Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/850556b3-dd11-3c58-ad75-038a96f5c625.roa
File:                     850556b3-dd11-3c58-ad75-038a96f5c625.roa (raw, json)
Hash identifier:          eJxibnWbQbxpYwSyXdruZ92DrbU2EePt1cZZNG1h6uQ=
Subject key identifier:   F8:57:07:66:48:9A:F1:4A:C8:9A:B7:DB:D1:36:93:F7:66:E8:1C:DC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5F80E32A1745EFAEE5880
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/850556b3-dd11-3c58-ad75-038a96f5c625.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        174.87.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:f8:0e:32:a1:74:5e:fa:ee:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=0c2cc882-0021-4989-8210-485fd7aa5bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f6:18:be:fb:ee:bf:0d:fa:21:44:28:6d:29:
                    55:88:70:44:20:62:09:76:30:01:92:c8:ef:df:6a:
                    1b:8b:2c:40:16:b5:04:83:ce:e9:92:90:dc:37:a2:
                    42:e1:d6:d3:a5:0f:e6:91:89:9b:8a:4e:f3:08:6b:
                    d3:4b:2b:7f:b0:d3:14:48:4e:d0:0a:ed:b3:09:49:
                    57:68:67:56:f0:93:ea:fb:a7:80:65:9b:e5:fb:df:
                    e2:77:58:da:89:34:ef:8c:f6:80:9a:b4:17:0a:d8:
                    6e:a4:1d:da:57:d7:59:c0:ff:ea:50:16:de:25:01:
                    1b:c9:44:e1:d2:69:32:52:e0:a4:de:ee:b2:3b:54:
                    26:49:ea:f0:a7:57:c1:0b:e3:9f:57:4c:78:a0:06:
                    0d:3e:d4:fa:75:f0:1c:78:24:4a:61:5b:43:dd:5f:
                    29:62:6c:3a:1a:90:dc:d6:3c:d2:07:1d:7b:39:b9:
                    e2:c8:b9:36:26:aa:21:bd:fb:90:40:aa:14:f9:dc:
                    a9:1e:e2:27:6e:d9:fa:13:da:2e:7a:e8:82:66:89:
                    47:c8:2d:a4:8c:0a:2f:e5:3b:ad:1e:f6:25:d7:eb:
                    79:e4:4b:6a:71:fa:58:75:2f:c3:f7:30:a6:f6:96:
                    05:fa:83:be:20:26:31:fe:32:7d:5b:96:97:1b:65:
                    72:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:57:07:66:48:9A:F1:4A:C8:9A:B7:DB:D1:36:93:F7:66:E8:1C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/850556b3-dd11-3c58-ad75-038a96f5c625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.87.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f0:48:55:87:5c:bb:92:67:76:a9:a1:3e:72:58:0a:f6:88:
         6d:c9:86:1b:e6:5e:04:0c:9b:dd:76:5b:f0:28:02:f0:59:99:
         11:3b:90:bf:35:9d:36:2f:ff:36:63:94:57:12:5d:57:d7:18:
         9d:f3:e4:9c:0d:b2:67:51:79:ac:1a:39:c8:4a:b1:6d:2e:14:
         21:bb:cb:e7:64:80:dc:fb:84:7c:a3:75:43:23:ac:f3:59:57:
         c1:24:46:11:c7:55:62:95:64:9e:f0:13:ad:5f:56:18:82:db:
         d9:2b:00:7d:b5:1d:a1:c8:b6:ea:ba:a7:c0:f2:0b:73:ad:2d:
         51:21:82:8c:a2:4a:37:c3:c0:45:35:c5:7a:d4:6f:52:ad:97:
         bd:35:d7:21:ea:db:d5:47:a7:ef:8d:a9:61:ce:cf:a3:b8:79:
         e5:75:55:7d:99:a3:99:eb:00:0a:9e:a9:5c:d0:10:7a:ef:76:
         0b:97:89:c7:fb:ca:97:97:da:82:9a:58:d7:b6:e2:c0:2d:96:
         ac:82:ac:d0:7b:01:57:a5:87:65:2e:5e:4d:ee:90:5f:ea:13:
         b6:13:b0:18:de:b7:99:89:04:cc:21:41:20:7b:e7:27:c5:db:
         e2:04:ab:9d:fa:74:66:1a:36:18:bd:95:e7:0e:e6:63:a2:08:
         7a:44:55:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcf1fgOMqF0XvruWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
MGMyY2M4ODItMDAyMS00OTg5LTgyMTAtNDg1ZmQ3YWE1YmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPYYvvvuvw36IUQobSlViHBEIGIJdjABksjv
32obiyxAFrUEg87pkpDcN6JC4dbTpQ/mkYmbik7zCGvTSyt/sNMUSE7QCu2zCUlX
aGdW8JPq+6eAZZvl+9/id1jaiTTvjPaAmrQXCthupB3aV9dZwP/qUBbeJQEbyUTh
0mkyUuCk3u6yO1QmSerwp1fBC+OfV0x4oAYNPtT6dfAceCRKYVtD3V8pYmw6GpDc
1jzSBx17ObniyLk2JqohvfuQQKoU+dypHuInbtn6E9oueuiCZolHyC2kjAov5Tut
HvYl1+t55EtqcfpYdS/D9zCm9pYF+oO+ICYx/jJ9W5aXG2VytQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPhXB2ZImvFKyJq329E2k/dm6BzcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvODUwNTU2YjMtZGQxMS0z
YzU4LWFkNzUtMDM4YTk2ZjVjNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrlfAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACDwSFWHXLuSZ3apoT5yWAr2iG3JhhvmXgQMm912W/AoAvBZmRE7kL81
nTYv/zZjlFcSXVfXGJ3z5JwNsmdReawaOchKsW0uFCG7y+dkgNz7hHyjdUMjrPNZ
V8EkRhHHVWKVZJ7wE61fVhiC29krAH21HaHItuq6p8DyC3OtLVEhgoyiSjfDwEU1
xXrUb1Ktl7011yHq29VHp++NqWHOz6O4eeV1VX2Zo5nrAAqeqVzQEHrvdguXicf7
ypeX2oKaWNe24sAtlqyCrNB7AVelh2UuXk3ukF/qE7YTsBjet5mJBMwhQSB75yfF
2+IEq536dGYaNhi9lecO5mOiCHpEVSg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:08 2024 by rpki-client on console-ams.rpki-client.org