Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa
File:                     37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa (raw, json)
Hash identifier:          csW+YUSck8ZZLUCprtB7nYKRK0r/IZqWZop3FBpoPpw=
Subject key identifier:   51:3D:2D:EE:8A:BD:31:93:C6:7A:BA:93:7B:F3:02:04:23:15:82:93
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285845A2C3458A5811D507C7022C80
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa
Signing time:             Tue 23 Apr 2024 01:00:25 +0000
ROA not before:           Tue 23 Apr 2024 01:00:25 +0000
ROA not after:            Mon 22 Jul 2024 01:00:25 +0000
asID:                     26744
IP address blocks:        68.170.248.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:c3:45:8a:58:11:d5:07:c7:02:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Apr 23 01:00:25 2024 GMT
            Not After : Jul 22 01:00:25 2024 GMT
        Subject: CN=2c7e186c-76b0-4400-ba2c-7971a1f2f797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6b:3e:71:6c:a8:9e:03:66:bc:39:67:32:a7:
                    30:c6:b8:6d:9b:0b:1b:cb:c9:0d:99:c5:16:c3:cb:
                    8c:0d:1f:20:a8:2e:6e:7a:74:9d:3f:d5:34:a5:6f:
                    d3:04:c5:bd:d8:87:fe:75:04:43:2f:08:19:37:51:
                    f8:46:26:c2:d7:31:68:4a:d7:f0:5a:1c:f1:59:ba:
                    d8:00:00:75:5c:65:cb:a1:92:14:ef:0f:ce:4e:35:
                    07:10:0f:99:52:e4:eb:7d:39:50:37:6f:f2:df:63:
                    56:67:b2:67:b8:6d:74:9f:2c:a6:27:83:96:d6:05:
                    f4:fe:53:0c:b0:94:12:ae:e2:cc:d9:78:65:77:c9:
                    7d:4d:87:36:e3:4e:56:66:b8:c8:da:48:b8:f6:21:
                    3a:a6:ee:dc:c9:52:bb:e5:73:82:42:27:5d:96:3b:
                    09:9d:d3:46:54:b4:71:77:a0:b6:41:87:54:67:f9:
                    2e:84:1b:1b:59:8a:74:d1:40:88:7c:35:dd:51:d0:
                    c8:01:aa:09:d4:e8:cf:82:69:93:03:60:2b:d4:4b:
                    06:76:6a:f5:db:f7:1f:74:23:e0:b3:1b:b0:23:7a:
                    02:9c:ce:83:d6:bf:47:2b:26:f0:9a:84:60:c5:b8:
                    10:d3:ae:54:4f:9a:f7:70:cd:37:48:8e:88:0b:b0:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3D:2D:EE:8A:BD:31:93:C6:7A:BA:93:7B:F3:02:04:23:15:82:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:44:e0:9a:b1:c8:25:26:69:b1:32:5f:56:e8:ad:bb:48:7d:
         bf:56:84:ea:5e:be:5a:09:ef:c9:de:cf:5f:a1:9c:d5:e0:5e:
         9c:ba:d8:c3:ba:d7:21:a2:dc:1d:86:cf:4f:3a:e7:5c:a0:bd:
         de:6c:89:60:d3:e1:46:4a:d7:ba:c3:33:47:1e:b2:91:46:63:
         88:65:ed:1a:a8:e3:17:80:f0:90:37:d1:9b:68:60:42:b1:45:
         c4:06:61:b7:68:3a:06:bf:84:01:ea:3a:d4:f8:49:f2:12:f4:
         6e:92:e7:31:05:c0:01:ea:65:44:05:59:79:30:f8:a8:30:d7:
         48:21:11:47:8d:43:e6:75:42:0c:e8:06:80:67:eb:80:91:95:
         7f:1e:3c:3c:5f:79:92:8b:fe:bb:f7:cd:0f:c8:d5:59:38:3e:
         51:2c:65:db:20:2a:be:2c:ae:60:9a:d4:08:34:ad:6c:45:44:
         fa:78:17:5b:14:61:46:a6:6a:9a:b2:df:da:63:08:8b:22:52:
         3c:28:f7:df:82:91:9d:66:11:98:f7:61:0b:d2:cd:23:67:52:
         34:8c:35:62:66:0d:82:0c:66:b7:16:f6:8a:be:0f:66:bb:56:
         a4:a4:39:7d:46:a0:bf:53:49:6e:6a:69:ff:f6:eb:09:50:b5:
         18:37:db:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWiw0WKWBHVB8cCLIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI0MDQyMzAxMDAyNVoXDTI0MDcyMjAxMDAyNVowLzEtMCsGA1UEAxMk
MmM3ZTE4NmMtNzZiMC00NDAwLWJhMmMtNzk3MWExZjJmNzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWs+cWyongNmvDlnMqcwxrhtmwsby8kNmcUW
w8uMDR8gqC5uenSdP9U0pW/TBMW92If+dQRDLwgZN1H4RibC1zFoStfwWhzxWbrY
AAB1XGXLoZIU7w/OTjUHEA+ZUuTrfTlQN2/y32NWZ7JnuG10nyymJ4OW1gX0/lMM
sJQSruLM2Xhld8l9TYc2405WZrjI2ki49iE6pu7cyVK75XOCQiddljsJndNGVLRx
d6C2QYdUZ/kuhBsbWYp00UCIfDXdUdDIAaoJ1OjPgmmTA2Ar1EsGdmr12/cfdCPg
sxuwI3oCnM6D1r9HKybwmoRgxbgQ065UT5r3cM03SI6IC7BAdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFE9Le6KvTGTxnq6k3vzAgQjFYKTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMzdjMjhjZDctMjVmNC0z
MzczLWIyZjktOTI0YjNmYTVmMTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRKr4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK1E4JqxyCUmabEyX1borbtIfb9WhOpevloJ78nez1+hnNXgXpy62MO6
1yGi3B2Gz08651ygvd5siWDT4UZK17rDM0cespFGY4hl7Rqo4xeA8JA30ZtoYEKx
RcQGYbdoOga/hAHqOtT4SfIS9G6S5zEFwAHqZUQFWXkw+Kgw10ghEUeNQ+Z1Qgzo
BoBn64CRlX8ePDxfeZKL/rv3zQ/I1Vk4PlEsZdsgKr4srmCa1Ag0rWxFRPp4F1sU
YUamapqy39pjCIsiUjwo99+CkZ1mEZj3YQvSzSNnUjSMNWJmDYIMZrcW9oq+D2a7
VqSkOX1GoL9TSW5qaf/26wlQtRg3234=
-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:16 2024 by rpki-client on console-ams.rpki-client.org