Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/82188834-19d0-34be-9f3c-13ee797db6fa.roa
File:                     82188834-19d0-34be-9f3c-13ee797db6fa.roa (raw, json)
Hash identifier:          EL9TwVsSb4heIyDLvpHEmfcIdXLo8I6fuxMLhkLEOEg=
Subject key identifier:   A3:9A:B3:D6:E8:D5:B3:69:4F:71:90:18:BA:DD:88:6E:1C:DF:AA:38
Certificate issuer:       /CN=3cc14fdf-ab56-412d-b3de-39cbbd96d12f
Certificate serial:       010D0C9F43285845A2C3400ED88A0CCCA97FB100
Authority key identifier: A9:22:22:C2:6D:F6:4E:5A:AB:2E:F4:BC:1E:8A:AF:18:AF:64:AB:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/82188834-19d0-34be-9f3c-13ee797db6fa.roa
Signing time:             Tue 23 Apr 2024 01:00:25 +0000
ROA not before:           Tue 23 Apr 2024 01:00:25 +0000
ROA not after:            Mon 22 Jul 2024 01:00:25 +0000
asID:                     54665
IP address blocks:        199.59.112.0/22 maxlen: 22
                          198.177.52.0/22 maxlen: 22
                          192.190.88.0/22 maxlen: 22
                          162.220.84.0/22 maxlen: 22
                          66.128.128.0/20 maxlen: 20
                          2605:4680::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:c3:40:0e:d8:8a:0c:cc:a9:7f:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cc14fdf-ab56-412d-b3de-39cbbd96d12f
        Validity
            Not Before: Apr 23 01:00:25 2024 GMT
            Not After : Jul 22 01:00:25 2024 GMT
        Subject: CN=5e811f8a-0dcc-41be-acd9-a0884863e3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:b0:e8:8f:2a:ca:a9:1a:9d:de:1b:52:c9:
                    0c:f4:07:18:95:17:4a:64:ae:05:d0:61:75:8e:e8:
                    76:90:25:9d:89:c9:2f:eb:13:db:f3:66:e5:07:75:
                    33:34:e4:ad:d4:af:d8:d5:f1:01:f5:a1:f4:07:ec:
                    64:62:51:ec:7f:4f:66:e6:5e:66:48:cd:c4:da:13:
                    67:7b:b4:be:60:66:78:c8:53:d6:0d:b2:51:9e:20:
                    9d:66:5f:c6:29:4b:20:2f:14:eb:2b:6c:0b:7b:0a:
                    3c:ae:fa:88:f1:a3:de:03:ec:66:c0:59:6a:21:7c:
                    a9:a8:bf:bf:2e:8d:f7:c5:83:1a:ac:7d:ff:fd:0d:
                    6a:82:0e:27:d5:60:77:2a:40:5f:ff:28:1b:be:8d:
                    35:0b:42:e0:e0:fe:93:7f:88:98:09:67:c1:01:db:
                    43:23:65:af:f6:77:c0:91:6a:33:fe:dd:72:78:28:
                    aa:f8:8a:3e:d5:4c:00:c9:ed:a6:a5:04:5c:39:9d:
                    2f:ae:4c:21:b7:d8:13:72:5a:26:00:10:8c:76:e9:
                    a4:1b:11:31:42:7b:46:aa:03:a9:ba:d9:31:d5:bd:
                    55:c2:90:50:7f:62:fa:fa:e5:8d:7c:1a:e2:25:ba:
                    43:e0:e7:c6:50:4c:29:f1:b9:06:19:39:8d:f6:ec:
                    e6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9A:B3:D6:E8:D5:B3:69:4F:71:90:18:BA:DD:88:6E:1C:DF:AA:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/82188834-19d0-34be-9f3c-13ee797db6fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.crl

            X509v3 Authority Key Identifier:
                keyid:A9:22:22:C2:6D:F6:4E:5A:AB:2E:F4:BC:1E:8A:AF:18:AF:64:AB:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.128.0/20
