Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fd6f6676-8dba-3de4-81bd-dc984fe01c8a.roa
File:                     fd6f6676-8dba-3de4-81bd-dc984fe01c8a.roa (raw, json)
Hash identifier:          gfWUYP88P5LXFO1gWFEcly5BYGj82pdKGTj4Klobi90=
Subject key identifier:   E2:6A:07:16:48:07:0C:42:3D:52:46:44:25:5B:6D:EE:9E:87:CD:DB
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DB8AB6D87
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fd6f6676-8dba-3de4-81bd-dc984fe01c8a.roa
Signing time:             Fri 11 Oct 2019 02:35:05 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     19271
IP address blocks:        199.237.48.0/21 maxlen: 24
                          199.237.56.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:b8:ab:6d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=d47c3a06-a5ca-4fce-9691-7e68b2ed0bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3a:ce:0a:3b:1b:b3:34:d3:81:9c:e3:c5:39:
                    d2:76:aa:d8:35:21:20:b6:0d:9a:e3:ad:07:19:d5:
                    fd:ff:6e:91:a7:9e:2f:82:95:21:0d:cb:15:4d:aa:
                    92:11:39:6f:f5:c0:fa:89:61:70:d9:6f:8b:9c:32:
                    c2:07:73:3d:1f:bf:8e:f7:4d:39:14:e9:e5:86:93:
                    fc:bd:94:d6:eb:3e:26:31:fe:82:31:a6:5c:2b:23:
                    ae:b3:de:9a:de:fa:89:b1:45:e7:dd:30:b1:10:7f:
                    1b:92:c2:a4:ea:d1:e4:0d:41:fc:a0:d7:78:31:b7:
                    bd:29:10:2c:d9:42:f5:5d:ac:fb:25:60:d6:e8:d1:
                    24:c3:e1:40:a1:7e:35:a3:61:cf:3f:d2:f0:e4:59:
                    c5:a8:76:9a:5c:f4:eb:a3:98:ec:9f:ac:4b:70:28:
                    16:9c:49:b2:31:af:84:5e:4e:ca:3c:12:5b:a3:1f:
                    17:00:15:1c:b6:ba:96:39:d8:62:f3:7a:5c:0e:d6:
                    ee:b2:92:c8:34:e2:46:11:db:a4:28:c3:12:19:99:
                    01:b7:93:fc:bb:ce:63:9f:cc:e8:33:58:43:63:e5:
                    4c:83:a1:d7:dc:9a:ce:dc:78:4f:b1:26:cf:28:4d:
                    61:fb:77:d8:52:d5:e8:b0:41:83:09:51:79:f5:19:
                    d0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6A:07:16:48:07:0C:42:3D:52:46:44:25:5B:6D:EE:9E:87:CD:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fd6f6676-8dba-3de4-81bd-dc984fe01c8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.237.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:4d:22:48:1f:21:7b:d0:ee:3d:85:b1:eb:10:43:1f:32:43:
         d0:b6:08:b8:39:a1:fd:a9:14:9c:5e:69:75:08:de:ba:c7:54:
         04:bb:dc:74:84:35:f3:31:a3:40:03:4a:43:11:b3:03:bd:d2:
         59:22:a0:81:40:ed:a0:d6:27:3d:4e:0b:dc:ee:20:ab:99:38:
         91:a9:9a:bd:f2:12:ee:56:f0:cd:a5:da:d0:18:c8:2d:75:58:
         69:b4:1a:81:66:fe:4d:dd:94:64:9c:51:d1:62:50:12:e2:f9:
         ce:15:76:7b:1e:63:83:61:ad:68:be:ee:b0:4c:33:a3:eb:2c:
         3e:2a:86:07:10:e4:9b:2c:ea:a0:13:e3:85:e2:0c:ef:7c:41:
         8a:55:25:b8:7a:12:ed:82:5d:df:47:05:47:a4:46:a2:6f:cf:
         a4:ef:aa:97:2f:be:b8:2f:df:df:c5:a1:3d:4e:72:51:87:96:
         a8:5f:34:d3:d8:9e:e8:f0:ac:47:f7:c8:42:c4:7e:11:86:b3:
         f6:4a:48:d9:ab:82:3f:60:94:59:3e:37:60:5e:21:fa:59:35:
         96:67:37:ca:c3:07:3b:14:e0:2c:8c:4c:dc:7c:84:04:f7:74:
         e5:ff:cc:b0:6e:8b:7a:05:35:2b:d3:91:a5:f2:44:1f:01:60:
         c4:e6:3e:d2
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbbirbYcwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJGQ0
N2MzYTA2LWE1Y2EtNGZjZS05NjkxLTdlNjhiMmVkMGJiNzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKE6zgo7G7M004Gc48U50naq2DUhILYNmuOtBxnV
/f9ukaeeL4KVIQ3LFU2qkhE5b/XA+olhcNlvi5wywgdzPR+/jvdNORTp5YaT/L2U
1us+JjH+gjGmXCsjrrPemt76ibFF590wsRB/G5LCpOrR5A1B/KDXeDG3vSkQLNlC
9V2s+yVg1ujRJMPhQKF+NaNhzz/S8ORZxah2mlz066OY7J+sS3AoFpxJsjGvhF5O
yjwSW6MfFwAVHLa6ljnYYvN6XA7W7rKSyDTiRhHbpCjDEhmZAbeT/LvOY5/M6DNY
Q2PlTIOh19yaztx4T7EmzyhNYft32FLV6LBBgwlRefUZ0CkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTiagcWSAcMQj1SRkQlW23unofN2zCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmL2ZkNmY2Njc2LThkYmEtM2Rl
NC04MWJkLWRjOTg0ZmUwMWM4YS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMftMDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAPU0iSB8he9DuPYWx6xBDHzJD0LYIuDmh/akUnF5pdQjeusdUBLvcdIQ18zGj
QANKQxGzA73SWSKggUDtoNYnPU4L3O4gq5k4kamavfIS7lbwzaXa0BjILXVYabQa
gWb+Td2UZJxR0WJQEuL5zhV2ex5jg2GtaL7usEwzo+ssPiqGBxDkmyzqoBPjheIM
73xBilUluHoS7YJd30cFR6RGom/PpO+qly++uC/f38WhPU5yUYeWqF8009ie6PCs
R/fIQsR+EYaz9kpI2auCP2CUWT43YF4h+lk1lmc3ysMHOxTgLIxM3HyEBPd05f/M
sG6LegU1K9ORpfJEHwFgxOY+0g==
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:50:13 2024 by rpki-client on console-fra.rpki-client.org