Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4eb61a6a-1785-3238-b458-3cb8ddc84b12.roa
File:                     4eb61a6a-1785-3238-b458-3cb8ddc84b12.roa (raw, json)
Hash identifier:          6SUCFVBCAv46FDHGo88Sw/Jan2pe8dXQqtQaRX4/ZTU=
Subject key identifier:   EB:95:9C:1A:CE:FD:FE:97:7E:A6:D3:B2:3D:3D:C9:F1:0D:13:D5:E1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845A7D678AD8FA9446CC88B9B80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4eb61a6a-1785-3238-b458-3cb8ddc84b12.roa
Signing time:             Wed 24 Apr 2024 20:38:12 +0000
ROA not before:           Wed 24 Apr 2024 20:38:12 +0000
ROA not after:            Tue 23 Jul 2024 20:38:12 +0000
asID:                     13335
IP address blocks:        204.195.248.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a7:d6:78:ad:8f:a9:44:6c:c8:8b:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 24 20:38:12 2024 GMT
            Not After : Jul 23 20:38:12 2024 GMT
        Subject: CN=a0b26846-98e6-4710-a4f2-f0db82e315f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c8:ee:0e:47:76:97:ef:b0:d0:29:ab:ea:24:
                    f4:70:1f:88:05:55:85:57:a5:55:3a:aa:aa:07:18:
                    6e:91:60:fd:ca:2d:32:e6:4d:a4:55:5c:4e:1a:f9:
                    f5:f3:f4:98:44:cd:61:36:fb:16:f0:c7:5f:58:38:
                    26:bb:01:3f:19:94:05:18:0e:ba:9f:a7:02:bd:dd:
                    45:56:31:44:2e:28:de:4e:03:a8:69:c8:fe:6b:47:
                    77:fd:5c:90:44:fd:a2:ea:ea:4c:e7:72:c6:88:eb:
                    02:73:81:fb:6a:b0:e2:5e:86:23:22:a8:4a:af:75:
                    53:c7:20:b5:c4:78:4d:43:e6:fa:0b:03:0e:c2:d8:
                    8b:db:21:97:d6:94:d7:85:9d:0a:ec:72:20:01:2f:
                    ef:30:ed:30:51:03:4d:39:01:2e:d8:ed:6a:c5:cc:
                    90:f8:da:24:2b:d4:3b:39:2f:d2:3d:3a:11:68:a1:
                    03:9a:4f:e2:79:b2:97:df:86:a6:86:4b:a1:06:bc:
                    90:b4:8a:85:24:ad:b2:a1:d0:0e:e1:5d:79:0c:a2:
                    c7:27:b6:90:ae:6a:a2:d6:d1:75:0a:d7:c6:65:0c:
                    09:90:86:b0:f1:55:0f:aa:1d:f2:c7:e6:83:ae:6e:
                    96:1b:b0:54:55:bc:da:0b:1e:39:b4:01:09:5a:01:
                    0a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:95:9C:1A:CE:FD:FE:97:7E:A6:D3:B2:3D:3D:C9:F1:0D:13:D5:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4eb61a6a-1785-3238-b458-3cb8ddc84b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a1:23:70:96:d2:19:3a:52:70:6f:52:16:31:42:c7:b5:9f:
         9f:3d:f5:9c:26:df:71:58:0b:f6:06:4f:2e:e1:15:03:b7:64:
         e0:f4:bc:6a:81:b7:61:da:c5:12:6f:c2:8a:97:66:56:9e:80:
         e4:90:32:df:67:2d:c1:68:c9:25:88:42:80:7b:ba:3b:54:08:
         8f:de:ce:d5:7b:57:6a:06:7b:c0:9b:4e:6d:ca:98:f8:b7:67:
         ef:73:2c:31:6f:a7:13:cf:14:a0:1c:8e:66:a2:04:1a:2d:e6:
         30:a0:ac:c4:e0:c0:60:e7:aa:a6:ef:f5:53:06:a2:74:2c:d4:
         76:04:45:4f:95:e5:58:b4:b2:41:80:bb:3c:bf:3f:fd:fd:9c:
         3d:5f:14:13:6e:c5:d8:95:ca:32:d7:a1:a5:de:7a:5a:8e:19:
         b2:43:4c:ac:2e:29:86:69:34:35:4a:17:47:de:71:8a:d3:a3:
         38:bd:52:4c:d6:9c:5d:e0:58:78:be:a9:94:38:f4:a8:13:d2:
         ae:5f:ae:c6:4e:b1:92:f9:cf:5f:eb:9a:8c:1b:81:b7:5c:af:
         fb:50:f6:ec:ad:40:e3:86:1b:f6:5c:67:f9:48:40:d5:b7:d4:
         46:91:e2:06:28:d7:5d:58:72:9d:ad:ed:4f:f2:67:31:7d:bb:
         45:48:7c:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWn1nitj6lEbMiLm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MDQyNDIwMzgxMloXDTI0MDcyMzIwMzgxMlowLzEtMCsGA1UEAxMk
YTBiMjY4NDYtOThlNi00NzEwLWE0ZjItZjBkYjgyZTMxNWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cjuDkd2l++w0Cmr6iT0cB+IBVWFV6VVOqqq
BxhukWD9yi0y5k2kVVxOGvn18/SYRM1hNvsW8MdfWDgmuwE/GZQFGA66n6cCvd1F
VjFELijeTgOoacj+a0d3/VyQRP2i6upM53LGiOsCc4H7arDiXoYjIqhKr3VTxyC1
xHhNQ+b6CwMOwtiL2yGX1pTXhZ0K7HIgAS/vMO0wUQNNOQEu2O1qxcyQ+NokK9Q7
OS/SPToRaKEDmk/iebKX34amhkuhBryQtIqFJK2yodAO4V15DKLHJ7aQrmqi1tF1
CtfGZQwJkIaw8VUPqh3yx+aDrm6WG7BUVbzaCx45tAEJWgEKvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOuVnBrO/f6XfqbTsj09yfENE9XhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNGViNjFhNmEtMTc4NS0z
MjM4LWI0NTgtM2NiOGRkYzg0YjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzMP4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABuhI3CW0hk6UnBvUhYxQse1n5899Zwm33FYC/YGTy7hFQO3ZOD0vGqB
t2HaxRJvwoqXZlaegOSQMt9nLcFoySWIQoB7ujtUCI/eztV7V2oGe8CbTm3KmPi3
Z+9zLDFvpxPPFKAcjmaiBBot5jCgrMTgwGDnqqbv9VMGonQs1HYERU+V5Vi0skGA
uzy/P/39nD1fFBNuxdiVyjLXoaXeelqOGbJDTKwuKYZpNDVKF0fecYrTozi9UkzW
nF3gWHi+qZQ49KgT0q5frsZOsZL5z1/rmowbgbdcr/tQ9uytQOOGG/ZcZ/lIQNW3
1EaR4gYo111Ycp2t7U/yZzF9u0VIfHY=
-----END CERTIFICATE-----
Generated at Fri May 10 23:56:41 2024 by rpki-client on console-fra.rpki-client.org