Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3231792f-1c19-3d67-8e39-a10cd5261653.roa
File:                     3231792f-1c19-3d67-8e39-a10cd5261653.roa (raw, json)
Hash identifier:          HHjhg8MzfMKkp9iZyEbfMz74/vu5ws/Cxp1m1368k5k=
Subject key identifier:   AA:6D:33:8A:27:DB:D3:C8:ED:86:3B:D3:85:8C:F3:15:05:A2:B8:2E
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285845347D49151D6F84BCEAF2E6E8
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3231792f-1c19-3d67-8e39-a10cd5261653.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     7861
IP address blocks:        209.29.222.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:49:15:1d:6f:84:bc:ea:f2:e6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=17274d95-82fd-420a-bbe1-bafea495e12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ae:9d:48:60:2b:97:00:50:31:47:80:b4:9d:
                    c9:58:10:c1:3a:d1:83:6c:65:05:4f:0a:26:6f:f7:
                    42:89:f7:46:e3:f5:cd:46:d3:07:1f:53:f6:47:51:
                    9a:79:67:d6:63:38:79:f8:ce:4c:ce:c2:6f:2f:42:
                    41:0b:06:42:05:2a:16:c8:10:49:a7:b1:23:fc:71:
                    09:ba:8a:99:1d:bf:f8:31:d8:1b:9e:f8:ab:56:99:
                    2a:65:94:9a:06:c3:5c:60:59:f6:ac:a8:b7:fe:16:
                    18:0f:b9:d3:c0:a9:06:93:60:c2:72:33:fc:3f:28:
                    7a:54:f4:26:6a:45:d0:bf:9e:c8:7a:3a:cc:72:cc:
                    60:9d:eb:f3:f5:26:fc:53:db:2c:39:ac:9c:68:0c:
                    54:30:7e:08:37:51:c6:ad:43:2d:86:0b:77:2c:dc:
                    03:27:9b:af:8a:93:5b:ac:98:c9:3b:03:2c:16:2a:
                    cc:2e:bb:89:c1:30:34:6c:a3:c5:4b:39:bf:64:b5:
                    1c:f5:b3:df:d2:8e:7c:2d:83:49:cc:13:e7:25:39:
                    36:7b:3d:31:f4:03:0a:8e:96:d7:3c:5d:8e:46:5e:
                    4d:6b:92:34:02:c2:77:0b:40:67:56:e3:41:b6:b8:
                    78:37:a5:ee:40:69:61:07:62:cb:dc:22:15:81:2b:
                    f5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6D:33:8A:27:DB:D3:C8:ED:86:3B:D3:85:8C:F3:15:05:A2:B8:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3231792f-1c19-3d67-8e39-a10cd5261653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.29.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:a5:7e:e2:db:22:a1:3e:1d:1b:cf:39:9a:97:26:07:51:ab:
         59:8a:21:d5:fa:41:62:b9:70:22:5b:e2:19:d8:51:48:36:ac:
         36:21:57:fa:e7:3f:55:f0:a1:9c:76:61:ad:2e:f7:4e:cf:00:
         60:3a:6b:3f:e2:0f:18:15:7e:86:a4:29:5e:9c:9b:de:c6:4e:
         5c:ec:d9:b1:21:6d:3b:ef:c5:98:17:b2:95:c8:bf:1b:00:cc:
         33:ba:3e:3b:56:8f:b3:fa:88:05:3e:67:8f:63:51:01:24:7a:
         a0:e0:b1:07:59:8f:4c:92:75:9c:7c:6d:73:d0:ba:b5:3e:93:
         e7:4c:04:8c:29:b8:3f:da:c0:ee:41:89:ab:86:28:de:13:51:
         68:cb:8b:16:1b:21:3f:0a:8f:ba:e1:79:d7:22:a9:e9:e9:5c:
         91:39:ac:d4:64:8c:07:16:1a:74:58:3b:00:f0:31:e3:f5:8f:
         cb:e5:7f:89:41:c0:b3:5c:43:b8:20:df:fd:2d:fc:8a:70:06:
         6b:b5:46:7b:79:62:6e:4e:b8:8d:7f:5a:e2:34:59:df:bf:01:
         f2:eb:53:4d:b5:99:6d:e0:4e:73:8f:30:51:c0:01:88:9a:cb:
         23:17:15:a4:91:f8:e6:dc:11:01:68:db:c8:3c:db:c8:22:d5:
         24:09:21:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU0fUkVHW+EvOry5ugwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDMxNDEzMDAzMFoXDTI0MDYxMjEzMDAzMFowLzEtMCsGA1UEAxMk
MTcyNzRkOTUtODJmZC00MjBhLWJiZTEtYmFmZWE0OTVlMTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg66dSGArlwBQMUeAtJ3JWBDBOtGDbGUFTwom
b/dCifdG4/XNRtMHH1P2R1GaeWfWYzh5+M5MzsJvL0JBCwZCBSoWyBBJp7Ej/HEJ
uoqZHb/4MdgbnvirVpkqZZSaBsNcYFn2rKi3/hYYD7nTwKkGk2DCcjP8Pyh6VPQm
akXQv57IejrMcsxgnevz9Sb8U9ssOaycaAxUMH4IN1HGrUMthgt3LNwDJ5uvipNb
rJjJOwMsFirMLruJwTA0bKPFSzm/ZLUc9bPf0o58LYNJzBPnJTk2ez0x9AMKjpbX
PF2ORl5Na5I0AsJ3C0BnVuNBtrh4N6XuQGlhB2LL3CIVgSv1HQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKptM4on29PI7YY704WM8xUForguMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzIzMTc5MmYtMWMxOS0z
ZDY3LThlMzktYTEwY2Q1MjYxNjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0R3eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKSlfuLbIqE+HRvPOZqXJgdRq1mKIdX6QWK5cCJb4hnYUUg2rDYhV/rn
P1XwoZx2Ya0u907PAGA6az/iDxgVfoakKV6cm97GTlzs2bEhbTvvxZgXspXIvxsA
zDO6PjtWj7P6iAU+Z49jUQEkeqDgsQdZj0ySdZx8bXPQurU+k+dMBIwpuD/awO5B
iauGKN4TUWjLixYbIT8Kj7rhedciqenpXJE5rNRkjAcWGnRYOwDwMeP1j8vlf4lB
wLNcQ7gg3/0t/IpwBmu1Rnt5Ym5OuI1/WuI0Wd+/AfLrU021mW3gTnOPMFHAAYia
yyMXFaSR+ObcEQFo28g828gi1SQJIRk=
-----END CERTIFICATE-----
Generated at Sat May 25 06:27:20 2024 by rpki-client on console-fra.rpki-client.org