Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/977bc849-5b1d-34c5-91eb-81e2477f1b1a.roa
File:                     977bc849-5b1d-34c5-91eb-81e2477f1b1a.roa (raw, json)
Hash identifier:          Kq2vGoMX/Sa7RRqvnzJIMh0ruh5kwejHaemi5xOKFqo=
Subject key identifier:   EB:DC:91:67:DB:3D:AD:04:B8:C5:54:3C:5B:0A:69:7A:FB:0D:37:33
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285845462492E9938A81463266C700
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/977bc849-5b1d-34c5-91eb-81e2477f1b1a.roa
Signing time:             Wed 20 Mar 2024 20:46:21 +0000
ROA not before:           Wed 20 Mar 2024 20:46:21 +0000
ROA not after:            Tue 18 Jun 2024 20:46:21 +0000
asID:                     36492
IP address blocks:        209.107.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:24:92:e9:93:8a:81:46:32:66:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Mar 20 20:46:21 2024 GMT
            Not After : Jun 18 20:46:21 2024 GMT
        Subject: CN=ed66fe74-d7e4-4b07-9be0-436e286740ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ca:bb:1d:1f:97:11:cb:5a:27:82:d9:60:78:
                    a2:62:5e:12:84:ca:f1:55:a2:2e:1a:ab:d1:49:0b:
                    70:fd:03:3d:84:f3:28:e7:39:4a:f7:79:51:66:89:
                    eb:1a:1f:a8:7b:7b:a5:50:25:12:99:85:d6:f7:29:
                    5b:08:55:18:0f:a8:42:99:e7:83:e9:b4:05:5f:34:
                    c4:84:59:fe:e1:7e:b0:79:12:8c:93:52:0f:01:4e:
                    7f:25:55:2f:02:44:e3:fe:d7:6d:12:e1:2b:36:25:
                    18:b4:40:68:e5:48:1d:f7:fc:a9:37:a3:8a:b1:17:
                    10:17:82:3f:49:0a:17:e4:8a:f4:d1:e4:5d:93:24:
                    7c:ef:14:6e:37:23:18:51:d1:6f:c0:cd:99:9f:24:
                    e6:3c:67:58:87:94:47:20:94:1a:7d:8d:1b:fd:97:
                    71:28:a9:21:1a:fb:33:f1:2a:51:7d:27:e9:c4:f3:
                    d1:92:2f:e5:83:da:80:86:49:ad:e6:b0:c4:d0:2e:
                    fc:e9:39:e4:07:f4:74:7f:49:99:9d:2d:0f:ff:7e:
                    af:c0:53:cf:38:be:d8:b2:2c:f9:97:0f:28:cb:3d:
                    a1:11:c4:3d:96:61:7b:b4:31:dc:d1:a6:a3:1a:ba:
                    6d:c1:fc:b7:3e:d4:c6:a3:27:b9:c5:ec:b5:56:aa:
                    cb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DC:91:67:DB:3D:AD:04:B8:C5:54:3C:5B:0A:69:7A:FB:0D:37:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/977bc849-5b1d-34c5-91eb-81e2477f1b1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:d1:ba:8c:a4:ff:f3:37:a1:58:e6:80:f0:7d:58:a2:7b:7a:
         34:56:96:6b:63:20:3b:70:92:65:d8:fd:9b:f5:77:48:29:f4:
         9f:d8:e6:8e:68:d1:67:d7:40:67:a2:68:4c:d7:8d:c4:19:d4:
         ac:d2:b1:62:c3:f7:5d:2c:c2:03:20:0e:82:50:06:69:a8:d4:
         a6:96:3a:82:74:2d:c9:4e:5a:6c:51:2b:b4:02:37:2e:6a:6c:
         05:ce:9e:4b:7b:32:32:cc:e1:c8:7f:d0:1f:27:f8:16:b5:5c:
         de:e0:aa:c0:de:40:fd:6b:52:fe:86:88:90:96:27:84:38:8d:
         3a:2a:13:0c:8c:7e:82:bb:92:8c:14:2b:4f:d6:e9:b0:b1:c6:
         b1:e1:09:0d:f0:a2:52:e3:34:f1:96:2c:ce:2a:fb:c3:73:f6:
         10:6c:15:be:9d:de:5e:81:05:64:38:08:dc:35:e4:6d:ff:16:
         5a:e8:15:b9:78:77:cc:f7:1d:e5:bd:7c:93:fc:62:75:1d:09:
         d7:28:cd:88:56:1f:11:c1:74:d4:66:4b:e5:bc:b4:6d:01:d9:
         94:8d:ba:c7:c7:fb:5a:e2:3b:99:5d:18:05:ea:32:b9:c5:eb:
         bb:fd:2d:23:d1:40:ba:b1:39:e8:a2:c2:c6:1a:0f:fc:1d:71:
         c9:c3:eb:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGJJLpk4qBRjJmxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTI0MDMyMDIwNDYyMVoXDTI0MDYxODIwNDYyMVowLzEtMCsGA1UEAxMk
ZWQ2NmZlNzQtZDdlNC00YjA3LTliZTAtNDM2ZTI4Njc0MGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMq7HR+XEctaJ4LZYHiiYl4ShMrxVaIuGqvR
SQtw/QM9hPMo5zlK93lRZonrGh+oe3ulUCUSmYXW9ylbCFUYD6hCmeeD6bQFXzTE
hFn+4X6weRKMk1IPAU5/JVUvAkTj/tdtEuErNiUYtEBo5Ugd9/ypN6OKsRcQF4I/
SQoX5Ir00eRdkyR87xRuNyMYUdFvwM2ZnyTmPGdYh5RHIJQafY0b/ZdxKKkhGvsz
8SpRfSfpxPPRki/lg9qAhkmt5rDE0C786TnkB/R0f0mZnS0P/36vwFPPOL7Ysiz5
lw8oyz2hEcQ9lmF7tDHc0aajGrptwfy3PtTGoye5xey1VqrLbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOvckWfbPa0EuMVUPFsKaXr7DTczMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvOTc3YmM4NDktNWIxZC0z
NGM1LTkxZWItODFlMjQ3N2YxYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WuwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXRuoyk//M3oVjmgPB9WKJ7ejRWlmtjIDtwkmXY/Zv1d0gp9J/Y5o5o
0WfXQGeiaEzXjcQZ1KzSsWLD910swgMgDoJQBmmo1KaWOoJ0LclOWmxRK7QCNy5q
bAXOnkt7MjLM4ch/0B8n+Ba1XN7gqsDeQP1rUv6GiJCWJ4Q4jToqEwyMfoK7kowU
K0/W6bCxxrHhCQ3wolLjNPGWLM4q+8Nz9hBsFb6d3l6BBWQ4CNw15G3/FlroFbl4
d8z3HeW9fJP8YnUdCdcozYhWHxHBdNRmS+W8tG0B2ZSNusfH+1riO5ldGAXqMrnF
67v9LSPRQLqxOeiiwsYaD/wdccnD6zg=
-----END CERTIFICATE-----
Generated at Thu May 2 03:28:29 2024 by rpki-client on console-ams.rpki-client.org