Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/fc6ef2da-85be-37e6-9c63-2d35644b9303.roa
File:                     fc6ef2da-85be-37e6-9c63-2d35644b9303.roa (raw, json)
Hash identifier:          1wjUU0F6wmEbIDQSR2Wf8SXGbC2YXWHMHgB66gJOCpA=
Subject key identifier:   CE:D4:96:9B:7F:34:88:27:4C:4F:9D:F6:9A:0F:E6:7B:CE:97:28:B6
Certificate issuer:       /CN=4ae94b09-7143-463d-a217-f7e62f4a7dc0
Certificate serial:       010D0C9F432858457D131FB72B50C37BE7FCAA90
Authority key identifier: E6:11:AC:38:33:0A:D5:A7:3B:80:0D:45:0B:75:C4:9A:7D:00:C9:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/fc6ef2da-85be-37e6-9c63-2d35644b9303.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        205.166.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/4ae94b09-7143-463d-a217-f7e62f4a7dc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/4ae94b09-7143-463d-a217-f7e62f4a7dc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:1f:b7:2b:50:c3:7b:e7:fc:aa:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ae94b09-7143-463d-a217-f7e62f4a7dc0
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=f22def1f-7860-4409-9586-c46d05bd0030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0c:09:df:d9:06:c2:6d:18:fd:2a:0d:33:f6:
                    61:82:f1:71:dd:5f:66:ad:aa:63:28:e4:a2:57:b4:
                    5a:7e:41:7e:20:73:c9:81:c0:d2:f4:2e:5a:e7:07:
                    ad:0e:e5:f2:39:2a:cc:6a:67:3f:28:0a:01:f4:75:
                    1a:a9:ef:0c:a8:3e:f3:a0:ae:d2:25:b8:d8:6e:4b:
                    bf:fd:c4:f1:b6:f1:29:f5:6f:1e:31:b3:82:38:f2:
                    c1:c5:09:fe:a6:64:d0:03:69:27:7c:fe:c8:b6:49:
                    22:12:d6:3c:2c:ed:44:ed:5c:4a:51:5d:c4:e4:ab:
                    0b:66:f6:d2:74:08:36:81:d0:3d:cd:5e:14:cc:6a:
                    65:0b:12:95:73:d0:6d:bd:a4:e4:8c:27:93:ce:06:
                    2a:aa:14:b5:1f:12:8c:c0:0c:66:dc:70:1f:6c:3b:
                    7a:5c:8a:1b:39:2e:6a:07:a3:6b:db:ee:71:f5:9d:
                    ef:91:84:1c:e3:28:0d:d1:7b:0a:bb:d2:d3:c1:c9:
                    52:e5:93:41:2a:02:12:7a:7f:89:93:d4:f9:74:b0:
                    7f:0e:3b:f4:75:3b:9f:a8:cb:dd:e2:7e:01:01:21:
                    e3:4b:80:e2:14:6c:ef:a5:3d:05:23:b4:ea:38:c3:
                    40:37:71:9f:04:73:0a:6d:55:fa:4c:07:58:9c:7b:
                    80:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D4:96:9B:7F:34:88:27:4C:4F:9D:F6:9A:0F:E6:7B:CE:97:28:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/fc6ef2da-85be-37e6-9c63-2d35644b9303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/4ae94b09-7143-463d-a217-f7e62f4a7dc0.crl

            X509v3 Authority Key Identifier:
