Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/13133b3c-1db1-3ab3-bcc4-1c1a1c06f8d7.roa
File:                     13133b3c-1db1-3ab3-bcc4-1c1a1c06f8d7.roa (raw, json)
Hash identifier:          6WAS9uliyQBu1h+3CeV05LX+Wn5BgBvAGP6fRoeoSIs=
Subject key identifier:   B1:21:25:AF:1C:B5:EF:48:09:AE:88:48:79:57:1D:49:8D:A3:01:D9
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F43285845EF892DED6FF44147C945CC80
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/13133b3c-1db1-3ab3-bcc4-1c1a1c06f8d7.roa
Signing time:             Mon 20 May 2024 13:00:35 +0000
ROA not before:           Mon 20 May 2024 13:00:35 +0000
ROA not after:            Sun 18 Aug 2024 13:00:35 +0000
asID:                     25697
IP address blocks:        209.50.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ef:89:2d:ed:6f:f4:41:47:c9:45:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: May 20 13:00:35 2024 GMT
            Not After : Aug 18 13:00:35 2024 GMT
        Subject: CN=75c626b7-8312-4e73-a0b1-ad4aaa121a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1b:c8:b1:d5:c4:40:13:cb:63:57:a0:12:e2:
                    63:48:88:74:f3:c3:36:fc:e8:6a:4a:17:2b:41:fa:
                    4a:79:1e:08:fd:c4:3c:ff:b3:a7:de:cf:af:1e:f3:
                    8e:4b:e0:97:1c:d6:0b:1f:f2:6a:50:be:f2:f4:a8:
                    a6:ff:ed:1e:5c:68:6c:d3:48:f2:5a:e1:77:11:78:
                    a8:ab:d6:7f:df:92:86:d3:f0:74:99:ff:47:be:13:
                    3d:60:f4:52:f9:13:9e:fe:2d:39:13:b3:dd:2a:64:
                    ce:e4:56:46:ed:33:50:61:c4:6b:68:3d:6b:40:2e:
                    5f:ca:a5:5b:06:77:03:64:ac:01:d9:39:70:c2:31:
                    55:7d:d6:ac:6a:2d:6b:52:f9:10:7b:ed:2d:7e:fd:
                    43:31:f2:93:2d:c4:18:be:37:bf:fc:c8:dd:11:48:
                    17:bc:df:74:a5:05:c6:2d:72:a8:96:e6:90:aa:f9:
                    0f:90:2d:bd:84:5f:63:28:4e:ab:1a:18:d9:6a:30:
                    66:c7:2b:91:4d:79:46:e2:d1:ad:4e:50:d4:f2:60:
                    d6:4f:f9:1f:78:ee:08:e1:8a:91:38:75:2b:ba:01:
                    fc:19:31:51:3b:ab:e2:d5:74:a4:bf:ba:9c:43:05:
                    d4:f5:70:22:fd:09:d1:57:f6:5d:93:60:dd:0e:42:
                    98:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:21:25:AF:1C:B5:EF:48:09:AE:88:48:79:57:1D:49:8D:A3:01:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/13133b3c-1db1-3ab3-bcc4-1c1a1c06f8d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.50.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d7:c0:f3:65:94:56:57:94:a1:5f:5c:c9:6a:61:a1:49:8a:
         df:3a:69:41:d4:c7:d5:69:83:13:23:d3:9d:f7:31:1d:4d:33:
         3c:8f:b3:ba:24:a7:37:2e:44:c7:fa:6f:2f:d5:af:11:ca:68:
         8c:f4:36:bb:9a:4c:b7:69:ab:32:5b:6e:1a:87:10:26:f3:3b:
         00:3c:03:77:b3:f9:ea:10:44:44:dd:b8:3e:b6:1f:eb:a8:2a:
         e7:a7:86:09:34:3e:c0:9b:f8:4a:c9:3e:5a:e4:62:ef:e6:15:
         81:bd:41:f6:53:6f:bf:71:d7:3e:22:a8:70:70:f8:39:6f:d8:
         17:e1:dd:6c:e6:48:95:86:99:76:04:20:c2:9a:d6:23:43:24:
         2b:ec:90:8f:fe:f9:c5:4f:8d:61:53:70:28:e5:15:e3:b7:ca:
         cd:c3:4a:66:04:2a:f0:b6:10:0c:27:ee:5f:6c:78:f2:a6:ba:
         7f:08:65:06:39:d1:d4:0e:83:09:34:7f:91:98:df:89:1c:c3:
         d8:a7:b6:fb:3f:06:48:e8:d5:1f:29:15:60:3d:9b:68:25:74:
         5d:c3:6e:60:0b:ec:18:ac:64:b5:b3:3f:63:5e:20:5b:47:ad:
         5b:ef:f8:84:1c:23:30:ba:23:64:53:6c:23:2b:0d:28:17:54:
         d5:01:e9:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXviS3tb/RBR8lFzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx
MzExMB4XDTI0MDUyMDEzMDAzNVoXDTI0MDgxODEzMDAzNVowLzEtMCsGA1UEAxMk
NzVjNjI2YjctODMxMi00ZTczLWEwYjEtYWQ0YWFhMTIxYTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRvIsdXEQBPLY1egEuJjSIh088M2/OhqShcr
QfpKeR4I/cQ8/7On3s+vHvOOS+CXHNYLH/JqUL7y9Kim/+0eXGhs00jyWuF3EXio
q9Z/35KG0/B0mf9HvhM9YPRS+ROe/i05E7PdKmTO5FZG7TNQYcRraD1rQC5fyqVb
BncDZKwB2TlwwjFVfdasai1rUvkQe+0tfv1DMfKTLcQYvje//MjdEUgXvN90pQXG
LXKoluaQqvkPkC29hF9jKE6rGhjZajBmxyuRTXlG4tGtTlDU8mDWT/kfeO4I4YqR
OHUrugH8GTFRO6vi1XSkv7qcQwXU9XAi/QnRV/Zdk2DdDkKYuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLEhJa8cte9ICa6ISHlXHUmNowHZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi
YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvMTMxMzNiM2MtMWRiMS0z
YWIzLWJjYzQtMWMxYTFjMDZmOGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl
NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2
MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy
Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TI4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHbXwPNllFZXlKFfXMlqYaFJit86aUHUx9VpgxMj0533MR1NMzyPs7ok
pzcuRMf6by/VrxHKaIz0NruaTLdpqzJbbhqHECbzOwA8A3ez+eoQRETduD62H+uo
Kuenhgk0PsCb+ErJPlrkYu/mFYG9QfZTb79x1z4iqHBw+Dlv2Bfh3WzmSJWGmXYE
IMKa1iNDJCvskI/++cVPjWFTcCjlFeO3ys3DSmYEKvC2EAwn7l9sePKmun8IZQY5
0dQOgwk0f5GY34kcw9intvs/Bkjo1R8pFWA9m2gldF3DbmAL7BisZLWzP2NeIFtH
rVvv+IQcIzC6I2RTbCMrDSgXVNUB6ZM=
-----END CERTIFICATE-----
Generated at Mon May 20 15:19:48 2024 by rpki-client on console-fra.rpki-client.org