Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/45d31243-ea0f-30e5-a7cc-6131d2859a12.roa
File:                     45d31243-ea0f-30e5-a7cc-6131d2859a12.roa (raw, json)
Hash identifier:          UsDP0Jr8J0iYNULa1n21Q9tqCefpuWL2DCj1wsu7Qyo=
Subject key identifier:   2D:33:13:13:56:43:D7:83:2E:A2:5B:5E:0B:C8:1E:4C:DC:9B:BB:64
Certificate issuer:       /CN=4eac16a1-7e9c-4f8e-9e2c-913f3a675d18
Certificate serial:       010D0C9F432858453FA80AAACA194D0CCF96F900
Authority key identifier: 56:83:24:37:A6:0D:F4:93:34:1D:6F:6D:30:C2:9D:0B:08:CE:72:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/45d31243-ea0f-30e5-a7cc-6131d2859a12.roa
Signing time:             Mon 18 Mar 2024 13:00:30 +0000
ROA not before:           Mon 18 Mar 2024 13:00:30 +0000
ROA not after:            Sun 16 Jun 2024 13:00:30 +0000
asID:                     11666
IP address blocks:        192.249.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3f:a8:0a:aa:ca:19:4d:0c:cf:96:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eac16a1-7e9c-4f8e-9e2c-913f3a675d18
        Validity
            Not Before: Mar 18 13:00:30 2024 GMT
            Not After : Jun 16 13:00:30 2024 GMT
        Subject: CN=c05798ca-3e3a-4d23-9c3d-b1a47d11a7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4e:a4:78:ba:68:51:68:9f:cf:2f:10:5d:b9:
                    5d:e8:76:3b:64:3a:6a:ee:95:e4:c6:85:84:13:a3:
                    47:28:c4:50:f1:78:e4:98:5c:25:e3:2f:e4:d3:e6:
                    7b:30:45:6b:48:16:03:83:de:48:e7:2a:7e:7e:77:
                    b9:5c:2a:31:a8:a2:dd:60:0c:ea:4d:b7:d4:4e:72:
                    e5:db:f8:f4:2c:78:db:d1:83:6f:0b:3c:f7:94:cc:
                    55:3f:1a:ca:f1:7c:1d:45:fc:db:b9:73:25:d3:50:
                    00:4f:3a:0e:f6:ec:54:da:bb:95:8d:0f:1d:65:17:
                    4e:e2:90:de:cc:c1:46:76:37:11:8d:ea:f2:d5:36:
                    fe:71:36:5e:57:f1:ca:56:34:16:e3:88:37:d0:a9:
                    ea:8a:7d:10:db:9a:b1:22:aa:a2:20:49:6c:b5:55:
                    e5:66:33:ca:c4:5e:0e:34:33:ae:46:3a:2b:be:96:
                    c2:7f:96:47:c4:81:2e:ac:ab:1f:82:d4:df:7e:35:
                    86:07:9b:2b:cb:52:f2:08:af:27:c4:5c:c7:c3:03:
                    56:d8:7e:ab:f0:28:d6:a7:0c:c2:70:09:ab:cc:32:
                    70:ef:69:4e:69:06:6b:1d:b0:b9:e1:0e:51:a9:d4:
                    c2:f5:33:0e:d0:63:e3:30:39:dd:0d:16:43:1f:9b:
                    8a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:33:13:13:56:43:D7:83:2E:A2:5B:5E:0B:C8:1E:4C:DC:9B:BB:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/45d31243-ea0f-30e5-a7cc-6131d2859a12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.crl

            X509v3 Authority Key Identifier:
                keyid:56:83:24:37:A6:0D:F4:93:34:1D:6F:6D:30:C2:9D:0B:08:CE:72:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.249.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:64:ff:d8:3a:65:8d:6d:fb:e0:66:b9:60:60:31:95:6d:f3:
         6d:f1:eb:42:7f:57:08:c9:8e:b8:a7:5a:6b:dd:b7:ce:c6:e6:
         ff:24:84:25:7a:83:aa:30:62:1a:84:59:ed:39:1b:73:f6:89:
         d2:b2:33:36:0d:4b:bc:fe:e6:d5:d8:9b:03:78:6b:76:b3:aa:
         b0:5c:44:03:ca:aa:1a:2c:64:c5:a3:94:e8:fd:07:a2:52:f0:
         a6:41:94:e7:fc:f1:01:5f:ca:da:a8:8d:e6:ea:14:d1:87:93:
         a8:ee:18:d7:1c:ef:76:78:e7:c6:2f:fc:9f:00:e9:33:ff:b1:
         f5:ff:fd:e8:1f:86:88:27:3e:c5:3e:d0:06:f1:36:00:c3:69:
         29:10:96:26:64:9e:6d:49:19:bb:2c:86:d8:7e:14:f1:23:a6:
         bc:55:97:62:87:77:a5:d2:6c:1e:6e:d1:9f:8c:f6:e8:a4:87:
         48:52:39:fe:36:3b:ef:97:85:91:80:06:47:13:99:cc:f4:cb:
         48:7a:ad:73:1d:1c:8c:96:93:fc:f4:3c:7f:5f:9e:cf:c6:f5:
         f8:f5:59:cb:3a:c0:7a:8d:92:5b:d5:2c:80:63:bd:c8:bb:4b:
         e8:e9:84:20:89:3d:27:e7:98:f6:62:16:e9:d5:92:c3:db:ee:
         3e:99:e3:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU/qAqqyhlNDM+W+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVhYzE2YTEtN2U5Yy00ZjhlLTllMmMtOTEzZjNhNjc1
ZDE4MB4XDTI0MDMxODEzMDAzMFoXDTI0MDYxNjEzMDAzMFowLzEtMCsGA1UEAxMk
YzA1Nzk4Y2EtM2UzYS00ZDIzLTljM2QtYjFhNDdkMTFhN2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi06keLpoUWifzy8QXbld6HY7ZDpq7pXkxoWE
E6NHKMRQ8XjkmFwl4y/k0+Z7MEVrSBYDg95I5yp+fne5XCoxqKLdYAzqTbfUTnLl
2/j0LHjb0YNvCzz3lMxVPxrK8XwdRfzbuXMl01AATzoO9uxU2ruVjQ8dZRdO4pDe
zMFGdjcRjery1Tb+cTZeV/HKVjQW44g30Knqin0Q25qxIqqiIElstVXlZjPKxF4O
NDOuRjorvpbCf5ZHxIEurKsfgtTffjWGB5sry1LyCK8nxFzHwwNW2H6r8CjWpwzC
cAmrzDJw72lOaQZrHbC54Q5RqdTC9TMO0GPjMDndDRZDH5uKhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC0zExNWQ9eDLqJbXgvIHkzcm7tkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZWFj
MTZhMS03ZTljLTRmOGUtOWUyYy05MTNmM2E2NzVkMTgvNDVkMzEyNDMtZWEwZi0z
MGU1LWE3Y2MtNjEzMWQyODU5YTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGVhYzE2YTEtN2U5Yy00ZjhlLTll
MmMtOTEzZjNhNjc1ZDE4LzRlYWMxNmExLTdlOWMtNGY4ZS05ZTJjLTkxM2YzYTY3
NWQxOC5jcmwwHwYDVR0jBBgwFoAUVoMkN6YN9JM0HW9tMMKdCwjOcskwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZWFjMTZhMS03ZTljLTRmOGUtOWUyYy05MTNm
M2E2NzVkMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHwPmAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ9k/9g6ZY1t++BmuWBgMZVt823x60J/VwjJjrinWmvdt87G5v8khCV6
g6owYhqEWe05G3P2idKyMzYNS7z+5tXYmwN4a3azqrBcRAPKqhosZMWjlOj9B6JS
8KZBlOf88QFfytqojebqFNGHk6juGNcc73Z458Yv/J8A6TP/sfX//egfhognPsU+
0AbxNgDDaSkQliZknm1JGbsshth+FPEjprxVl2KHd6XSbB5u0Z+M9uikh0hSOf42
O++XhZGABkcTmcz0y0h6rXMdHIyWk/z0PH9fns/G9fj1Wcs6wHqNklvVLIBjvci7
S+jphCCJPSfnmPZiFunVksPb7j6Z44g=
-----END CERTIFICATE-----
Generated at Thu May 23 13:45:46 2024 by rpki-client on console-fra.rpki-client.org