Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/f03a8e97-8ca0-3994-afea-e92809df012d.roa
File:                     f03a8e97-8ca0-3994-afea-e92809df012d.roa (raw, json)
Hash identifier:          vW3/BPkxd+Q7fFiIzoOKXxa4M5wTRROvUIHRXmNm0SM=
Subject key identifier:   F6:76:A3:8A:5A:A5:67:A3:0D:6B:C5:FA:F3:CE:E3:E4:30:94:96:01
Certificate issuer:       /CN=8583e379-1578-4044-8426-ddcb4a4a8192
Certificate serial:       010D0C9F432858459D2DE53A456582CA76061EC0
Authority key identifier: 89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/f03a8e97-8ca0-3994-afea-e92809df012d.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     40244
IP address blocks:        192.154.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:e5:3a:45:65:82:ca:76:06:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8583e379-1578-4044-8426-ddcb4a4a8192
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=0185196a-1aa9-46e3-9312-430085a61bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fb:e4:dd:f3:82:46:50:e7:af:3f:81:b5:b2:
                    a3:19:00:a7:5d:88:9c:4b:06:4f:0d:28:ac:e9:ea:
                    15:ec:3c:7c:14:59:3d:ce:7a:b7:dc:d9:6a:54:fe:
                    39:d0:cf:74:64:22:c2:d1:5e:ca:ed:4c:38:79:64:
                    a4:42:5c:b5:bd:b8:e6:ea:62:58:7d:b0:09:1b:63:
                    ae:4a:af:2f:06:44:06:0c:c4:5d:e0:2a:5e:5c:d8:
                    e8:9c:68:65:b1:80:28:04:ab:cd:19:f9:e1:15:7b:
                    8d:87:11:c2:84:ce:49:e7:dc:37:3c:5b:73:8a:93:
                    25:33:d6:b8:d5:7e:58:0a:9e:ff:5d:17:13:5e:d7:
                    a6:5b:b0:36:6e:4f:c9:c0:89:db:2c:42:47:8d:ba:
                    ef:86:63:81:2c:c5:6e:cb:70:b9:09:f6:ab:2a:5e:
                    68:aa:11:c4:a8:d0:77:08:72:89:34:e2:2e:d0:97:
                    6e:97:db:0c:12:fa:16:bb:a0:2e:88:70:f2:62:87:
                    bb:22:6b:e9:43:d1:36:4c:c4:4c:c1:a6:9a:59:b8:
                    5e:99:49:05:2c:e0:5c:e2:70:c6:a9:f1:18:7b:81:
                    c1:b5:4d:2c:7e:be:e6:17:cf:d8:fa:c3:43:02:bf:
                    88:e4:fd:0a:bb:e6:bf:73:7a:37:d9:c5:7a:94:01:
                    55:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:76:A3:8A:5A:A5:67:A3:0D:6B:C5:FA:F3:CE:E3:E4:30:94:96:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/f03a8e97-8ca0-3994-afea-e92809df012d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl

            X509v3 Authority Key Identifier:
                keyid:89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:4d:12:3b:40:86:0e:39:07:c3:d8:10:d9:40:0a:57:07:6c:
         e6:5e:03:e5:0e:34:f4:68:1d:d0:63:31:9d:de:27:54:f1:d6:
