Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/96deba7a-827d-385b-80bd-43b1b1611186.roa
File:                     96deba7a-827d-385b-80bd-43b1b1611186.roa (raw, json)
Hash identifier:          EKs7v187Zhd716Oe5FS0zaz+kk8+Fvc+kmLVzMIiH3s=
Subject key identifier:   B4:87:25:D4:BD:CC:6B:4E:1B:85:25:70:10:88:2C:F4:04:17:AF:B4
Certificate issuer:       /CN=f8791c17-503c-4afd-9a0b-412c175e957d
Certificate serial:       010D0C9F43285845D933D044DE6908940DC04EC0
Authority key identifier: 40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/96deba7a-827d-385b-80bd-43b1b1611186.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     200288
IP address blocks:        69.168.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:d0:44:de:69:08:94:0d:c0:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8791c17-503c-4afd-9a0b-412c175e957d
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=a8ff7490-989b-4048-a83a-d0afbaf2fb28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a8:16:ed:77:d3:78:25:0e:6e:ea:67:83:ac:
                    8e:3c:df:93:26:2c:95:23:a8:df:d4:40:5e:b7:a4:
                    dc:f8:14:bd:3a:a0:e2:66:b0:c6:f8:c8:b1:e4:48:
                    01:22:41:96:09:ce:ee:85:bf:0d:7b:be:4a:1c:58:
                    47:ae:2b:fc:b9:34:cd:e6:dc:80:50:3f:28:11:fa:
                    e5:a1:43:ac:5d:61:dc:c6:65:8a:bb:c4:2c:5c:2c:
                    50:c1:0a:39:cb:a0:3b:82:d6:d4:24:05:4b:7e:3c:
                    80:53:6f:47:7a:45:24:f8:ee:9a:bb:48:83:ba:0d:
                    76:ad:41:95:b3:ba:ce:91:bc:68:a0:bd:27:c9:2a:
                    61:23:a8:07:2c:ed:37:6f:77:14:b0:d3:1c:54:e0:
                    cc:e3:98:3e:47:cd:78:6c:ad:1d:5d:3c:4a:f9:ec:
                    df:be:12:ed:af:c1:fc:0e:96:be:72:ad:96:bf:58:
                    19:9c:3c:5f:fa:45:bc:81:d8:ad:26:d5:38:8d:88:
                    45:98:73:b1:84:cd:e0:9b:e9:6a:5c:6a:f4:ae:e9:
                    6a:3d:3a:d4:f1:79:fe:83:77:fd:8e:ee:9d:42:21:
                    95:e7:81:57:d3:fa:fe:38:dc:80:ea:cd:0b:30:29:
                    94:f3:31:61:4e:cb:31:bc:b2:8c:5c:7f:09:2f:64:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:87:25:D4:BD:CC:6B:4E:1B:85:25:70:10:88:2C:F4:04:17:AF:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/96deba7a-827d-385b-80bd-43b1b1611186.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.crl

            X509v3 Authority Key Identifier:
                keyid:40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:7c:f3:ed:c1:27:ce:c4:e2:f0:1b:14:1c:2e:95:ef:e2:70:
         c8:84:bc:13:7c:1d:69:97:f3:a6:d5:b7:8a:f9:f7:d6:80:45:
