Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa
File:                     d24e1119-5be2-3190-a36f-e8056d9c96aa.roa (raw, json)
Hash identifier:          5gJk3+tOo65zCtk82+OC5TNap+Dt8dP7DiJT+JELE50=
Subject key identifier:   2B:DF:89:1C:A8:F2:44:14:61:BF:B2:7C:B7:93:AE:0D:42:DC:93:77
Certificate issuer:       /CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6
Certificate serial:       010D0C9F43285845BA7E2BD8441E0C4C3851FB80
Authority key identifier: 26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        192.172.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:2b:d8:44:1e:0c:4c:38:51:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=2953ebd3-3063-45d8-89e7-c982e8a167d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:de:b9:1c:51:6b:40:3b:de:1e:d8:29:c3:a7:
                    b3:a3:fa:ac:2e:d0:48:54:09:40:02:37:95:75:9e:
                    34:f4:25:63:c7:7c:76:34:36:17:6d:f5:fd:8e:50:
                    0f:46:99:e2:21:f0:65:0a:b2:d5:89:bd:36:1c:82:
                    de:bd:ee:d3:17:aa:5e:6a:f3:6e:84:b2:74:6d:bd:
                    84:88:3b:c0:ec:95:e7:25:f0:19:9d:de:03:0e:2a:
                    f2:19:65:6f:aa:5b:83:d8:df:c4:b7:a4:4e:ca:71:
                    1b:2f:c4:b2:eb:09:25:8b:7b:90:68:33:52:57:66:
                    ce:92:7d:73:bd:19:65:76:a8:59:d2:ec:82:50:35:
                    22:6d:23:47:88:f9:c9:c8:83:83:3d:dc:d1:a0:78:
                    b9:e7:a7:bc:ee:b6:ec:1f:1e:1a:1f:f9:5f:0b:1e:
                    73:a2:5a:5a:4d:07:f7:fe:fc:ba:5b:00:f6:0f:fd:
                    32:ae:c3:97:3f:6a:f5:06:85:99:89:ae:49:dc:5d:
                    d5:c0:cf:9f:43:69:85:8a:55:ac:43:ae:b0:0f:cf:
                    93:d4:59:62:51:17:51:1f:6f:67:63:c0:db:13:f6:
                    89:f1:9a:06:07:7e:90:67:b5:21:7b:06:5e:d4:2a:
                    03:36:bb:70:d4:43:dc:47:ad:be:11:ba:3a:c7:c9:
                    87:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DF:89:1C:A8:F2:44:14:61:BF:B2:7C:B7:93:AE:0D:42:DC:93:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.crl

            X509v3 Authority Key Identifier:
                keyid:26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.172.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:01:4e:71:70:b7:f5:54:0a:19:8e:ce:84:34:e9:2d:a7:10:
         ce:42:d9:92:c3:fc:9d:c5:7e:82:cb:f0:e5:4c:02:5a:d3:71:
         30:ad:5f:80:61:bc:21:74:27:54:60:b9:8d:b2:3b:21:44:d5:
         c2:89:e6:4c:fd:b8:cd:9b:63:60:ae:d1:a3:a0:0f:90:09:9d:
         17:e5:e7:93:82:fe:bc:76:a9:f6:00:73:5d:e5:db:be:a3:03:
         2e:ee:41:4c:58:c4:74:f5:26:2b:5c:5c:39:1a:d0:7a:58:59:
         6c:15:30:3d:ad:8a:26:de:b6:fa:29:dc:fc:9e:e9:83:49:9f:
         82:68:63:9e:1a:df:37:0c:7e:f9:a3:5c:eb:92:16:84:a4:5d:
         f1:95:01:1c:36:d0:58:34:28:b6:fa:ed:26:9d:54:8c:9b:43:
         b4:40:69:70:ab:8c:a8:3a:9f:9a:b3:c3:ff:0e:07:62:50:10:
         53:13:65:00:a4:38:d7:72:58:f9:c2:94:c9:2f:7c:5a:6f:fd:
         53:8d:93:d3:bb:d8:c5:86:4e:2b:1b:b1:c0:92:e4:68:76:bc:
         ae:31:c6:df:b9:3d:31:12:b4:3f:da:bf:bf:14:f2:cb:d5:5d:
         3f:88:d4:39:23:09:1c:9f:f9:20:5b:89:fb:6d:5b:0a:ac:d5:
         71:c9:df:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW6fivYRB4MTDhR+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTgzNDRhMWItNTY1Yy00Y2RmLWIyZWUtOTU1NmYyNzZl
M2I2MB4XDTI0MDUwMTEzMDAzNFoXDTI0MDczMDEzMDAzNFowLzEtMCsGA1UEAxMk
Mjk1M2ViZDMtMzA2My00NWQ4LTg5ZTctYzk4MmU4YTE2N2QwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t65HFFrQDveHtgpw6ezo/qsLtBIVAlAAjeV
dZ409CVjx3x2NDYXbfX9jlAPRpniIfBlCrLVib02HILeve7TF6peavNuhLJ0bb2E
iDvA7JXnJfAZnd4DDiryGWVvqluD2N/Et6ROynEbL8Sy6wkli3uQaDNSV2bOkn1z
vRlldqhZ0uyCUDUibSNHiPnJyIODPdzRoHi556e87rbsHx4aH/lfCx5zolpaTQf3
/vy6WwD2D/0yrsOXP2r1BoWZia5J3F3VwM+fQ2mFilWsQ66wD8+T1FliURdRH29n
Y8DbE/aJ8ZoGB36QZ7UhewZe1CoDNrtw1EPcR62+Ebo6x8mHIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvfiRyo8kQUYb+yfLeTrg1C3JN3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lODM0
NGExYi01NjVjLTRjZGYtYjJlZS05NTU2ZjI3NmUzYjYvZDI0ZTExMTktNWJlMi0z
MTkwLWEzNmYtZTgwNTZkOWM5NmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTgzNDRhMWItNTY1Yy00Y2RmLWIy
ZWUtOTU1NmYyNzZlM2I2L2U4MzQ0YTFiLTU2NWMtNGNkZi1iMmVlLTk1NTZmMjc2
ZTNiNi5jcmwwHwYDVR0jBBgwFoAUJnz+V6BKzHPKKhwLPnzFHn+vlUEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lODM0NGExYi01NjVjLTRjZGYtYjJlZS05NTU2
ZjI3NmUzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKzdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQBTnFwt/VUChmOzoQ06S2nEM5C2ZLD/J3FfoLL8OVMAlrTcTCtX4Bh
vCF0J1RguY2yOyFE1cKJ5kz9uM2bY2Cu0aOgD5AJnRfl55OC/rx2qfYAc13l276j
Ay7uQUxYxHT1JitcXDka0HpYWWwVMD2tiibetvop3Pye6YNJn4JoY54a3zcMfvmj
XOuSFoSkXfGVARw20Fg0KLb67SadVIybQ7RAaXCrjKg6n5qzw/8OB2JQEFMTZQCk
ONdyWPnClMkvfFpv/VONk9O72MWGTisbscCS5Gh2vK4xxt+5PTEStD/av78U8svV
XT+I1DkjCRyf+SBbifttWwqs1XHJ39Y=
-----END CERTIFICATE-----
Generated at Thu May 2 20:21:45 2024 by rpki-client on console-ams.rpki-client.org