                  162.220.84.0/22
                  192.190.88.0/22
                  198.177.52.0/22
                  199.59.112.0/22
                IPv6:
                  2605:4680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:91:e0:5d:26:89:bd:6e:bb:5f:39:3c:7f:75:09:ed:74:a0:
         56:27:a3:4a:b5:26:48:0d:98:d6:b5:57:7f:cb:46:07:f0:7e:
         9c:bd:d6:3f:80:ee:3c:af:7c:58:d7:6d:18:74:0d:25:b7:64:
         fd:3c:52:ad:0c:d9:f2:f7:05:c5:00:ff:36:0f:be:ac:44:3e:
         01:10:80:02:21:64:32:37:68:a7:a4:e8:e0:9e:48:20:b0:f2:
         b9:b3:50:44:3a:e4:7d:b8:6b:08:29:4e:d6:16:40:a6:56:21:
         7d:fd:ac:36:f6:c7:72:8a:6b:d4:47:30:43:1f:b8:b0:bf:3b:
         c7:10:d3:77:d5:26:0e:da:e9:87:09:66:76:3c:73:a8:18:d5:
         12:db:b9:fc:83:f7:93:3b:1c:0f:2b:fc:35:41:93:93:85:4a:
         9c:a8:c1:1d:f2:12:97:85:8b:a6:0b:6e:fa:36:d3:94:e4:02:
         32:52:d3:66:e7:4c:37:d8:a0:a0:e7:70:97:f9:7d:2e:82:79:
         7a:6f:cb:86:ed:d0:ff:e8:de:b9:8d:c3:b6:b9:ab:98:92:4d:
         20:fe:29:e0:48:fd:b5:e0:45:6d:19:1b:f5:63:05:7a:29:cb:
         3d:14:d4:01:1a:ee:0f:88:59:2e:84:e2:aa:09:76:39:87:ff:
         e1:c0:30:de
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEWiw0AO2IoMzKl/sQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2NjMTRmZGYtYWI1Ni00MTJkLWIzZGUtMzljYmJkOTZk
MTJmMB4XDTI0MDQyMzAxMDAyNVoXDTI0MDcyMjAxMDAyNVowLzEtMCsGA1UEAxMk
NWU4MTFmOGEtMGRjYy00MWJlLWFjZDktYTA4ODQ4NjNlM2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlqw6I8qyqkand4bUskM9AcYlRdKZK4F0GF1
juh2kCWdickv6xPb82blB3UzNOSt1K/Y1fEB9aH0B+xkYlHsf09m5l5mSM3E2hNn
e7S+YGZ4yFPWDbJRniCdZl/GKUsgLxTrK2wLewo8rvqI8aPeA+xmwFlqIXypqL+/
Lo33xYMarH3//Q1qgg4n1WB3KkBf/ygbvo01C0Lg4P6Tf4iYCWfBAdtDI2Wv9nfA
kWoz/t1yeCiq+Io+1UwAye2mpQRcOZ0vrkwht9gTclomABCMdumkGxExQntGqgOp
utkx1b1VwpBQf2L6+uWNfBriJbpD4OfGUEwp8bkGGTmN9uzmqQIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFKOas9bo1bNpT3GQGLrdiG4c36o4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zY2Mx
NGZkZi1hYjU2LTQxMmQtYjNkZS0zOWNiYmQ5NmQxMmYvODIxODg4MzQtMTlkMC0z
NGJlLTlmM2MtMTNlZTc5N2RiNmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2NjMTRmZGYtYWI1Ni00MTJkLWIz
ZGUtMzljYmJkOTZkMTJmLzNjYzE0ZmRmLWFiNTYtNDEyZC1iM2RlLTM5Y2JiZDk2
ZDEyZi5jcmwwHwYDVR0jBBgwFoAUqSIiwm32TlqrLvS8HoqvGK9kq8wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zY2MxNGZkZi1hYjU2LTQxMmQtYjNkZS0zOWNi
YmQ5NmQxMmYuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQEQoCAAwQC
otxUAwQCwL5YAwQCxrE0AwQCxztwMA0EAgACMAcDBQAmBUaAMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKWR
4F0mib1uu185PH91Ce10oFYno0q1JkgNmNa1V3/LRgfwfpy91j+A7jyvfFjXbRh0
DSW3ZP08Uq0M2fL3BcUA/zYPvqxEPgEQgAIhZDI3aKek6OCeSCCw8rmzUEQ65H24
awgpTtYWQKZWIX39rDb2x3KKa9RHMEMfuLC/O8cQ03fVJg7a6YcJZnY8c6gY1RLb
ufyD95M7HA8r/DVBk5OFSpyowR3yEpeFi6YLbvo205TkAjJS02bnTDfYoKDncJf5
fS6CeXpvy4bt0P/o3rmNw7a5q5iSTSD+KeBI/bXgRW0ZG/VjBXopyz0U1AEa7g+I
WS6E4qoJdjmH/+HAMN4=
-----END CERTIFICATE-----
Generated at Fri May 10 20:55:08 2024 by rpki-client on console-ams.rpki-client.org