Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/479384b1-d41c-3e4d-83f2-176a5be6410a.roa
File:                     479384b1-d41c-3e4d-83f2-176a5be6410a.roa (raw, json)
Hash identifier:          VuQv8r1TiUDeDbjzmRH3rTeTrHUQi6Yo+rAqVrq1xxI=
Subject key identifier:   A4:AD:B8:7C:46:B6:79:24:2A:3A:55:1B:5B:F6:15:95:E4:AD:5E:96
Certificate issuer:       /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial:       010D0C9F43285845AC88C6D2FBACBF045C6CB680
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/479384b1-d41c-3e4d-83f2-176a5be6410a.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     8987
IP address blocks:        68.71.236.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:c6:d2:fb:ac:bf:04:5c:6c:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=f7bcc970-f321-4dc6-8ecd-ce08d4dd42c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:a0:3e:f7:e9:3a:c8:73:31:b7:bb:6a:6a:
                    20:9a:89:47:05:4c:e2:66:2c:23:a9:3e:cc:5f:0e:
                    28:d4:d1:e2:36:e2:b2:c9:14:8e:22:d8:7d:f7:92:
                    f4:aa:2c:27:e6:00:c9:24:e1:66:1e:d6:79:ee:c0:
                    0a:2b:47:9f:14:1f:87:7d:e4:a3:32:19:f4:70:ea:
                    41:b3:eb:60:13:e2:3f:1d:30:a6:f3:6c:86:3d:9e:
                    f0:20:4f:09:29:9a:c6:c6:5a:48:a7:dd:a1:3f:2c:
                    52:cd:bf:f9:8c:5f:61:ac:b2:6d:8e:0f:23:f2:85:
                    ed:f3:82:9a:f8:8e:0b:87:57:bb:11:6b:eb:a9:5f:
                    50:c6:41:9a:37:72:6f:cf:85:51:c2:ef:e2:6a:4c:
                    2c:e0:f0:0e:08:7b:4d:cb:93:c0:c3:10:9c:a9:77:
                    d6:bf:db:02:db:77:22:e3:dc:81:a9:c1:7e:a6:e7:
                    40:26:9e:62:3b:56:56:22:4d:84:0e:f1:2d:81:11:
                    d2:02:7b:27:d7:28:69:f3:77:c8:c5:79:25:34:26:
                    dd:92:28:4e:b0:fb:e3:b0:45:1d:99:fc:8f:97:76:
                    2d:e0:3c:4c:3e:fe:26:6d:45:71:32:8a:35:6a:26:
                    84:7e:bf:61:ea:cb:c8:a9:84:9d:10:5e:db:0c:99:
                    0b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AD:B8:7C:46:B6:79:24:2A:3A:55:1B:5B:F6:15:95:E4:AD:5E:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/479384b1-d41c-3e4d-83f2-176a5be6410a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl

            X509v3 Authority Key Identifier:
                keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.71.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:a0:02:19:a3:af:0c:02:7b:25:8a:f0:1a:35:93:63:f0:38:
         a3:a7:04:d8:a1:0d:13:23:c7:47:ab:cf:59:31:46:1b:a1:23:
         32:cd:90:75:6b:95:af:60:7b:ee:f9:64:3d:4c:4f:35:8e:cd:
         3c:c1:ba:a8:45:68:cb:c5:28:0e:30:f8:6e:f9:81:db:a6:99:
         a8:38:36:6d:08:4d:d7:fc:87:44:f5:9b:7e:b7:91:97:ad:c6:
         22:bb:2c:9e:82:c0:c9:ba:46:22:76:09:31:ad:b0:cd:fb:af:
         43:1d:58:88:5d:5d:46:75:fb:9d:23:62:31:8a:b6:c4:4d:14:
         1d:e9:01:8d:98:34:a5:eb:7e:75:24:f8:db:de:68:8d:1d:77:
         2c:44:73:b1:f5:4d:16:98:e0:75:6d:6f:46:3e:8f:f3:f0:56:
         58:24:a2:e5:c9:11:8e:72:09:a7:f1:ca:32:2a:2e:bb:d9:6d:
         2d:1e:d1:68:ff:59:0f:a8:8c:e9:07:d0:58:a2:cb:30:f2:7c:
         17:3c:2a:85:65:86:12:a5:45:28:5c:d8:0f:e9:e5:59:9e:df:
         e6:ea:9a:be:d3:c9:b3:32:90:37:e8:3d:46:c9:44:6f:75:53:
         7c:a5:ed:a6:fe:7e:82:4e:53:dc:45:b5:31:b6:1c:95:5b:03:
         c2:e0:dd:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiMbS+6y/BFxstoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh
YmRlMB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
ZjdiY2M5NzAtZjMyMS00ZGM2LThlY2QtY2UwOGQ0ZGQ0MmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRagPvfpOshzMbe7amogmolHBUziZiwjqT7M
Xw4o1NHiNuKyyRSOIth995L0qiwn5gDJJOFmHtZ57sAKK0efFB+HfeSjMhn0cOpB
s+tgE+I/HTCm82yGPZ7wIE8JKZrGxlpIp92hPyxSzb/5jF9hrLJtjg8j8oXt84Ka
+I4Lh1e7EWvrqV9QxkGaN3Jvz4VRwu/iakws4PAOCHtNy5PAwxCcqXfWv9sC23ci
49yBqcF+pudAJp5iO1ZWIk2EDvEtgRHSAnsn1yhp83fIxXklNCbdkihOsPvjsEUd
mfyPl3Yt4DxMPv4mbUVxMoo1aiaEfr9h6svIqYSdEF7bDJkLFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKStuHxGtnkkKjpVG1v2FZXkrV6WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk
YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvNDc5Mzg0YjEtZDQxYy0z
ZTRkLTgzZjItMTc2YTViZTY0MTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0
YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4
YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl
NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREfsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCgAhmjrwwCeyWK8Bo1k2PwOKOnBNihDRMjx0erz1kxRhuhIzLNkHVr
la9ge+75ZD1MTzWOzTzBuqhFaMvFKA4w+G75gdummag4Nm0ITdf8h0T1m363kZet
xiK7LJ6CwMm6RiJ2CTGtsM37r0MdWIhdXUZ1+50jYjGKtsRNFB3pAY2YNKXrfnUk
+NveaI0ddyxEc7H1TRaY4HVtb0Y+j/PwVlgkouXJEY5yCafxyjIqLrvZbS0e0Wj/
WQ+ojOkH0FiiyzDyfBc8KoVlhhKlRShc2A/p5Vme3+bqmr7TybMykDfoPUbJRG91
U3yl7ab+foJOU9xFtTG2HJVbA8Lg3ZI=
-----END CERTIFICATE-----
Generated at Wed May 8 17:57:49 2024 by rpki-client on console-ams.rpki-client.org