Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d36404d-60f9-49cc-a9be-eaed17d0f58d/8165d2b0-772b-3e39-8d93-fef90154f451.roa
File:                     8165d2b0-772b-3e39-8d93-fef90154f451.roa (raw, json)
Hash identifier:          7bmYws43dZ+3/AGmom+7ZrmDKzB/cvoAB5hxwkITIjQ=
Subject key identifier:   BE:A5:65:95:B5:12:E5:9B:22:A6:CA:DF:91:EE:C3:61:EA:35:48:98
Certificate issuer:       /CN=7d36404d-60f9-49cc-a9be-eaed17d0f58d
Certificate serial:       010D0C9F43285845B7B37C584673CE4544562480
Authority key identifier: 2D:49:EE:AA:3C:E2:EC:E7:D7:2A:86:F3:CF:31:00:2B:70:9F:33:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d36404d-60f9-49cc-a9be-eaed17d0f58d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d36404d-60f9-49cc-a9be-eaed17d0f58d/8165d2b0-772b-3e39-8d93-fef90154f451.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     399111
IP address blocks:        216.73.136.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d36404d-60f9-49cc-a9be-eaed17d0f58d/7d36404d-60f9-49cc-a9be-eaed17d0f58d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d36404d-60f9-49cc-a9be-eaed17d0f58d/7d36404d-60f9-49cc-a9be-eaed17d0f58d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d36404d-60f9-49cc-a9be-eaed17d0f58d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:7c:58:46:73:ce:45:44:56:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d36404d-60f9-49cc-a9be-eaed17d0f58d
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=72f20b07-0950-4f23-b7e9-a9b752d2a674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c6:c0:e7:6b:a7:7e:ed:65:54:5e:df:e8:c3:
                    43:cb:89:67:ca:d0:38:32:ca:c9:95:81:66:92:1e:
                    5d:5d:e7:b1:50:4d:f9:3e:84:64:7e:04:65:88:db:
                    d9:6a:d3:99:10:25:a7:99:cc:2c:c4:c1:11:26:83:
                    db:5a:f8:f5:7d:8f:c8:fc:71:69:07:f0:1a:94:cd:
                    df:06:28:54:bf:af:4a:48:61:8b:ad:92:45:f6:d1:
                    63:3f:8d:b5:dd:cd:a1:9c:96:81:e9:27:8a:80:5d:
                    48:fd:95:0a:a9:e4:de:d3:d0:32:e6:71:61:94:b5:
                    21:14:c0:12:ce:c3:9e:37:42:65:ea:03:80:4b:d5:
                    9b:1b:f0:4c:a4:4d:fa:b4:48:9e:af:45:db:b9:45:
                    15:d1:5b:e7:6d:73:31:de:4c:d7:03:d9:c0:50:7d:
                    31:35:a1:41:c8:8b:55:b4:ba:1d:d6:0f:f0:37:d7:
                    63:4d:d6:26:b8:33:76:59:60:42:08:62:08:64:a9:
                    b1:8c:2c:3f:f7:45:d3:20:78:0a:56:c3:27:16:ab:
                    f7:80:66:e5:d2:4b:e7:1f:f7:c4:79:28:c8:77:b0:
                    ba:a4:59:56:05:9e:f6:02:fd:07:f5:f0:7a:c1:fa:
                    fd:e4:1e:d1:70:d4:9c:93:e9:c4:92:73:f2:c7:e4:
                    26:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A5:65:95:B5:12:E5:9B:22:A6:CA:DF:91:EE:C3:61:EA:35:48:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d36404d-60f9-49cc-a9be-eaed17d0f58d/8165d2b0-772b-3e39-8d93-fef90154f451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d36404d-60f9-49cc-a9be-eaed17d0f58d/7d36404d-60f9-49cc-a9be-eaed17d0f58d.crl

