Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/6c061fbf-7be4-3a83-9cff-8a071e15a06d.roa
File:                     6c061fbf-7be4-3a83-9cff-8a071e15a06d.roa (raw, json)
Hash identifier:          UOmWZ2yQHH6v/QxbHMVLiMDA7Ord6r9BFJriB22ZMk8=
Subject key identifier:   96:72:0A:6A:3D:32:D6:A9:F0:14:F9:80:CC:B8:F6:3F:C7:26:6D:DA
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F43285845AC8A14F6B818FAAE69C60540
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/6c061fbf-7be4-3a83-9cff-8a071e15a06d.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     53340
IP address blocks:        192.158.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:8a:14:f6:b8:18:fa:ae:69:c6:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=48e3957e-7cb6-4c8e-891f-0352d0ebdac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:10:72:97:19:d1:ad:07:a8:7c:e7:3a:2d:ff:
                    30:2c:03:c5:af:cb:77:fa:92:31:78:49:28:fb:30:
                    00:9b:e0:25:c1:ba:95:17:b6:a8:88:4f:5e:3d:88:
                    55:da:99:14:4e:85:25:74:40:08:3f:30:0d:8b:20:
                    45:c9:1e:9f:5e:79:a9:ef:a5:dd:12:2a:f2:ac:79:
                    84:65:39:e5:69:e0:15:61:8e:d2:ca:1e:3d:23:f4:
                    38:d7:d1:95:1b:cc:d7:69:f1:9e:f9:1f:7d:1f:f2:
                    1b:23:3a:fa:e5:39:04:e5:63:be:d0:25:77:bd:87:
                    0c:71:46:d7:82:5b:02:50:c7:52:36:29:0b:bb:f6:
                    04:a8:3b:d2:d4:98:2d:27:31:9b:32:ea:22:de:52:
                    1d:4c:90:db:09:20:7b:65:92:34:91:f4:7b:1f:f9:
                    91:51:d0:a4:82:03:a3:36:12:9f:05:65:90:e8:42:
                    45:92:39:65:a0:fa:4b:c0:ac:55:ec:d7:3a:df:70:
                    1c:50:0c:82:36:f3:f6:44:6d:e6:9c:22:bf:ee:b4:
                    7b:d5:3a:3c:fc:b4:b7:af:c3:77:70:d7:fe:42:77:
                    94:cc:dd:6a:cc:4f:17:1a:79:ea:fd:24:e0:75:02:
                    27:46:9f:95:ed:21:0a:c2:9a:3d:1d:32:2e:16:03:
                    5e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:72:0A:6A:3D:32:D6:A9:F0:14:F9:80:CC:B8:F6:3F:C7:26:6D:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/6c061fbf-7be4-3a83-9cff-8a071e15a06d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.158.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:b6:8b:ae:6d:06:ed:73:d9:66:9a:9f:17:36:01:c1:85:b1:
         2a:02:26:e3:cf:89:73:fa:5a:e4:74:45:6a:19:c0:7a:63:17:
         a8:03:38:cd:97:bf:af:64:11:65:fe:05:17:f5:35:a5:9c:c3:
         8b:aa:90:36:c4:9b:49:ef:e2:cd:d0:93:74:fe:2f:19:90:d0:
         7b:15:34:07:63:ea:a7:63:6c:b0:78:51:d8:0a:2b:52:d9:0e:
         fc:52:0f:72:80:94:5a:6a:a6:d4:72:32:18:09:1d:7f:df:0e:
         14:88:a9:ae:f5:72:0e:7d:c5:9f:07:9c:a5:58:f7:73:b4:3a:
         97:b2:40:70:71:0a:58:1a:7c:50:3d:2e:b7:4f:18:35:ca:b4:
         ca:e5:bd:33:8a:6d:c8:6b:bc:31:b4:a8:c6:8e:95:de:eb:d8:
         8e:84:25:0b:2f:a0:cd:2c:40:5b:db:97:4b:a2:1e:ec:fd:17:
         57:b7:0d:37:19:c4:da:48:7a:03:8f:5f:63:e9:fa:f9:0e:56:
         83:5e:0f:7c:22:a7:5c:10:e2:fb:7a:c8:e7:0f:72:a5:e5:2f:
         f9:66:7a:25:35:1a:e6:0f:49:f4:8c:af:15:47:ec:3f:11:52:
         7b:c5:25:93:12:4d:56:27:df:25:58:e3:bc:2c:db:86:3f:bc:
         09:3b:dc:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsihT2uBj6rmnGBUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx
ZWViMB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
NDhlMzk1N2UtN2NiNi00YzhlLTg5MWYtMDM1MmQwZWJkYWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxBylxnRrQeofOc6Lf8wLAPFr8t3+pIxeEko
+zAAm+AlwbqVF7aoiE9ePYhV2pkUToUldEAIPzANiyBFyR6fXnmp76XdEiryrHmE
ZTnlaeAVYY7Syh49I/Q419GVG8zXafGe+R99H/IbIzr65TkE5WO+0CV3vYcMcUbX
glsCUMdSNikLu/YEqDvS1JgtJzGbMuoi3lIdTJDbCSB7ZZI0kfR7H/mRUdCkggOj
NhKfBWWQ6EJFkjlloPpLwKxV7Nc633AcUAyCNvP2RG3mnCK/7rR71To8/LS3r8N3
cNf+QneUzN1qzE8XGnnq/STgdQInRp+V7SEKwpo9HTIuFgNenQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJZyCmo9Mtap8BT5gMy49j/HJm3aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj
MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvNmMwNjFmYmYtN2JlNC0z
YTgzLTljZmYtOGEwNzFlMTVhMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5
YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx
MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl
NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ7kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACu2i65tBu1z2Waanxc2AcGFsSoCJuPPiXP6WuR0RWoZwHpjF6gDOM2X
v69kEWX+BRf1NaWcw4uqkDbEm0nv4s3Qk3T+LxmQ0HsVNAdj6qdjbLB4UdgKK1LZ
DvxSD3KAlFpqptRyMhgJHX/fDhSIqa71cg59xZ8HnKVY93O0OpeyQHBxClgafFA9
LrdPGDXKtMrlvTOKbchrvDG0qMaOld7r2I6EJQsvoM0sQFvbl0uiHuz9F1e3DTcZ
xNpIegOPX2Pp+vkOVoNeD3wip1wQ4vt6yOcPcqXlL/lmeiU1GuYPSfSMrxVH7D8R
UnvFJZMSTVYn3yVY47ws24Y/vAk73Jo=
-----END CERTIFICATE-----
Generated at Mon May 27 03:13:23 2024 by rpki-client on console-ams.rpki-client.org