                keyid:E6:11:AC:38:33:0A:D5:A7:3B:80:0D:45:0B:75:C4:9A:7D:00:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:99:bc:07:8d:c2:0f:9e:f7:a3:8d:99:af:f9:9b:35:6e:43:
         92:6a:71:d3:3d:5c:5e:18:7f:03:b4:78:c0:91:cd:46:8d:43:
         54:97:2c:a9:fb:41:2d:dc:29:4b:43:8c:64:3d:e5:c7:4d:fe:
         11:5d:dc:12:ed:bd:b7:bf:89:54:d5:b0:9a:26:f5:3f:0d:c3:
         45:de:e9:cd:39:db:ea:c7:7e:8b:21:47:fb:a4:7d:70:0a:67:
         80:60:60:43:5d:79:33:a3:b2:9d:93:a2:5b:c7:31:59:0c:f0:
         e0:c5:3b:97:b1:86:55:fb:a4:9b:f1:b9:0e:20:27:7a:f7:4c:
         60:0b:24:25:4e:b8:40:b8:d5:01:fe:9f:66:e8:cc:04:de:32:
         fb:1b:15:81:c4:54:4e:7f:2d:b7:d7:18:f3:69:94:1f:a2:b7:
         81:26:ea:bc:8b:4f:df:2d:fe:ee:58:22:40:84:f9:8c:65:7c:
         3a:f7:75:d7:5c:ea:82:b7:d2:47:49:aa:7c:46:b9:cb:ae:c9:
         da:ad:2a:84:03:bf:e5:0b:f5:05:e9:58:8b:67:52:3b:4f:53:
         26:b8:83:7b:a4:6f:e1:a2:de:ad:e1:46:a5:9f:72:af:53:dd:
         37:4b:af:14:46:fd:db:87:84:5b:d7:01:91:f5:db:a3:4c:d4:
         7b:01:61:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV9Ex+3K1DDe+f8qpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFlOTRiMDktNzE0My00NjNkLWEyMTctZjdlNjJmNGE3
ZGMwMB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk
ZjIyZGVmMWYtNzg2MC00NDA5LTk1ODYtYzQ2ZDA1YmQwMDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygwJ39kGwm0Y/SoNM/ZhgvFx3V9mrapjKOSi
V7RafkF+IHPJgcDS9C5a5wetDuXyOSrMamc/KAoB9HUaqe8MqD7zoK7SJbjYbku/
/cTxtvEp9W8eMbOCOPLBxQn+pmTQA2knfP7ItkkiEtY8LO1E7VxKUV3E5KsLZvbS
dAg2gdA9zV4UzGplCxKVc9BtvaTkjCeTzgYqqhS1HxKMwAxm3HAfbDt6XIobOS5q
B6Nr2+5x9Z3vkYQc4ygN0XsKu9LTwclS5ZNBKgISen+Jk9T5dLB/Djv0dTufqMvd
4n4BASHjS4DiFGzvpT0FI7TqOMNAN3GfBHMKbVX6TAdYnHuAXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM7Ulpt/NIgnTE+d9poP5nvOlyi2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80YWU5
NGIwOS03MTQzLTQ2M2QtYTIxNy1mN2U2MmY0YTdkYzAvZmM2ZWYyZGEtODViZS0z
N2U2LTljNjMtMmQzNTY0NGI5MzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGFlOTRiMDktNzE0My00NjNkLWEy
MTctZjdlNjJmNGE3ZGMwLzRhZTk0YjA5LTcxNDMtNDYzZC1hMjE3LWY3ZTYyZjRh
N2RjMC5jcmwwHwYDVR0jBBgwFoAU5hGsODMK1ac7gA1FC3XEmn0AydAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80YWU5NGIwOS03MTQzLTQ2M2QtYTIxNy1mN2U2
MmY0YTdkYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzabDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaZvAeNwg+e96ONma/5mzVuQ5JqcdM9XF4YfwO0eMCRzUaNQ1SXLKn7
QS3cKUtDjGQ95cdN/hFd3BLtvbe/iVTVsJom9T8Nw0Xe6c052+rHfoshR/ukfXAK
Z4BgYENdeTOjsp2TolvHMVkM8ODFO5exhlX7pJvxuQ4gJ3r3TGALJCVOuEC41QH+
n2bozATeMvsbFYHEVE5/LbfXGPNplB+it4Em6ryLT98t/u5YIkCE+YxlfDr3dddc
6oK30kdJqnxGucuuydqtKoQDv+UL9QXpWItnUjtPUya4g3ukb+Gi3q3hRqWfcq9T
3TdLrxRG/duHhFvXAZH126NM1HsBYQk=
-----END CERTIFICATE-----
Generated at Fri Apr 19 02:03:54 2024 by rpki-client on console-fra.rpki-client.org