Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/778746d2-c9b5-351c-84d1-9834e1bdbc62.roa
File:                     778746d2-c9b5-351c-84d1-9834e1bdbc62.roa (raw, json)
Hash identifier:          eurk1g7I5uxSjU5alQFo7EaIBG386/oqqyrqUShIetM=
Subject key identifier:   27:8F:DB:18:A9:7D:27:A8:4A:79:16:75:34:3A:9C:CD:E6:D2:AE:55
Certificate issuer:       /CN=5886029e-a569-4937-b21c-91a2f3965848
Certificate serial:       010D0C9F43285844C91FB3D000155D54884807C0
Authority key identifier: 6F:EC:B4:C9:A1:C0:84:F9:57:43:1E:FD:87:D4:0D:0E:F9:35:7F:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/778746d2-c9b5-351c-84d1-9834e1bdbc62.roa
Signing time:             Mon 05 Feb 2024 02:00:26 +0000
ROA not before:           Mon 05 Feb 2024 02:00:26 +0000
ROA not after:            Sun 05 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        199.196.234.0/24 maxlen: 24
                          199.196.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/5886029e-a569-4937-b21c-91a2f3965848.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/5886029e-a569-4937-b21c-91a2f3965848.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c9:1f:b3:d0:00:15:5d:54:88:48:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5886029e-a569-4937-b21c-91a2f3965848
        Validity
            Not Before: Feb  5 02:00:26 2024 GMT
            Not After : May  5 01:00:26 2024 GMT
        Subject: CN=36120f80-10e1-4677-b924-e6285e9d1611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:62:fc:4c:bc:4e:ef:ed:0a:be:27:21:de:62:
                    d8:60:fb:51:ab:9a:2b:9c:d2:6f:24:82:c7:b0:5a:
                    13:a8:e2:2f:48:7f:71:dd:2e:cb:58:98:60:d3:fa:
                    e5:4a:fa:41:ee:76:81:e4:46:93:c1:50:87:6c:d2:
                    74:26:84:2b:8e:6c:92:ea:c9:18:8c:b6:42:21:4a:
                    ae:64:44:c8:f4:8c:6c:0d:2d:14:cb:62:c0:63:f3:
                    f3:62:fe:e3:32:97:96:3a:9f:46:d4:b2:8e:8d:00:
                    e4:11:6b:a6:25:55:0c:3a:3c:05:03:0d:d4:f8:18:
                    10:db:ef:d3:96:09:8e:fa:e3:7a:8b:3b:5d:a4:6e:
                    2b:72:74:36:29:7f:c5:04:80:fd:90:50:85:6e:f2:
                    34:b3:f7:2b:f8:62:77:06:42:4b:ee:06:08:23:d2:
                    01:11:48:53:27:8d:6a:79:c1:53:f9:6a:c6:4a:05:
                    82:f4:68:6a:df:0d:3f:fe:f6:98:f8:e4:82:32:68:
                    21:d4:33:f5:70:5a:e2:3b:eb:9b:6a:00:fb:1d:e8:
                    1e:a6:18:38:57:df:a2:e4:e0:9c:f3:c4:d5:e2:d9:
                    0f:d3:a4:ba:cb:24:01:78:56:82:fe:5c:0b:17:63:
                    a9:3b:1a:22:70:63:6e:9d:28:ea:cc:c5:16:c2:ba:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8F:DB:18:A9:7D:27:A8:4A:79:16:75:34:3A:9C:CD:E6:D2:AE:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/778746d2-c9b5-351c-84d1-9834e1bdbc62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/5886029e-a569-4937-b21c-91a2f3965848.crl

