Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/f66ca858-b67d-347b-bd2d-d9a0ad73394a.roa
File:                     f66ca858-b67d-347b-bd2d-d9a0ad73394a.roa (raw, json)
Hash identifier:          yj5wpAo3JRO8JtmjgeMqf5oNCxAFGkcEVDkUpCjlw+g=
Subject key identifier:   C7:CB:34:C7:FB:34:FE:25:2E:66:41:23:37:CE:99:2F:A0:43:F6:9D
Certificate issuer:       /CN=1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c
Certificate serial:       010D0C9F43285845CEA659C92E7F452077537900
Authority key identifier: 8D:29:3D:2E:77:CE:0D:E4:95:7E:AB:B8:73:87:1E:31:C0:32:FC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/f66ca858-b67d-347b-bd2d-d9a0ad73394a.roa
Signing time:             Wed 08 May 2024 18:17:46 +0000
ROA not before:           Wed 08 May 2024 18:17:46 +0000
ROA not after:            Tue 06 Aug 2024 18:17:46 +0000
asID:                     852
IP address blocks:        198.162.68.0/23 maxlen: 24
                          199.175.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:a6:59:c9:2e:7f:45:20:77:53:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c
        Validity
            Not Before: May  8 18:17:46 2024 GMT
            Not After : Aug  6 18:17:46 2024 GMT
        Subject: CN=166c75e4-82c2-4100-88ff-19a7472d6f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:37:22:a0:48:29:23:06:15:f5:ef:d4:49:f0:
                    5b:32:f3:14:3c:b3:d0:85:f3:03:98:0e:22:fd:54:
                    03:d7:9b:6d:be:4f:e1:25:7e:c1:49:93:81:5d:2a:
                    37:87:95:3e:fd:5b:85:76:ce:46:18:b4:3f:6a:ae:
                    87:68:fc:0f:6f:46:e9:68:74:80:72:94:9d:62:ef:
                    da:ff:45:61:ac:ab:73:a5:a3:49:a2:ed:2e:51:f6:
                    b1:a0:23:de:ef:51:e8:ca:29:03:78:c6:28:f0:ca:
                    51:c7:f3:0e:72:88:f2:f8:76:bb:19:98:39:0c:bd:
                    d4:a5:75:93:42:0c:0a:57:b6:be:92:e1:64:ad:e6:
                    0c:62:52:4e:43:e7:31:0e:b1:98:c8:59:07:c0:dc:
                    57:cc:70:34:d0:d2:c0:14:75:4b:77:f8:7e:d1:ef:
                    d9:bf:70:5f:a8:74:c4:0f:fb:a3:e7:c5:fa:8b:14:
                    f2:be:f3:5d:8a:44:f1:69:fe:5e:d8:c8:0c:9a:dc:
                    8e:16:77:d1:2e:4c:2b:0a:11:d1:08:53:32:1d:3a:
                    f6:cc:ba:11:e6:33:ec:3b:ef:19:dd:af:f7:96:1d:
                    ed:65:1d:38:73:d5:62:19:ae:2a:dd:7e:e8:c8:e1:
                    be:4c:8f:f9:c1:c7:58:be:1e:98:68:9d:08:5f:d0:
                    d1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CB:34:C7:FB:34:FE:25:2E:66:41:23:37:CE:99:2F:A0:43:F6:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/f66ca858-b67d-347b-bd2d-d9a0ad73394a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.crl

            X509v3 Authority Key Identifier:
                keyid:8D:29:3D:2E:77:CE:0D:E4:95:7E:AB:B8:73:87:1E:31:C0:32:FC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.162.68.0/23
