Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/f6461d02-97d6-3c8d-bed3-cbc446bffce2.roa
File:                     f6461d02-97d6-3c8d-bed3-cbc446bffce2.roa (raw, json)
Hash identifier:          1NLsABJ+pLNz4RnesoJ1oOBcDxoK8zdXJv1H3Q+5cLc=
Subject key identifier:   EC:C1:49:52:A8:3F:F8:1E:DE:FE:5B:C9:BC:BF:37:7C:8E:53:B8:E3
Certificate issuer:       /CN=4d2714ea-5618-446b-8e12-7743856af6e6
Certificate serial:       010D0C9F43285841E46D6D00569C3C8E2AF53A00
Authority key identifier: 52:62:7A:BD:AB:0D:51:ED:FF:6C:BA:7E:2E:37:25:6D:76:40:C3:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/f6461d02-97d6-3c8d-bed3-cbc446bffce2.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Tue 27 Jun 2023 23:02:31 +0000
asID:                     1239
IP address blocks:        199.67.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/4d2714ea-5618-446b-8e12-7743856af6e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/4d2714ea-5618-446b-8e12-7743856af6e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 May 2023 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:6d:00:56:9c:3c:8e:2a:f5:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2714ea-5618-446b-8e12-7743856af6e6
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun 27 23:02:31 2023 GMT
        Subject: CN=4677490b-fbb4-4fb6-b385-472dd859e68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a9:dd:38:04:46:6b:f3:b8:8b:c5:e9:fd:12:
                    ca:21:3b:54:3d:35:9b:7b:de:60:26:b0:2e:7d:98:
                    d7:fa:7b:11:d5:be:1f:50:7f:f7:fd:8b:46:e7:10:
                    b9:be:ed:0f:8f:8e:7e:eb:99:ab:cd:ea:78:1f:de:
                    cf:7a:6b:96:eb:e6:cc:c0:88:94:e7:23:11:35:fc:
                    a1:73:73:e8:bc:4f:3b:2a:0e:81:29:3f:ab:7c:24:
                    2d:5f:17:ca:70:9e:e0:59:c3:cf:09:4d:ad:f2:5d:
                    3e:b3:ad:4f:b6:57:08:2d:9c:56:57:11:fe:fe:ad:
                    47:9f:c9:23:64:32:2e:d1:7a:0e:d1:92:9f:ca:ac:
                    87:9e:d5:5b:fc:84:0a:d7:34:25:e6:01:46:df:ed:
                    7b:8e:9f:6e:03:c7:57:2d:ce:0a:7b:d8:5b:cc:63:
                    73:69:a7:b0:b2:99:30:43:23:c7:0c:47:5e:a8:c9:
                    d6:20:8a:d2:76:26:f2:5c:f4:43:39:f9:ff:90:8f:
                    41:a6:74:78:d6:c5:eb:a4:8d:5e:37:36:a4:6c:28:
                    a8:90:bb:19:49:aa:f8:6e:d8:5b:c4:aa:f6:d4:4b:
                    72:ec:11:99:3c:5b:7f:3c:2e:43:7f:ea:30:5a:57:
                    88:96:27:ee:86:12:2d:c6:82:0c:0a:c1:e8:da:12:
                    8f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EC:C1:49:52:A8:3F:F8:1E:DE:FE:5B:C9:BC:BF:37:7C:8E:53:B8:E3
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/f6461d02-97d6-3c8d-bed3-cbc446bffce2.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/4d2714ea-5618-446b-8e12-7743856af6e6.crl

            X509v3 Authority Key Identifier: 
