Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/d1a38dec-ad7c-3946-ba99-6105feef4b75.roa
File:                     d1a38dec-ad7c-3946-ba99-6105feef4b75.roa (raw, json)
Hash identifier:          WVCuDeymS/P83HOa1i+4uBYEDrlap3Jc3ihQmeU/p0k=
Subject key identifier:   B9:53:AB:06:30:CB:33:81:6F:D6:32:5C:A8:07:38:85:84:BC:01:D6
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584531DADE593B4D790F2C3BFE00
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/d1a38dec-ad7c-3946-ba99-6105feef4b75.roa
Signing time:             Wed 13 Mar 2024 14:21:41 +0000
ROA not before:           Wed 13 Mar 2024 14:21:41 +0000
ROA not after:            Tue 11 Jun 2024 14:21:41 +0000
asID:                     3738
IP address blocks:        192.250.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:da:de:59:3b:4d:79:0f:2c:3b:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Mar 13 14:21:41 2024 GMT
            Not After : Jun 11 14:21:41 2024 GMT
        Subject: CN=d6df24d1-09ca-4afa-aecb-06c9cc847cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:82:53:e5:01:5c:34:87:c2:b7:5d:71:64:a5:
                    9d:fc:17:c4:b5:dc:f1:e9:e9:68:6e:87:3e:43:8e:
                    2c:1d:96:61:8a:aa:72:d5:9c:e4:22:71:ce:61:77:
                    2b:3a:be:d4:97:7c:8d:2b:51:04:9d:d6:70:4f:46:
                    5c:3c:5d:d9:fb:93:3f:03:f0:d2:f8:3f:aa:f5:2a:
                    73:9a:1f:70:6a:88:b2:59:a8:65:34:d3:2e:60:92:
                    39:32:9c:fb:9d:93:01:e5:47:78:02:99:f3:3f:e9:
                    f2:cd:8f:a1:cb:11:06:01:41:98:8a:23:fc:1d:47:
                    c4:28:de:08:9d:bd:5b:15:1e:7c:36:c7:e5:94:b2:
                    d1:9f:bb:c2:28:56:28:03:07:8a:31:2a:01:c9:6e:
                    a5:92:b1:44:1a:3f:5e:f2:14:73:4b:eb:ac:48:f2:
                    ae:ce:bd:8e:9b:6c:bc:db:38:f9:68:a1:29:ff:c8:
                    6c:f0:17:b6:f5:6c:40:46:2f:45:5c:5a:3e:0b:be:
                    44:2a:e0:9e:0c:31:02:5e:c7:16:2f:a4:a4:ba:fe:
                    37:3a:dc:bd:f2:80:fd:de:9f:05:e7:aa:f1:f0:1b:
                    aa:64:4b:c0:2f:98:5a:f5:c1:c9:ae:af:14:2c:e0:
                    7a:da:c9:fe:2b:3e:ea:57:66:79:42:bf:06:5e:13:
                    24:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:53:AB:06:30:CB:33:81:6F:D6:32:5C:A8:07:38:85:84:BC:01:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/d1a38dec-ad7c-3946-ba99-6105feef4b75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:3f:48:3b:30:9d:bb:fb:19:2e:2d:de:38:6c:1a:a3:a5:6a:
         64:99:fd:e4:96:b7:fb:cf:45:31:b5:7c:01:a7:20:3b:de:4c:
         2f:ee:e0:be:a4:74:24:25:31:31:2c:9c:e3:87:3f:c5:a8:66:
         cc:ef:b0:2b:07:ef:6c:db:63:4d:fb:86:c0:04:0f:c4:eb:08:
         68:a5:43:30:35:a5:b3:06:cc:c9:aa:ba:76:84:a7:a9:21:52:
         41:4c:d0:04:0c:cf:a6:37:05:34:8e:89:3c:74:70:af:36:2f:
         da:fc:2f:3f:10:76:0b:45:65:2c:40:5b:4c:a1:bc:b4:e1:f7:
         0f:06:99:cf:23:06:27:24:ac:8a:d6:da:03:3c:70:c4:09:8c:
         7d:15:bb:05:c6:48:b1:74:1b:83:50:3a:04:1f:cc:ab:b3:dd:
         b7:3c:a6:05:48:a6:5c:55:58:26:30:76:3e:df:5c:6f:f6:5b:
         c8:79:02:9e:be:56:f1:62:d0:dc:16:c7:42:14:c9:90:e5:a1:
         4e:af:3e:bb:97:9c:da:2a:60:e0:9d:c7:c3:18:c7:fb:f3:b0:
         e8:5d:79:ea:d2:71:9e:68:54:36:87:77:60:dd:7a:f5:32:7a:
         89:c2:96:b4:87:6c:c3:12:c6:1c:ce:28:0f:c4:8e:3d:bb:58:
         a1:73:67:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUx2t5ZO015Dyw7/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl
YzAwMB4XDTI0MDMxMzE0MjE0MVoXDTI0MDYxMTE0MjE0MVowLzEtMCsGA1UEAxMk
ZDZkZjI0ZDEtMDljYS00YWZhLWFlY2ItMDZjOWNjODQ3Y2IxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4JT5QFcNIfCt11xZKWd/BfEtdzx6eloboc+
Q44sHZZhiqpy1ZzkInHOYXcrOr7Ul3yNK1EEndZwT0ZcPF3Z+5M/A/DS+D+q9Spz
mh9waoiyWahlNNMuYJI5Mpz7nZMB5Ud4ApnzP+nyzY+hyxEGAUGYiiP8HUfEKN4I
nb1bFR58NsfllLLRn7vCKFYoAweKMSoByW6lkrFEGj9e8hRzS+usSPKuzr2Om2y8
2zj5aKEp/8hs8Be29WxARi9FXFo+C75EKuCeDDECXscWL6Skuv43Oty98oD93p8F
56rx8BuqZEvAL5ha9cHJrq8ULOB62sn+Kz7qV2Z5Qr8GXhMksQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLlTqwYwyzOBb9YyXKgHOIWEvAHWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj
MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvZDFhMzhkZWMtYWQ3Yy0z
OTQ2LWJhOTktNjEwNWZlZWY0Yjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk
NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4
ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1
NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPo3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQ/SDswnbv7GS4t3jhsGqOlamSZ/eSWt/vPRTG1fAGnIDveTC/u4L6k
dCQlMTEsnOOHP8WoZszvsCsH72zbY037hsAED8TrCGilQzA1pbMGzMmqunaEp6kh
UkFM0AQMz6Y3BTSOiTx0cK82L9r8Lz8QdgtFZSxAW0yhvLTh9w8Gmc8jBickrIrW
2gM8cMQJjH0VuwXGSLF0G4NQOgQfzKuz3bc8pgVIplxVWCYwdj7fXG/2W8h5Ap6+
VvFi0NwWx0IUyZDloU6vPruXnNoqYOCdx8MYx/vzsOhdeerScZ5oVDaHd2DdevUy
eonClrSHbMMSxhzOKA/Ejj27WKFzZ+A=
-----END CERTIFICATE-----
Generated at Thu May 23 03:00:00 2024 by rpki-client on console-ams.rpki-client.org