ce:
         a4:11:50:c1:a0:0d:cd:c6:85:ba:e1:2d:79:7b:af:b0:64:20:
         dd:3a:ee:98:06:ae:bf:48:6f:5b:8e:38:dd:0e:56:ba:f1:2f:
         21:08:54:31:8a:dd:e2:4e:bd:4e:54:2c:c4:08:ea:3b:49:5d:
         13:b7:4d:3a:1b:00:d0:46:eb:9d:b8:0b:f9:f8:64:f3:63:ad:
         54:ae:44:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrChNAfZBynqCaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
NjU2MjMyYTMtNzU2MS00ZGFkLTkxNjQtM2FiYTY0OWQ0NDljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87FaUk3FHPqMnY7+dfvH4TgdM2aTMt10zyF3
WB0ET4je/LcanCyPb4pR2sqzsot2AoVqf+862B5D/BKEmE8/wdyBc18pOOPvSC7u
Y/+bgz96HinFT/D52fb8H4TcwQ0bPIo350nuYvFp00oacT6lfOAJl36SmIKn0Yus
0fs3bjhU631EibdyIn5YHxgFIPSmAe6r/KW6nGjzmCOxAoxOW+OoTxl+hNftA/b1
6xMlifbk2SDGwXJyVJfxlMgcwDljbFQIUyUuxdBwAYdg/eozf3E0ew7Q92aOy6/z
PIqNsn9Q2YkPStq1SGRyW6nJLgWUYgKHW+Lhz2XTzRsuJ9i2JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC9YCnzhSzAhIdFMXk+ejZjKpSm0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTUwOWQxMGEtMDc4MC0z
YTM4LTg4MTItOTRlNDQzZDZlMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtDCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+mphkpViTpUZaYsWZ3pGx4gif5GupzD1QTa9c3vRz/GUkLSGsFAtS+
UKqu50qM42aqgyO9u90GvXjquyv+SdJxxifwVlG3qCxY77baPeasWW0BvWTXXzGl
vLFJBPFEtPRg+H3gxuh4/vrxkKr745SAhmPLiXJGc95EUSJqOj8hlxodD3fzaHMx
BKZYaqM0Br+mWRe2fYjQXLtlw2/IxjZzAlqN7VBRJKVwASTXmE4XXo/7zqQRUMGg
Dc3GhbrhLXl7r7BkIN067pgGrr9Ib1uOON0OVrrxLyEIVDGK3eJOvU5ULMQI6jtJ
XRO3TTobANBG6524C/n4ZPNjrVSuROk=
-----END CERTIFICATE-----
Generated at Sat May 4 14:47:40 2024 by rpki-client on console-ams.rpki-client.org