Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/95a5c3a4-3e8a-3c0b-8478-0d8fcf7fa569.roa
File:                     95a5c3a4-3e8a-3c0b-8478-0d8fcf7fa569.roa (raw, json)
Hash identifier:          0mWf6rIiEMoP9I/VAQKgqfWYTZshiHAS/SJvzDZScA8=
Subject key identifier:   9E:35:D6:DB:AE:4F:25:7C:A0:AF:0D:32:22:10:38:BD:9B:26:18:8F
Certificate issuer:       /CN=1f08ae50-7566-4f52-9c36-3a3f84a37c59
Certificate serial:       010D0C9F4328584515E589B3DCB605A60A903280
Authority key identifier: D8:5F:AA:21:72:91:7E:BC:4B:BB:29:C8:07:A7:8C:DD:1A:2B:AD:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/95a5c3a4-3e8a-3c0b-8478-0d8fcf7fa569.roa
Signing time:             Sun 03 Mar 2024 14:00:31 +0000
ROA not before:           Sun 03 Mar 2024 14:00:31 +0000
ROA not after:            Sat 01 Jun 2024 13:00:31 +0000
asID:                     174
IP address blocks:        208.82.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:15:e5:89:b3:dc:b6:05:a6:0a:90:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f08ae50-7566-4f52-9c36-3a3f84a37c59
        Validity
            Not Before: Mar  3 14:00:31 2024 GMT
            Not After : Jun  1 13:00:31 2024 GMT
        Subject: CN=f4659c73-2532-41e1-9b5e-d471396a2b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bb:11:17:0e:81:bd:77:d2:48:f5:06:25:70:
                    e1:72:8e:bc:a4:ee:ec:c7:34:8c:cf:27:bd:c5:f0:
                    17:ef:71:29:01:8c:73:54:41:fd:59:af:b0:ca:8d:
                    33:cd:fb:17:bc:fb:d5:12:3a:74:03:be:41:11:12:
                    e1:f7:b1:ba:4e:17:f9:48:6d:9d:2c:cc:71:fb:7c:
                    9d:03:3a:bf:ef:53:a1:64:cd:c9:59:aa:8e:1a:16:
                    6f:b1:7d:e7:84:7d:41:fb:45:49:7a:a9:16:21:3a:
                    39:54:1d:b1:61:18:ad:ef:e3:98:9e:9a:f4:c6:1d:
                    2f:d0:69:4a:8b:12:1e:15:b8:7e:ec:7e:06:73:87:
                    ef:64:35:52:d9:df:73:17:c2:45:09:05:f0:d0:df:
                    87:c9:72:f1:69:13:e6:a8:28:91:7c:ec:8c:8f:60:
                    dd:2a:08:4d:6c:c9:79:29:7a:cc:1f:7b:a8:9a:2f:
                    56:2d:4e:5b:c3:29:17:6c:6d:b8:c2:a8:1e:8e:87:
                    a1:69:80:d5:84:13:c8:8d:c1:f7:72:d7:30:25:da:
                    01:73:b0:a7:62:18:b5:3e:ac:9d:c8:7d:21:80:ce:
                    29:38:a3:93:c3:62:89:a4:75:39:db:38:fb:f7:57:
                    7c:32:d5:79:59:7b:20:97:2e:6f:d5:40:72:e4:d2:
                    2b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:35:D6:DB:AE:4F:25:7C:A0:AF:0D:32:22:10:38:BD:9B:26:18:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/95a5c3a4-3e8a-3c0b-8478-0d8fcf7fa569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.crl

            X509v3 Authority Key Identifier:
