Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52c85517-352c-3c35-a4e4-90ef8d2a2ba6.roa
File:                     52c85517-352c-3c35-a4e4-90ef8d2a2ba6.roa (raw, json)
Hash identifier:          Y6M83LGPpodYAJnhnEvVwLk9mpLTvwwpXB0gvJXTsdM=
Subject key identifier:   21:81:74:6B:49:A1:D5:52:3A:8C:71:A8:0E:8D:BD:31:AD:66:E8:C1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89D582AD5EE0E065518680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52c85517-352c-3c35-a4e4-90ef8d2a2ba6.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        68.82.74.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:d5:82:ad:5e:e0:e0:65:51:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=d3376ca9-183c-48cc-8864-66ec365939f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c3:0b:4d:6b:cc:3e:e7:d1:9c:ce:71:89:98:
                    24:a2:07:84:39:f6:4a:fb:76:59:54:c2:11:88:3a:
                    16:95:ad:88:e6:f8:42:2e:32:1b:0d:ac:8c:f5:df:
                    1e:d3:d6:2a:da:57:63:10:66:44:fd:52:90:32:93:
                    45:a5:85:7e:b6:ed:3c:f8:6f:06:90:8b:46:c9:57:
                    5b:b5:ad:7b:54:b6:de:bc:c9:1e:95:c3:2c:7e:54:
                    d3:7d:45:93:f2:46:7c:67:5d:e4:eb:eb:23:08:a9:
                    05:be:91:9c:7f:56:3b:19:79:ad:80:bb:af:26:04:
                    6c:81:57:09:50:d8:57:88:5f:9e:ec:65:1e:11:1f:
                    66:ba:52:50:45:a8:d6:61:b1:0c:fa:c2:68:03:30:
                    10:d4:84:1d:3d:97:9e:cc:67:63:4f:39:ba:d1:48:
                    9b:b6:bf:00:d8:fe:e2:87:d7:7b:8f:83:9b:e0:7e:
                    f5:98:7f:e6:13:bc:f5:c8:ff:c5:e0:6a:06:1a:b8:
                    3b:fd:b6:ca:47:db:7f:a6:4c:f4:17:db:70:86:b2:
                    dc:e6:65:09:71:55:e1:46:90:f8:15:50:50:ff:17:
                    34:fd:eb:92:2e:3b:81:26:58:cb:ae:2e:14:67:ef:
                    15:29:5c:3c:0c:53:b5:9c:c1:36:34:d7:fe:0a:99:
                    50:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:81:74:6B:49:A1:D5:52:3A:8C:71:A8:0E:8D:BD:31:AD:66:E8:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52c85517-352c-3c35-a4e4-90ef8d2a2ba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.82.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d9:99:23:0f:a6:e2:5f:bd:a2:f5:ac:f8:1f:3c:56:e2:db:
         5f:f1:b4:fd:02:d3:94:da:a9:27:ad:2d:d4:6c:05:28:3b:bb:
         a4:47:77:a5:6e:66:44:c6:6d:3a:62:2f:2d:24:76:f3:eb:7a:
         b0:44:e6:9c:82:df:c7:84:c9:58:34:22:bd:e1:16:9d:95:56:
         95:f7:db:d1:09:26:c1:35:27:29:64:7c:79:92:5c:41:26:38:
         7f:48:30:36:c0:6e:12:ae:dc:d8:0b:23:c9:82:97:f6:d7:e4:
         b5:2c:3a:14:c7:b4:da:a6:d6:3b:a8:cc:f4:2c:a2:19:ee:b7:
         36:1e:b7:24:d3:ee:83:65:eb:f2:b4:7b:23:22:d4:1a:80:e8:
         47:77:8b:46:f0:4c:84:fc:d1:d2:c8:dd:c1:20:dd:54:16:43:
         44:6a:32:a6:f3:52:37:55:f1:29:25:c5:3e:ba:9c:ac:b5:aa:
         f8:df:56:eb:c3:0f:4f:76:4c:1a:6e:98:37:b2:5c:55:08:c0:
         7d:a1:5d:66:b8:28:ca:b0:16:96:4a:95:ac:19:2e:82:39:db:
         d6:36:4b:e3:25:2e:54:6e:02:26:14:4e:38:4e:f9:fd:5e:ce:
         76:08:fd:e5:bc:7d:20:81:3e:48:32:52:25:b0:cc:e2:f7:62:
         58:9c:b6:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsidWCrV7g4GVRhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
ZDMzNzZjYTktMTgzYy00OGNjLTg4NjQtNjZlYzM2NTkzOWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8MLTWvMPufRnM5xiZgkogeEOfZK+3ZZVMIR
iDoWla2I5vhCLjIbDayM9d8e09Yq2ldjEGZE/VKQMpNFpYV+tu08+G8GkItGyVdb
ta17VLbevMkelcMsflTTfUWT8kZ8Z13k6+sjCKkFvpGcf1Y7GXmtgLuvJgRsgVcJ
UNhXiF+e7GUeER9mulJQRajWYbEM+sJoAzAQ1IQdPZeezGdjTzm60Uibtr8A2P7i
h9d7j4Ob4H71mH/mE7z1yP/F4GoGGrg7/bbKR9t/pkz0F9twhrLc5mUJcVXhRpD4
FVBQ/xc0/euSLjuBJljLri4UZ+8VKVw8DFO1nME2NNf+CplQqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCGBdGtJodVSOoxxqA6NvTGtZujBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTJjODU1MTctMzUyYy0z
YzM1LWE0ZTQtOTBlZjhkMmEyYmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFJKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABbZmSMPpuJfvaL1rPgfPFbi21/xtP0C05TaqSetLdRsBSg7u6RHd6Vu
ZkTGbTpiLy0kdvPrerBE5pyC38eEyVg0Ir3hFp2VVpX329EJJsE1JylkfHmSXEEm
OH9IMDbAbhKu3NgLI8mCl/bX5LUsOhTHtNqm1juozPQsohnutzYetyTT7oNl6/K0
eyMi1BqA6Ed3i0bwTIT80dLI3cEg3VQWQ0RqMqbzUjdV8SklxT66nKy1qvjfVuvD
D092TBpumDeyXFUIwH2hXWa4KMqwFpZKlawZLoI529Y2S+MlLlRuAiYUTjhO+f1e
znYI/eW8fSCBPkgyUiWwzOL3YlictpE=
-----END CERTIFICATE-----
Generated at Sun May 5 02:16:47 2024 by rpki-client on console-ams.rpki-client.org