                keyid:52:62:7A:BD:AB:0D:51:ED:FF:6C:BA:7E:2E:37:25:6D:76:40:C3:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.67.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:71:7a:08:6d:e9:ce:f9:e5:26:6b:d4:8f:cd:c5:e8:5b:5d:
         79:d8:9d:d5:b1:6e:2d:9d:89:e2:ba:93:af:92:6c:25:59:6f:
         5b:65:52:26:09:be:40:d3:88:41:eb:ad:37:54:7c:16:13:3c:
         f8:3d:ba:4a:11:23:14:72:04:fb:b9:fb:ca:a7:8e:ae:88:ee:
         6f:1c:45:0e:35:7a:b1:d5:0a:fe:9d:e7:cb:87:d4:41:7d:2e:
         b4:38:c3:89:7c:50:91:30:24:a6:20:2a:55:aa:f0:ef:b2:63:
         c0:09:38:ab:d2:3b:b1:ad:81:87:ba:41:89:5e:d4:79:c7:dd:
         51:74:90:94:f1:17:a6:36:9d:5b:9a:bc:09:eb:77:a3:94:47:
         13:24:56:ba:26:03:00:87:c9:5b:4c:8a:a7:45:f7:a4:43:16:
         dc:0c:72:93:82:ee:33:c0:80:4b:37:cb:60:05:9d:86:1f:ec:
         0e:58:53:db:b6:2a:1e:65:6d:89:3f:3a:4b:74:00:15:d5:98:
         61:3b:02:4d:82:2e:e8:19:04:4d:56:7b:0a:61:ca:8c:df:ca:
         63:aa:45:48:de:21:b7:25:27:0a:98:cd:36:93:3b:5a:23:57:
         f3:d1:1e:e9:09:55:89:ea:07:35:5a:8b:38:82:11:d0:6b:14:
         eb:0f:c1:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkbW0AVpw8jir1OgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQyNzE0ZWEtNTYxOC00NDZiLThlMTItNzc0Mzg1NmFm
NmU2MB4XDTIzMDUxNTE4MjEwMVoXDTIzMDYyNzIzMDIzMVowLzEtMCsGA1UEAxMk
NDY3NzQ5MGItZmJiNC00ZmI2LWIzODUtNDcyZGQ4NTllNjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06ndOARGa/O4i8Xp/RLKITtUPTWbe95gJrAu
fZjX+nsR1b4fUH/3/YtG5xC5vu0Pj45+65mrzep4H97PemuW6+bMwIiU5yMRNfyh
c3PovE87Kg6BKT+rfCQtXxfKcJ7gWcPPCU2t8l0+s61PtlcILZxWVxH+/q1Hn8kj
ZDIu0XoO0ZKfyqyHntVb/IQK1zQl5gFG3+17jp9uA8dXLc4Ke9hbzGNzaaewspkw
QyPHDEdeqMnWIIrSdibyXPRDOfn/kI9BpnR41sXrpI1eNzakbCiokLsZSar4bthb
xKr21Ety7BGZPFt/PC5Df+owWleIlifuhhItxoIMCsHo2hKPzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOzBSVKoP/ge3v5byby/N3yOU7jjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZDI3
MTRlYS01NjE4LTQ0NmItOGUxMi03NzQzODU2YWY2ZTYvZjY0NjFkMDItOTdkNi0z
YzhkLWJlZDMtY2JjNDQ2YmZmY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGQyNzE0ZWEtNTYxOC00NDZiLThl
MTItNzc0Mzg1NmFmNmU2LzRkMjcxNGVhLTU2MTgtNDQ2Yi04ZTEyLTc3NDM4NTZh
ZjZlNi5jcmwwHwYDVR0jBBgwFoAUUmJ6vasNUe3/bLp+LjclbXZAwwswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZDI3MTRlYS01NjE4LTQ0NmItOGUxMi03NzQz
ODU2YWY2ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFx0NgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADtxeght6c755SZr1I/NxehbXXnYndWxbi2dieK6k6+SbCVZb1tlUiYJ
vkDTiEHrrTdUfBYTPPg9ukoRIxRyBPu5+8qnjq6I7m8cRQ41erHVCv6d58uH1EF9
LrQ4w4l8UJEwJKYgKlWq8O+yY8AJOKvSO7GtgYe6QYle1HnH3VF0kJTxF6Y2nVua
vAnrd6OURxMkVromAwCHyVtMiqdF96RDFtwMcpOC7jPAgEs3y2AFnYYf7A5YU9u2
Kh5lbYk/Okt0ABXVmGE7Ak2CLugZBE1WewphyozfymOqRUjeIbclJwqYzTaTO1oj
V/PRHukJVYnqBzVaiziCEdBrFOsPwb8=
-----END CERTIFICATE-----
Generated at Mon May 15 18:56:55 2023 by rpki-client on console-ams.rpki-client.org