Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/c0cc3768-b43e-3d64-b4dd-09a01239e8d3.roa
File:                     c0cc3768-b43e-3d64-b4dd-09a01239e8d3.roa (raw, json)
Hash identifier:          K9WIg7FVq/39NobngWy1ARUBF/M6JfhwaAs2Ro/QpzE=
Subject key identifier:   BD:F9:2B:99:96:57:DE:E5:FF:52:D5:1E:98:F5:9E:89:32:3F:97:61
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F432858457FDDCFA05AC54D0AF4910A00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/c0cc3768-b43e-3d64-b4dd-09a01239e8d3.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     3491
IP address blocks:        207.176.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:cf:a0:5a:c5:4d:0a:f4:91:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=564534f4-14de-4d77-a9c4-fc351919d875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bf:bb:07:fc:9e:7d:cc:2f:7c:51:9e:78:e4:
                    0a:ef:b8:62:34:52:92:6e:7b:dc:04:65:49:b3:21:
                    b5:ea:37:3b:0e:23:2e:b1:34:c8:ef:b9:48:93:c1:
                    2b:00:26:21:ae:89:db:5c:59:3e:dc:ed:76:fa:a5:
                    ec:21:a3:48:7f:5e:27:40:45:36:8b:3e:f8:83:29:
                    36:80:df:9a:04:c9:04:e4:47:1a:41:b6:ed:7f:35:
                    da:81:d4:85:f9:2e:86:10:c7:f8:0e:86:de:9f:3d:
                    5a:00:41:f4:30:76:03:bc:ce:a5:08:2d:bd:25:1c:
                    56:99:7f:c1:56:82:51:86:d6:15:ef:ca:29:a0:9e:
                    24:c1:cb:a6:28:7e:92:80:e3:5e:e0:bf:c8:2a:c6:
                    1e:a3:3f:92:96:55:7e:a5:1c:40:73:b9:ee:57:da:
                    7d:67:36:c3:25:ad:a3:84:40:d5:94:69:57:6d:6c:
                    3a:3e:b3:e9:e6:36:87:b5:33:a9:f3:77:4b:cb:a0:
                    57:a4:86:0b:95:44:08:84:62:da:c8:9e:1e:a1:24:
                    03:d3:97:14:27:e5:2d:57:1f:e8:30:87:f5:0b:a7:
                    9e:6b:a1:a9:72:68:2a:9f:83:22:1a:07:0d:78:05:
                    48:5e:d1:f4:07:05:84:c5:29:90:3f:7c:2b:c2:06:
                    b8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F9:2B:99:96:57:DE:E5:FF:52:D5:1E:98:F5:9E:89:32:3F:97:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/c0cc3768-b43e-3d64-b4dd-09a01239e8d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.176.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ff:0b:3d:e6:41:01:1a:45:91:cb:65:5a:03:66:2c:b8:bd:
         ef:8c:75:2b:66:b7:0f:09:f6:89:d5:c8:46:ae:a5:97:ee:30:
         a3:6d:7e:3c:9d:b9:b2:41:9a:b7:3c:4e:e6:56:ac:74:71:71:
         cb:94:36:f1:24:47:06:2b:69:b7:85:8e:f1:64:b1:5e:43:4b:
         29:7b:d7:69:cb:ea:f3:49:29:d1:ef:79:14:f5:ef:4e:5d:a2:
         9d:a8:c5:3f:c2:9a:fb:be:fd:06:ee:99:69:1e:4d:6b:57:90:
         3c:c2:3a:b4:8d:52:55:89:94:66:51:84:fd:7b:bc:a7:63:72:
         ee:c8:46:dc:41:82:24:86:c0:6d:65:cd:42:f6:e2:37:fb:a2:
         ce:69:a9:e1:38:56:2a:8f:21:b4:44:96:a6:0d:34:e7:93:83:
         9d:4a:83:37:40:96:73:0d:54:3a:19:78:93:56:02:e3:d4:5d:
         3f:56:dc:01:75:2d:65:76:9e:6c:2b:77:50:60:6e:3d:75:35:
         9a:0c:70:7f:a3:55:dd:45:81:23:f2:55:41:3f:05:da:d0:3d:
         91:51:f6:c0:4c:71:91:5e:0a:35:f9:7f:be:4e:76:5a:29:a7:
         e9:55:48:bc:50:90:00:b1:7a:b8:74:4f:99:9d:dc:3c:52:91:
         94:6b:b6:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV/3c+gWsVNCvSRCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI0MDQxMDEzMDAzNFoXDTI0MDcwOTEzMDAzNFowLzEtMCsGA1UEAxMk
NTY0NTM0ZjQtMTRkZS00ZDc3LWE5YzQtZmMzNTE5MTlkODc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr+7B/yefcwvfFGeeOQK77hiNFKSbnvcBGVJ
syG16jc7DiMusTTI77lIk8ErACYhronbXFk+3O12+qXsIaNIf14nQEU2iz74gyk2
gN+aBMkE5EcaQbbtfzXagdSF+S6GEMf4Dobenz1aAEH0MHYDvM6lCC29JRxWmX/B
VoJRhtYV78opoJ4kwcumKH6SgONe4L/IKsYeoz+SllV+pRxAc7nuV9p9ZzbDJa2j
hEDVlGlXbWw6PrPp5jaHtTOp83dLy6BXpIYLlUQIhGLayJ4eoSQD05cUJ+UtVx/o
MIf1C6eea6Gpcmgqn4MiGgcNeAVIXtH0BwWExSmQP3wrwga4OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL35K5mWV97l/1LVHpj1nokyP5dhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvYzBjYzM3NjgtYjQzZS0z
ZDY0LWI0ZGQtMDlhMDEyMzllOGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz7BQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA//Cz3mQQEaRZHLZVoDZiy4ve+MdStmtw8J9onVyEaupZfuMKNtfjyd
ubJBmrc8TuZWrHRxccuUNvEkRwYrabeFjvFksV5DSyl712nL6vNJKdHveRT1705d
op2oxT/Cmvu+/QbumWkeTWtXkDzCOrSNUlWJlGZRhP17vKdjcu7IRtxBgiSGwG1l
zUL24jf7os5pqeE4ViqPIbRElqYNNOeTg51KgzdAlnMNVDoZeJNWAuPUXT9W3AF1
LWV2nmwrd1Bgbj11NZoMcH+jVd1FgSPyVUE/BdrQPZFR9sBMcZFeCjX5f75Odlop
p+lVSLxQkACxerh0T5md3DxSkZRrtlA=
-----END CERTIFICATE-----
Generated at Tue May 7 21:40:31 2024 by rpki-client on console-ams.rpki-client.org