Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa
File:                     5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa (raw, json)
Hash identifier:          r3XWlf7dtZUkXgKH4E2KpYORpLbMqyeOPsv8ySq6dKk=
Subject key identifier:   B4:12:5B:22:DC:45:2D:5B:1C:36:CD:41:0B:9E:A0:DF:E0:6B:19:73
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F43285845D933DF3452EA7A7988CA4500
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     32133
IP address blocks:        169.197.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:df:34:52:ea:7a:79:88:ca:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=f4a1e3fd-2741-42d7-8ba6-18e590392453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bc:f2:53:bc:69:3a:9f:dc:d6:74:aa:09:ce:
                    30:6a:40:59:ea:53:ca:05:dc:4a:b6:87:fa:89:05:
                    6b:2f:c3:5d:01:82:5b:83:14:8a:8e:f8:f8:50:a5:
                    de:e6:9f:40:cb:ef:9e:55:36:b3:95:6b:bb:e0:4a:
                    86:9e:14:af:6f:a0:30:bf:de:62:f0:05:c9:3b:2f:
                    9b:26:11:bd:bf:67:80:ff:ab:a4:31:52:ba:2a:99:
                    c5:df:34:54:24:ac:e1:65:83:59:ae:3a:af:c7:8e:
                    4d:c1:a1:42:a2:c9:ad:5c:db:92:98:d0:a3:2d:d3:
                    43:48:f8:26:08:64:7e:66:ec:b3:4d:d5:13:28:1a:
                    61:71:8b:fe:f9:45:1c:6a:8d:80:e0:5f:ed:98:3a:
                    a3:a6:8f:6b:07:ee:d4:b0:70:b4:91:f8:29:f2:a7:
                    99:80:33:5d:c7:33:c1:39:9d:7d:71:77:ef:85:b2:
                    22:74:29:0f:38:48:60:f7:b0:97:fe:07:46:9a:c4:
                    50:a6:99:4f:ab:dd:ce:6a:63:e5:66:17:4a:2b:07:
                    90:fd:f0:ae:e5:7d:90:27:57:a6:9c:9b:d6:1f:f9:
                    83:43:d2:c6:c9:d4:81:9d:da:c5:a0:f9:d7:cc:d1:
                    fe:89:3c:27:c9:0a:6d:87:7e:3a:d5:09:b6:03:cf:
                    a6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:12:5B:22:DC:45:2D:5B:1C:36:CD:41:0B:9E:A0:DF:E0:6B:19:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e7:02:45:89:90:fa:0a:94:95:37:41:33:d7:00:91:30:5e:
         fa:3d:ea:4b:a8:be:59:3c:69:72:1a:64:2b:a0:34:c9:49:02:
         52:cb:8b:a4:99:0d:e1:34:36:15:2c:42:4c:8c:13:8f:d6:bb:
         5b:81:6d:5f:79:36:e5:31:b7:c1:26:22:cd:e1:a1:00:99:33:
         54:fc:23:01:98:54:b0:03:a5:4b:25:38:81:4e:70:92:1b:c7:
         9b:0a:c0:70:09:dc:ff:65:db:7d:09:2d:10:b1:1b:e9:a6:cb:
         fc:0b:08:a0:01:39:7e:dd:8d:f3:99:cb:81:da:50:ff:a5:53:
         9a:d0:59:45:09:08:45:7d:9a:f0:55:4a:9b:4e:8b:a7:57:b9:
         ff:21:b2:b8:44:28:4f:89:35:f9:55:45:24:19:99:09:c0:2c:
         af:50:a3:02:d5:da:8d:3a:31:2e:79:ec:ff:b9:76:95:6e:d4:
         32:cf:40:a6:c4:e2:6e:58:64:66:0b:6c:e3:30:d3:e6:76:ae:
         5b:0a:c3:c4:58:d9:cf:7d:bd:91:df:5d:cb:71:e0:48:87:63:
         78:bf:9c:5b:23:b8:4c:ab:22:ea:d2:ae:66:10:7c:7a:b3:23:
         fc:8d:e3:6c:29:82:fd:1f:c9:24:f3:1d:01:ce:3f:64:e8:1d:
         20:8d:2d:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXZM980Uup6eYjKRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0
NjljMB4XDTI0MDUxMjEzMDAzNFoXDTI0MDgxMDEzMDAzNFowLzEtMCsGA1UEAxMk
ZjRhMWUzZmQtMjc0MS00MmQ3LThiYTYtMThlNTkwMzkyNDUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLzyU7xpOp/c1nSqCc4wakBZ6lPKBdxKtof6
iQVrL8NdAYJbgxSKjvj4UKXe5p9Ay++eVTazlWu74EqGnhSvb6Awv95i8AXJOy+b
JhG9v2eA/6ukMVK6KpnF3zRUJKzhZYNZrjqvx45NwaFCosmtXNuSmNCjLdNDSPgm
CGR+ZuyzTdUTKBphcYv++UUcao2A4F/tmDqjpo9rB+7UsHC0kfgp8qeZgDNdxzPB
OZ19cXfvhbIidCkPOEhg97CX/gdGmsRQpplPq93OamPlZhdKKweQ/fCu5X2QJ1em
nJvWH/mDQ9LGydSBndrFoPnXzNH+iTwnyQpth3461Qm2A8+mLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLQSWyLcRS1bHDbNQQueoN/gaxlzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj
YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvNWVmMDkyNWEtMDY1NC0z
NmFhLTgzNjgtYmQyZTY2NTJmN2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh
MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw
NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4
MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqcUgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/nAkWJkPoKlJU3QTPXAJEwXvo96kuovlk8aXIaZCugNMlJAlLLi6SZ
DeE0NhUsQkyME4/Wu1uBbV95NuUxt8EmIs3hoQCZM1T8IwGYVLADpUslOIFOcJIb
x5sKwHAJ3P9l230JLRCxG+mmy/wLCKABOX7djfOZy4HaUP+lU5rQWUUJCEV9mvBV
SptOi6dXuf8hsrhEKE+JNflVRSQZmQnALK9QowLV2o06MS557P+5dpVu1DLPQKbE
4m5YZGYLbOMw0+Z2rlsKw8RY2c99vZHfXctx4EiHY3i/nFsjuEyrIurSrmYQfHqz
I/yN42wpgv0fySTzHQHOP2ToHSCNLfY=
-----END CERTIFICATE-----
Generated at Mon May 13 15:52:53 2024 by rpki-client on console-fra.rpki-client.org