Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/4622086b-484d-3a11-990d-8d78572ad2fa.roa
File:                     4622086b-484d-3a11-990d-8d78572ad2fa.roa (raw, json)
Hash identifier:          zZKD/08a9c8Z3GM0sPr/c2JumjzrbrmjvoS5Lkbb7F4=
Subject key identifier:   E3:80:31:F9:16:83:C2:F0:3F:35:F1:7C:64:E7:BC:7C:5D:36:F0:5F
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F432858458F3879659B3E99C10ADEF400
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/4622086b-484d-3a11-990d-8d78572ad2fa.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     109
IP address blocks:        173.36.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:79:65:9b:3e:99:c1:0a:de:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=ceaa68dc-081b-4a27-a7f8-b36515987974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cc:98:ed:bf:97:22:5b:2f:bc:ab:77:18:f6:
                    a6:f0:71:26:c1:2b:d7:2b:3e:06:2b:65:95:9b:d0:
                    0d:b9:cc:38:e4:a4:00:9c:70:ed:f9:02:5b:59:a5:
                    ad:cb:25:03:8f:44:3a:6e:b8:a3:a7:2d:83:ad:f9:
                    d6:cd:df:39:37:f5:16:24:d4:e9:28:39:c4:71:63:
                    27:10:f0:dd:74:09:d1:ad:10:f6:ab:97:34:e7:b4:
                    64:44:16:d2:f4:ca:23:8f:af:af:97:04:5e:d3:5e:
                    89:41:0d:e3:14:1f:ff:1b:c1:63:43:78:90:43:c8:
                    3b:02:02:87:ac:d1:e3:ca:b3:03:78:2c:e0:1c:98:
                    6e:bb:a8:f8:84:0f:62:90:8f:1a:68:23:76:33:ca:
                    e7:d1:b7:b7:0e:d0:a6:4d:7d:ac:59:26:c5:7d:89:
                    ff:1a:53:0c:9b:bf:54:7f:cd:9e:b2:d5:74:a7:ce:
                    e9:60:67:04:35:be:7c:9a:b3:58:af:26:64:42:06:
                    00:a7:93:a9:c7:9c:5d:dc:d3:25:e3:72:3a:1e:2c:
                    86:b0:36:87:80:c0:e7:96:86:14:45:10:83:3f:c8:
                    41:e5:b5:51:d7:b9:9f:17:dc:49:92:8d:09:76:1c:
                    67:aa:e4:78:39:50:b3:aa:1e:b2:e0:6f:1d:c5:62:
                    69:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:80:31:F9:16:83:C2:F0:3F:35:F1:7C:64:E7:BC:7C:5D:36:F0:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/4622086b-484d-3a11-990d-8d78572ad2fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.36.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:18:b0:85:71:05:bf:50:6a:41:4a:a3:13:f1:36:d9:68:58:
         a9:f3:88:be:eb:17:c8:0d:b9:ff:c9:92:ce:89:cd:80:02:fb:
         2a:00:07:48:20:d1:22:4f:6d:0f:e6:e9:d5:45:80:ad:37:19:
         66:9b:44:0f:73:31:11:ac:77:06:f6:d6:64:55:1e:69:54:71:
         42:60:05:4a:25:06:ba:2f:ce:9a:48:37:41:69:bf:3b:45:8e:
         3d:20:2c:82:24:4f:81:15:4e:3f:f5:9e:51:54:bd:c2:37:bf:
         32:d3:51:d5:51:b6:0a:68:23:88:36:a5:81:55:96:ea:b3:31:
         a7:b8:79:fe:25:cd:fa:e8:a8:91:da:f3:3a:f9:1f:fb:46:ee:
         1e:3c:f9:b8:1f:a7:12:1a:d5:5d:54:ea:23:13:62:15:77:60:
         27:40:d4:ba:36:06:ec:c0:e4:93:ff:88:0c:80:de:c1:7c:fa:
         ac:0a:4e:6e:10:a3:20:b9:d8:f7:10:18:da:d2:99:ff:c1:14:
         1b:e7:1f:f3:1a:5b:fc:66:47:97:05:49:9b:26:eb:29:6b:fd:
         28:ce:91:d9:d4:d4:f1:9b:93:e9:82:e5:08:71:73:d1:aa:0d:
         7f:db:46:e3:81:33:ca:5a:a3:ed:9b:e6:5e:12:1a:56:6a:58:
         81:75:0e:1a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEWPOHllmz6ZwQre9AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy
MDZiMB4XDTI0MDQxNjAxMDAyNloXDTI0MDcxNTAxMDAyNlowLzEtMCsGA1UEAxMk
Y2VhYTY4ZGMtMDgxYi00YTI3LWE3ZjgtYjM2NTE1OTg3OTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08yY7b+XIlsvvKt3GPam8HEmwSvXKz4GK2WV
m9ANucw45KQAnHDt+QJbWaWtyyUDj0Q6brijpy2DrfnWzd85N/UWJNTpKDnEcWMn
EPDddAnRrRD2q5c057RkRBbS9Mojj6+vlwRe016JQQ3jFB//G8FjQ3iQQ8g7AgKH
rNHjyrMDeCzgHJhuu6j4hA9ikI8aaCN2M8rn0be3DtCmTX2sWSbFfYn/GlMMm79U
f82estV0p87pYGcENb58mrNYryZkQgYAp5Opx5xd3NMl43I6HiyGsDaHgMDnloYU
RRCDP8hB5bVR17mfF9xJko0JdhxnquR4OVCzqh6y4G8dxWJpIwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOOAMfkWg8LwPzXxfGTnvHxdNvBfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5
NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvNDYyMjA4NmItNDg0ZC0z
YTExLTk5MGQtOGQ3ODU3MmFkMmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1
M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy
MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0
NjU1MjIwNmIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCrSQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACRiwhXEFv1BqQUqjE/E22WhYqfOIvusXyA25/8mSzonNgAL7KgAHSCDR
Ik9tD+bp1UWArTcZZptED3MxEax3BvbWZFUeaVRxQmAFSiUGui/Omkg3QWm/O0WO
PSAsgiRPgRVOP/WeUVS9wje/MtNR1VG2CmgjiDalgVWW6rMxp7h5/iXN+uiokdrz
Ovkf+0buHjz5uB+nEhrVXVTqIxNiFXdgJ0DUujYG7MDkk/+IDIDewXz6rApObhCj
ILnY9xAY2tKZ/8EUG+cf8xpb/GZHlwVJmybrKWv9KM6R2dTU8ZuT6YLlCHFz0aoN
f9tG44Ezylqj7ZvmXhIaVmpYgXUOGg==
-----END CERTIFICATE-----
Generated at Sun May 19 22:12:43 2024 by rpki-client on console-fra.rpki-client.org