Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/c77a773b-0166-38a9-9a05-e1cb95e81661.roa
File:                     c77a773b-0166-38a9-9a05-e1cb95e81661.roa (raw, json)
Hash identifier:          1UtlzsjI8LVY3oc9USfPECu5j09mTlcabeASdJcHNzc=
Subject key identifier:   06:EC:BB:99:11:9B:EE:93:55:12:4C:C1:56:30:C8:F4:9B:4F:25:A6
Certificate issuer:       /CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Certificate serial:       010D0C9F43285845209A3F2B6F692AEE294D3080
Authority key identifier: 34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/c77a773b-0166-38a9-9a05-e1cb95e81661.roa
Signing time:             Thu 07 Mar 2024 10:02:44 +0000
ROA not before:           Thu 07 Mar 2024 10:02:44 +0000
ROA not after:            Wed 05 Jun 2024 09:02:44 +0000
asID:                     40934
IP address blocks:        69.167.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:20:9a:3f:2b:6f:69:2a:ee:29:4d:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9e4738-7902-435b-802c-f37dc4b25f95
        Validity
            Not Before: Mar  7 10:02:44 2024 GMT
            Not After : Jun  5 09:02:44 2024 GMT
        Subject: CN=ace8b922-4422-467e-bc68-543d8dca8d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:77:ec:66:79:54:01:b5:eb:9c:0c:83:7a:
                    44:0e:34:b5:31:01:2c:0d:ac:47:62:e5:b1:a2:18:
                    b6:bc:2a:65:54:c7:4d:84:80:7b:25:8d:5c:92:b1:
                    5b:69:08:c0:a4:7c:ca:97:96:07:61:1b:e4:78:56:
                    3e:0c:1c:83:0c:fa:07:0a:38:82:d7:0c:79:6c:c5:
                    75:13:c2:5c:3e:55:39:12:44:c6:f1:cb:fb:8a:57:
                    b4:1f:a7:a4:0d:41:b2:f3:c5:74:e1:f5:d6:e2:e5:
                    37:ff:8a:47:8a:da:31:80:a2:5c:11:46:40:c3:34:
                    63:72:fe:e3:7b:fd:0d:13:b6:63:e1:1c:3a:14:61:
                    20:9d:73:42:eb:bc:43:1d:aa:2e:53:1f:c6:88:26:
                    3a:5f:91:ba:35:cf:01:e5:d0:23:38:e3:34:06:cd:
                    e9:c1:77:ad:75:cf:c9:04:03:63:87:a5:88:42:4a:
                    75:75:9a:d7:22:0b:fd:4a:a0:4b:40:9f:51:d2:23:
                    47:2f:6b:f4:e6:0c:45:88:1f:c6:b0:2f:13:25:1f:
                    e2:88:39:cc:70:ac:4d:1b:ae:a1:bf:a5:f8:03:d3:
                    41:26:b6:12:4a:68:52:48:cd:91:fe:01:72:86:90:
                    63:d3:51:31:8b:10:1b:5f:a6:63:c2:bf:b3:a2:d2:
                    a9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EC:BB:99:11:9B:EE:93:55:12:4C:C1:56:30:C8:F4:9B:4F:25:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/c77a773b-0166-38a9-9a05-e1cb95e81661.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl

            X509v3 Authority Key Identifier:
                keyid:34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.167.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:01:ff:c2:95:f6:da:76:83:5b:97:4d:d2:60:f9:10:65:87:
         34:66:62:6a:a5:39:a7:83:91:58:a9:98:95:f4:3c:25:59:4d:
         eb:23:43:72:1b:ab:ba:28:78:05:d1:b4:ab:87:c8:b8:25:64:
         45:20:bd:92:43:22:b9:83:bc:2d:90:f5:f3:3a:a7:8f:d1:78:
         c3:03:d9:93:73:f7:c4:9a:65:3c:d5:fe:de:48:4f:66:2f:cc:
         fa:ef:5d:30:df:f5:83:00:e2:fe:c4:80:e1:81:fd:de:24:92:
         58:14:bc:47:8b:16:6d:ab:92:61:e6:d2:82:53:2a:24:f2:8b:
         4f:24:da:fd:75:47:47:7f:4b:6d:53:48:2d:7a:10:5f:ae:e8:
         e4:c3:5d:43:05:a9:2e:69:e8:b1:83:d8:bb:ae:dc:97:e2:0a:
         66:3c:3f:7c:eb:3d:a9:89:00:6d:fa:66:8a:14:dd:3f:04:c9:
         c2:8d:a5:3d:fb:80:db:4d:a0:d4:db:5f:6c:4e:ae:ec:43:43:
         96:dc:22:02:6f:88:6e:2e:00:43:c4:0a:10:52:9f:de:e1:d1:
         6c:1e:b9:26:69:70:66:ab:5f:3b:89:05:26:79:b0:98:89:c6:
         20:60:5d:a3:7e:e1:89:66:d4:2e:35:79:d0:6b:ce:e3:4e:72:
         d0:ab:25:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUgmj8rb2kq7ilNMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmM5ZTQ3MzgtNzkwMi00MzViLTgwMmMtZjM3ZGM0YjI1
Zjk1MB4XDTI0MDMwNzEwMDI0NFoXDTI0MDYwNTA5MDI0NFowLzEtMCsGA1UEAxMk
YWNlOGI5MjItNDQyMi00NjdlLWJjNjgtNTQzZDhkY2E4ZDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbJ37GZ5VAG165wMg3pEDjS1MQEsDaxHYuWx
ohi2vCplVMdNhIB7JY1ckrFbaQjApHzKl5YHYRvkeFY+DByDDPoHCjiC1wx5bMV1
E8JcPlU5EkTG8cv7ile0H6ekDUGy88V04fXW4uU3/4pHitoxgKJcEUZAwzRjcv7j
e/0NE7Zj4Rw6FGEgnXNC67xDHaouUx/GiCY6X5G6Nc8B5dAjOOM0Bs3pwXetdc/J
BANjh6WIQkp1dZrXIgv9SqBLQJ9R0iNHL2v05gxFiB/GsC8TJR/iiDnMcKxNG66h
v6X4A9NBJrYSSmhSSM2R/gFyhpBj01ExixAbX6Zjwr+zotKp1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbsu5kRm+6TVRJMwVYwyPSbTyWmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzll
NDczOC03OTAyLTQzNWItODAyYy1mMzdkYzRiMjVmOTUvYzc3YTc3M2ItMDE2Ni0z
OGE5LTlhMDUtZTFjYjk1ZTgxNjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmM5ZTQ3MzgtNzkwMi00MzViLTgw
MmMtZjM3ZGM0YjI1Zjk1L2ZjOWU0NzM4LTc5MDItNDM1Yi04MDJjLWYzN2RjNGIy
NWY5NS5jcmwwHwYDVR0jBBgwFoAUNOuS0gTb0TO8bP11PzY75DvgQ74wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzllNDczOC03OTAyLTQzNWItODAyYy1mMzdk
YzRiMjVmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARadvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA4B/8KV9tp2g1uXTdJg+RBlhzRmYmqlOaeDkVipmJX0PCVZTesjQ3Ib
q7ooeAXRtKuHyLglZEUgvZJDIrmDvC2Q9fM6p4/ReMMD2ZNz98SaZTzV/t5IT2Yv
zPrvXTDf9YMA4v7EgOGB/d4kklgUvEeLFm2rkmHm0oJTKiTyi08k2v11R0d/S21T
SC16EF+u6OTDXUMFqS5p6LGD2Luu3JfiCmY8P3zrPamJAG36ZooU3T8EycKNpT37
gNtNoNTbX2xOruxDQ5bcIgJviG4uAEPEChBSn97h0WweuSZpcGarXzuJBSZ5sJiJ
xiBgXaN+4Ylm1C41edBrzuNOctCrJWs=
-----END CERTIFICATE-----
Generated at Tue May 7 03:13:52 2024 by rpki-client on console-fra.rpki-client.org