Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/744a6f2f-bac7-3ebf-ae21-785316055db5.roa
File:                     744a6f2f-bac7-3ebf-ae21-785316055db5.roa (raw, json)
Hash identifier:          aC2CJTgIN4wWgn5DdP1eD7jPIZu/XGIyI8cmu57QVuA=
Subject key identifier:   AF:93:2F:42:3D:FC:9A:C5:C1:18:2C:C9:DC:51:02:95:C7:27:2F:65
Certificate issuer:       /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial:       010D0C9F43285847E35F700E5FD296049471C100
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/744a6f2f-bac7-3ebf-ae21-785316055db5.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     207083
IP address blocks:        162.222.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:70:0e:5f:d2:96:04:94:71:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=d9ac9ff7-1f67-46ee-98f7-37a4fa2956b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2a:de:a4:d1:9e:bc:84:e4:54:ec:d5:a1:fd:
                    c4:9e:26:33:55:d1:16:0b:7f:61:c9:a9:1a:f6:3b:
                    0c:66:5d:3e:c1:b4:4e:62:08:b7:a5:22:bd:0d:26:
                    48:97:cd:3f:6f:ca:89:31:4c:60:50:37:a7:ee:a2:
                    3f:7f:0e:48:05:99:42:2e:53:f6:50:5a:9b:b1:84:
                    65:4b:3f:36:36:2a:0c:49:96:dd:e8:33:33:04:f2:
                    32:46:9c:1e:30:e9:65:84:88:12:1b:bb:5d:45:83:
                    0d:f0:9e:99:c4:31:cd:9c:30:c9:a5:bc:e9:91:19:
                    29:cc:55:8b:3d:81:b3:84:a0:94:e0:c4:a4:db:be:
                    7b:cd:1a:7a:81:57:28:b9:da:29:94:20:17:4b:5b:
                    12:41:e7:f9:d6:9f:32:08:80:ff:44:42:6e:96:dc:
                    21:43:3c:7e:6d:7d:7b:ab:b5:68:f9:cf:fe:39:05:
                    3a:e4:e0:78:cc:01:28:0b:05:48:73:9d:53:c8:6a:
                    de:78:6a:8b:19:ca:bf:2e:cb:88:b7:3b:3a:df:d8:
                    26:a6:4a:d6:0d:65:fb:4c:95:ad:36:be:36:6e:9b:
                    28:32:18:6b:81:7a:23:a3:bb:89:05:a3:78:14:9f:
                    d3:78:ec:8b:85:a7:71:d3:73:58:d8:c9:b1:14:e4:
                    d1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:93:2F:42:3D:FC:9A:C5:C1:18:2C:C9:DC:51:02:95:C7:27:2F:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/744a6f2f-bac7-3ebf-ae21-785316055db5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:7e:a9:29:eb:74:24:19:14:53:fe:6a:57:d6:93:5d:b0:cf:
         63:10:a2:a0:15:47:95:b8:3f:63:12:f0:6b:20:09:bc:82:8c:
         32:c1:a6:f3:2f:1d:56:a7:61:61:5c:b6:4f:32:0f:f5:a2:e6:
         da:06:1e:b1:34:47:4c:e8:69:32:5f:74:4e:be:b5:a9:c0:63:
         c3:90:11:d2:06:e8:71:2d:20:63:8c:11:87:8a:dc:f8:b9:04:
         46:ee:9e:3d:57:02:c3:c1:18:15:2e:c5:85:80:ab:68:51:ec:
         92:fb:cd:01:91:93:fd:e4:85:e6:9c:23:56:19:d5:eb:8d:32:
         46:21:5f:ce:48:ce:d5:30:dc:25:46:a3:e9:c5:eb:3f:7a:e4:
         de:48:36:19:81:32:b0:8a:6e:2d:c9:09:5e:7d:9a:ea:9e:5e:
         b5:8f:29:60:bc:be:ea:25:d2:f2:f7:74:3f:fb:40:9b:2a:f1:
         c1:ab:69:53:89:82:b1:17:1f:12:4f:67:11:5c:a4:e8:78:ac:
         fb:e7:61:61:0f:bc:82:2f:05:7b:e8:93:24:63:70:4b:34:eb:
         1d:69:29:07:f1:fb:1b:69:9d:ac:34:42:5b:fd:5f:33:3d:de:
         31:79:02:a0:36:e6:5d:eb:ef:7e:ab:59:1d:8b:77:90:7c:1b:
         52:aa:53:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfjX3AOX9KWBJRxwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3NmQ1YTgtNWRkNi00NDBhLTk3ZTItNWUyMGI5ZTAw
ZjVjMB4XDTI0MTExNTE0MDAzOVoXDTI1MDIxMzE0MDAzOVowLzEtMCsGA1UEAxMk
ZDlhYzlmZjctMWY2Ny00NmVlLTk4ZjctMzdhNGZhMjk1NmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyrepNGevITkVOzVof3EniYzVdEWC39hyaka
9jsMZl0+wbROYgi3pSK9DSZIl80/b8qJMUxgUDen7qI/fw5IBZlCLlP2UFqbsYRl
Sz82NioMSZbd6DMzBPIyRpweMOllhIgSG7tdRYMN8J6ZxDHNnDDJpbzpkRkpzFWL
PYGzhKCU4MSk2757zRp6gVcoudoplCAXS1sSQef51p8yCID/REJultwhQzx+bX17
q7Vo+c/+OQU65OB4zAEoCwVIc51TyGreeGqLGcq/LsuItzs639gmpkrWDWX7TJWt
Nr42bpsoMhhrgXojo7uJBaN4FJ/TeOyLhadx03NY2MmxFOTRcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK+TL0I9/JrFwRgsydxRApXHJy9lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2
ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIwYjllMDBmNWMvNzQ0YTZmMmYtYmFjNy0z
ZWJmLWFlMjEtNzg1MzE2MDU1ZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg3NmQ1YTgtNWRkNi00NDBhLTk3
ZTItNWUyMGI5ZTAwZjVjLzY4NzZkNWE4LTVkZDYtNDQwYS05N2UyLTVlMjBiOWUw
MGY1Yy5jcmwwHwYDVR0jBBgwFoAUoSduxM+Q6aeKON2MubjRHPAXmrMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIw
YjllMDBmNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBot7EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFl+qSnrdCQZFFP+alfWk12wz2MQoqAVR5W4P2MS8GsgCbyCjDLBpvMv
HVanYWFctk8yD/Wi5toGHrE0R0zoaTJfdE6+tanAY8OQEdIG6HEtIGOMEYeK3Pi5
BEbunj1XAsPBGBUuxYWAq2hR7JL7zQGRk/3kheacI1YZ1euNMkYhX85IztUw3CVG
o+nF6z965N5INhmBMrCKbi3JCV59muqeXrWPKWC8vuol0vL3dD/7QJsq8cGraVOJ
grEXHxJPZxFcpOh4rPvnYWEPvIIvBXvokyRjcEs06x1pKQfx+xtpnaw0Qlv9XzM9
3jF5AqA25l3r736rWR2Ld5B8G1KqUwo=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:34 2024 by rpki-client on console-fra.rpki-client.org