Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/a9113236-8d32-308a-86be-ab83ac76d67f.roa
File:                     a9113236-8d32-308a-86be-ab83ac76d67f.roa (raw, json)
Hash identifier:          rQooOiw55Xb3ubBXMWruJj+RbP5Pe3TletgM0YYdMm8=
Subject key identifier:   7B:B5:08:21:48:98:4E:21:70:9D:B0:FA:D7:08:DB:B2:70:A4:44:C3
Certificate issuer:       /CN=24652152-0111-4df2-a7ef-61ad3cdecb58
Certificate serial:       010D0C9F432858451050301569A880B35E3DA800
Authority key identifier: 59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/a9113236-8d32-308a-86be-ab83ac76d67f.roa
Signing time:             Fri 01 Mar 2024 14:00:30 +0000
ROA not before:           Fri 01 Mar 2024 14:00:30 +0000
ROA not after:            Thu 30 May 2024 13:00:30 +0000
asID:                     13389
IP address blocks:        216.179.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:50:30:15:69:a8:80:b3:5e:3d:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24652152-0111-4df2-a7ef-61ad3cdecb58
        Validity
            Not Before: Mar  1 14:00:30 2024 GMT
            Not After : May 30 13:00:30 2024 GMT
        Subject: CN=bf3a5055-13ea-4ae2-80ab-12241dca0367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:dc:d3:de:8d:b4:d3:97:bb:ad:a8:1d:bf:
                    e1:f7:82:e9:62:0a:5c:db:d6:aa:b1:3a:c2:5d:0f:
                    17:bd:bc:f9:7d:9e:33:75:19:69:3a:d2:b1:9f:73:
                    a8:1c:00:ee:5a:b4:9b:2a:bb:8c:cb:1f:00:12:4e:
                    d1:51:c2:53:10:a9:62:91:c0:2d:ec:fc:08:60:81:
                    eb:59:ba:cb:0c:2d:7b:08:66:8c:a8:08:d8:b8:6a:
                    9b:b3:82:03:bd:60:d1:40:08:55:af:29:d2:a9:b6:
                    2c:f7:bd:d3:9c:de:d7:d9:0f:f5:f3:0d:e9:f7:cb:
                    00:17:1a:75:2a:1d:95:e5:cb:f4:16:2d:d5:56:a6:
                    14:93:1d:e6:20:8d:19:64:c2:49:6c:e2:8e:8e:fc:
                    90:aa:40:73:79:07:78:ea:32:e9:75:89:86:e0:7d:
                    f7:82:f8:f2:9a:03:46:f1:09:79:12:e1:00:83:d8:
                    9f:3f:c9:00:50:aa:a2:49:e0:66:3a:32:b0:d8:89:
                    c1:35:55:62:9c:13:e1:5c:71:26:9d:99:98:2d:47:
                    dc:5a:1d:cf:49:86:90:c9:ba:24:42:b5:1d:a6:4f:
                    1e:85:c2:7b:44:03:89:a9:33:c1:34:46:d0:b5:c7:
                    59:5a:b1:bd:ba:59:28:eb:d5:48:2c:79:b5:71:00:
                    ad:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B5:08:21:48:98:4E:21:70:9D:B0:FA:D7:08:DB:B2:70:A4:44:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/a9113236-8d32-308a-86be-ab83ac76d67f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl

            X509v3 Authority Key Identifier:
                keyid:59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.179.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:7a:de:76:d1:35:11:a1:7f:f9:1a:79:ca:9e:01:5e:17:2a:
         01:71:fb:83:b5:3a:6c:cb:4b:24:38:71:51:1c:7e:97:b4:59:
         c7:e9:53:16:b7:93:97:37:b4:df:0b:c9:13:4f:20:3c:02:78:
         59:b9:e4:f6:3c:e5:d1:2b:ef:ea:e4:91:eb:78:6b:44:05:c5:
         20:8c:2a:e1:ef:fb:2e:4f:57:e8:c9:14:eb:da:2a:13:0e:cd:
         42:2f:32:44:a4:70:3d:fa:44:f1:a2:2e:be:64:4d:80:23:1b:
         24:88:98:86:52:50:be:92:aa:6f:39:f8:8c:fe:6b:5a:52:b3:
         c5:f1:67:7e:43:ea:9b:ad:ea:fb:a0:72:f7:12:8f:09:c2:1b:
         6d:b9:65:20:34:72:02:90:fc:2a:52:d7:c3:45:39:e7:62:6a:
         05:83:37:32:df:44:7e:2c:c7:32:06:00:4d:53:c1:7a:0d:d5:
         d7:64:ed:02:93:25:2e:11:34:b7:f7:90:5a:c8:7d:d6:c1:ef:
         73:7f:fa:72:07:d5:fc:8c:fc:e1:b1:6a:99:0f:32:aa:47:fc:
         d5:c4:de:93:11:46:2e:bb:38:e3:e8:39:78:2c:7b:7c:06:ec:
         be:af:a0:3d:c2:e0:8d:33:47:f5:85:a7:d9:a0:b6:5a:cf:46:
         33:0a:4b:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUQUDAVaaiAs149qAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ2NTIxNTItMDExMS00ZGYyLWE3ZWYtNjFhZDNjZGVj
YjU4MB4XDTI0MDMwMTE0MDAzMFoXDTI0MDUzMDEzMDAzMFowLzEtMCsGA1UEAxMk
YmYzYTUwNTUtMTNlYS00YWUyLTgwYWItMTIyNDFkY2EwMzY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf3c096NtNOXu62oHb/h94LpYgpc29aqsTrC
XQ8Xvbz5fZ4zdRlpOtKxn3OoHADuWrSbKruMyx8AEk7RUcJTEKlikcAt7PwIYIHr
WbrLDC17CGaMqAjYuGqbs4IDvWDRQAhVrynSqbYs973TnN7X2Q/18w3p98sAFxp1
Kh2V5cv0Fi3VVqYUkx3mII0ZZMJJbOKOjvyQqkBzeQd46jLpdYmG4H33gvjymgNG
8Ql5EuEAg9ifP8kAUKqiSeBmOjKw2InBNVVinBPhXHEmnZmYLUfcWh3PSYaQybok
QrUdpk8ehcJ7RAOJqTPBNEbQtcdZWrG9ulko69VILHm1cQCtHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHu1CCFImE4hcJ2w+tcI27JwpETDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNDY1
MjE1Mi0wMTExLTRkZjItYTdlZi02MWFkM2NkZWNiNTgvYTkxMTMyMzYtOGQzMi0z
MDhhLTg2YmUtYWI4M2FjNzZkNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjQ2NTIxNTItMDExMS00ZGYyLWE3
ZWYtNjFhZDNjZGVjYjU4LzI0NjUyMTUyLTAxMTEtNGRmMi1hN2VmLTYxYWQzY2Rl
Y2I1OC5jcmwwHwYDVR0jBBgwFoAUWQ8g4w63EW5P5zO9A1k28CvF7PAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNDY1MjE1Mi0wMTExLTRkZjItYTdlZi02MWFk
M2NkZWNiNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2LP+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEB63nbRNRGhf/kaecqeAV4XKgFx+4O1OmzLSyQ4cVEcfpe0WcfpUxa3
k5c3tN8LyRNPIDwCeFm55PY85dEr7+rkket4a0QFxSCMKuHv+y5PV+jJFOvaKhMO
zUIvMkSkcD36RPGiLr5kTYAjGySImIZSUL6Sqm85+Iz+a1pSs8XxZ35D6put6vug
cvcSjwnCG225ZSA0cgKQ/CpS18NFOediagWDNzLfRH4sxzIGAE1TwXoN1ddk7QKT
JS4RNLf3kFrIfdbB73N/+nIH1fyM/OGxapkPMqpH/NXE3pMRRi67OOPoOXgse3wG
7L6voD3C4I0zR/WFp9mgtlrPRjMKS84=
-----END CERTIFICATE-----
Generated at Sun May 19 01:58:16 2024 by rpki-client on console-ams.rpki-client.org