Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/88d2372e-5c67-3a88-9e35-0132b6415fd4.roa
File:                     88d2372e-5c67-3a88-9e35-0132b6415fd4.roa (raw, json)
Hash identifier:          d961zCfJjj6gKfVqfftm7/1lwe5grvajB4CMBChHihM=
Subject key identifier:   CB:78:04:B6:F2:10:70:1B:59:FD:CF:84:D8:EB:14:48:2B:25:83:8E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858384FE6A7F8AAC41D58550CAF80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/88d2372e-5c67-3a88-9e35-0132b6415fd4.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     20115
IP address blocks:        174.82.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:e6:a7:f8:aa:c4:1d:58:55:0c:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=f2754d63-862f-42dd-b308-7dfb699f8f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:73:90:cd:7a:17:fc:a5:a0:69:46:c3:3d:71:
                    f3:9a:80:53:43:93:e5:d3:90:92:6b:95:ed:8b:8f:
                    fa:0e:48:07:36:de:8c:bf:f0:24:3e:6b:9b:28:8b:
                    cb:19:c4:42:f1:81:dc:9d:34:3d:71:ad:54:5a:f4:
                    95:bf:8d:b1:fd:0f:c5:f6:a3:69:f9:1a:24:72:bc:
                    bc:d2:61:36:36:99:45:6e:8e:01:ff:14:ed:eb:97:
                    db:60:40:e5:21:4b:7a:dd:f7:87:91:ea:38:14:0f:
                    fd:73:0e:b9:c5:0b:62:e2:2d:08:18:ec:03:d3:dd:
                    17:45:f5:e2:91:40:b1:2c:43:49:1f:93:b4:99:c3:
                    e0:a8:07:81:2d:16:3c:87:59:0a:c6:8f:52:73:cb:
                    32:d0:e1:69:3a:0f:18:46:79:11:71:0c:26:bb:6c:
                    d6:86:1b:32:ac:1b:20:53:c8:f7:6b:34:64:92:36:
                    88:62:9f:12:a4:c4:20:3f:c6:e0:3f:5b:b1:68:ac:
                    cf:9e:c1:1c:45:35:40:34:74:ae:67:41:b3:27:46:
                    d0:d6:b2:01:fc:e6:47:8a:e7:f7:ac:37:8f:ce:cc:
                    b7:c9:65:b6:cd:3f:ce:73:20:69:2e:bc:26:24:85:
                    aa:38:55:52:07:37:0c:dc:83:a1:42:bd:fb:25:b2:
                    61:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:78:04:B6:F2:10:70:1B:59:FD:CF:84:D8:EB:14:48:2B:25:83:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/88d2372e-5c67-3a88-9e35-0132b6415fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.82.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:1a:64:c7:3c:90:0c:cc:33:b6:8a:da:af:d5:28:92:07:9a:
         03:e8:53:87:28:92:f3:46:f7:a8:20:b4:7d:c2:99:cb:59:33:
         e3:91:93:b2:f4:0d:0f:d0:08:1f:0e:d6:0d:34:e1:6a:2e:37:
         08:66:8a:8b:c7:ba:f3:e2:1c:ef:8d:6c:48:d6:90:9f:f6:f6:
         dc:56:2f:af:e0:d9:8b:67:18:82:be:f4:a6:5a:fc:51:8e:a3:
         6a:10:e6:33:7f:1a:f7:01:a8:fe:1c:9d:e9:a7:19:64:9e:d8:
         0c:f8:86:5a:a9:ca:58:e0:dc:c4:9e:4c:28:20:6c:7e:29:d5:
         dd:01:93:e8:46:a4:27:22:ae:45:b8:ca:f6:91:90:dd:7f:dc:
         8a:18:f7:aa:1c:ba:55:f2:f3:18:b4:2c:ee:a7:2d:82:d6:40:
         98:23:3d:5d:f5:4d:50:cd:a5:2c:53:dd:f9:d4:c4:c7:91:e4:
         02:00:f5:af:37:31:69:ba:39:67:ab:97:ee:cc:12:df:f5:b9:
         dc:0f:fb:de:46:82:1e:0e:3d:2b:5d:0d:a9:6f:ff:47:2a:c2:
         e9:1d:2d:4b:d2:85:e7:4c:68:82:27:e4:90:a7:cd:43:32:f2:
         42:48:a3:b5:f7:b7:68:9a:9e:f1:03:d6:51:6d:a1:df:06:33:
         a6:9f:49:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDhP5qf4qsQdWFUMr4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTIwMTIxODA1MDAwMFoXDTI2MTIxMTA1MDAwMFowLzEtMCsGA1UEAxMk
ZjI3NTRkNjMtODYyZi00MmRkLWIzMDgtN2RmYjY5OWY4Zjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3OQzXoX/KWgaUbDPXHzmoBTQ5Pl05CSa5Xt
i4/6DkgHNt6Mv/AkPmubKIvLGcRC8YHcnTQ9ca1UWvSVv42x/Q/F9qNp+Rokcry8
0mE2NplFbo4B/xTt65fbYEDlIUt63feHkeo4FA/9cw65xQti4i0IGOwD090XRfXi
kUCxLENJH5O0mcPgqAeBLRY8h1kKxo9Sc8sy0OFpOg8YRnkRcQwmu2zWhhsyrBsg
U8j3azRkkjaIYp8SpMQgP8bgP1uxaKzPnsEcRTVANHSuZ0GzJ0bQ1rIB/OZHiuf3
rDePzsy3yWW2zT/OcyBpLrwmJIWqOFVSBzcM3IOhQr37JbJhoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMt4BLbyEHAbWf3PhNjrFEgrJYOOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvODhkMjM3MmUtNWM2Ny0z
YTg4LTllMzUtMDEzMmI2NDE1ZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrlKAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADAaZMc8kAzMM7aK2q/VKJIHmgPoU4cokvNG96ggtH3CmctZM+ORk7L0
DQ/QCB8O1g004WouNwhmiovHuvPiHO+NbEjWkJ/29txWL6/g2YtnGIK+9KZa/FGO
o2oQ5jN/GvcBqP4cnemnGWSe2Az4hlqpyljg3MSeTCggbH4p1d0Bk+hGpCcirkW4
yvaRkN1/3IoY96oculXy8xi0LO6nLYLWQJgjPV31TVDNpSxT3fnUxMeR5AIA9a83
MWm6OWerl+7MEt/1udwP+95Ggh4OPStdDalv/0cqwukdLUvShedMaIIn5JCnzUMy
8kJIo7X3t2ianvED1lFtod8GM6afSXc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:25 2024 by rpki-client on console-fra.rpki-client.org