Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/d8acde07-8bc5-3c30-80fd-64d85e11aa05.roa
File:                     d8acde07-8bc5-3c30-80fd-64d85e11aa05.roa (raw, json)
Hash identifier:          K4yF+tfWTfYh6M3x9u3wC8OJNpXlZ3RkNi3CTQoBnJQ=
Subject key identifier:   8A:CE:4B:BC:A6:D6:86:67:86:67:77:38:20:61:15:47:20:37:E5:92
Certificate issuer:       /CN=000bd43e-168e-4afa-8dc5-47948687933d
Certificate serial:       010D0C9F4328584531B2981BE17F858BB6DF4300
Authority key identifier: 89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/d8acde07-8bc5-3c30-80fd-64d85e11aa05.roa
Signing time:             Wed 13 Mar 2024 13:00:30 +0000
ROA not before:           Wed 13 Mar 2024 13:00:30 +0000
ROA not after:            Tue 11 Jun 2024 13:00:30 +0000
asID:                     16509
IP address blocks:        69.52.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:b2:98:1b:e1:7f:85:8b:b6:df:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000bd43e-168e-4afa-8dc5-47948687933d
        Validity
            Not Before: Mar 13 13:00:30 2024 GMT
            Not After : Jun 11 13:00:30 2024 GMT
        Subject: CN=65e1077f-8e65-45e5-bc8a-be7e806f07ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:d1:db:1a:35:8f:e1:b0:6f:4d:b6:4a:5e:
                    ad:ba:4c:8c:a1:25:a6:a0:70:25:f9:b6:a2:93:94:
                    20:20:6c:90:2a:a6:cc:6a:7b:a8:e2:f6:ff:da:7a:
                    a2:22:fd:a5:73:a9:72:10:9e:d4:1a:b8:cb:48:6d:
                    05:d8:93:16:c4:58:d1:14:8e:a1:50:2a:e3:e6:46:
                    38:80:7b:be:9c:1f:b6:1f:4f:e1:aa:7e:bb:be:35:
                    76:fb:54:63:9a:ff:9b:bd:a7:52:ff:7d:73:24:cb:
                    0f:d6:dd:62:83:51:e8:61:89:b4:ee:cb:70:b0:04:
                    24:b9:2b:a2:21:d1:f3:b5:ef:29:d2:8d:f4:99:25:
                    f5:e8:38:9b:d0:ad:c6:0e:73:56:62:da:57:12:54:
                    8a:65:35:96:c4:1a:cc:f5:7d:c3:1e:07:92:e1:11:
                    41:d9:85:a7:a3:5b:62:54:58:f2:75:1f:50:b4:8b:
                    e2:a4:49:78:eb:05:83:f1:f5:55:14:ca:f9:c0:47:
                    d7:a4:64:75:9b:92:53:6d:80:cb:0a:32:bf:a5:e2:
                    00:db:77:59:9f:38:15:d4:03:b1:69:3a:18:41:ea:
                    db:3b:20:b9:f3:43:7f:43:6b:b7:91:e9:7f:a4:41:
                    23:15:b0:0d:f2:f1:a7:44:c2:8f:75:65:a9:94:f6:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CE:4B:BC:A6:D6:86:67:86:67:77:38:20:61:15:47:20:37:E5:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/d8acde07-8bc5-3c30-80fd-64d85e11aa05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.crl

            X509v3 Authority Key Identifier:
                keyid:89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a4:7e:61:4f:63:aa:1e:b1:eb:79:e1:ac:08:c3:ba:16:3a:
