Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa
File:                     ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa (raw, json)
Hash identifier:          4oM92AYcprdfs9XsjlULPmzpRys5POIfPInfglRGVGU=
Subject key identifier:   20:D6:9B:8B:D4:59:8E:9F:47:E7:F7:B5:C8:7A:BD:31:88:4C:F0:16
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F43285847D569FADBFB269B4B51A4F680
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     4213
IP address blocks:        216.176.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:69:fa:db:fb:26:9b:4b:51:a4:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=bd158cce-f0a6-465b-b5b7-6c95cc504671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:56:d0:bb:91:8d:f7:26:4d:1d:c6:14:d8:4a:
                    e2:34:5c:c5:0a:cb:f6:27:c1:f7:c9:20:0f:61:e3:
                    ea:ef:29:0a:6a:26:25:97:c5:ec:7b:e8:73:17:fb:
                    dc:0e:41:9a:b0:12:54:59:50:86:8f:9b:27:c9:16:
                    41:9e:8b:04:fb:5e:16:5b:f1:25:4c:90:54:3d:34:
                    2e:00:03:ac:93:49:6c:0e:66:79:2d:90:96:2c:b4:
                    73:00:75:94:5e:27:d5:71:04:25:19:ea:77:52:ed:
                    a0:0b:60:f4:61:93:07:0b:ac:7c:6a:25:16:26:5f:
                    4c:d1:ac:97:1c:e2:41:f3:e5:c6:7e:d5:0e:00:1c:
                    7d:fd:e5:20:cd:09:c6:8a:73:7c:e3:7d:0f:15:4e:
                    b6:ae:48:71:5f:04:10:c8:cd:e9:00:35:ba:d7:42:
                    4d:bf:c8:3a:1d:ca:5f:02:17:c2:47:64:a6:b1:ea:
                    f1:06:58:b6:60:bc:46:39:c6:9a:7c:f4:b6:98:7c:
                    59:89:0c:92:29:61:79:52:42:f9:6e:91:df:11:25:
                    ad:b4:95:8f:8d:4f:f9:64:4a:39:d2:42:25:3a:b4:
                    4d:6f:e5:fa:78:99:65:2f:0e:c3:db:14:92:93:bc:
                    85:d2:6f:5d:ec:18:23:2c:10:24:dc:3f:ee:4c:3c:
                    21:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D6:9B:8B:D4:59:8E:9F:47:E7:F7:B5:C8:7A:BD:31:88:4C:F0:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.176.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e9:cc:ef:53:0b:2a:0f:eb:fb:7e:b0:96:bf:cc:ea:d0:12:
         5d:86:17:d7:23:c5:ab:ec:d8:bb:ec:81:d8:32:03:d4:ca:d8:
         a5:76:98:50:10:28:82:d0:dd:1f:6a:a8:f1:5e:e0:45:33:d5:
         5c:44:dc:e3:1d:8e:10:d6:9f:ca:7d:ca:af:1c:28:e6:91:bf:
         0c:fe:49:b5:f8:a0:a0:23:ec:80:45:69:b4:2b:d7:86:7c:88:
         e8:73:34:eb:56:a9:43:a0:98:0f:40:09:61:a7:6a:1e:cd:2f:
         4e:03:80:a3:de:d1:17:dc:62:7a:f0:d8:7f:f1:ab:1d:93:1a:
         4e:36:dc:0b:d6:70:40:88:ec:a8:ac:96:0e:45:94:ce:de:5a:
         01:52:14:8b:bb:a6:b2:71:f7:67:83:b4:81:dc:66:dd:20:22:
         c2:04:bb:16:58:5f:72:43:b6:1e:5c:7e:e6:d5:2d:a8:bd:6c:
         39:0e:c8:b1:c6:cc:8d:91:0b:d5:0a:3a:3a:61:3a:3d:35:d1:
         c7:db:0a:fc:cc:78:b5:70:24:b6:1a:b2:b3:7a:08:3b:1f:5c:
         8d:47:f0:58:ff:01:d1:87:a1:73:fa:a9:c7:85:40:5b:8b:8b:
         e7:79:df:c3:4b:dc:c5:ac:45:d8:47:cd:cc:50:8b:cf:c2:c6:
         7a:81:11:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfVafrb+yabS1Gk9oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz
ZWJmMB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk
YmQxNThjY2UtZjBhNi00NjViLWI1YjctNmM5NWNjNTA0NjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFbQu5GN9yZNHcYU2EriNFzFCsv2J8H3ySAP
YePq7ykKaiYll8Xse+hzF/vcDkGasBJUWVCGj5snyRZBnosE+14WW/ElTJBUPTQu
AAOsk0lsDmZ5LZCWLLRzAHWUXifVcQQlGep3Uu2gC2D0YZMHC6x8aiUWJl9M0ayX
HOJB8+XGftUOABx9/eUgzQnGinN8430PFU62rkhxXwQQyM3pADW610JNv8g6Hcpf
AhfCR2SmserxBli2YLxGOcaafPS2mHxZiQySKWF5UkL5bpHfESWttJWPjU/5ZEo5
0kIlOrRNb+X6eJllLw7D2xSSk7yF0m9d7BgjLBAk3D/uTDwhZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCDWm4vUWY6fR+f3tch6vTGITPAWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl
NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvZWM1MzkyMGEtYTQwMy0z
ZWIyLTlmMGYtYWU4YjlmNmFhNjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw
ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm
M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm
YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2LDAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnpzO9TCyoP6/t+sJa/zOrQEl2GF9cjxavs2LvsgdgyA9TK2KV2mFAQ
KILQ3R9qqPFe4EUz1VxE3OMdjhDWn8p9yq8cKOaRvwz+SbX4oKAj7IBFabQr14Z8
iOhzNOtWqUOgmA9ACWGnah7NL04DgKPe0RfcYnrw2H/xqx2TGk423AvWcECI7Kis
lg5FlM7eWgFSFIu7prJx92eDtIHcZt0gIsIEuxZYX3JDth5cfubVLai9bDkOyLHG
zI2RC9UKOjphOj010cfbCvzMeLVwJLYasrN6CDsfXI1H8Fj/AdGHoXP6qceFQFuL
i+d538NL3MWsRdhHzcxQi8/CxnqBERs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:22 2024 by rpki-client on console-ams.rpki-client.org