Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa
File:                     28664a9a-e120-3701-b0b7-b5858658be81.roa (raw, json)
Hash identifier:          CLdrjXBJ8MQd1QjC8RDoA6mQj+55iy04krbEaY/kDaU=
Subject key identifier:   95:F3:9A:9C:C9:7E:F1:16:30:55:F4:FE:0B:0D:7A:6F:FE:6A:87:B8
Certificate issuer:       /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
Certificate serial:       010D0C9F4328584596333F95B7E6E4DC64B4E140
Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        192.139.134.0/24 maxlen: 24
                          168.245.151.0/24 maxlen: 24
                          52.144.58.0/24 maxlen: 24
                          199.19.91.0/24 maxlen: 24
                          199.19.90.0/24 maxlen: 24
                          199.19.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:3f:95:b7:e6:e4:dc:64:b4:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=d4518dcb-de31-470a-8e68-7a7b4ae4d198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:18:54:94:aa:a7:51:fd:aa:64:f8:84:57:
                    19:52:16:be:55:1f:85:f4:0b:eb:44:dd:85:41:d2:
                    f9:44:10:a0:ab:ee:ee:a3:1c:03:2f:40:48:37:34:
                    89:28:6a:2c:85:46:cd:75:15:67:ca:54:12:2c:a0:
                    77:09:b2:49:7c:04:8b:ef:cc:5e:41:99:24:23:a9:
                    57:cb:d7:9c:4f:95:86:75:5e:cb:db:43:2b:56:03:
                    42:c4:7c:83:ad:89:d1:84:8b:47:fa:07:35:43:88:
                    32:44:9f:f5:b8:4d:77:b7:6f:21:26:12:89:26:4f:
                    4e:54:69:f7:4d:59:d2:10:3b:f2:02:85:bc:45:7f:
                    51:76:38:d3:df:37:6d:bc:4d:ae:72:cc:4f:2e:0a:
                    ab:ea:13:76:bf:0a:e3:b2:2d:6d:70:27:08:92:c4:
                    1a:ed:2b:48:c2:d1:ae:3b:5c:e0:e1:db:8e:ab:67:
                    9f:5c:74:8b:79:a6:0f:ef:d4:6f:34:ff:bd:46:94:
                    10:cd:73:24:25:f5:a2:ae:f1:24:fe:06:40:34:2e:
                    db:21:79:36:9d:a5:a6:55:64:13:d8:ca:44:95:09:
                    66:d6:39:7c:14:2d:cc:02:2c:08:c2:b9:61:52:02:
                    d4:f2:77:63:42:1f:06:4b:b3:d6:84:a6:f4:de:84:
                    99:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F3:9A:9C:C9:7E:F1:16:30:55:F4:FE:0B:0D:7A:6F:FE:6A:87:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl

            X509v3 Authority Key Identifier:
                keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.58.0/24
                  168.245.151.0/24
                  192.139.134.0/24
                  199.19.89.0-199.19.91.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:b9:b7:fc:fc:be:48:ed:38:10:9a:6b:82:a7:ab:9c:2b:cb:
         f3:ce:f2:29:83:0b:58:48:7e:7a:f2:79:bb:07:1a:09:1d:c6:
         01:d6:36:69:9e:f6:3e:96:4c:30:47:08:64:8c:50:86:d1:9d:
         f5:b9:69:fe:22:bf:7a:58:7c:b2:58:fe:44:8a:95:d2:c4:21:
         37:99:50:25:3c:24:32:0b:e6:0e:8f:3d:4b:72:2a:71:e7:ab:
         cc:6a:05:4d:4a:e6:dc:58:02:6b:8d:6a:93:03:f0:10:d7:6f:
         3a:dc:75:59:82:9f:95:1e:a0:cb:70:a9:4b:a4:10:bc:8b:15:
         84:08:b8:02:d9:21:b3:11:d1:fb:35:70:89:dc:18:a3:1f:44:
         53:b0:1c:c5:ce:ec:9a:77:6f:22:6e:d1:c4:48:7c:53:0a:db:
         ab:65:82:30:cc:3f:e5:f6:56:2d:19:19:6b:39:07:00:61:2d:
         03:4e:0b:51:fd:84:77:66:98:97:b3:2b:66:d4:bc:4e:75:3b:
         be:97:5a:09:50:f4:88:8c:53:f1:b0:27:e1:dc:72:4a:41:1a:
         0e:1a:3f:58:d5:68:b0:71:0d:23:68:9c:9e:b0:a0:d6:0c:5f:
         a5:c1:36:6c:6c:25:31:c2:9a:8e:c9:60:d9:4a:95:b8:83:1d:
         f9:0d:d6:99
-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWEWWMz+Vt+bk3GS04UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJlM2EzYWQtYjFhYy00MTNkLThmOTgtYTY5NDI5YTZj
YTk4MB4XDTI0MDQxODEzMDAzM1oXDTI0MDcxNzEzMDAzM1owLzEtMCsGA1UEAxMk
ZDQ1MThkY2ItZGUzMS00NzBhLThlNjgtN2E3YjRhZTRkMTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsQYVJSqp1H9qmT4hFcZUha+VR+F9AvrRN2F
QdL5RBCgq+7uoxwDL0BINzSJKGoshUbNdRVnylQSLKB3CbJJfASL78xeQZkkI6lX
y9ecT5WGdV7L20MrVgNCxHyDrYnRhItH+gc1Q4gyRJ/1uE13t28hJhKJJk9OVGn3
TVnSEDvyAoW8RX9RdjjT3zdtvE2ucsxPLgqr6hN2vwrjsi1tcCcIksQa7StIwtGu
O1zg4duOq2efXHSLeaYP79RvNP+9RpQQzXMkJfWirvEk/gZANC7bIXk2naWmVWQT
2MpElQlm1jl8FC3MAiwIwrlhUgLU8ndjQh8GS7PWhKb03oSZqwIDAQABo4IDbzCC
A2swHQYDVR0OBBYEFJXzmpzJfvEWMFX0/gsNem/+aoe4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUz
YTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0MjlhNmNhOTgvMjg2NjRhOWEtZTEyMC0z
NzAxLWIwYjctYjU4NTg2NThiZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJlM2EzYWQtYjFhYy00MTNkLThm
OTgtYTY5NDI5YTZjYTk4LzMyZTNhM2FkLWIxYWMtNDEzZC04Zjk4LWE2OTQyOWE2
Y2E5OC5jcmwwHwYDVR0jBBgwFoAUyZVUezn1d+0L44pwe/Z3Q/qsyX0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0
MjlhNmNhOTguY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQANJA6AwQA
qPWXAwQAwIuGMAwDBADHE1kDBALHE1gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAg7m3/Py+SO04EJprgqer
nCvL887yKYMLWEh+evJ5uwcaCR3GAdY2aZ72PpZMMEcIZIxQhtGd9blp/iK/elh8
slj+RIqV0sQhN5lQJTwkMgvmDo89S3IqceerzGoFTUrm3FgCa41qkwPwENdvOtx1
WYKflR6gy3CpS6QQvIsVhAi4AtkhsxHR+zVwidwYox9EU7Acxc7smndvIm7RxEh8
Uwrbq2WCMMw/5fZWLRkZazkHAGEtA04LUf2Ed2aYl7MrZtS8TnU7vpdaCVD0iIxT
8bAn4dxySkEaDho/WNVosHENI2icnrCg1gxfpcE2bGwlMcKajslg2UqVuIMd+Q3W
mQ==
-----END CERTIFICATE-----
Generated at Wed Apr 24 16:38:23 2024 by rpki-client on console-fra.rpki-client.org