Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/78a31b0d-31cf-3e0d-a904-45f0a490530a.roa
File:                     78a31b0d-31cf-3e0d-a904-45f0a490530a.roa (raw, json)
Hash identifier:          7FIRilTn9YBdcP4ECCp+d92oY4tgLZ7WacdC5mjJy3U=
Subject key identifier:   66:52:1F:1E:90:51:B4:29:9E:8B:60:77:1A:5F:91:EC:BE:40:3D:AA
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F43285845B4E8D98D7735CA52CA3C3080
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/78a31b0d-31cf-3e0d-a904-45f0a490530a.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        172.82.215.0/24 maxlen: 24
                          172.82.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d9:8d:77:35:ca:52:ca:3c:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=ed025dd3-7058-4633-ba5c-9719ee0eaa64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:77:c6:24:b1:27:c8:65:06:e6:19:50:b0:01:
                    93:6f:bc:6f:51:69:9b:63:2f:b5:f3:1f:15:62:a5:
                    86:32:fc:8a:ce:8f:6a:cf:a6:8f:49:15:55:da:ac:
                    8f:fe:05:c5:62:34:ec:1d:7c:0c:6d:1b:3a:7f:ba:
                    3c:96:29:76:7c:b4:38:48:f2:87:69:78:e6:99:43:
                    01:c7:34:c1:df:28:b2:59:80:0b:c3:17:c7:0c:d1:
                    01:18:a1:9f:c5:03:57:be:ff:2a:6b:c2:74:c6:fc:
                    f7:5a:97:6c:55:1f:6e:63:e5:1b:77:78:47:d7:63:
                    d9:d0:b5:d4:ca:aa:90:7d:a2:d2:42:5d:13:dc:31:
                    3a:fc:f8:98:04:3f:7d:ad:0b:e7:46:51:5a:06:95:
                    41:14:e8:d3:07:98:e1:0b:e3:60:0c:c4:c2:46:66:
                    75:d6:ac:c4:b7:d6:f7:5c:25:0a:c1:b5:19:12:50:
                    72:e7:b3:38:b8:37:d6:54:c9:8a:87:b9:fd:16:57:
                    03:c9:f3:4d:e3:00:38:e6:69:5a:69:32:a0:07:f3:
                    b8:80:86:01:56:fa:fd:62:a4:2e:2d:7f:53:2d:27:
                    20:20:e8:e4:0b:62:7b:aa:47:8d:e8:b8:bb:84:f4:
                    eb:dd:9b:c3:be:2b:c8:5a:6d:8a:32:75:5c:59:fc:
                    02:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:52:1F:1E:90:51:B4:29:9E:8B:60:77:1A:5F:91:EC:BE:40:3D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/78a31b0d-31cf-3e0d-a904-45f0a490530a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.212.0/24
                  172.82.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:a7:cf:4a:e0:1c:27:21:19:c6:57:b4:13:4f:cd:31:39:dd:
         92:c7:39:95:6c:5b:b6:8f:e4:0d:98:bb:d2:cd:c3:28:92:40:
         59:e7:00:fd:b5:44:3c:f8:c6:26:68:54:49:2d:55:63:75:04:
         88:c9:6c:ef:4d:df:8c:b3:c6:05:18:91:97:a1:aa:f9:55:a5:
         fc:bc:fc:78:74:77:e3:95:b3:b7:7c:75:5d:13:e9:d9:08:66:
         c9:36:8a:88:3d:95:d7:66:39:de:ca:7f:40:47:0b:37:53:91:
         7a:85:af:36:08:a7:59:5f:9b:f4:ef:dd:04:22:86:87:f7:5f:
         9a:a6:3b:2c:40:73:f4:99:42:0b:18:5d:7b:ca:88:e0:ba:56:
         23:2a:3d:0d:4f:11:bc:53:c0:6b:0b:a2:2d:57:54:55:c3:2d:
         58:c2:01:10:bb:e0:b8:9f:9f:19:22:44:87:0a:92:02:33:87:
         1f:c4:ba:60:62:1a:e3:43:77:4c:dd:fd:39:ba:b1:5f:7e:7a:
         be:ad:ca:9a:df:72:03:e0:88:ae:9a:a3:e9:a6:c3:28:53:f9:
         93:6c:54:ed:5d:2f:1c:1e:b9:a3:7e:02:3a:63:0b:84:2e:dd:
         31:85:9c:75:a2:14:e4:15:4c:c4:a3:6b:09:2c:af:56:05:96:
         3a:f1:80:72
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEW06NmNdzXKUso8MIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5
ZWE5MB4XDTI0MDQyOTEzMDAzM1oXDTI0MDcyODEzMDAzM1owLzEtMCsGA1UEAxMk
ZWQwMjVkZDMtNzA1OC00NjMzLWJhNWMtOTcxOWVlMGVhYTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13fGJLEnyGUG5hlQsAGTb7xvUWmbYy+18x8V
YqWGMvyKzo9qz6aPSRVV2qyP/gXFYjTsHXwMbRs6f7o8lil2fLQ4SPKHaXjmmUMB
xzTB3yiyWYALwxfHDNEBGKGfxQNXvv8qa8J0xvz3WpdsVR9uY+Ubd3hH12PZ0LXU
yqqQfaLSQl0T3DE6/PiYBD99rQvnRlFaBpVBFOjTB5jhC+NgDMTCRmZ11qzEt9b3
XCUKwbUZElBy57M4uDfWVMmKh7n9FlcDyfNN4wA45mlaaTKgB/O4gIYBVvr9YqQu
LX9TLScgIOjkC2J7qkeN6Li7hPTr3ZvDvivIWm2KMnVcWfwC2wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGZSHx6QUbQpnotgdxpfkey+QD2qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh
ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvNzhhMzFiMGQtMzFjZi0z
ZTBkLWE5MDQtNDVmMGE0OTA1MzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy
OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx
OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz
MjkyMTllYTkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArFLUAwQA
rFLXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABOnz0rgHCchGcZXtBNPzTE53ZLHOZVsW7aP5A2Yu9LNwyiS
QFnnAP21RDz4xiZoVEktVWN1BIjJbO9N34yzxgUYkZehqvlVpfy8/Hh0d+OVs7d8
dV0T6dkIZsk2iog9lddmOd7Kf0BHCzdTkXqFrzYIp1lfm/Tv3QQihof3X5qmOyxA
c/SZQgsYXXvKiOC6ViMqPQ1PEbxTwGsLoi1XVFXDLVjCARC74LifnxkiRIcKkgIz
hx/EumBiGuNDd0zd/Tm6sV9+er6typrfcgPgiK6ao+mmwyhT+ZNsVO1dLxweuaN+
AjpjC4Qu3TGFnHWiFOQVTMSjawksr1YFljrxgHI=
-----END CERTIFICATE-----
Generated at Thu May 2 04:28:02 2024 by rpki-client on console-fra.rpki-client.org