            X509v3 Authority Key Identifier:
                keyid:6F:EC:B4:C9:A1:C0:84:F9:57:43:1E:FD:87:D4:0D:0E:F9:35:7F:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.196.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:27:a8:22:9c:c2:2f:a6:67:99:6b:bf:76:9f:f7:0c:f0:4e:
         96:ad:ba:b3:b4:43:80:a9:c8:46:6d:f6:6d:1f:c3:20:16:a8:
         ca:9f:2e:a7:fd:19:ae:a3:c8:82:2b:84:68:98:e1:3d:87:00:
         67:a4:7f:98:90:27:aa:6f:89:2f:26:64:39:d5:77:db:18:c1:
         32:c7:a8:54:20:53:f6:dc:c0:03:e2:b4:0f:78:d0:ac:70:3c:
         c9:b0:e8:89:af:50:ae:11:91:34:e0:4f:90:c7:f0:57:7f:1c:
         a8:f5:f1:ec:45:92:d4:9f:8e:f9:31:3c:05:37:0b:18:8e:df:
         80:f7:e6:61:98:28:da:f4:58:a5:cf:ea:71:16:49:db:6b:31:
         9f:51:ab:dc:08:2e:8f:16:37:80:a1:fa:e8:f8:7a:4c:49:9a:
         fa:7c:dd:69:71:f2:d9:ac:ea:a3:fb:46:d2:64:a9:5d:9c:07:
         92:9d:6f:d9:33:13:67:a7:e0:59:ac:f1:21:98:29:a2:0d:e7:
         cd:8e:27:9b:e0:f3:0b:4a:8f:54:fe:23:ae:f2:17:ec:7b:75:
         a9:a1:00:c1:6d:92:f4:79:5a:44:56:78:b8:ea:76:92:9c:eb:
         d5:01:c5:f7:ad:54:1a:c5:90:35:29:4f:dd:98:5e:21:c0:81:
         f3:c7:30:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETJH7PQABVdVIhIB8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTg4NjAyOWUtYTU2OS00OTM3LWIyMWMtOTFhMmYzOTY1
ODQ4MB4XDTI0MDIwNTAyMDAyNloXDTI0MDUwNTAxMDAyNlowLzEtMCsGA1UEAxMk
MzYxMjBmODAtMTBlMS00Njc3LWI5MjQtZTYyODVlOWQxNjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWL8TLxO7+0Kvich3mLYYPtRq5ornNJvJILH
sFoTqOIvSH9x3S7LWJhg0/rlSvpB7naB5EaTwVCHbNJ0JoQrjmyS6skYjLZCIUqu
ZETI9IxsDS0Uy2LAY/PzYv7jMpeWOp9G1LKOjQDkEWumJVUMOjwFAw3U+BgQ2+/T
lgmO+uN6iztdpG4rcnQ2KX/FBID9kFCFbvI0s/cr+GJ3BkJL7gYII9IBEUhTJ41q
ecFT+WrGSgWC9Ghq3w0//vaY+OSCMmgh1DP1cFriO+ubagD7Hegephg4V9+i5OCc
88TV4tkP06S6yyQBeFaC/lwLF2OpOxoicGNunSjqzMUWwrpT2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCeP2xipfSeoSnkWdTQ6nM3m0q5VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ODg2
MDI5ZS1hNTY5LTQ5MzctYjIxYy05MWEyZjM5NjU4NDgvNzc4NzQ2ZDItYzliNS0z
NTFjLTg0ZDEtOTgzNGUxYmRiYzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTg4NjAyOWUtYTU2OS00OTM3LWIy
MWMtOTFhMmYzOTY1ODQ4LzU4ODYwMjllLWE1NjktNDkzNy1iMjFjLTkxYTJmMzk2
NTg0OC5jcmwwHwYDVR0jBBgwFoAUb+y0yaHAhPlXQx79h9QNDvk1f/AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ODg2MDI5ZS1hNTY5LTQ5MzctYjIxYy05MWEy
ZjM5NjU4NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8TqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEgnqCKcwi+mZ5lrv3af9wzwTpaturO0Q4CpyEZt9m0fwyAWqMqfLqf9
Ga6jyIIrhGiY4T2HAGekf5iQJ6pviS8mZDnVd9sYwTLHqFQgU/bcwAPitA940Kxw
PMmw6ImvUK4RkTTgT5DH8Fd/HKj18exFktSfjvkxPAU3CxiO34D35mGYKNr0WKXP
6nEWSdtrMZ9Rq9wILo8WN4Ch+uj4ekxJmvp83Wlx8tms6qP7RtJkqV2cB5Kdb9kz
E2en4Fms8SGYKaIN582OJ5vg8wtKj1T+I67yF+x7damhAMFtkvR5WkRWeLjqdpKc
69UBxfetVBrFkDUpT92YXiHAgfPHMMw=
-----END CERTIFICATE-----
Generated at Fri Mar 29 06:27:08 2024 by rpki-client on console-ams.rpki-client.org