                  199.175.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ce:d4:b1:fa:8d:db:dd:54:ec:fc:50:2e:3b:9f:23:27:79:
         0f:3b:3b:8f:c0:fe:f0:89:b3:06:98:0f:b8:ba:b5:f6:14:43:
         f7:5e:77:34:b9:b4:12:59:bc:5c:f3:85:ee:fd:61:70:58:4a:
         52:ec:d5:88:02:a9:81:81:3e:49:1a:7e:6b:38:f2:10:cc:d8:
         48:45:e5:ef:87:33:71:d8:ca:bd:bc:fa:3a:a0:b1:76:3b:49:
         b2:0a:13:45:17:30:d8:61:d0:9b:70:b4:41:5a:4d:a3:5c:ce:
         23:35:9b:c8:ad:4a:a6:46:d6:bd:8d:d6:90:87:95:94:ff:d6:
         07:64:8b:82:48:36:ea:d0:fe:19:25:77:5c:1b:5b:e8:e6:37:
         cb:c8:58:3d:f3:e4:a3:e8:c5:0b:19:94:9b:c9:cb:f2:7b:8a:
         9c:f8:1d:72:66:95:f6:2d:e7:0c:c9:2d:fa:cf:ba:7a:fe:24:
         93:cb:79:26:5f:9d:76:2b:cc:f5:fe:52:45:29:92:e0:f1:3f:
         57:49:dd:a6:05:41:91:ca:ab:c1:0f:dd:42:70:de:b4:98:d5:
         1f:4c:ca:65:d7:24:32:6a:2b:c2:9c:92:28:d3:8e:b4:76:b4:
         be:9e:9e:82:48:3b:34:13:df:0f:d0:14:35:34:cc:19:80:8e:
         9b:61:75:bf
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEXOplnJLn9FIHdTeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQwZTY4ZTUtMGMwZS00ZmYyLTgyOWYtNmY1Y2RjNzdh
MzljMB4XDTI0MDUwODE4MTc0NloXDTI0MDgwNjE4MTc0NlowLzEtMCsGA1UEAxMk
MTY2Yzc1ZTQtODJjMi00MTAwLTg4ZmYtMTlhNzQ3MmQ2ZjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zcioEgpIwYV9e/USfBbMvMUPLPQhfMDmA4i
/VQD15ttvk/hJX7BSZOBXSo3h5U+/VuFds5GGLQ/aq6HaPwPb0bpaHSAcpSdYu/a
/0VhrKtzpaNJou0uUfaxoCPe71HoyikDeMYo8MpRx/MOcojy+Ha7GZg5DL3UpXWT
QgwKV7a+kuFkreYMYlJOQ+cxDrGYyFkHwNxXzHA00NLAFHVLd/h+0e/Zv3BfqHTE
D/uj58X6ixTyvvNdikTxaf5e2MgMmtyOFnfRLkwrChHRCFMyHTr2zLoR5jPsO+8Z
3a/3lh3tZR04c9ViGa4q3X7oyOG+TI/5wcdYvh6YaJ0IX9DRmQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMfLNMf7NP4lLmZBIzfOmS+gQ/adMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDBl
NjhlNS0wYzBlLTRmZjItODI5Zi02ZjVjZGM3N2EzOWMvZjY2Y2E4NTgtYjY3ZC0z
NDdiLWJkMmQtZDlhMGFkNzMzOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQwZTY4ZTUtMGMwZS00ZmYyLTgy
OWYtNmY1Y2RjNzdhMzljLzFkMGU2OGU1LTBjMGUtNGZmMi04MjlmLTZmNWNkYzc3
YTM5Yy5jcmwwHwYDVR0jBBgwFoAUjSk9LnfODeSVfqu4c4ceMcAy/MkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDBlNjhlNS0wYzBlLTRmZjItODI5Zi02ZjVj
ZGM3N2EzOWMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBxqJEAwQF
x69AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEPO1LH6jdvdVOz8UC47nyMneQ87O4/A/vCJswaYD7i6tfYU
Q/dedzS5tBJZvFzzhe79YXBYSlLs1YgCqYGBPkkafms48hDM2EhF5e+HM3HYyr28
+jqgsXY7SbIKE0UXMNhh0JtwtEFaTaNcziM1m8itSqZG1r2N1pCHlZT/1gdki4JI
NurQ/hkld1wbW+jmN8vIWD3z5KPoxQsZlJvJy/J7ipz4HXJmlfYt5wzJLfrPunr+
JJPLeSZfnXYrzPX+UkUpkuDxP1dJ3aYFQZHKq8EP3UJw3rSY1R9MymXXJDJqK8Kc
kijTjrR2tL6enoJIOzQT3w/QFDU0zBmAjpthdb8=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:45:40 2024 by rpki-client on console-fra.rpki-client.org