Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/00748aec-e1b0-363f-9bb3-9cabfac7d29d.roa
File:                     00748aec-e1b0-363f-9bb3-9cabfac7d29d.roa (raw, json)
Hash identifier:          CEffWteEP8CPybKWevwnqRkURWeMTyfJKF4Zr1cOors=
Subject key identifier:   86:6C:EE:69:ED:76:8A:53:DA:2E:24:3B:A5:A6:FE:73:40:8E:2A:6C
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584586941290CD7595FAAAE61E80
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/00748aec-e1b0-363f-9bb3-9cabfac7d29d.roa
Signing time:             Fri 12 Apr 2024 22:42:44 +0000
ROA not before:           Fri 12 Apr 2024 22:42:44 +0000
ROA not after:            Thu 11 Jul 2024 22:42:44 +0000
asID:                     7018
IP address blocks:        172.111.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:94:12:90:cd:75:95:fa:aa:e6:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Apr 12 22:42:44 2024 GMT
            Not After : Jul 11 22:42:44 2024 GMT
        Subject: CN=da5ad080-7a05-48ab-89c3-0629ab9def91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:39:ee:09:74:8f:c0:a9:0e:09:3b:95:14:2c:
                    e5:e5:4c:b9:a5:c5:1d:03:3a:52:94:9f:4b:84:dd:
                    87:8f:7e:65:b7:f5:7e:b5:bf:04:84:1a:6e:82:e2:
                    25:2d:38:a7:77:cf:f4:9d:ba:cd:59:2f:fa:95:9b:
                    08:ec:e9:2c:12:4d:85:ad:44:ea:0b:42:87:0c:44:
                    47:62:df:1b:c5:b0:0e:a1:2c:74:f3:ff:4d:7e:d4:
                    89:cb:9d:af:e9:1e:e2:81:c8:d2:46:6c:bc:d4:5e:
                    9d:45:af:92:25:68:7c:09:31:94:b0:a0:7e:77:70:
                    29:df:45:9a:89:fe:f8:30:85:8a:18:4e:9b:8c:6d:
                    42:f9:dd:37:e9:ca:6f:b6:6c:be:35:7f:df:02:89:
                    2b:cb:2b:16:63:04:c3:af:a1:8f:63:a8:63:e4:ef:
                    d2:4b:78:95:c1:8b:0a:ad:e8:bc:b8:75:0a:c2:30:
                    f9:2e:f8:45:a5:de:59:f4:a1:69:a4:92:83:6b:b8:
                    c5:ca:fc:39:63:24:64:ed:2b:1a:78:0d:a9:10:71:
                    e6:7c:07:ba:88:d4:02:46:17:2e:aa:cb:07:a2:c6:
                    e5:c0:90:34:ec:8c:d2:c4:94:d8:58:e6:9c:94:69:
                    95:12:66:df:d3:fb:d7:4d:3d:e3:a3:57:f0:de:ed:
                    d2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6C:EE:69:ED:76:8A:53:DA:2E:24:3B:A5:A6:FE:73:40:8E:2A:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/00748aec-e1b0-363f-9bb3-9cabfac7d29d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b1:cc:59:ee:24:a8:1d:68:8f:e8:11:fe:d7:ac:44:53:8e:
         07:94:a0:bd:e3:fa:a5:05:75:1a:fd:07:b4:97:5e:75:7e:2e:
         2d:70:e0:44:d5:16:ca:de:83:c7:8d:d9:1e:7d:48:b2:a5:d5:
         98:a8:16:0d:cf:db:3d:48:c4:dc:7a:3f:16:b7:5b:e2:2a:79:
         27:c3:59:81:df:b4:a1:31:59:01:95:37:5c:b3:b7:db:7a:67:
         7a:f4:92:54:1e:79:d5:8c:8a:8d:d6:3f:8f:7e:e0:0d:1f:04:
         b7:45:d0:86:ca:44:9a:cb:c8:98:90:ab:91:48:e7:d4:e3:a9:
         6b:4d:aa:5e:bc:f9:9e:5f:e5:8b:72:05:a6:b4:9a:b0:b0:73:
         66:58:48:74:ab:69:14:43:4b:94:12:d3:a5:63:ac:da:5a:3e:
         1f:89:20:3b:4b:fb:57:e0:11:51:39:12:14:94:07:d9:a8:2e:
         94:59:d6:2e:9a:7d:49:39:62:db:f0:8a:5b:6e:1e:1f:d6:c6:
         e7:a1:ad:81:80:19:0a:79:fa:d9:39:ed:c5:27:71:68:8a:4a:
         e0:75:3e:95:f3:ce:41:83:09:cb:9c:93:9e:2d:b1:8b:10:ef:
         97:c5:a2:88:ea:19:a1:3b:f7:98:6f:b3:77:65:9e:50:8c:1d:
         1c:34:92:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWGlBKQzXWV+qrmHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4
MGMzMB4XDTI0MDQxMjIyNDI0NFoXDTI0MDcxMTIyNDI0NFowLzEtMCsGA1UEAxMk
ZGE1YWQwODAtN2EwNS00OGFiLTg5YzMtMDYyOWFiOWRlZjkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTnuCXSPwKkOCTuVFCzl5Uy5pcUdAzpSlJ9L
hN2Hj35lt/V+tb8EhBpuguIlLTind8/0nbrNWS/6lZsI7OksEk2FrUTqC0KHDERH
Yt8bxbAOoSx08/9NftSJy52v6R7igcjSRmy81F6dRa+SJWh8CTGUsKB+d3Ap30Wa
if74MIWKGE6bjG1C+d036cpvtmy+NX/fAokryysWYwTDr6GPY6hj5O/SS3iVwYsK
rei8uHUKwjD5LvhFpd5Z9KFppJKDa7jFyvw5YyRk7SsaeA2pEHHmfAe6iNQCRhcu
qssHosblwJA07IzSxJTYWOaclGmVEmbf0/vXTT3jo1fw3u3S2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIZs7mntdopT2i4kO6Wm/nNAjipsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz
OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvMDA3NDhhZWMtZTFiMC0z
NjNmLTliYjMtOWNhYmZhYzdkMjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk
YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3
ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj
Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG87MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6xzFnuJKgdaI/oEf7XrERTjgeUoL3j+qUFdRr9B7SXXnV+Li1w4ETV
Fsreg8eN2R59SLKl1ZioFg3P2z1IxNx6Pxa3W+IqeSfDWYHftKExWQGVN1yzt9t6
Z3r0klQeedWMio3WP49+4A0fBLdF0IbKRJrLyJiQq5FI59TjqWtNql68+Z5f5Yty
Baa0mrCwc2ZYSHSraRRDS5QS06VjrNpaPh+JIDtL+1fgEVE5EhSUB9moLpRZ1i6a
fUk5YtvwiltuHh/WxuehrYGAGQp5+tk57cUncWiKSuB1PpXzzkGDCcuck54tsYsQ
75fFoojqGaE795hvs3dlnlCMHRw0ktY=
-----END CERTIFICATE-----
Generated at Fri May 3 06:32:24 2024 by rpki-client on console-fra.rpki-client.org