Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/519783cc-f605-3482-abf1-0b9682dfd00d.roa
File:                     519783cc-f605-3482-abf1-0b9682dfd00d.roa (raw, json)
Hash identifier:          MZRLS2xJlkoKVpVHcqbbtxIFCmk7twDTaAly6eqAKRw=
Subject key identifier:   A7:D6:4C:AF:A7:36:2D:CC:D9:91:C8:C7:DD:9B:13:10:7E:B3:04:F7
Certificate issuer:       /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
Certificate serial:       010D0C9F43285844C38A744E33722868624A4500
Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/519783cc-f605-3482-abf1-0b9682dfd00d.roa
Signing time:             Sat 03 Feb 2024 02:00:26 +0000
ROA not before:           Sat 03 Feb 2024 02:00:26 +0000
ROA not after:            Fri 03 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        199.19.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c3:8a:74:4e:33:72:28:68:62:4a:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
        Validity
            Not Before: Feb  3 02:00:26 2024 GMT
            Not After : May  3 01:00:26 2024 GMT
        Subject: CN=7f200927-756f-4ed9-a9f3-6755299a6e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:78:87:5a:92:64:54:f2:5f:63:56:22:a1:b7:
                    49:8f:e0:45:76:e1:73:3a:ba:58:86:11:ce:a0:e8:
                    f8:5b:b0:f9:d2:82:1c:07:ac:1b:3a:ea:68:63:7c:
                    0b:0e:b6:52:af:f3:89:dd:17:70:84:5a:8a:71:83:
                    7a:f1:5a:22:a8:a3:f0:a0:07:f5:7a:30:5a:28:7c:
                    06:50:23:ce:85:b0:cd:0b:05:bd:09:3a:15:7f:b5:
                    dd:11:84:43:68:d6:6d:7c:10:0d:32:9c:39:4d:81:
                    aa:9a:f0:f0:33:20:4f:10:fb:1e:f6:31:f2:15:48:
                    8d:8c:1c:af:d8:e3:ac:f7:ff:51:8c:21:78:21:92:
                    0d:85:06:f0:62:78:f8:5a:87:51:ca:a3:6a:f0:02:
                    87:11:51:fd:e2:43:e8:33:49:03:45:5d:78:24:f4:
                    64:59:5f:a0:f9:a0:dd:e9:eb:18:cd:f9:2b:b6:0e:
                    3e:7c:fc:f6:a3:4b:22:85:95:b3:41:9e:c1:90:31:
                    9d:90:4e:dd:13:06:dd:e9:dd:07:f8:6c:8e:3a:58:
                    db:65:d5:ae:be:e5:76:8a:f1:aa:bf:9e:4e:7f:8c:
                    dc:09:a0:e6:dc:77:90:65:1a:00:1a:d3:34:8c:78:
                    25:b7:32:43:fa:a0:46:67:91:c2:24:43:b7:83:31:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D6:4C:AF:A7:36:2D:CC:D9:91:C8:C7:DD:9B:13:10:7E:B3:04:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/519783cc-f605-3482-abf1-0b9682dfd00d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl

            X509v3 Authority Key Identifier:
                keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:99:b4:3c:d3:55:7e:12:8b:93:62:4b:a3:f0:0d:00:58:d1:
         fd:f4:77:b4:bf:c1:14:03:ba:6c:0a:32:f4:3f:78:7c:54:66:
         2f:4f:03:02:3b:69:65:4b:41:77:7d:3b:1e:1e:16:9d:22:4f:
         ec:ca:99:1f:33:73:15:20:6b:ab:ff:17:6f:ad:c3:23:b3:f7:
         77:46:17:41:21:9f:f7:3a:b9:19:5d:de:1a:44:04:82:17:d2:
         46:4d:5d:ef:a8:a1:b9:86:9a:94:88:68:dc:03:5e:73:91:d1:
         c3:92:0d:f8:13:19:4f:71:80:c0:df:84:3b:f1:fd:7a:e2:4a:
         66:66:2c:06:cc:ea:33:20:0f:80:87:a7:22:64:bc:5e:7c:39:
         57:84:37:98:f4:7e:82:82:25:0f:32:3d:41:dc:bd:02:12:a6:
         1a:73:59:1b:8e:0b:e5:68:da:6a:33:e7:db:e9:e9:f2:30:2e:
         ed:d5:69:6b:82:12:5b:6f:7e:9b:16:00:7a:c8:27:ce:fe:bc:
         37:30:01:94:a1:c8:79:fc:4e:01:19:d8:c1:eb:0a:9a:6b:81:
         49:44:f3:f9:27:69:83:10:9e:97:44:ef:6a:cd:a6:0e:c7:26:
         1c:1f:8f:2e:14:9a:15:8e:5c:dc:b2:d0:4c:80:41:fa:68:21:
         0b:83:dd:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETDinROM3IoaGJKRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJlM2EzYWQtYjFhYy00MTNkLThmOTgtYTY5NDI5YTZj
YTk4MB4XDTI0MDIwMzAyMDAyNloXDTI0MDUwMzAxMDAyNlowLzEtMCsGA1UEAxMk
N2YyMDA5MjctNzU2Zi00ZWQ5LWE5ZjMtNjc1NTI5OWE2ZTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjniHWpJkVPJfY1YiobdJj+BFduFzOrpYhhHO
oOj4W7D50oIcB6wbOupoY3wLDrZSr/OJ3RdwhFqKcYN68VoiqKPwoAf1ejBaKHwG
UCPOhbDNCwW9CToVf7XdEYRDaNZtfBANMpw5TYGqmvDwMyBPEPse9jHyFUiNjByv
2OOs9/9RjCF4IZINhQbwYnj4WodRyqNq8AKHEVH94kPoM0kDRV14JPRkWV+g+aDd
6esYzfkrtg4+fPz2o0sihZWzQZ7BkDGdkE7dEwbd6d0H+GyOOljbZdWuvuV2ivGq
v55Of4zcCaDm3HeQZRoAGtM0jHgltzJD+qBGZ5HCJEO3gzFuPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKfWTK+nNi3M2ZHIx92bExB+swT3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUz
YTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0MjlhNmNhOTgvNTE5NzgzY2MtZjYwNS0z
NDgyLWFiZjEtMGI5NjgyZGZkMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJlM2EzYWQtYjFhYy00MTNkLThm
OTgtYTY5NDI5YTZjYTk4LzMyZTNhM2FkLWIxYWMtNDEzZC04Zjk4LWE2OTQyOWE2
Y2E5OC5jcmwwHwYDVR0jBBgwFoAUyZVUezn1d+0L44pwe/Z3Q/qsyX0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0
MjlhNmNhOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxNYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJmZtDzTVX4Si5NiS6PwDQBY0f30d7S/wRQDumwKMvQ/eHxUZi9PAwI7
aWVLQXd9Ox4eFp0iT+zKmR8zcxUga6v/F2+twyOz93dGF0Ehn/c6uRld3hpEBIIX
0kZNXe+oobmGmpSIaNwDXnOR0cOSDfgTGU9xgMDfhDvx/XriSmZmLAbM6jMgD4CH
pyJkvF58OVeEN5j0foKCJQ8yPUHcvQISphpzWRuOC+Vo2moz59vp6fIwLu3VaWuC
EltvfpsWAHrIJ87+vDcwAZShyHn8TgEZ2MHrCpprgUlE8/knaYMQnpdE72rNpg7H
Jhwfjy4UmhWOXNyy0EyAQfpoIQuD3dk=
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:32:51 2024 by rpki-client on console-ams.rpki-client.org