Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/9c13e2d7-778a-3379-b087-3d35d74d8291.roa
File:                     9c13e2d7-778a-3379-b087-3d35d74d8291.roa (raw, json)
Hash identifier:          kjNpIncTNalWaM0yWwa1HO6xubpnDowvdkcN+5le79Y=
Subject key identifier:   D8:EC:3C:77:18:9A:42:68:B8:C9:C7:D5:BD:A3:B3:D2:CA:6F:8C:E3
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F43285845AC8A172D375946313C04B580
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/9c13e2d7-778a-3379-b087-3d35d74d8291.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     2013
IP address blocks:        192.80.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:8a:17:2d:37:59:46:31:3c:04:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=3daa7ae1-378a-4a63-bf1e-f1e8f023a08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cb:40:20:39:fc:cf:41:95:36:23:a7:7c:b7:
                    09:bd:54:64:79:1c:3b:cc:9d:b4:2a:19:cc:39:2b:
                    2c:be:ec:3b:6f:2e:2c:b7:35:df:6b:b4:22:f7:db:
                    b3:5e:3f:99:aa:0f:fd:a6:8a:47:ab:a9:be:04:bd:
                    13:eb:93:90:1a:7e:ed:57:c6:ca:07:6c:ec:fb:bb:
                    f8:85:6e:20:e2:9d:dc:75:bf:fd:8a:86:88:63:bf:
                    fb:3c:06:92:da:35:24:83:56:78:2a:59:4b:a1:1b:
                    4b:70:1e:ff:78:7c:30:76:fc:ad:57:99:de:59:37:
                    ab:10:7c:60:24:f8:cc:47:97:c2:7d:7d:29:05:ee:
                    e3:77:29:85:31:65:3d:34:30:11:80:1d:32:54:ea:
                    bd:0e:7d:74:d4:83:a3:c9:f8:db:1c:77:90:eb:a4:
                    6f:16:83:7f:1c:47:d4:00:9a:c2:68:ee:c2:ea:20:
                    c3:27:a6:0f:48:14:8b:62:47:73:3b:52:1a:23:44:
                    6f:de:81:12:d2:a2:7a:c8:65:b8:88:50:61:81:a5:
                    f6:c3:9f:99:93:8d:ef:55:84:81:7e:be:46:02:b0:
                    9e:d8:e4:2b:6e:bf:fd:39:e3:5b:95:9d:73:82:28:
                    34:e6:76:5d:81:98:f5:96:91:af:24:6a:3f:5f:45:
                    0b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EC:3C:77:18:9A:42:68:B8:C9:C7:D5:BD:A3:B3:D2:CA:6F:8C:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/9c13e2d7-778a-3379-b087-3d35d74d8291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:2c:df:cb:e6:60:e2:2a:8c:a0:57:5e:69:d2:06:bf:8f:d3:
         f8:67:72:63:01:c1:8d:0b:64:14:56:2e:9c:d6:20:51:fb:ca:
         ef:85:24:ca:03:a5:d1:fb:9b:c2:70:9e:36:ef:36:6b:89:19:
         74:e6:55:36:9c:c1:b2:46:45:8a:d3:b0:39:26:7a:12:5e:e2:
         6b:76:8c:c5:39:c8:c5:1a:ee:27:d6:37:10:d9:1d:5f:5b:97:
         c5:83:bf:79:34:9b:64:db:e8:e7:1a:77:7a:32:c0:fc:f4:bc:
         82:3c:72:cd:d4:fa:e4:f7:d7:16:03:d7:98:a2:03:a9:79:38:
         c1:19:ce:b9:56:54:94:8d:61:56:91:69:d4:11:54:3c:db:02:
         7c:25:fe:13:41:eb:18:c2:a5:4b:17:9f:7e:98:7f:93:cb:9b:
         c6:0e:b3:42:18:0e:03:52:43:b1:31:8d:e7:ee:3b:86:e6:b5:
         79:f1:5b:67:62:ae:2d:d4:04:66:7b:59:4d:db:32:67:f9:6a:
         5c:c1:77:0d:f1:21:8c:7e:f3:ff:c9:44:b7:1a:cd:ad:aa:70:
         02:3a:4a:71:c4:2b:3f:09:e5:1f:e7:4c:ff:b4:11:0d:c8:ee:
         78:7f:79:9a:f2:8d:af:d7:1c:bd:d3:3e:4e:74:05:93:07:07:
         26:db:d8:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsihctN1lGMTwEtYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzQ3Y2UtOWE0ZC00NzBjLWIzYTEtZGZjMzZmOWM3
OGRkMB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
M2RhYTdhZTEtMzc4YS00YTYzLWJmMWUtZjFlOGYwMjNhMDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMtAIDn8z0GVNiOnfLcJvVRkeRw7zJ20KhnM
OSssvuw7by4stzXfa7Qi99uzXj+Zqg/9popHq6m+BL0T65OQGn7tV8bKB2zs+7v4
hW4g4p3cdb/9ioaIY7/7PAaS2jUkg1Z4KllLoRtLcB7/eHwwdvytV5neWTerEHxg
JPjMR5fCfX0pBe7jdymFMWU9NDARgB0yVOq9Dn101IOjyfjbHHeQ66RvFoN/HEfU
AJrCaO7C6iDDJ6YPSBSLYkdzO1IaI0Rv3oES0qJ6yGW4iFBhgaX2w5+Zk43vVYSB
fr5GArCe2OQrbr/9OeNblZ1zgig05nZdgZj1lpGvJGo/X0ULgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNjsPHcYmkJouMnH1b2js9LKb4zjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmE3
NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMzNmY5Yzc4ZGQvOWMxM2UyZDctNzc4YS0z
Mzc5LWIwODctM2QzNWQ3NGQ4MjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JhNzQ3Y2UtOWE0ZC00NzBjLWIz
YTEtZGZjMzZmOWM3OGRkLzdiYTc0N2NlLTlhNGQtNDcwYy1iM2ExLWRmYzM2Zjlj
NzhkZC5jcmwwHwYDVR0jBBgwFoAU2cENbez66cRVgdY1AR7AbdZwSqowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83YmE3NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMz
NmY5Yzc4ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFDzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUs38vmYOIqjKBXXmnSBr+P0/hncmMBwY0LZBRWLpzWIFH7yu+FJMoD
pdH7m8JwnjbvNmuJGXTmVTacwbJGRYrTsDkmehJe4mt2jMU5yMUa7ifWNxDZHV9b
l8WDv3k0m2Tb6Ocad3oywPz0vII8cs3U+uT31xYD15iiA6l5OMEZzrlWVJSNYVaR
adQRVDzbAnwl/hNB6xjCpUsXn36Yf5PLm8YOs0IYDgNSQ7ExjefuO4bmtXnxW2di
ri3UBGZ7WU3bMmf5alzBdw3xIYx+8//JRLcaza2qcAI6SnHEKz8J5R/nTP+0EQ3I
7nh/eZryja/XHL3TPk50BZMHBybb2D4=
-----END CERTIFICATE-----
Generated at Sun May 19 01:57:07 2024 by rpki-client on console-ams.rpki-client.org