Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/7448dd66-617e-3ba8-919d-3aa5edeb876e.roa
File:                     7448dd66-617e-3ba8-919d-3aa5edeb876e.roa (raw, json)
Hash identifier:          avFCgYHXsWMN+rpys62+X++usZ0RUex6gJDzN2WI/Mc=
Subject key identifier:   18:75:13:8C:F0:A1:59:E8:F1:9A:C9:DD:9A:B8:5B:C6:A8:88:52:20
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F432858457A4885055DD47516BF275480
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/7448dd66-617e-3ba8-919d-3aa5edeb876e.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     16904
IP address blocks:        209.237.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:85:05:5d:d4:75:16:bf:27:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=f35f80a2-c430-4ca4-9415-097d621c2b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cb:39:10:61:a0:f3:c7:64:c7:8b:b5:dc:48:
                    6f:d3:d8:0e:9a:55:17:32:83:22:f7:64:70:4a:4c:
                    be:a0:41:17:37:79:87:fa:44:53:69:3c:31:2d:3d:
                    13:a0:57:d2:6a:ed:2c:72:c9:1b:07:df:08:23:73:
                    fd:cf:8b:3f:48:02:d5:b7:49:fd:25:28:da:6a:58:
                    8a:87:60:64:b9:36:51:9e:16:2d:58:2d:61:80:c7:
                    b7:51:0d:f5:8f:fb:8e:11:bc:69:ca:93:7d:cf:54:
                    ec:51:7b:4a:5a:8d:1b:7a:09:23:17:17:79:d5:47:
                    61:f2:a0:ac:89:41:49:61:56:05:74:07:26:14:59:
                    57:fb:10:f6:bf:8e:a0:05:48:54:94:53:50:a5:1c:
                    52:3b:9d:ee:bc:89:10:85:a3:23:6a:13:7b:6e:c9:
                    3c:91:fa:90:4a:30:a5:fb:f7:18:a3:9a:d0:32:8f:
                    a0:58:28:fe:7f:81:17:0f:6e:2e:aa:1a:aa:19:1f:
                    00:94:6a:20:0b:83:35:6f:b0:e2:8d:ee:0b:47:41:
                    e9:cd:9f:c8:f0:ed:08:c6:a6:9e:cc:ac:ac:ed:20:
                    c6:b9:b9:55:12:6b:77:1e:ce:ab:3e:1a:b6:63:c0:
                    86:30:22:6d:73:08:7d:7a:c9:3f:e3:38:71:57:af:
                    2c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:75:13:8C:F0:A1:59:E8:F1:9A:C9:DD:9A:B8:5B:C6:A8:88:52:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/7448dd66-617e-3ba8-919d-3aa5edeb876e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:55:f5:59:a1:4b:03:30:15:39:bd:e0:50:ee:e4:e3:e0:4f:
         b7:e6:21:67:50:5a:29:2b:3e:78:83:97:72:b3:dc:82:e6:8c:
         f7:8f:1b:45:92:49:e9:c8:17:cf:3a:86:c1:d9:59:08:7e:0f:
         1c:de:21:a3:fc:18:32:1f:f8:e5:d4:df:97:d5:92:28:21:90:
         37:5c:93:9b:67:5e:60:96:4e:02:40:1d:80:88:08:b4:0a:3b:
         00:ce:87:a1:0c:b1:22:7e:30:36:4e:74:32:c7:77:d7:c6:e8:
         ee:c9:e8:c1:66:0b:0b:0d:4f:0f:80:e5:b3:17:3b:09:da:b4:
         0f:9c:a7:74:75:29:0d:65:82:f6:19:75:18:e3:dd:51:94:70:
         32:05:40:1e:fe:7c:6a:9e:e3:aa:ff:ff:fa:46:0e:20:64:97:
         50:fb:73:06:d1:a8:5b:9e:5d:a1:85:c4:88:f9:62:91:f2:93:
         50:02:93:40:b6:20:c7:47:4f:b0:e3:f8:b9:b7:c9:f7:33:f9:
         58:90:67:73:15:96:a2:ca:d3:07:6c:59:6e:1d:f7:45:86:2c:
         5c:cb:84:12:96:8b:02:13:e2:ee:52:7b:b3:ed:60:c8:08:27:
         d7:62:5a:52:93:68:b4:e1:8e:d5:77:87:81:97:18:45:e2:14:
         88:a7:f3:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV6SIUFXdR1Fr8nVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx
MzFiMB4XDTI0MDQwODEzMDAzNFoXDTI0MDcwNzEzMDAzNFowLzEtMCsGA1UEAxMk
ZjM1ZjgwYTItYzQzMC00Y2E0LTk0MTUtMDk3ZDYyMWMyYjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscs5EGGg88dkx4u13Ehv09gOmlUXMoMi92Rw
Sky+oEEXN3mH+kRTaTwxLT0ToFfSau0scskbB98II3P9z4s/SALVt0n9JSjaaliK
h2BkuTZRnhYtWC1hgMe3UQ31j/uOEbxpypN9z1TsUXtKWo0begkjFxd51Udh8qCs
iUFJYVYFdAcmFFlX+xD2v46gBUhUlFNQpRxSO53uvIkQhaMjahN7bsk8kfqQSjCl
+/cYo5rQMo+gWCj+f4EXD24uqhqqGR8AlGogC4M1b7Dije4LR0HpzZ/I8O0Ixqae
zKys7SDGublVEmt3Hs6rPhq2Y8CGMCJtcwh9esk/4zhxV68sZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBh1E4zwoVno8ZrJ3Zq4W8aoiFIgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1
YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvNzQ0OGRkNjYtNjE3ZS0z
YmE4LTkxOWQtM2FhNWVkZWI4NzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy
ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw
MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi
ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABpV9VmhSwMwFTm94FDu5OPgT7fmIWdQWikrPniDl3Kz3ILmjPePG0WS
SenIF886hsHZWQh+DxzeIaP8GDIf+OXU35fVkighkDdck5tnXmCWTgJAHYCICLQK
OwDOh6EMsSJ+MDZOdDLHd9fG6O7J6MFmCwsNTw+A5bMXOwnatA+cp3R1KQ1lgvYZ
dRjj3VGUcDIFQB7+fGqe46r///pGDiBkl1D7cwbRqFueXaGFxIj5YpHyk1ACk0C2
IMdHT7Dj+Lm3yfcz+ViQZ3MVlqLK0wdsWW4d90WGLFzLhBKWiwIT4u5Se7PtYMgI
J9diWlKTaLThjtV3h4GXGEXiFIin890=
-----END CERTIFICATE-----
Generated at Sun May 26 01:35:09 2024 by rpki-client on console-fra.rpki-client.org