Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa
File:                     3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa (raw, json)
Hash identifier:          WdHl6DZOeHTp2e/139cA5VKLQ/31CsS2IXy+oaXwKuI=
Subject key identifier:   E5:2A:3D:AF:50:01:9D:93:FE:71:A2:7D:C9:86:D2:33:49:F2:5D:9C
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F43285845254044F76B6A4EEBF40F2780
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa
Signing time:             Sat 09 Mar 2024 02:00:25 +0000
ROA not before:           Sat 09 Mar 2024 02:00:25 +0000
ROA not after:            Fri 07 Jun 2024 01:00:25 +0000
asID:                     26935
IP address blocks:        69.55.208.0/20 maxlen: 20
                          207.32.192.0/20 maxlen: 20
                          66.35.0.0/20 maxlen: 20
                          2607:f688::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:25:40:44:f7:6b:6a:4e:eb:f4:0f:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Mar  9 02:00:25 2024 GMT
            Not After : Jun  7 01:00:25 2024 GMT
        Subject: CN=0e185376-533c-40d0-ad1c-48541f6b4874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c2:f3:36:de:f0:64:b9:f1:cf:df:8c:4f:dc:
                    3a:fe:ab:d7:0b:ab:71:75:3f:da:f0:5a:92:e2:65:
                    5f:df:07:c0:56:98:80:db:3f:68:bb:a8:44:52:a9:
                    06:c9:c5:dc:46:29:b0:63:2d:6d:1f:a9:60:ab:e9:
                    e0:c0:63:43:13:2e:3a:de:d9:ed:af:ea:1b:50:01:
                    ff:68:5b:c7:2f:13:8b:2b:ef:56:84:7d:e0:92:65:
                    4b:00:69:dd:95:99:06:cf:c7:64:72:de:4f:aa:28:
                    b8:a1:92:b8:f3:69:29:f7:b2:25:3e:3a:6e:29:7b:
                    61:e2:f1:67:ab:81:b4:85:67:1b:31:81:95:95:2d:
                    2f:6d:fa:eb:0c:40:6d:67:fe:36:85:0d:a8:f5:cc:
                    da:44:6e:79:ff:e5:7b:31:f8:5a:99:01:d8:87:6c:
                    f7:23:5d:2b:f6:fa:34:d2:68:30:9d:56:2c:12:42:
                    63:f4:d3:a3:aa:03:88:68:9b:b3:b3:ef:cd:53:0a:
                    c2:4e:90:da:e2:27:a4:7c:b5:cb:0c:39:53:91:4d:
                    e4:56:01:bf:21:6b:25:9f:4f:ae:c6:f1:76:d9:d7:
                    8f:0f:97:d3:18:20:94:8d:a5:ab:67:1a:cb:49:72:
                    33:65:a1:4a:4e:38:55:38:6e:cf:69:1f:f1:99:c1:
                    64:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2A:3D:AF:50:01:9D:93:FE:71:A2:7D:C9:86:D2:33:49:F2:5D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.0.0/20
                  69.55.208.0/20
                  207.32.192.0/20
                IPv6:
                  2607:f688::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:83:49:5b:5c:4d:3c:55:57:1f:95:c3:ee:ba:57:77:df:56:
         25:d3:2c:3d:9f:29:91:5f:65:49:d3:c4:8d:ef:33:77:b5:42:
         6e:d7:c6:17:d5:3b:c6:1e:83:18:92:72:09:5a:e3:a3:53:9d:
         6a:c3:e2:19:2c:d2:36:04:96:07:57:ec:23:2a:19:d4:29:38:
         90:41:37:b7:00:bc:8a:90:55:af:33:7f:99:fc:13:ca:65:70:
         88:fe:c7:27:68:aa:9a:e4:00:2f:8a:1d:02:0c:a7:32:55:4d:
         a7:ef:d6:53:9e:53:f7:04:ba:48:a7:f4:1d:8b:d6:81:5a:f7:
         c2:e2:65:16:3b:ce:41:a7:06:fd:c3:ca:c8:3c:17:76:bf:98:
         5d:75:b8:73:d8:06:39:77:c4:20:14:d8:5b:b8:5c:cd:85:85:
         b9:1c:99:b9:c5:cb:dc:42:4c:fb:f8:f5:90:94:30:b5:51:58:
         7c:44:94:d9:8b:3e:af:19:eb:b6:96:d8:3e:f3:8d:db:26:75:
         d1:70:78:17:65:f7:2f:8f:31:09:6e:bb:38:77:fe:29:12:ed:
         fd:a0:61:96:1b:81:5e:5d:3a:82:0b:73:f8:ac:f7:d5:5d:b1:
         b7:32:e4:8c:e4:73:b3:40:56:15:0d:96:50:33:10:fa:56:d1:
         9c:b3:a2:ab
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEUlQET3a2pO6/QPJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMxZmJkOGItNGVkOS00ZjVkLWE4ZjAtNzU1OWQ5MWJm
M2M4MB4XDTI0MDMwOTAyMDAyNVoXDTI0MDYwNzAxMDAyNVowLzEtMCsGA1UEAxMk
MGUxODUzNzYtNTMzYy00MGQwLWFkMWMtNDg1NDFmNmI0ODc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsLzNt7wZLnxz9+MT9w6/qvXC6txdT/a8FqS
4mVf3wfAVpiA2z9ou6hEUqkGycXcRimwYy1tH6lgq+ngwGNDEy463tntr+obUAH/
aFvHLxOLK+9WhH3gkmVLAGndlZkGz8dkct5Pqii4oZK482kp97IlPjpuKXth4vFn
q4G0hWcbMYGVlS0vbfrrDEBtZ/42hQ2o9czaRG55/+V7MfhamQHYh2z3I10r9vo0
0mgwnVYsEkJj9NOjqgOIaJuzs+/NUwrCTpDa4iekfLXLDDlTkU3kVgG/IWsln0+u
xvF22dePD5fTGCCUjaWrZxrLSXIzZaFKTjhVOG7PaR/xmcFkhwIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFOUqPa9QAZ2T/nGifcmG0jNJ8l2cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFm
YmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5ZDkxYmYzYzgvM2I4ZTg0MWYtMGExZS0z
NTZiLTkzOTAtYmMyZDYxZjFjNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmMxZmJkOGItNGVkOS00ZjVkLWE4
ZjAtNzU1OWQ5MWJmM2M4L2ZjMWZiZDhiLTRlZDktNGY1ZC1hOGYwLTc1NTlkOTFi
ZjNjOC5jcmwwHwYDVR0jBBgwFoAUbKtKsvVYO/RVBP3F8Yue3m5JAT0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFmYmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5
ZDkxYmYzYzguY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEQiMAAwQE
RTfQAwQEzyDAMA0EAgACMAcDBQAmB/aIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHODSVtcTTxVVx+Vw+66
V3ffViXTLD2fKZFfZUnTxI3vM3e1Qm7XxhfVO8YegxiScgla46NTnWrD4hks0jYE
lgdX7CMqGdQpOJBBN7cAvIqQVa8zf5n8E8plcIj+xydoqprkAC+KHQIMpzJVTafv
1lOeU/cEukin9B2L1oFa98LiZRY7zkGnBv3Dysg8F3a/mF11uHPYBjl3xCAU2Fu4
XM2FhbkcmbnFy9xCTPv49ZCUMLVRWHxElNmLPq8Z67aW2D7zjdsmddFweBdl9y+P
MQluuzh3/ikS7f2gYZYbgV5dOoILc/is99Vdsbcy5Izkc7NAVhUNllAzEPpW0Zyz
oqs=
-----END CERTIFICATE-----
Generated at Sun Apr 28 16:15:46 2024 by rpki-client on console-fra.rpki-client.org