         58:8a:cc:2d:32:42:f3:62:e0:30:b8:59:18:9a:41:57:11:d7:
         7f:f7:10:ac:26:f5:9b:69:e4:67:6c:6e:72:1e:19:96:99:48:
         f7:8d:3c:ec:48:ad:62:3c:75:d9:ba:08:c7:53:f8:45:9f:cd:
         a0:a0:e9:67:b2:e1:1b:3b:90:20:5d:a9:07:2f:2f:09:5e:bc:
         9d:32:42:95:19:34:af:36:d1:6c:f3:f7:a3:54:c9:b2:e2:f8:
         71:2f:b5:78:08:d7:0c:69:dc:5a:22:1b:c3:87:73:4c:ea:f2:
         3f:9a:5c:e7:38:2e:1c:7a:28:01:a6:83:83:b1:c8:95:f7:27:
         ef:d4:20:56:ad:2c:f2:1f:fd:33:e1:35:d9:9e:27:6f:a5:60:
         39:42:df:85:16:3e:cf:4e:cc:5d:15:be:a7:e2:1e:23:9f:07:
         e7:77:1b:95:b0:23:d1:4a:f6:d0:2b:a1:ae:df:e9:4e:c7:1f:
         e3:c4:d1:5f:ea:04:52:3d:b2:37:78:f6:8c:0a:89:a1:cd:d1:
         1a:62:ca:ee:94:30:b8:bf:97:df:5d:4d:2a:b5:f8:7d:50:db:
         a1:da:55:e9:e3:8b:c8:85:6a:88:22:d6:92:02:4e:8f:8a:f6:
         8a:a3:ee:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUxspgb4X+Fi7bfQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDAwYmQ0M2UtMTY4ZS00YWZhLThkYzUtNDc5NDg2ODc5
MzNkMB4XDTI0MDMxMzEzMDAzMFoXDTI0MDYxMTEzMDAzMFowLzEtMCsGA1UEAxMk
NjVlMTA3N2YtOGU2NS00NWU1LWJjOGEtYmU3ZTgwNmYwN2VlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvobR2xo1j+Gwb022Sl6tukyMoSWmoHAl+bai
k5QgIGyQKqbManuo4vb/2nqiIv2lc6lyEJ7UGrjLSG0F2JMWxFjRFI6hUCrj5kY4
gHu+nB+2H0/hqn67vjV2+1Rjmv+bvadS/31zJMsP1t1ig1HoYYm07stwsAQkuSui
IdHzte8p0o30mSX16Dib0K3GDnNWYtpXElSKZTWWxBrM9X3DHgeS4RFB2YWno1ti
VFjydR9QtIvipEl46wWD8fVVFMr5wEfXpGR1m5JTbYDLCjK/peIA23dZnzgV1AOx
aToYQerbOyC580N/Q2u3kel/pEEjFbAN8vGnRMKPdWWplPYClQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIrOS7ym1oZnhmd3OCBhFUcgN+WSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wMDBi
ZDQzZS0xNjhlLTRhZmEtOGRjNS00Nzk0ODY4NzkzM2QvZDhhY2RlMDctOGJjNS0z
YzMwLTgwZmQtNjRkODVlMTFhYTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDAwYmQ0M2UtMTY4ZS00YWZhLThk
YzUtNDc5NDg2ODc5MzNkLzAwMGJkNDNlLTE2OGUtNGFmYS04ZGM1LTQ3OTQ4Njg3
OTMzZC5jcmwwHwYDVR0jBBgwFoAUiagPt6elyYgQiGSpSHJaWrotZAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wMDBiZDQzZS0xNjhlLTRhZmEtOGRjNS00Nzk0
ODY4NzkzM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTTXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWkfmFPY6oeset54awIw7oWOliKzC0yQvNi4DC4WRiaQVcR13/3EKwm
9Ztp5GdsbnIeGZaZSPeNPOxIrWI8ddm6CMdT+EWfzaCg6Wey4Rs7kCBdqQcvLwle
vJ0yQpUZNK820Wzz96NUybLi+HEvtXgI1wxp3FoiG8OHc0zq8j+aXOc4Lhx6KAGm
g4OxyJX3J+/UIFatLPIf/TPhNdmeJ2+lYDlC34UWPs9OzF0VvqfiHiOfB+d3G5Ww
I9FK9tAroa7f6U7HH+PE0V/qBFI9sjd49owKiaHN0Rpiyu6UMLi/l99dTSq1+H1Q
26HaVenji8iFaogi1pICTo+K9oqj7vA=
-----END CERTIFICATE-----
Generated at Thu May 2 14:57:33 2024 by rpki-client on console-fra.rpki-client.org