                keyid:D8:5F:AA:21:72:91:7E:BC:4B:BB:29:C8:07:A7:8C:DD:1A:2B:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:31:52:4e:c9:7a:8a:a6:13:cd:f5:15:be:d5:ef:45:32:c4:
         a1:0b:05:86:ab:f2:b9:70:bf:55:3f:bc:e1:90:57:d4:98:77:
         43:20:e3:2f:e3:d2:48:32:f2:f4:42:5a:b7:ca:91:f1:20:4d:
         20:59:33:9f:a5:b6:b3:66:27:bb:ee:25:ed:b8:4a:95:79:22:
         c2:1e:11:98:52:97:7f:2c:50:dd:99:9e:46:5c:88:5c:e7:e2:
         e3:b6:19:63:e2:26:e9:15:5f:8e:a2:3d:85:2f:be:2d:89:ea:
         09:a1:42:bd:3a:a5:08:4d:ae:38:4e:37:00:08:79:9b:4a:c0:
         17:11:0f:1b:21:03:a3:24:aa:3f:17:96:4b:04:09:df:24:93:
         74:e6:69:81:82:cc:7c:80:94:6f:b4:71:8b:0c:d5:45:0e:ab:
         81:f4:0e:29:35:6f:00:bb:cc:e3:58:0e:fd:2f:e3:6d:0e:ae:
         6f:a0:3e:c0:fc:59:77:30:94:cd:85:ba:50:2e:28:15:1a:37:
         45:01:9b:75:47:c6:ce:0d:2f:30:04:5e:ab:5b:f5:37:e3:71:
         75:47:77:9a:b2:f7:a3:1d:05:c7:38:a0:96:78:c7:ec:e8:e4:
         f3:67:4b:2f:6a:28:41:1f:f3:65:cb:ad:47:b6:3e:9c:c2:f9:
         f3:67:87:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUV5Ymz3LYFpgqQMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWYwOGFlNTAtNzU2Ni00ZjUyLTljMzYtM2EzZjg0YTM3
YzU5MB4XDTI0MDMwMzE0MDAzMVoXDTI0MDYwMTEzMDAzMVowLzEtMCsGA1UEAxMk
ZjQ2NTljNzMtMjUzMi00MWUxLTliNWUtZDQ3MTM5NmEyYjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7sRFw6BvXfSSPUGJXDhco68pO7sxzSMzye9
xfAX73EpAYxzVEH9Wa+wyo0zzfsXvPvVEjp0A75BERLh97G6Thf5SG2dLMxx+3yd
Azq/71OhZM3JWaqOGhZvsX3nhH1B+0VJeqkWITo5VB2xYRit7+OYnpr0xh0v0GlK
ixIeFbh+7H4Gc4fvZDVS2d9zF8JFCQXw0N+HyXLxaRPmqCiRfOyMj2DdKghNbMl5
KXrMH3uomi9WLU5bwykXbG24wqgejoehaYDVhBPIjcH3ctcwJdoBc7CnYhi1Pqyd
yH0hgM4pOKOTw2KJpHU52zj791d8MtV5WXsgly5v1UBy5NIrVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ411tuuTyV8oK8NMiIQOL2bJhiPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjA4
YWU1MC03NTY2LTRmNTItOWMzNi0zYTNmODRhMzdjNTkvOTVhNWMzYTQtM2U4YS0z
YzBiLTg0NzgtMGQ4ZmNmN2ZhNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWYwOGFlNTAtNzU2Ni00ZjUyLTlj
MzYtM2EzZjg0YTM3YzU5LzFmMDhhZTUwLTc1NjYtNGY1Mi05YzM2LTNhM2Y4NGEz
N2M1OS5jcmwwHwYDVR0jBBgwFoAU2F+qIXKRfrxLuynIB6eM3RorrWswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjA4YWU1MC03NTY2LTRmNTItOWMzNi0zYTNm
ODRhMzdjNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FJQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcxUk7JeoqmE831Fb7V70UyxKELBYar8rlwv1U/vOGQV9SYd0Mg4y/j
0kgy8vRCWrfKkfEgTSBZM5+ltrNmJ7vuJe24SpV5IsIeEZhSl38sUN2ZnkZciFzn
4uO2GWPiJukVX46iPYUvvi2J6gmhQr06pQhNrjhONwAIeZtKwBcRDxshA6Mkqj8X
lksECd8kk3TmaYGCzHyAlG+0cYsM1UUOq4H0Dik1bwC7zONYDv0v420Orm+gPsD8
WXcwlM2FulAuKBUaN0UBm3VHxs4NLzAEXqtb9TfjcXVHd5qy96MdBcc4oJZ4x+zo
5PNnSy9qKEEf82XLrUe2PpzC+fNnh+M=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:24 2024 by rpki-client on console-ams.rpki-client.org