         2a:25:33:76:05:4f:44:45:ef:1d:8b:81:58:ed:5f:bb:a5:b6:
         49:0c:55:a5:7b:3e:4b:2d:7d:8b:13:23:67:c9:d6:91:81:31:
         7d:ca:5c:c5:d2:6d:f7:99:95:16:8c:e6:32:cc:17:ab:cb:93:
         e7:54:ee:65:e0:59:bf:68:08:f8:7b:36:0a:40:8f:1d:a5:b6:
         03:06:a3:7b:5f:fe:24:ab:d2:67:a0:16:d7:04:32:70:95:f1:
         24:1c:25:56:9e:01:e6:56:7e:e3:db:a5:d1:82:20:e1:f9:a1:
         54:fd:ae:39:ba:c1:99:28:36:9d:d7:56:8c:d9:a2:b7:ad:60:
         39:03:4a:86:00:eb:e9:12:44:ef:3d:eb:ec:af:15:d2:be:88:
         5d:8a:0e:c5:78:73:8d:a1:d4:09:60:21:95:a1:b6:a7:1a:0e:
         d1:cc:1a:16:f8:e3:f5:c7:ad:5d:b6:70:41:2e:79:6b:55:36:
         ad:5a:22:f7:89:87:51:24:a8:c7:a0:68:ac:88:2e:43:24:d0:
         c8:57:a1:76:95:b3:9b:3f:5a:6a:84:0e:61:d3:c8:9d:d4:fb:
         07:25:f0:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWdLeU6RWWCynYGHsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODU4M2UzNzktMTU3OC00MDQ0LTg0MjYtZGRjYjRhNGE4
MTkyMB4XDTI0MDQyMTAxMDAyNVoXDTI0MDcyMDAxMDAyNVowLzEtMCsGA1UEAxMk
MDE4NTE5NmEtMWFhOS00NmUzLTkzMTItNDMwMDg1YTYxYmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPvk3fOCRlDnrz+BtbKjGQCnXYicSwZPDSis
6eoV7Dx8FFk9znq33NlqVP450M90ZCLC0V7K7Uw4eWSkQly1vbjm6mJYfbAJG2Ou
Sq8vBkQGDMRd4CpeXNjonGhlsYAoBKvNGfnhFXuNhxHChM5J59w3PFtzipMlM9a4
1X5YCp7/XRcTXtemW7A2bk/JwInbLEJHjbrvhmOBLMVuy3C5CfarKl5oqhHEqNB3
CHKJNOIu0Jdul9sMEvoWu6AuiHDyYoe7ImvpQ9E2TMRMwaaaWbhemUkFLOBc4nDG
qfEYe4HBtU0sfr7mF8/Y+sNDAr+I5P0Ku+a/c3o32cV6lAFVZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPZ2o4papWejDWvF+vPO4+QwlJYBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NTgz
ZTM3OS0xNTc4LTQwNDQtODQyNi1kZGNiNGE0YTgxOTIvZjAzYThlOTctOGNhMC0z
OTk0LWFmZWEtZTkyODA5ZGYwMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODU4M2UzNzktMTU3OC00MDQ0LTg0
MjYtZGRjYjRhNGE4MTkyLzg1ODNlMzc5LTE1NzgtNDA0NC04NDI2LWRkY2I0YTRh
ODE5Mi5jcmwwHwYDVR0jBBgwFoAUicdfP86nXQ3DEPkjLGWSJwxjHWIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84NTgzZTM3OS0xNTc4LTQwNDQtODQyNi1kZGNi
NGE0YTgxOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJr4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxNEjtAhg45B8PYENlAClcHbOZeA+UONPRoHdBjMZ3eJ1Tx1iolM3YF
T0RF7x2LgVjtX7ultkkMVaV7PkstfYsTI2fJ1pGBMX3KXMXSbfeZlRaM5jLMF6vL
k+dU7mXgWb9oCPh7NgpAjx2ltgMGo3tf/iSr0megFtcEMnCV8SQcJVaeAeZWfuPb
pdGCIOH5oVT9rjm6wZkoNp3XVozZoretYDkDSoYA6+kSRO896+yvFdK+iF2KDsV4
c42h1AlgIZWhtqcaDtHMGhb44/XHrV22cEEueWtVNq1aIveJh1EkqMegaKyILkMk
0MhXoXaVs5s/WmqEDmHTyJ3U+wcl8AA=
-----END CERTIFICATE-----
Generated at Sat May 18 01:43:34 2024 by rpki-client on console-fra.rpki-client.org