         fc:51:1a:c7:f1:9f:9a:a9:3a:26:29:f6:8a:72:82:2e:b0:9c:
         ce:b3:d0:ef:72:93:79:af:5e:e3:e3:6f:a8:22:61:34:d7:fb:
         e3:37:f6:59:dc:77:08:34:0e:9e:1d:65:9c:6e:20:82:b9:58:
         4c:56:f7:8a:a6:7d:7c:af:ec:fc:07:d2:ef:f8:e6:28:bc:b7:
         e1:1c:7a:f6:c2:b2:ab:40:ed:1a:a6:67:d2:27:49:9a:30:1b:
         4c:78:b6:e8:23:30:96:ae:89:4d:ed:f0:f6:2a:52:71:01:7c:
         e3:ff:76:35:4f:ed:7f:0c:31:1c:5f:84:78:ee:5a:4e:11:9c:
         75:e4:a0:aa:52:3e:77:70:9f:55:55:94:b7:f9:4d:5a:de:3e:
         36:2b:1f:2b:26:4a:bf:81:c3:ff:4e:ba:53:b1:e8:07:86:54:
         1d:61:d5:eb:e4:cc:a3:d9:65:77:e6:77:1b:2b:9b:f7:98:6d:
         0e:09:c1:9e:96:91:7a:c1:18:ce:ad:98:10:c6:ba:72:4b:8c:
         82:ab:9c:a2:da:c7:6f:be:09:a4:4c:0c:ca:82:15:5b:2e:17:
         8f:f1:e4:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXZM9BE3mkIlA3ATsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3OTFjMTctNTAzYy00YWZkLTlhMGItNDEyYzE3NWU5
NTdkMB4XDTI0MDUxMjEzMDAzNFoXDTI0MDgxMDEzMDAzNFowLzEtMCsGA1UEAxMk
YThmZjc0OTAtOTg5Yi00MDQ4LWE4M2EtZDBhZmJhZjJmYjI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6gW7XfTeCUObupng6yOPN+TJiyVI6jf1EBe
t6Tc+BS9OqDiZrDG+Mix5EgBIkGWCc7uhb8Ne75KHFhHriv8uTTN5tyAUD8oEfrl
oUOsXWHcxmWKu8QsXCxQwQo5y6A7gtbUJAVLfjyAU29HekUk+O6au0iDug12rUGV
s7rOkbxooL0nySphI6gHLO03b3cUsNMcVODM45g+R814bK0dXTxK+ezfvhLtr8H8
Dpa+cq2Wv1gZnDxf+kW8gditJtU4jYhFmHOxhM3gm+lqXGr0rulqPTrU8Xn+g3f9
ju6dQiGV54FX0/r+ONyA6s0LMCmU8zFhTssxvLKMXH8JL2QS4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLSHJdS9zGtOG4UlcBCILPQEF6+0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mODc5
MWMxNy01MDNjLTRhZmQtOWEwYi00MTJjMTc1ZTk1N2QvOTZkZWJhN2EtODI3ZC0z
ODViLTgwYmQtNDNiMWIxNjExMTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjg3OTFjMTctNTAzYy00YWZkLTlh
MGItNDEyYzE3NWU5NTdkL2Y4NzkxYzE3LTUwM2MtNGFmZC05YTBiLTQxMmMxNzVl
OTU3ZC5jcmwwHwYDVR0jBBgwFoAUQOApBkvTpPYHi2O0vKbHlDXapGYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mODc5MWMxNy01MDNjLTRhZmQtOWEwYi00MTJj
MTc1ZTk1N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARajtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIh88+3BJ87E4vAbFBwule/icMiEvBN8HWmX86bVt4r599aARfxRGsfx
n5qpOiYp9opygi6wnM6z0O9yk3mvXuPjb6giYTTX++M39lncdwg0Dp4dZZxuIIK5
WExW94qmfXyv7PwH0u/45ii8t+EcevbCsqtA7RqmZ9InSZowG0x4tugjMJauiU3t
8PYqUnEBfOP/djVP7X8MMRxfhHjuWk4RnHXkoKpSPndwn1VVlLf5TVrePjYrHysm
Sr+Bw/9OulOx6AeGVB1h1evkzKPZZXfmdxsrm/eYbQ4JwZ6WkXrBGM6tmBDGunJL
jIKrnKLax2++CaRMDMqCFVsuF4/x5Lo=
-----END CERTIFICATE-----
Generated at Wed May 22 20:43:46 2024 by rpki-client on console-fra.rpki-client.org