Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/35299397-9412-3901-bf6b-dd76cae9cadb.roa
File:                     35299397-9412-3901-bf6b-dd76cae9cadb.roa (raw, json)
Hash identifier:          833zPuUbiw0JksKy94yPGtxSbDrFw0YxVZID/JAmPjQ=
Subject key identifier:   0E:3C:07:5B:DC:7E:5F:B6:FA:89:F2:3B:0F:C1:67:51:91:E2:B7:65
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F43285845ADEE0C36A537FDF6F7B02EE0
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/35299397-9412-3901-bf6b-dd76cae9cadb.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     11260
IP address blocks:        173.252.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:0c:36:a5:37:fd:f6:f7:b0:2e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=9e110223-0a48-40b8-802f-1a0526847d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:77:7a:85:31:9b:c2:35:95:4d:8f:85:81:61:
                    ab:ab:a9:94:9c:cb:9b:93:f2:e8:9e:71:a9:de:68:
                    6b:35:08:a2:71:92:fa:64:8b:84:61:0d:0f:6a:8d:
                    1e:b8:2b:e8:0a:70:03:57:8c:38:0f:ea:65:2b:c1:
                    69:a5:c7:cf:da:01:60:4e:d5:07:f3:e0:cf:71:84:
                    2d:fc:0a:f6:a1:19:5d:03:77:28:f1:1b:6f:bc:1b:
                    90:e7:d5:6c:9a:8b:c9:9d:04:8e:7e:fe:43:4c:56:
                    4f:08:b0:66:9d:df:6b:92:0b:7e:0c:ae:f6:9b:fc:
                    3e:0d:eb:8f:05:74:07:ab:13:88:d4:89:96:14:bf:
                    8a:5d:13:53:20:14:1a:ca:55:62:d7:b1:2b:7a:65:
                    9d:d8:56:d9:dd:22:da:35:9d:6b:03:9a:32:65:3a:
                    1a:0c:0d:33:04:b2:af:83:ab:7d:0f:d7:ec:d1:35:
                    eb:28:53:de:79:6e:98:27:ae:ca:85:0f:44:14:c0:
                    09:11:47:7b:89:02:29:e8:0f:1e:8a:dc:3f:3e:89:
                    6a:84:df:ae:fb:1b:2c:f8:9e:6b:98:67:7c:bd:b9:
                    c7:43:76:23:cc:dd:08:24:c5:90:a4:fe:53:10:94:
                    27:cd:9f:28:d7:b6:18:a2:1e:7f:c7:84:bf:0e:5b:
                    c0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3C:07:5B:DC:7E:5F:B6:FA:89:F2:3B:0F:C1:67:51:91:E2:B7:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/35299397-9412-3901-bf6b-dd76cae9cadb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.252.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:5c:76:dc:aa:20:4e:dc:a9:6a:97:9e:16:08:5d:c3:87:ef:
         91:5f:b4:7e:ba:4d:ef:fa:58:7f:57:29:c0:16:3d:22:c9:b0:
         0c:b7:f8:c9:2c:d5:e8:8f:64:98:e0:2c:54:d2:23:29:da:7c:
         50:8a:d4:e0:ac:80:49:d9:82:38:18:f5:ce:1b:6a:bd:f8:d2:
         89:10:1f:27:49:70:d2:b4:7c:cc:b2:31:7c:a6:04:64:e2:1e:
         d2:42:fe:cf:43:70:37:2f:cf:ff:a3:81:27:a5:0d:5d:58:c1:
         39:32:b2:15:1f:c5:8e:fc:b6:13:7e:82:05:fb:ac:bd:91:36:
         d5:6c:99:f9:f5:52:4b:da:5e:fc:46:98:a4:ed:e4:9e:93:97:
         95:45:dc:97:3a:8d:c2:88:ca:47:90:e5:a4:e3:de:f5:bf:50:
         36:18:c0:7d:68:fd:e4:a1:25:f5:18:46:3f:f6:58:3e:4e:d7:
         4b:46:de:29:31:fc:bb:f1:bf:3a:6d:58:59:89:bb:78:d3:20:
         11:5f:1d:c2:6b:7c:5f:6a:c8:91:3f:4c:78:66:27:c0:ce:4f:
         42:61:f1:9d:ae:38:8d:b7:0b:dd:3f:0e:1a:ec:3c:65:e6:04:
         6e:27:7f:60:ee:a8:8b:3d:d4:71:dc:25:42:5f:d6:6d:12:ae:
         f6:8d:f2:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWt7gw2pTf99vewLuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4
OTViMB4XDTI0MDQyNzAxMDAyNloXDTI0MDcyNjAxMDAyNlowLzEtMCsGA1UEAxMk
OWUxMTAyMjMtMGE0OC00MGI4LTgwMmYtMWEwNTI2ODQ3ZDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXd6hTGbwjWVTY+FgWGrq6mUnMubk/LonnGp
3mhrNQiicZL6ZIuEYQ0Pao0euCvoCnADV4w4D+plK8FppcfP2gFgTtUH8+DPcYQt
/Ar2oRldA3co8RtvvBuQ59VsmovJnQSOfv5DTFZPCLBmnd9rkgt+DK72m/w+DeuP
BXQHqxOI1ImWFL+KXRNTIBQaylVi17EremWd2FbZ3SLaNZ1rA5oyZToaDA0zBLKv
g6t9D9fs0TXrKFPeeW6YJ67KhQ9EFMAJEUd7iQIp6A8eitw/PolqhN+u+xss+J5r
mGd8vbnHQ3YjzN0IJMWQpP5TEJQnzZ8o17YYoh5/x4S/DlvA0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA48B1vcfl+2+onyOw/BZ1GR4rdlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4
MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvMzUyOTkzOTctOTQxMi0z
OTAxLWJmNmItZGQ3NmNhZTljYWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi
NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh
ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy
M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfwsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK9cdtyqIE7cqWqXnhYIXcOH75FftH66Te/6WH9XKcAWPSLJsAy3+Mks
1eiPZJjgLFTSIynafFCK1OCsgEnZgjgY9c4bar340okQHydJcNK0fMyyMXymBGTi
HtJC/s9DcDcvz/+jgSelDV1YwTkyshUfxY78thN+ggX7rL2RNtVsmfn1UkvaXvxG
mKTt5J6Tl5VF3Jc6jcKIykeQ5aTj3vW/UDYYwH1o/eShJfUYRj/2WD5O10tG3ikx
/LvxvzptWFmJu3jTIBFfHcJrfF9qyJE/THhmJ8DOT0Jh8Z2uOI23C90/DhrsPGXm
BG4nf2DuqIs91HHcJUJf1m0SrvaN8j0=
-----END CERTIFICATE-----
Generated at Tue May 7 09:45:59 2024 by rpki-client on console-fra.rpki-client.org