Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/90a1e66c-0877-3bbb-a527-68244bec00c3.roa
File:                     90a1e66c-0877-3bbb-a527-68244bec00c3.roa (raw, json)
Hash identifier:          /vssfBI/dM9lg2gE9XyE6laCq8J4geo6c+PxEBPI7Iw=
Subject key identifier:   89:E4:CE:7B:D5:18:F8:90:F1:96:82:D1:E1:C9:1A:5B:9B:CD:B1:63
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285838AC12E98A431BBC1EA2111540
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/90a1e66c-0877-3bbb-a527-68244bec00c3.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     20001
IP address blocks:        76.88.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:12:e9:8a:43:1b:bc:1e:a2:11:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=9ccb83d5-df09-4838-a37a-1e807dd3744f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:04:fa:8f:7d:6d:18:f3:48:b2:aa:b4:44:
                    82:0c:50:a3:47:f4:08:5d:2e:ae:c8:3b:66:e7:82:
                    f6:9d:ea:af:00:47:85:4a:9c:b8:10:f1:56:e5:9b:
                    88:45:2b:f9:b1:7d:6e:6f:76:16:4d:b6:46:ee:33:
                    76:19:b0:94:fa:79:51:10:dd:bc:c6:7d:13:6c:6b:
                    4e:00:db:37:12:43:c0:a1:48:d5:3c:c7:a6:72:d2:
                    f2:49:d5:c4:c4:26:b6:c5:a7:1f:8f:52:b8:6e:c9:
                    15:37:7c:2f:38:12:21:a0:82:cf:91:72:1e:18:d3:
                    b9:f8:1a:82:3a:78:b9:65:1e:39:e7:38:c5:66:42:
                    72:6b:40:ad:c4:ca:28:8c:96:44:62:c7:d3:a8:20:
                    08:a2:45:e6:f7:f2:e9:52:27:13:69:6e:27:ad:68:
                    05:35:46:8b:9e:23:ad:2d:85:2d:cd:d0:c6:60:45:
                    95:bb:cf:f9:e0:50:ae:60:78:4c:79:5e:4b:ac:8b:
                    a5:22:60:a1:29:65:1b:b5:be:79:af:ed:22:0e:ba:
                    89:70:3f:73:f8:bc:a5:b4:48:40:4e:4e:7a:98:89:
                    98:0f:a3:e4:7c:20:60:c7:51:d3:a9:7f:e6:f3:43:
                    a2:46:20:a3:42:79:92:ea:f6:19:4b:6f:97:76:f4:
                    35:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E4:CE:7B:D5:18:F8:90:F1:96:82:D1:E1:C9:1A:5B:9B:CD:B1:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/90a1e66c-0877-3bbb-a527-68244bec00c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.88.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d4:f5:70:fd:d4:90:44:32:0c:e7:81:fb:35:a1:d3:27:a5:
         a9:38:85:dc:48:90:dc:dd:0b:93:09:0a:b0:1f:37:37:27:44:
         bf:59:a0:c4:ec:f6:d0:3e:42:4b:c0:87:b6:3f:52:72:66:1c:
         78:07:97:c1:84:aa:38:a1:8f:e6:e5:0c:09:ad:f7:65:84:e5:
         c2:09:95:3d:cf:3f:8c:a7:f7:dc:37:53:1e:ae:f2:8d:03:44:
         3d:98:61:e7:17:69:c5:ec:9d:8e:7a:ed:f7:e8:ae:af:af:ee:
         aa:0e:03:27:50:42:f9:c0:21:ab:fd:2c:6f:46:59:1e:35:0e:
         42:e4:dd:ce:60:0b:41:40:eb:d8:f2:bb:57:bf:ab:e4:b5:32:
         7d:fe:9f:d6:c8:4b:4e:b2:58:af:48:8d:4b:21:49:cc:53:63:
         5d:e6:a3:21:fc:9b:02:82:92:b5:d6:c1:7c:7b:2f:3f:a5:b8:
         aa:d2:7f:fb:36:d4:14:54:61:fc:a3:36:59:4b:53:e2:88:f9:
         29:49:74:2c:e4:9d:39:a0:62:c9:f6:28:f7:53:e6:e0:ce:c8:
         48:22:f1:6a:6f:bf:2c:44:a9:bd:0f:33:1a:a1:b2:19:3d:cb:
         c0:69:e0:49:2b:5d:6d:60:65:ec:eb:11:28:34:cf:23:e6:45:
         04:ee:1f:5f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDisEumKQxu8HqIRFUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTIxMDEyMDA1MDAwMFoXDTI3MDExMzA1MDAwMFowLzEtMCsGA1UEAxMk
OWNjYjgzZDUtZGYwOS00ODM4LWEzN2EtMWU4MDdkZDM3NDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdYE+o99bRjzSLKqtESCDFCjR/QIXS6uyDtm
54L2neqvAEeFSpy4EPFW5ZuIRSv5sX1ub3YWTbZG7jN2GbCU+nlREN28xn0TbGtO
ANs3EkPAoUjVPMemctLySdXExCa2xacfj1K4bskVN3wvOBIhoILPkXIeGNO5+BqC
Oni5ZR455zjFZkJya0CtxMoojJZEYsfTqCAIokXm9/LpUicTaW4nrWgFNUaLniOt
LYUtzdDGYEWVu8/54FCuYHhMeV5LrIulImChKWUbtb55r+0iDrqJcD9z+LyltEhA
Tk56mImYD6PkfCBgx1HTqX/m80OiRiCjQnmS6vYZS2+XdvQ1GwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFInkznvVGPiQ8ZaC0eHJGlubzbFjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOTBhMWU2NmMtMDg3Ny0z
YmJiLWE1MjctNjgyNDRiZWMwMGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMATFgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAStT1cP3UkEQyDOeB+zWh0yelqTiF3EiQ3N0LkwkKsB83NydEv1mgxOz2
0D5CS8CHtj9ScmYceAeXwYSqOKGP5uUMCa33ZYTlwgmVPc8/jKf33DdTHq7yjQNE
PZhh5xdpxeydjnrt9+iur6/uqg4DJ1BC+cAhq/0sb0ZZHjUOQuTdzmALQUDr2PK7
V7+r5LUyff6f1shLTrJYr0iNSyFJzFNjXeajIfybAoKStdbBfHsvP6W4qtJ/+zbU
FFRh/KM2WUtT4oj5KUl0LOSdOaBiyfYo91Pm4M7ISCLxam+/LESpvQ8zGqGyGT3L
wGngSStdbWBl7OsRKDTPI+ZFBO4fXw==
-----END CERTIFICATE-----
Generated at Thu May 2 08:53:52 2024 by rpki-client on console-fra.rpki-client.org