Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/93af5d7f-145a-3b75-9635-bd780078b94f.roa
File:                     93af5d7f-145a-3b75-9635-bd780078b94f.roa (raw, json)
Hash identifier:          z/A89Xx7ymSVCMZhKEo1mTufP6uu6jYtZSw5fCEsPhY=
Subject key identifier:   A9:45:41:37:14:6A:D6:82:B6:E1:33:07:E0:51:47:0A:B2:D5:31:18
Certificate issuer:       /CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
Certificate serial:       010D0C9F432858472405BBB45BBEC943B294B080
Authority key identifier: BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/93af5d7f-145a-3b75-9635-bd780078b94f.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     25830
IP address blocks:        199.195.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:bb:b4:5b:be:c9:43:b2:94:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=e1a6eac3-338a-4ecb-8bf2-33484753edc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:f0:16:7b:3b:67:22:7d:db:47:d6:6a:19:
                    d7:1d:9a:ea:1b:cd:57:8d:34:f2:ff:ec:c0:1a:8f:
                    ad:cd:8d:c3:87:b8:1c:8d:53:6c:56:77:ca:3f:f6:
                    d9:51:70:88:c2:03:75:05:33:c2:0d:e7:a2:d1:cd:
                    e5:74:51:43:e4:da:20:57:47:a6:88:10:97:e3:21:
                    a4:fc:d8:21:a6:2a:93:ef:65:ed:f5:52:a4:9a:ad:
                    05:b3:70:8c:a0:37:a9:be:d1:1d:f9:6f:1d:d5:48:
                    7f:91:84:30:3a:e5:da:c1:6b:45:22:b6:f6:cc:ca:
                    6c:31:67:28:b1:00:6a:f5:c4:2a:98:a3:a2:f9:96:
                    81:4a:85:c9:3f:cd:cf:18:67:74:c4:04:19:b4:84:
                    be:f2:5b:19:5d:54:81:8d:c2:1c:9b:60:7f:c8:0a:
                    d7:92:05:4d:d1:fd:7c:37:f1:dd:a4:dc:39:93:6d:
                    a7:8f:3a:60:b0:45:e7:20:bf:87:2f:eb:6e:32:c1:
                    84:3d:18:e6:6c:9d:a1:be:de:39:d4:d1:dd:19:7b:
                    f1:a3:a7:15:06:20:1d:87:e3:4d:42:b4:17:44:fa:
                    64:14:ed:ed:ab:24:c3:99:0a:be:22:36:dd:cd:3b:
                    71:b6:6d:bb:12:b1:64:e7:35:0f:c8:c5:d2:bc:2c:
                    29:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:45:41:37:14:6A:D6:82:B6:E1:33:07:E0:51:47:0A:B2:D5:31:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/93af5d7f-145a-3b75-9635-bd780078b94f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl

            X509v3 Authority Key Identifier:
                keyid:BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:74:1c:5b:73:a5:6a:68:28:81:bd:3f:3e:81:fd:c2:26:a1:
         fe:09:c0:1a:1c:00:1c:33:9b:ff:ce:45:c9:38:06:88:38:b4:
         12:45:f6:f3:73:4e:1e:60:f5:3d:29:54:01:9b:44:86:de:25:
         68:97:77:14:fb:75:a4:94:e8:ce:b9:09:e3:58:4a:64:90:38:
         db:6c:d7:db:f8:8a:7b:d3:cc:5b:33:93:fb:4a:21:b8:56:3a:
         c4:58:45:cb:68:aa:8f:85:b6:6f:77:59:3b:9d:b5:f3:52:0d:
         bb:0e:55:a8:97:eb:7c:0c:89:90:87:3f:c3:24:dc:93:20:0c:
         ec:56:7d:18:8c:06:7a:91:de:cd:d1:ee:75:fd:c0:81:ab:e3:
         3b:e2:3d:0e:c1:6b:52:50:90:d9:0a:9b:b7:2f:ff:35:88:38:
         f3:27:80:53:af:e8:07:10:d1:33:04:f3:89:e3:1b:84:02:45:
         97:f4:3b:5e:3f:98:7a:b7:15:da:ed:bb:75:07:e3:af:1c:0d:
         36:0e:35:cd:15:c5:ee:47:58:f0:f5:a1:ee:17:40:a2:02:36:
         3a:ae:a6:94:18:56:54:86:8e:53:14:ae:aa:39:e1:26:a9:a2:
         44:41:f5:3c:d2:44:e5:8f:40:76:bf:96:aa:d2:0f:32:7a:f8:
         fb:88:35:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEckBbu0W77JQ7KUsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRjY2QzYjMtZGRhNS00NTNmLWI1MGQtMGExZTllNGQ0
ZWY0MB4XDTI0MDkwODAxMDAzMVoXDTI0MTIwNzAyMDAzMVowLzEtMCsGA1UEAxMk
ZTFhNmVhYzMtMzM4YS00ZWNiLThiZjItMzM0ODQ3NTNlZGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGLwFns7ZyJ920fWahnXHZrqG81XjTTy/+zA
Go+tzY3Dh7gcjVNsVnfKP/bZUXCIwgN1BTPCDeei0c3ldFFD5NogV0emiBCX4yGk
/NghpiqT72Xt9VKkmq0Fs3CMoDepvtEd+W8d1Uh/kYQwOuXawWtFIrb2zMpsMWco
sQBq9cQqmKOi+ZaBSoXJP83PGGd0xAQZtIS+8lsZXVSBjcIcm2B/yArXkgVN0f18
N/HdpNw5k22njzpgsEXnIL+HL+tuMsGEPRjmbJ2hvt451NHdGXvxo6cVBiAdh+NN
QrQXRPpkFO3tqyTDmQq+IjbdzTtxtm27ErFk5zUPyMXSvCwpNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKlFQTcUataCtuEzB+BRRwqy1TEYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZGNj
ZDNiMy1kZGE1LTQ1M2YtYjUwZC0wYTFlOWU0ZDRlZjQvOTNhZjVkN2YtMTQ1YS0z
Yjc1LTk2MzUtYmQ3ODAwNzhiOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWRjY2QzYjMtZGRhNS00NTNmLWI1
MGQtMGExZTllNGQ0ZWY0L2FkY2NkM2IzLWRkYTUtNDUzZi1iNTBkLTBhMWU5ZTRk
NGVmNC5jcmwwHwYDVR0jBBgwFoAUv8KbwFu17C9/2Z0ujo92iFdsHpEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hZGNjZDNiMy1kZGE1LTQ1M2YtYjUwZC0wYTFl
OWU0ZDRlZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8M0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADd0HFtzpWpoKIG9Pz6B/cImof4JwBocABwzm//ORck4Bog4tBJF9vNz
Th5g9T0pVAGbRIbeJWiXdxT7daSU6M65CeNYSmSQONts19v4invTzFszk/tKIbhW
OsRYRctoqo+Ftm93WTudtfNSDbsOVaiX63wMiZCHP8Mk3JMgDOxWfRiMBnqR3s3R
7nX9wIGr4zviPQ7Ba1JQkNkKm7cv/zWIOPMngFOv6AcQ0TME84njG4QCRZf0O14/
mHq3Fdrtu3UH468cDTYONc0Vxe5HWPD1oe4XQKICNjquppQYVlSGjlMUrqo54Sap
okRB9TzSROWPQHa/lqrSDzJ6+PuINcE=
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:13 2024 by rpki-client on console-fra.rpki-client.org