Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/f38394a9-9305-305b-8be8-402a7a0c00b9.roa
File:                     f38394a9-9305-305b-8be8-402a7a0c00b9.roa (raw, json)
Hash identifier:          hwpRbUyJrFV/RaP2OseSJpxIIUlMU6wiLjL0krAGSss=
Subject key identifier:   C3:49:72:F1:20:B3:EA:08:7C:FD:28:1A:72:24:82:F2:1C:C8:FD:70
Certificate issuer:       /CN=6a5786d8-68bf-4c69-b086-11587b550447
Certificate serial:       010D0C9F432858455E5DA809239330D7901821E0
Authority key identifier: 0C:CA:4A:6B:90:74:B8:91:F7:8D:75:32:2F:72:EF:48:B7:81:A9:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/f38394a9-9305-305b-8be8-402a7a0c00b9.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     22070
IP address blocks:        216.197.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/6a5786d8-68bf-4c69-b086-11587b550447.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/6a5786d8-68bf-4c69-b086-11587b550447.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:a8:09:23:93:30:d7:90:18:21:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5786d8-68bf-4c69-b086-11587b550447
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=3d1faa72-0ea1-4fd2-8499-9c00942c943f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:05:bb:36:31:b5:52:8c:73:69:70:43:4f:3d:
                    47:db:7a:fc:e4:11:3d:89:00:56:68:a3:6c:88:9e:
                    d6:2e:29:1d:37:7d:96:11:86:f3:3c:d7:b0:f3:3b:
                    85:a4:97:c1:36:36:71:3b:85:5b:24:af:59:28:84:
                    be:34:81:29:35:b0:be:17:94:2d:ae:98:11:30:04:
                    c9:7f:e4:d1:4a:e3:82:6e:4e:4a:db:95:23:74:4e:
                    04:41:92:7e:ea:12:f8:0c:0b:7b:b5:ad:27:10:e8:
                    26:24:47:0b:15:20:9d:f2:3e:af:dc:f4:37:f9:e4:
                    b4:77:12:86:80:6d:29:9e:ec:ae:93:1f:8d:6a:a6:
                    fd:9e:2b:82:06:c1:f9:50:d5:5d:27:97:e5:e3:0f:
                    ed:3d:84:da:d1:64:bd:c3:15:fb:2f:27:7c:25:f2:
                    db:a2:33:01:d0:a3:76:9c:2c:d3:0f:9d:82:f7:90:
                    61:60:9a:4f:1d:1d:48:94:d4:d8:32:88:0e:60:15:
                    83:8e:d8:a9:73:3d:aa:d9:1f:0b:f9:34:76:4d:96:
                    d5:0d:69:5d:64:a0:08:e8:c3:5d:ec:7e:2c:8d:85:
                    41:e8:ab:55:09:5d:0b:69:21:e8:fc:55:4f:49:c2:
                    48:5a:26:fd:c0:d1:f2:c5:98:d1:ed:f2:ea:90:8e:
                    f5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:49:72:F1:20:B3:EA:08:7C:FD:28:1A:72:24:82:F2:1C:C8:FD:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/f38394a9-9305-305b-8be8-402a7a0c00b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/6a5786d8-68bf-4c69-b086-11587b550447.crl

            X509v3 Authority Key Identifier:
                keyid:0C:CA:4A:6B:90:74:B8:91:F7:8D:75:32:2F:72:EF:48:B7:81:A9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.197.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:f0:ff:ff:d2:07:bf:49:e8:c5:d7:36:b9:40:56:0c:42:75:
         b0:3f:08:5f:f2:c4:78:75:98:c9:26:b4:5d:62:ab:80:7c:cc:
         ee:81:7f:c1:08:a0:4b:c0:67:b0:00:59:6d:27:78:f8:9e:d0:
         f1:0b:3a:aa:c8:b0:e1:cd:ac:d9:85:96:9e:96:26:e4:6c:b6:
         4b:40:d0:e6:da:91:6e:0b:a9:7b:22:42:72:2a:f2:22:05:d8:
         a4:75:82:11:c8:5c:68:91:46:4b:42:67:d1:95:24:b7:71:8b:
         ab:57:bd:8a:8e:ac:bd:24:e5:c9:76:9a:76:7f:1d:c5:7d:73:
         2c:43:48:1d:1c:39:35:ae:e0:dc:3d:e6:ce:bc:72:5f:56:cf:
         02:d8:8d:2b:c5:50:f5:44:b1:2b:60:af:78:ac:83:21:6e:98:
         cc:4d:5f:5b:ef:2b:34:4c:e7:33:c6:d6:f7:f3:a3:07:0c:b8:
         09:35:f1:9d:19:20:02:c0:58:12:68:01:64:4c:a2:23:24:4a:
         d2:a8:9d:7e:77:18:b6:af:fc:9d:53:4a:34:07:6f:76:22:8d:
         b6:1a:db:94:29:b7:57:2e:0a:af:bf:9b:f2:75:70:cb:6b:ca:
         33:77:e9:30:80:71:2d:d0:a1:4b:ce:05:dc:01:69:c9:c4:fe:
         63:b2:89:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVeXagJI5Mw15AYIeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmE1Nzg2ZDgtNjhiZi00YzY5LWIwODYtMTE1ODdiNTUw
NDQ3MB4XDTI0MDMyOTEzMDAzN1oXDTI0MDYyNzEzMDAzN1owLzEtMCsGA1UEAxMk
M2QxZmFhNzItMGVhMS00ZmQyLTg0OTktOWMwMDk0MmM5NDNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogW7NjG1UoxzaXBDTz1H23r85BE9iQBWaKNs
iJ7WLikdN32WEYbzPNew8zuFpJfBNjZxO4VbJK9ZKIS+NIEpNbC+F5QtrpgRMATJ
f+TRSuOCbk5K25UjdE4EQZJ+6hL4DAt7ta0nEOgmJEcLFSCd8j6v3PQ3+eS0dxKG
gG0pnuyukx+Naqb9niuCBsH5UNVdJ5fl4w/tPYTa0WS9wxX7Lyd8JfLbojMB0KN2
nCzTD52C95BhYJpPHR1IlNTYMogOYBWDjtipcz2q2R8L+TR2TZbVDWldZKAI6MNd
7H4sjYVB6KtVCV0LaSHo/FVPScJIWib9wNHyxZjR7fLqkI715wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMNJcvEgs+oIfP0oGnIkgvIcyP1wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82YTU3
ODZkOC02OGJmLTRjNjktYjA4Ni0xMTU4N2I1NTA0NDcvZjM4Mzk0YTktOTMwNS0z
MDViLThiZTgtNDAyYTdhMGMwMGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmE1Nzg2ZDgtNjhiZi00YzY5LWIw
ODYtMTE1ODdiNTUwNDQ3LzZhNTc4NmQ4LTY4YmYtNGM2OS1iMDg2LTExNTg3YjU1
MDQ0Ny5jcmwwHwYDVR0jBBgwFoAUDMpKa5B0uJH3jXUyL3LvSLeBqRgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82YTU3ODZkOC02OGJmLTRjNjktYjA4Ni0xMTU4
N2I1NTA0NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2MVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/w///SB79J6MXXNrlAVgxCdbA/CF/yxHh1mMkmtF1iq4B8zO6Bf8EI
oEvAZ7AAWW0nePie0PELOqrIsOHNrNmFlp6WJuRstktA0ObakW4LqXsiQnIq8iIF
2KR1ghHIXGiRRktCZ9GVJLdxi6tXvYqOrL0k5cl2mnZ/HcV9cyxDSB0cOTWu4Nw9
5s68cl9WzwLYjSvFUPVEsStgr3isgyFumMxNX1vvKzRM5zPG1vfzowcMuAk18Z0Z
IALAWBJoAWRMoiMkStKonX53GLav/J1TSjQHb3YijbYa25Qpt1cuCq+/m/J1cMtr
yjN36TCAcS3QoUvOBdwBacnE/mOyiVs=
-----END CERTIFICATE-----
Generated at Sun May 12 19:16:35 2024 by rpki-client on console-ams.rpki-client.org