Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/5aaaeb9d-283c-36c1-8edf-be275994256c.roa
File:                     5aaaeb9d-283c-36c1-8edf-be275994256c.roa (raw, json)
Hash identifier:          VFcMHBGGrChvFi8VCrm+TuhwZCb8lGD1fwDNdiRlDew=
Subject key identifier:   DF:43:9B:8C:C2:32:12:85:42:E0:E6:99:AB:55:B4:68:12:AE:6D:1B
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DEF94A3F00692B325FE00
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/5aaaeb9d-283c-36c1-8edf-be275994256c.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        172.110.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:ef:94:a3:f0:06:92:b3:25:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=ffc9bd3f-0595-4aef-a9e5-822a9a5b1bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b3:30:ef:21:17:54:91:4c:4a:3c:5b:c2:50:
                    80:8c:73:c6:36:5e:81:b1:39:30:ac:1e:4d:a3:77:
                    f1:7d:32:70:52:1b:ff:95:56:f6:e3:0b:e9:54:3c:
                    f5:de:a4:d3:a8:ed:f9:02:c8:5e:60:da:e2:54:09:
                    29:df:ee:77:91:17:d5:7e:65:50:33:94:0d:f8:fd:
                    97:16:1b:91:a8:21:3d:f5:7a:93:81:a1:36:30:d2:
                    99:ba:3c:6a:7a:6d:08:78:1b:f3:8a:dc:00:7f:69:
                    ab:67:c6:c5:c6:55:17:5f:41:ba:81:fa:b8:05:27:
                    04:9e:25:3e:58:9b:fb:e6:8c:6c:3f:86:be:5e:c1:
                    a6:d7:d4:49:3d:7f:ad:c6:f8:6c:e9:4a:8b:7b:a7:
                    2a:61:1a:65:dc:f8:fd:e4:3f:ba:36:31:74:d0:39:
                    7a:37:3f:10:8b:6b:01:09:4c:75:b2:59:f7:67:08:
                    1e:c2:9d:d5:62:82:32:65:63:c5:ef:0b:ed:24:46:
                    9d:5e:a0:ff:a9:fb:01:33:8c:3e:c1:b3:1d:b1:e4:
                    9f:14:1c:ba:60:98:6d:93:68:d7:ba:e2:13:2f:31:
                    e3:d1:4b:27:ce:7f:61:42:e1:8b:c0:84:fa:47:79:
                    0e:69:e3:d1:13:2d:40:ed:16:96:21:a0:5b:13:8d:
                    36:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:43:9B:8C:C2:32:12:85:42:E0:E6:99:AB:55:B4:68:12:AE:6D:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/5aaaeb9d-283c-36c1-8edf-be275994256c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:02:cd:6d:fb:42:94:3a:d0:d3:08:10:7d:73:5d:d3:f9:a3:
         3c:cd:ab:17:ee:02:35:51:75:ff:90:ee:eb:0e:e7:fb:39:59:
         4e:c6:4d:79:62:38:b9:47:48:ec:f9:1e:97:b9:e1:f0:4e:b8:
         88:66:3f:b9:6f:c1:5d:55:00:1a:72:01:75:86:85:45:d1:62:
         0f:80:35:37:ad:bb:3b:56:08:5a:27:85:e6:95:17:0a:a0:c1:
         39:77:e1:65:80:5e:b1:c9:70:c1:a6:41:fa:74:73:70:38:a0:
         46:de:af:c9:64:e5:00:33:98:93:ad:d6:4f:bc:2f:2d:c7:15:
         e8:91:d2:c9:42:b0:00:01:a7:40:fd:13:bf:12:34:3a:5c:a7:
         14:66:db:ef:7e:38:7e:6d:e1:93:fe:3c:74:35:6c:e4:30:7c:
         94:ce:db:75:3a:22:7d:f2:38:92:90:2d:82:40:3e:d9:6c:c9:
         bb:72:ca:3c:60:5f:07:f2:e7:0b:01:41:66:32:10:a6:1c:c5:
         c0:fe:28:02:50:f4:d5:f7:55:82:34:98:c6:72:99:9c:b2:d8:
         9e:3e:83:09:ad:c5:86:59:39:a5:b5:8f:ea:39:f4:95:d1:c5:
         aa:bd:f0:04:f5:95:a5:56:30:0e:bf:7b:e3:3b:d8:41:99:3c:
         78:94:b9:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWdLe+Uo/AGkrMl/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MDQyMTAxMDAyNVoXDTI0MDcyMDAxMDAyNVowLzEtMCsGA1UEAxMk
ZmZjOWJkM2YtMDU5NS00YWVmLWE5ZTUtODIyYTlhNWIxYmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7Mw7yEXVJFMSjxbwlCAjHPGNl6BsTkwrB5N
o3fxfTJwUhv/lVb24wvpVDz13qTTqO35AsheYNriVAkp3+53kRfVfmVQM5QN+P2X
FhuRqCE99XqTgaE2MNKZujxqem0IeBvzitwAf2mrZ8bFxlUXX0G6gfq4BScEniU+
WJv75oxsP4a+XsGm19RJPX+txvhs6UqLe6cqYRpl3Pj95D+6NjF00Dl6Nz8Qi2sB
CUx1sln3Zwgewp3VYoIyZWPF7wvtJEadXqD/qfsBM4w+wbMdseSfFBy6YJhtk2jX
uuITLzHj0Usnzn9hQuGLwIT6R3kOaePREy1A7RaWIaBbE402fQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN9Dm4zCMhKFQuDmmatVtGgSrm0bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvNWFhYWViOWQtMjgzYy0z
NmMxLThlZGYtYmUyNzU5OTQyNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG5HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACYCzW37QpQ60NMIEH1zXdP5ozzNqxfuAjVRdf+Q7usO5/s5WU7GTXli
OLlHSOz5Hpe54fBOuIhmP7lvwV1VABpyAXWGhUXRYg+ANTetuztWCFonheaVFwqg
wTl34WWAXrHJcMGmQfp0c3A4oEber8lk5QAzmJOt1k+8Ly3HFeiR0slCsAABp0D9
E78SNDpcpxRm2+9+OH5t4ZP+PHQ1bOQwfJTO23U6In3yOJKQLYJAPtlsybtyyjxg
Xwfy5wsBQWYyEKYcxcD+KAJQ9NX3VYI0mMZymZyy2J4+gwmtxYZZOaW1j+o59JXR
xaq98AT1laVWMA6/e+M72EGZPHiUuZk=
-----END CERTIFICATE-----
Generated at Mon May 20 15:19:47 2024 by rpki-client on console-fra.rpki-client.org