Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/30dccc90-8aa3-3984-967b-51f11c9ee5fd.roa
File:                     30dccc90-8aa3-3984-967b-51f11c9ee5fd.roa (raw, json)
Hash identifier:          HvPBN8fbuzbHbv6QfHP1mRHiWJ6kGy1nuyYg+mwjTGA=
Subject key identifier:   86:00:80:D7:28:FE:AF:D4:C6:3F:CE:67:53:5A:BA:7F:E8:78:AD:F5
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F4328584574B31AFD96912960B60975F8
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/30dccc90-8aa3-3984-967b-51f11c9ee5fd.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     13984
IP address blocks:        209.151.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:1a:fd:96:91:29:60:b6:09:75:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=e1ab01b4-b3e2-484d-a3a5-00b5fd656317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5e:78:ad:1d:4a:de:00:15:03:c7:ad:d3:af:
                    79:56:ae:58:da:6b:2f:54:a6:07:9d:5e:d3:a3:b8:
                    e5:3e:29:6a:a9:3f:1d:25:64:07:36:60:b0:07:6b:
                    30:a9:4f:6b:fe:e5:a5:15:5d:93:92:0b:87:1a:98:
                    de:bb:b7:a1:59:7d:70:54:68:1d:25:9d:75:67:d3:
                    6c:aa:c3:8b:8c:5b:77:04:52:3b:db:c6:a2:48:6f:
                    ca:2e:2a:3d:04:16:b7:60:23:34:1f:6e:53:ee:56:
                    9b:c0:bf:82:08:cb:34:b5:45:b0:40:18:40:37:53:
                    d0:23:59:88:8e:f6:28:48:3a:b8:f8:d7:2e:e1:b0:
                    be:4d:3d:ee:a2:59:00:81:ee:c9:d0:20:c5:fc:9c:
                    94:20:c2:c8:19:ec:f9:dd:8e:71:4e:1f:33:65:6c:
                    54:22:d1:4e:4d:ca:1f:ce:36:f3:0a:32:65:a0:10:
                    05:35:d3:a2:0d:48:1a:55:e2:b0:82:10:0d:d0:7a:
                    38:80:79:dd:fb:80:8e:ef:8c:68:d6:e8:de:7f:0e:
                    f9:22:86:ee:13:6d:c4:09:42:c9:1c:94:11:0c:ef:
                    58:85:e2:e4:45:ff:91:b7:bd:69:3d:cd:a1:09:6a:
                    56:76:4c:cd:e3:19:3e:0e:68:ac:02:d8:c9:4d:e6:
                    7b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:00:80:D7:28:FE:AF:D4:C6:3F:CE:67:53:5A:BA:7F:E8:78:AD:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/30dccc90-8aa3-3984-967b-51f11c9ee5fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:8c:02:5f:7b:7c:07:62:ad:83:1f:47:9c:c3:6c:9b:e8:2d:
         13:c0:45:b5:4a:ba:36:e9:46:1f:f6:f9:10:68:26:5e:90:29:
         18:54:3a:8b:78:62:81:7c:33:81:65:80:a9:69:57:74:25:98:
         ab:63:2d:07:5d:87:6e:42:0b:34:47:a5:23:f2:fa:b2:2f:56:
         c8:88:6e:03:18:bc:6e:91:5a:7d:44:68:fc:aa:89:04:95:f2:
         a2:dd:02:55:72:af:c4:60:54:9c:35:ea:a8:d6:7b:e9:75:e9:
         b4:4a:61:05:6f:a7:0c:ed:f0:77:55:fd:0a:ec:00:35:a7:7f:
         58:a1:49:5d:2c:53:a4:8d:83:7b:8a:28:d1:27:1b:d2:1b:fb:
         6e:97:58:68:06:13:51:25:21:5c:50:c0:76:f1:69:9d:66:ff:
         53:c0:54:b4:a1:ea:a6:6c:96:c7:26:29:19:47:0f:80:d7:01:
         c8:a6:51:d6:1e:50:53:fb:6f:91:da:f4:a3:68:e6:22:90:3d:
         dc:45:e4:94:9c:ae:61:4d:ff:c7:9a:44:b7:55:ac:bb:b2:1f:
         57:d4:59:b4:eb:ff:f7:94:d8:1a:a0:dc:4c:cb:54:98:92:47:
         f2:49:74:00:68:f2:f7:5b:d1:d8:81:31:93:95:f9:e6:de:2f:
         72:21:ea:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV0sxr9lpEpYLYJdfgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2
NGMzMB4XDTI0MDQwNjEzMDAzNVoXDTI0MDcwNTEzMDAzNVowLzEtMCsGA1UEAxMk
ZTFhYjAxYjQtYjNlMi00ODRkLWEzYTUtMDBiNWZkNjU2MzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV54rR1K3gAVA8et0695Vq5Y2msvVKYHnV7T
o7jlPilqqT8dJWQHNmCwB2swqU9r/uWlFV2TkguHGpjeu7ehWX1wVGgdJZ11Z9Ns
qsOLjFt3BFI728aiSG/KLio9BBa3YCM0H25T7labwL+CCMs0tUWwQBhAN1PQI1mI
jvYoSDq4+Ncu4bC+TT3uolkAge7J0CDF/JyUIMLIGez53Y5xTh8zZWxUItFOTcof
zjbzCjJloBAFNdOiDUgaVeKwghAN0Ho4gHnd+4CO74xo1ujefw75IobuE23ECULJ
HJQRDO9YheLkRf+Rt71pPc2hCWpWdkzN4xk+DmisAtjJTeZ7KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIYAgNco/q/Uxj/OZ1Naun/oeK31MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh
ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvMzBkY2NjOTAtOGFhMy0z
OTg0LTk2N2ItNTFmMTFjOWVlNWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk
MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1
NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj
OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ZfAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHaMAl97fAdirYMfR5zDbJvoLRPARbVKujbpRh/2+RBoJl6QKRhUOot4
YoF8M4FlgKlpV3QlmKtjLQddh25CCzRHpSPy+rIvVsiIbgMYvG6RWn1EaPyqiQSV
8qLdAlVyr8RgVJw16qjWe+l16bRKYQVvpwzt8HdV/QrsADWnf1ihSV0sU6SNg3uK
KNEnG9Ib+26XWGgGE1ElIVxQwHbxaZ1m/1PAVLSh6qZslscmKRlHD4DXAcimUdYe
UFP7b5Ha9KNo5iKQPdxF5JScrmFN/8eaRLdVrLuyH1fUWbTr//eU2Bqg3EzLVJiS
R/JJdABo8vdb0diBMZOV+ebeL3Ih6jg=
-----END CERTIFICATE-----
Generated at Mon May 6 23:15:00 2024 by rpki-client on console-fra.rpki-client.org