Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e1e79ce3-3afa-3dd4-857c-50c7ccee5572.roa
File:                     e1e79ce3-3afa-3dd4-857c-50c7ccee5572.roa (raw, json)
Hash identifier:          7BhbpVpNyvDy4NU/b13cQtskHbmkZqZLRQBzb7iHPUA=
Subject key identifier:   71:C7:A2:27:A4:14:CC:FD:6B:D0:42:54:4E:1E:49:E5:06:BE:7B:BA
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F4328584548082020167A3A3EEA7D3D80
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e1e79ce3-3afa-3dd4-857c-50c7ccee5572.roa
Signing time:             Thu 21 Mar 2024 13:00:33 +0000
ROA not before:           Thu 21 Mar 2024 13:00:33 +0000
ROA not after:            Wed 19 Jun 2024 13:00:33 +0000
asID:                     22885
IP address blocks:        199.0.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:08:20:20:16:7a:3a:3e:ea:7d:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Mar 21 13:00:33 2024 GMT
            Not After : Jun 19 13:00:33 2024 GMT
        Subject: CN=ed6ff22d-b63e-4b66-abae-25b9e404ab2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f1:82:cb:83:f5:b5:ea:24:ca:10:a6:6f:ac:
                    dc:5c:e8:4c:d3:b4:e7:4c:c4:1b:5a:cc:f6:bf:73:
                    13:30:ac:6b:c5:c1:68:2a:05:ee:a6:11:15:25:9d:
                    ad:bc:28:23:cb:03:3a:f7:27:2b:de:db:e9:cd:f6:
                    c1:05:df:ec:fe:52:e4:02:f5:12:74:24:92:e8:fa:
                    96:e7:ca:1f:5d:c5:ad:e7:9f:f8:e8:77:71:f4:70:
                    0c:11:1e:00:59:b2:59:19:d4:89:59:78:7a:48:7d:
                    66:d6:4e:66:78:70:cd:43:56:42:e3:a5:35:76:77:
                    80:4c:03:e7:43:f8:f0:cd:63:6b:0a:54:36:bf:e5:
                    71:b5:b1:8e:5b:ad:e0:6b:16:12:db:a4:d8:b8:80:
                    c8:83:4e:0e:78:ed:b7:a1:c2:c6:eb:c0:89:b9:6e:
                    0d:a5:70:2b:19:12:0e:0a:56:71:1c:66:72:96:cf:
                    3a:ed:84:91:b6:70:f1:9d:01:44:1b:6b:07:84:80:
                    44:88:a6:17:69:02:85:77:30:e2:7a:1b:cd:1b:2d:
                    68:67:c8:e0:4d:9c:3c:14:bf:e4:6f:07:f0:c2:58:
                    f8:da:13:d3:e7:18:a5:7c:d9:af:59:f1:7f:dd:7e:
                    45:5b:3e:3c:0d:f5:a4:88:59:82:1f:82:5f:9e:c1:
                    62:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C7:A2:27:A4:14:CC:FD:6B:D0:42:54:4E:1E:49:E5:06:BE:7B:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e1e79ce3-3afa-3dd4-857c-50c7ccee5572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.0.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:30:1d:b2:bb:90:2f:2f:2e:2a:38:b8:0f:93:1e:4f:55:13:
         65:a3:26:60:74:6a:38:70:2f:d6:10:63:37:9b:ac:bb:f1:54:
         fd:1a:fa:d2:c1:ae:1a:5d:3a:d1:4b:84:fb:2f:41:fb:ba:eb:
         b5:1f:1f:a9:db:93:fc:19:d5:26:32:33:3e:5d:d5:6d:d1:8a:
         f6:30:57:00:f4:04:99:7a:7a:7c:e7:9c:fe:02:6d:d3:c1:c8:
         4d:8d:2e:c4:ad:ad:19:f3:f9:48:13:f5:ab:4b:e1:e6:21:4e:
         a4:32:c8:b7:15:4b:c0:dd:5b:24:9e:8f:e0:5d:63:76:5a:8e:
         c4:94:a9:8c:a4:a0:22:6d:cb:fb:97:8c:a1:8f:07:62:52:52:
         bc:a0:a5:c9:61:15:95:22:c3:6d:f8:86:99:88:bc:b5:35:1c:
         6f:be:ae:ae:a2:8e:49:f3:e7:6a:7f:b9:25:7a:0d:35:40:30:
         ae:33:a3:eb:2b:db:4c:50:87:e3:c5:a0:83:dd:d4:33:28:37:
         47:fa:33:94:54:89:d1:3e:bb:d1:c8:99:c3:12:42:05:3e:e1:
         89:03:0c:49:62:19:74:25:db:26:7a:a2:2a:cf:11:8d:5f:d0:
         75:44:9d:7f:f6:3b:b0:6d:38:54:26:ac:b1:41:b0:5d:b9:49:
         81:47:33:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVICCAgFno6Pup9PYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy
Y2MyMB4XDTI0MDMyMTEzMDAzM1oXDTI0MDYxOTEzMDAzM1owLzEtMCsGA1UEAxMk
ZWQ2ZmYyMmQtYjYzZS00YjY2LWFiYWUtMjViOWU0MDRhYjJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/GCy4P1teokyhCmb6zcXOhM07TnTMQbWsz2
v3MTMKxrxcFoKgXuphEVJZ2tvCgjywM69ycr3tvpzfbBBd/s/lLkAvUSdCSS6PqW
58ofXcWt55/46Hdx9HAMER4AWbJZGdSJWXh6SH1m1k5meHDNQ1ZC46U1dneATAPn
Q/jwzWNrClQ2v+VxtbGOW63gaxYS26TYuIDIg04OeO23ocLG68CJuW4NpXArGRIO
ClZxHGZyls867YSRtnDxnQFEG2sHhIBEiKYXaQKFdzDiehvNGy1oZ8jgTZw8FL/k
bwfwwlj42hPT5xilfNmvWfF/3X5FWz48DfWkiFmCH4JfnsFiSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHHHoiekFMz9a9BCVE4eSeUGvnu6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw
YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZTFlNzljZTMtM2FmYS0z
ZGQ0LTg1N2MtNTBjN2NjZWU1NTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz
MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1
MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0
NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxwC4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIUwHbK7kC8vLio4uA+THk9VE2WjJmB0ajhwL9YQYzebrLvxVP0a+tLB
rhpdOtFLhPsvQfu667UfH6nbk/wZ1SYyMz5d1W3RivYwVwD0BJl6enznnP4CbdPB
yE2NLsStrRnz+UgT9atL4eYhTqQyyLcVS8DdWySej+BdY3ZajsSUqYykoCJty/uX
jKGPB2JSUrygpclhFZUiw234hpmIvLU1HG++rq6ijknz52p/uSV6DTVAMK4zo+sr
20xQh+PFoIPd1DMoN0f6M5RUidE+u9HImcMSQgU+4YkDDEliGXQl2yZ6oirPEY1f
0HVEnX/2O7BtOFQmrLFBsF25SYFHM4I=
-----END CERTIFICATE-----
Generated at Sat May 4 02:07:56 2024 by rpki-client on console-ams.rpki-client.org