Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6a0c7f19-051c-35df-935b-b0b7c9c6912c.roa
File:                     6a0c7f19-051c-35df-935b-b0b7c9c6912c.roa (raw, json)
Hash identifier:          Xc0kOo9Dn0dO/3WP55q+m6kcLYIU5ZjM04FqxXIzg88=
Subject key identifier:   B2:B0:7E:3C:FD:DC:4F:2D:86:6C:10:52:07:61:26:69:9A:05:54:9A
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285841E46D232239B5D46E79D001C0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6a0c7f19-051c-35df-935b-b0b7c9c6912c.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Sat 24 Jun 2023 20:02:56 +0000
asID:                     46450
IP address blocks:        64.255.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 May 2023 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:23:22:39:b5:d4:6e:79:d0:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun 24 20:02:56 2023 GMT
        Subject: CN=31313977-a589-458a-aef2-f18042a92609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:85:7d:6d:34:34:a4:66:69:d1:8b:2d:62:
                    bf:7d:c9:d8:cb:78:2d:b3:1b:3e:7e:dd:3e:48:8b:
                    29:c5:1a:c7:09:0c:4a:e6:c2:72:1c:78:d9:8b:e3:
                    be:ce:9d:16:3e:8f:1e:e2:ac:ad:fd:74:7b:ce:f4:
                    2f:4e:62:3a:63:b9:0c:e1:4c:7a:15:82:05:b3:d1:
                    ab:6a:8f:3d:07:63:0b:cd:f3:3e:4d:1a:ee:fa:ba:
                    6d:b2:90:3c:64:3e:79:65:e9:02:b1:cf:45:28:ea:
                    ff:97:93:c1:84:bd:91:c2:df:92:e2:0c:73:0f:90:
                    1a:51:83:bd:19:06:ad:0b:e7:6d:09:25:1d:d4:d3:
                    fa:24:c5:6e:7d:e5:d6:63:cb:40:88:1d:59:ed:40:
                    27:f7:a1:d0:ca:c4:c0:54:a5:50:2d:c8:b8:2f:df:
                    9a:fd:71:68:9e:ca:86:5f:2d:5a:ad:da:ab:cd:de:
                    e7:70:77:b2:1f:b0:02:15:57:78:e1:bc:22:e8:e1:
                    bd:b7:ac:02:7e:9a:72:68:25:a9:5f:31:de:40:8d:
                    97:ab:85:78:fd:7c:6b:46:0c:df:b4:7c:76:ac:af:
                    d6:fb:b4:13:5b:bc:90:26:88:d2:07:fe:8d:8d:98:
                    36:f9:97:b2:df:94:44:5c:8b:67:74:e1:eb:b9:07:
                    61:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B0:7E:3C:FD:DC:4F:2D:86:6C:10:52:07:61:26:69:9A:05:54:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6a0c7f19-051c-35df-935b-b0b7c9c6912c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.255.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f7:43:62:76:f5:2f:4f:a2:cc:c9:a1:7c:e0:fc:bf:1f:5c:
         58:b9:69:b2:69:57:84:16:3b:ab:46:27:dd:aa:91:5a:60:3c:
         e8:23:ce:9f:7b:5a:68:e8:a9:8e:01:26:54:93:f1:27:db:aa:
         01:87:63:af:a2:76:8f:73:f2:c9:8a:13:90:ea:82:1b:ce:02:
         9c:f4:31:07:9f:cd:e3:e2:9f:00:f0:73:26:a6:f7:f7:f8:dd:
         34:c2:d7:39:35:39:fd:ea:cc:ec:d2:94:8d:11:82:df:35:19:
         c6:e8:24:1d:24:89:3a:97:9a:94:21:02:bf:70:72:dc:ab:be:
         75:84:4b:f2:ef:bf:cb:6d:98:6a:2a:c9:aa:b1:29:bc:42:43:
         ff:ce:44:ba:27:86:b7:73:c8:a4:3d:7c:08:99:c6:11:ef:09:
         44:04:74:b0:f6:c7:79:fc:16:37:9c:93:a1:01:b5:9d:7b:de:
         d8:5c:47:3b:73:4b:c5:62:6e:86:f5:5e:dc:ba:4b:fb:67:07:
         c9:83:30:43:0d:b5:30:a4:ce:31:13:01:d4:79:a6:b5:b2:1e:
         37:e4:ce:6f:fa:77:75:a7:15:39:4d:1f:7f:ca:ba:72:34:49:
         5d:0b:f0:d9:43:d1:41:98:95:ba:7d:14:ce:ec:33:5d:ce:05:
         1a:71:06:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkbSMiObXUbnnQAcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTIzMDUxNTE4MjEwMVoXDTIzMDYyNDIwMDI1NlowLzEtMCsGA1UEAxMk
MzEzMTM5NzctYTU4OS00NThhLWFlZjItZjE4MDQyYTkyNjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJiFfW00NKRmadGLLWK/fcnYy3gtsxs+ft0+
SIspxRrHCQxK5sJyHHjZi+O+zp0WPo8e4qyt/XR7zvQvTmI6Y7kM4Ux6FYIFs9Gr
ao89B2MLzfM+TRru+rptspA8ZD55ZekCsc9FKOr/l5PBhL2Rwt+S4gxzD5AaUYO9
GQatC+dtCSUd1NP6JMVufeXWY8tAiB1Z7UAn96HQysTAVKVQLci4L9+a/XFonsqG
Xy1ardqrzd7ncHeyH7ACFVd44bwi6OG9t6wCfppyaCWpXzHeQI2Xq4V4/XxrRgzf
tHx2rK/W+7QTW7yQJojSB/6NjZg2+Zey35REXItndOHruQdhdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLKwfjz93E8thmwQUgdhJmmaBVSaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNmEwYzdmMTktMDUxYy0z
NWRmLTkzNWItYjBiN2M5YzY5MTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQP/gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHb3Q2J29S9PoszJoXzg/L8fXFi5abJpV4QWO6tGJ92qkVpgPOgjzp97
WmjoqY4BJlST8SfbqgGHY6+ido9z8smKE5DqghvOApz0MQefzePinwDwcyam9/f4
3TTC1zk1Of3qzOzSlI0Rgt81GcboJB0kiTqXmpQhAr9wctyrvnWES/Lvv8ttmGoq
yaqxKbxCQ//ORLonhrdzyKQ9fAiZxhHvCUQEdLD2x3n8Fjeck6EBtZ173thcRztz
S8Vibob1Xty6S/tnB8mDMEMNtTCkzjETAdR5prWyHjfkzm/6d3WnFTlNH3/KunI0
SV0L8NlD0UGYlbp9FM7sM13OBRpxBoY=
-----END CERTIFICATE-----
Generated at Mon May 15 19:17:46 2023 by rpki-client on console-fra.rpki-client.org