Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5dda545f-1238-3606-89ac-8ceb51f8226f.roa
File:                     5dda545f-1238-3606-89ac-8ceb51f8226f.roa (raw, json)
Hash identifier:          HPirW20GdV1p2o4QXwcVJ7PtEljRX3QGLuC/+kuMdgo=
Subject key identifier:   9F:85:41:4A:CF:3E:EA:E2:B8:7B:9C:3F:38:D2:AE:EC:72:84:19:7A
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285844E66FE9691EA791791B298900
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5dda545f-1238-3606-89ac-8ceb51f8226f.roa
Signing time:             Thu 15 Feb 2024 14:00:30 +0000
ROA not before:           Thu 15 Feb 2024 14:00:30 +0000
ROA not after:            Wed 15 May 2024 13:00:30 +0000
asID:                     1239
IP address blocks:        198.145.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e6:6f:e9:69:1e:a7:91:79:1b:29:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Feb 15 14:00:30 2024 GMT
            Not After : May 15 13:00:30 2024 GMT
        Subject: CN=71198282-7929-4c95-8743-10582f4e1535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:25:92:c3:3f:d2:32:11:47:2e:36:ac:3e:a5:
                    44:c2:3e:b1:54:52:c2:04:4c:2c:81:46:4b:2e:a3:
                    9d:99:d3:14:37:56:96:ac:63:65:34:fa:44:ec:1c:
                    95:f4:64:3c:d8:02:86:af:fb:8b:da:4d:9f:e9:62:
                    d2:77:f6:92:3c:30:80:0d:e9:83:ef:ae:91:7e:1d:
                    5a:5a:44:b9:09:00:9c:7c:02:32:fc:be:9e:ea:5a:
                    9e:23:ee:45:a8:d6:fb:7e:26:f5:37:c5:e7:fe:67:
                    1a:7f:f1:87:da:e2:31:cb:54:1d:c8:78:dc:a3:d6:
                    b8:93:cb:9b:67:fd:44:d8:e3:6f:c9:e8:e9:17:9f:
                    0e:f2:5b:51:53:cd:ac:0d:d3:eb:27:3a:dd:cf:87:
                    2e:3e:31:61:4a:ca:47:c4:79:1f:55:fe:eb:00:8b:
                    08:9b:f4:33:6b:b6:04:70:ce:b3:55:51:cf:a1:4e:
                    54:f6:43:32:42:5a:e2:4e:2a:f7:21:39:cb:88:43:
                    e0:8a:19:9b:a7:ea:ed:76:74:8d:05:36:b3:cd:54:
                    83:78:28:1d:3e:98:84:95:c8:b7:52:5d:4b:a9:c2:
                    59:d4:d8:1c:16:07:a2:9d:66:b0:62:e6:3b:a1:91:
                    31:ca:a3:d6:35:d8:2f:59:8a:45:1d:81:9c:ac:1d:
                    34:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:85:41:4A:CF:3E:EA:E2:B8:7B:9C:3F:38:D2:AE:EC:72:84:19:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5dda545f-1238-3606-89ac-8ceb51f8226f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:7d:e2:01:84:d6:0d:d4:36:02:1c:90:83:ae:b0:84:f8:bc:
         fe:8e:20:9b:7c:d4:7b:43:65:31:e6:ff:31:50:c0:a0:b5:b7:
         0c:39:92:01:83:af:7a:da:6e:5d:dc:8e:ba:87:fe:4d:be:ec:
         28:d7:aa:1e:7a:89:a9:a9:08:2c:39:80:be:2f:59:06:d6:2e:
         07:7d:3c:54:55:65:1e:1f:32:71:9b:9a:94:15:af:d9:a0:3b:
         3f:e8:4e:21:73:cd:29:0a:20:e1:04:6a:77:3d:f1:f8:73:c1:
         8a:de:ec:ee:2b:9b:f6:6d:47:fe:4c:60:eb:c9:2f:5d:21:a1:
         fb:d3:40:40:96:c8:29:e3:1b:ae:2a:e1:ae:61:8f:71:dd:e1:
         a1:2a:7a:ac:a0:32:dc:4d:9d:45:41:25:53:39:cd:a8:ee:1a:
         d1:e3:e1:24:68:0c:4d:69:5a:71:09:b6:44:fc:ce:4a:7b:78:
         cf:ee:a7:dd:5b:c4:0f:1e:09:15:62:5a:ff:f2:76:db:63:4e:
         0f:4f:29:8a:56:6b:4f:71:7e:7e:20:cd:3a:25:4c:eb:b3:46:
         aa:2c:c6:9a:68:95:bb:11:75:3e:c0:1b:4c:68:cb:59:39:5f:
         c8:6b:9f:a9:80:dd:cd:e5:d0:e4:19:81:2b:63:c0:b4:23:2d:
         41:f8:b8:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETmb+lpHqeReRspiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI0MDIxNTE0MDAzMFoXDTI0MDUxNTEzMDAzMFowLzEtMCsGA1UEAxMk
NzExOTgyODItNzkyOS00Yzk1LTg3NDMtMTA1ODJmNGUxNTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSWSwz/SMhFHLjasPqVEwj6xVFLCBEwsgUZL
LqOdmdMUN1aWrGNlNPpE7ByV9GQ82AKGr/uL2k2f6WLSd/aSPDCADemD766Rfh1a
WkS5CQCcfAIy/L6e6lqeI+5FqNb7fib1N8Xn/mcaf/GH2uIxy1QdyHjco9a4k8ub
Z/1E2ONvyejpF58O8ltRU82sDdPrJzrdz4cuPjFhSspHxHkfVf7rAIsIm/Qza7YE
cM6zVVHPoU5U9kMyQlriTir3ITnLiEPgihmbp+rtdnSNBTazzVSDeCgdPpiElci3
Ul1LqcJZ1NgcFgeinWawYuY7oZExyqPWNdgvWYpFHYGcrB00dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+FQUrPPuriuHucPzjSruxyhBl6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNWRkYTU0NWYtMTIzOC0z
NjA2LTg5YWMtOGNlYjUxZjgyMjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExpFQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEN94gGE1g3UNgIckIOusIT4vP6OIJt81HtDZTHm/zFQwKC1tww5kgGD
r3rabl3cjrqH/k2+7CjXqh56iampCCw5gL4vWQbWLgd9PFRVZR4fMnGbmpQVr9mg
Oz/oTiFzzSkKIOEEanc98fhzwYre7O4rm/ZtR/5MYOvJL10hofvTQECWyCnjG64q
4a5hj3Hd4aEqeqygMtxNnUVBJVM5zajuGtHj4SRoDE1pWnEJtkT8zkp7eM/up91b
xA8eCRViWv/ydttjTg9PKYpWa09xfn4gzTolTOuzRqosxppolbsRdT7AG0xoy1k5
X8hrn6mA3c3l0OQZgStjwLQjLUH4uHY=
-----END CERTIFICATE-----
Generated at Fri Apr 19 19:30:55 2024 by rpki-client on console-ams.rpki-client.org