            X509v3 Authority Key Identifier:
                keyid:2D:49:EE:AA:3C:E2:EC:E7:D7:2A:86:F3:CF:31:00:2B:70:9F:33:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d36404d-60f9-49cc-a9be-eaed17d0f58d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:56:2e:90:60:f2:d7:ee:4f:9b:46:77:dd:58:57:e0:a5:ed:
         27:59:ef:85:f8:b2:da:52:b8:e9:80:12:ee:96:d2:cc:8b:69:
         f5:1a:75:57:8a:56:bc:8e:4e:85:bc:78:c1:2a:a5:40:f6:23:
         cf:1d:e5:da:4f:a4:95:42:e1:b3:f9:95:07:68:0f:7f:20:ee:
         3e:2e:39:f8:4f:c5:99:4e:d2:c2:08:61:66:0d:7e:12:3d:4f:
         f0:44:7d:9d:81:de:87:f1:b2:d0:81:c1:3e:62:73:56:50:32:
         e9:10:18:e9:09:63:0a:55:a9:a9:5c:b8:0f:be:aa:3f:e8:eb:
         fd:27:e1:01:1d:2f:8f:2e:41:8d:cd:cc:7b:66:ff:16:e0:d5:
         fb:cd:43:82:07:b7:30:ec:41:58:d7:72:56:99:28:36:db:93:
         d5:7d:8a:5e:54:89:cf:9b:6c:0d:06:18:91:2d:ed:8c:7f:a7:
         dc:66:05:53:a8:ca:89:c3:a8:3d:e6:7e:68:ac:96:89:34:50:
         89:26:cb:be:de:eb:c5:47:1c:33:eb:2c:e2:93:fb:19:6e:9a:
         52:84:bd:ee:c6:21:5e:f7:c1:52:3a:b0:00:11:ff:c3:f1:55:
         50:e5:a6:9b:e5:57:62:91:a3:74:14:34:de:8a:79:3f:b1:58:
         64:5c:e6:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW3s3xYRnPORURWJIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2QzNjQwNGQtNjBmOS00OWNjLWE5YmUtZWFlZDE3ZDBm
NThkMB4XDTI0MDQzMDEzMDAzNFoXDTI0MDcyOTEzMDAzNFowLzEtMCsGA1UEAxMk
NzJmMjBiMDctMDk1MC00ZjIzLWI3ZTktYTliNzUyZDJhNjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sbA52unfu1lVF7f6MNDy4lnytA4MsrJlYFm
kh5dXeexUE35PoRkfgRliNvZatOZECWnmcwsxMERJoPbWvj1fY/I/HFpB/AalM3f
BihUv69KSGGLrZJF9tFjP4213c2hnJaB6SeKgF1I/ZUKqeTe09Ay5nFhlLUhFMAS
zsOeN0Jl6gOAS9WbG/BMpE36tEier0XbuUUV0VvnbXMx3kzXA9nAUH0xNaFByItV
tLod1g/wN9djTdYmuDN2WWBCCGIIZKmxjCw/90XTIHgKVsMnFqv3gGbl0kvnH/fE
eSjId7C6pFlWBZ72Av0H9fB6wfr95B7RcNSck+nEknPyx+QmSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL6lZZW1EuWbIqbK35Huw2HqNUiYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83ZDM2
NDA0ZC02MGY5LTQ5Y2MtYTliZS1lYWVkMTdkMGY1OGQvODE2NWQyYjAtNzcyYi0z
ZTM5LThkOTMtZmVmOTAxNTRmNDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2QzNjQwNGQtNjBmOS00OWNjLWE5
YmUtZWFlZDE3ZDBmNThkLzdkMzY0MDRkLTYwZjktNDljYy1hOWJlLWVhZWQxN2Qw
ZjU4ZC5jcmwwHwYDVR0jBBgwFoAULUnuqjzi7OfXKobzzzEAK3CfM1cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83ZDM2NDA0ZC02MGY5LTQ5Y2MtYTliZS1lYWVk
MTdkMGY1OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2EmIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNWLpBg8tfuT5tGd91YV+Cl7SdZ74X4stpSuOmAEu6W0syLafUadVeK
VryOToW8eMEqpUD2I88d5dpPpJVC4bP5lQdoD38g7j4uOfhPxZlO0sIIYWYNfhI9
T/BEfZ2B3ofxstCBwT5ic1ZQMukQGOkJYwpVqalcuA++qj/o6/0n4QEdL48uQY3N
zHtm/xbg1fvNQ4IHtzDsQVjXclaZKDbbk9V9il5Uic+bbA0GGJEt7Yx/p9xmBVOo
yonDqD3mfmislok0UIkmy77e68VHHDPrLOKT+xlumlKEve7GIV73wVI6sAAR/8Px
VVDlppvlV2KRo3QUNN6KeT+xWGRc5oc=
-----END CERTIFICATE-----
Generated at Thu May 2 04:27:57 2024 by rpki-client on console-fra.rpki-client.org