Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c3771ffc-3d14-338a-8f08-18085a6790e9.roa
File:                     c3771ffc-3d14-338a-8f08-18085a6790e9.roa (raw, json)
Hash identifier:          P/F7MwY9OOd3R9mXelS6mMI8DTDFBS7426Fxgf+0GhY=
Subject key identifier:   C7:BC:03:B3:55:4A:4F:24:83:FF:6B:5E:F5:44:12:74:00:C6:DC:68
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F432858452EE7EC48FCB9ACAB1D296680
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c3771ffc-3d14-338a-8f08-18085a6790e9.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     15327
IP address blocks:        216.151.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:ec:48:fc:b9:ac:ab:1d:29:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=6d100bd8-4a11-4242-b457-3e3bfb04557f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:13:14:bf:75:13:67:b6:77:dd:f4:53:8a:99:
                    db:31:3b:94:d6:b0:0a:da:83:1f:12:3d:b6:09:84:
                    ad:25:16:45:d9:55:dd:3f:c7:3e:b0:2b:3d:c5:47:
                    6f:c4:5e:1b:47:3e:bf:47:e5:72:b9:dd:e5:e2:7e:
                    8a:e1:4f:4e:40:86:5e:af:81:62:52:16:db:a4:12:
                    33:42:f3:63:46:7c:33:bc:5b:92:53:fb:90:ae:c6:
                    ad:5c:95:cc:78:0d:45:ee:af:17:44:28:fe:e4:ca:
                    ef:6a:f9:9e:ba:31:45:b3:bb:c1:af:e7:e6:e3:fc:
                    7f:82:4b:f1:9a:14:69:b1:91:f3:71:e3:bd:8c:26:
                    33:fa:7c:7e:d0:12:76:42:37:a4:0b:91:cb:a9:b0:
                    bd:9e:c2:88:00:0f:fb:52:e2:9a:9c:da:f6:eb:cc:
                    29:ca:98:fd:e1:42:48:e0:0a:d0:71:e5:7c:b0:89:
                    08:75:96:4c:e8:99:be:bc:4d:ff:95:a5:56:f6:fc:
                    82:a2:48:43:f5:bc:9e:2d:f7:c2:6d:98:8d:fe:57:
                    9d:ad:5c:62:be:f9:db:99:d8:df:0f:f2:06:b6:c2:
                    14:ac:a5:6d:11:5f:87:ae:ed:58:2e:c9:cb:1b:e2:
                    fe:0e:e5:cc:d6:91:b9:d5:2c:31:54:44:28:cd:a9:
                    8e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BC:03:B3:55:4A:4F:24:83:FF:6B:5E:F5:44:12:74:00:C6:DC:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c3771ffc-3d14-338a-8f08-18085a6790e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:8f:93:d6:8b:41:21:df:b8:5b:9d:f4:12:93:84:b6:cc:f3:
         d3:0a:d3:30:bf:71:7b:10:96:1a:76:75:b7:d6:5f:a5:ca:4d:
         57:4d:53:04:77:5d:80:b6:f4:a7:1f:ea:44:74:cc:60:ec:be:
         a6:30:5d:11:d5:b4:57:67:79:35:e9:d6:00:25:2d:6e:be:eb:
         ab:9b:a1:19:05:ff:48:76:83:29:17:a8:b2:35:94:24:84:b2:
         b6:c8:76:f6:d7:be:e8:61:f8:e6:7d:27:44:7a:3f:cc:16:7d:
         fc:34:b6:c4:3d:b7:a1:7f:b2:f4:af:43:0f:aa:d9:80:4c:a6:
         36:5c:44:bc:b2:0a:9d:31:a3:24:f7:a7:f3:f9:75:d0:c3:ff:
         7a:0d:56:ba:78:1a:1c:2f:3a:83:d7:4a:2e:bd:a3:2e:cb:40:
         fb:5e:d7:56:c8:3d:cf:64:c1:91:5b:5d:46:91:5e:7f:7c:03:
         ad:4a:45:7f:aa:ba:af:e9:8f:f2:4d:c3:6b:eb:c9:14:e0:67:
         02:77:49:f1:52:ef:c4:ca:21:42:63:72:8a:79:00:f2:b5:8f:
         9e:6d:0f:8e:b8:44:24:6f:fb:5c:af:37:82:d0:7b:73:a8:3a:
         87:1c:bd:40:e1:e8:ab:67:2b:c0:4d:84:83:dd:e1:1e:bb:be:
         7f:20:38:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUu5+xI/Lmsqx0pZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy
NTE2MB4XDTI0MDMxMjEzMDAyOFoXDTI0MDYxMDEzMDAyOFowLzEtMCsGA1UEAxMk
NmQxMDBiZDgtNGExMS00MjQyLWI0NTctM2UzYmZiMDQ1NTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBMUv3UTZ7Z33fRTipnbMTuU1rAK2oMfEj22
CYStJRZF2VXdP8c+sCs9xUdvxF4bRz6/R+Vyud3l4n6K4U9OQIZer4FiUhbbpBIz
QvNjRnwzvFuSU/uQrsatXJXMeA1F7q8XRCj+5MrvavmeujFFs7vBr+fm4/x/gkvx
mhRpsZHzceO9jCYz+nx+0BJ2QjekC5HLqbC9nsKIAA/7UuKanNr268wpypj94UJI
4ArQceV8sIkIdZZM6Jm+vE3/laVW9vyCokhD9byeLffCbZiN/ledrVxivvnbmdjf
D/IGtsIUrKVtEV+Hru1YLsnLG+L+DuXM1pG51SwxVEQozamOBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMe8A7NVSk8kg/9rXvVEEnQAxtxoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk
M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYzM3NzFmZmMtM2QxNC0z
MzhhLThmMDgtMTgwODVhNjc5MGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl
MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1
MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1
MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JdVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADePk9aLQSHfuFud9BKThLbM89MK0zC/cXsQlhp2dbfWX6XKTVdNUwR3
XYC29Kcf6kR0zGDsvqYwXRHVtFdneTXp1gAlLW6+66uboRkF/0h2gykXqLI1lCSE
srbIdvbXvuhh+OZ9J0R6P8wWffw0tsQ9t6F/svSvQw+q2YBMpjZcRLyyCp0xoyT3
p/P5ddDD/3oNVrp4GhwvOoPXSi69oy7LQPte11bIPc9kwZFbXUaRXn98A61KRX+q
uq/pj/JNw2vryRTgZwJ3SfFS78TKIUJjcop5APK1j55tD464RCRv+1yvN4LQe3Oo
OoccvUDh6KtnK8BNhIPd4R67vn8gOEA=
-----END CERTIFICATE-----
Generated at Wed May 22 22:44:57 2024 by rpki-client on console-fra.rpki-client.org