Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ed81676c-13be-3e90-97d5-df858a13c13b.roa
File:                     ed81676c-13be-3e90-97d5-df858a13c13b.roa (raw, json)
Hash identifier:          BJHpNX5xngt69Z/kZx9mDMSQZFEsbI4VcjCDsnngmqI=
Subject key identifier:   13:AB:86:CC:A3:08:02:60:26:5B:F7:08:AE:6F:A1:1A:C8:B8:77:46
Certificate issuer:       /CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9
Certificate serial:       010D0C9F43285845A15DFCF272D83A777292A900
Authority key identifier: 87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ed81676c-13be-3e90-97d5-df858a13c13b.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     32787
IP address blocks:        192.243.40.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5d:fc:f2:72:d8:3a:77:72:92:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=05f698e1-dc43-48ea-bb43-85c45eede555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:30:60:5b:e4:31:54:63:7b:4d:58:82:43:d2:
                    03:27:3e:24:a6:98:94:45:2c:de:ed:df:6d:1a:7b:
                    cd:b5:11:8d:df:0f:93:8f:59:7f:fe:ac:61:08:ca:
                    fd:2e:a7:ce:69:8b:ad:04:07:49:18:77:d5:78:8a:
                    00:da:e4:9b:59:03:b5:17:0e:b3:70:9c:63:0e:55:
                    a2:97:aa:c4:8e:5a:f1:6c:9a:6d:3f:d0:07:62:ac:
                    e6:30:fe:74:cd:c7:de:7f:54:91:56:9f:ee:7a:cf:
                    33:e9:c7:a3:f1:2d:ec:07:41:a4:be:95:e1:78:e6:
                    22:1b:c8:4e:fd:87:cc:c1:3c:03:7b:00:13:ae:d3:
                    b0:41:27:5d:70:a1:a6:6b:54:40:43:97:a4:8b:12:
                    ba:ea:67:03:b8:21:8b:10:a3:70:7b:f3:3d:eb:90:
                    71:c5:b8:10:90:c9:ef:d4:70:71:aa:98:e5:28:cb:
                    a0:da:87:4b:f3:1c:e9:1b:e9:8c:cb:49:e9:21:9a:
                    92:6b:33:4e:eb:ae:af:de:ad:17:3c:fd:5b:07:db:
                    1d:46:9a:29:56:c6:b3:6e:41:fa:e1:e6:d2:63:38:
                    ef:3c:73:60:35:47:0e:cc:90:87:a5:fb:ba:b1:89:
                    45:76:6f:c6:76:3f:a3:0b:7e:33:a9:f8:6a:c0:f3:
                    fc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AB:86:CC:A3:08:02:60:26:5B:F7:08:AE:6F:A1:1A:C8:B8:77:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ed81676c-13be-3e90-97d5-df858a13c13b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl

            X509v3 Authority Key Identifier:
                keyid:87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.243.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a1:fa:cb:c4:d3:db:66:f1:17:db:30:aa:4d:f0:30:36:ce:
         1d:75:31:8a:12:ba:e7:bf:3f:23:89:fb:cd:4f:52:f9:04:cf:
         51:47:0e:78:ba:a5:98:3e:82:41:bf:90:8e:8c:9e:10:a1:e2:
         af:a0:bf:60:74:f8:2d:56:7d:be:69:9c:be:91:bd:44:1d:c1:
         e4:3a:10:3e:f0:e1:f8:83:7b:ac:fe:6b:26:a6:d7:c1:3c:9d:
         83:11:24:94:61:83:f6:74:db:c7:ad:c5:ad:f0:57:37:c0:fb:
         c9:de:30:7c:0d:85:e7:47:5b:3e:a9:59:3b:c3:a2:e7:f7:bb:
         65:e3:b1:e2:66:34:28:4c:e2:fc:d5:a9:85:86:6c:9f:f9:60:
         be:bf:fb:cb:86:9d:7e:87:70:e4:51:b2:38:13:26:3a:9a:08:
         58:d9:b4:10:5c:fa:e7:ac:74:2b:c3:d9:d0:36:68:eb:a6:60:
         36:c9:bd:8f:bf:4a:ab:df:4d:01:9f:d9:08:31:1d:f9:b6:59:
         9d:63:8e:97:28:37:21:3f:a0:06:6f:4d:95:5c:b0:85:7f:66:
         8a:1a:a0:da:05:58:cd:fa:65:15:52:94:63:82:c9:c9:fc:dd:
         8d:94:5a:44:2f:31:98:6e:82:01:8c:68:d4:fa:05:23:84:39:
         f7:67:a2:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXfzyctg6d3KSqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDUzYjVlYWItM2NkNS00NzlhLWI1YmEtYmE4ZTBiZGM5
Y2E5MB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk
MDVmNjk4ZTEtZGM0My00OGVhLWJiNDMtODVjNDVlZWRlNTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TBgW+QxVGN7TViCQ9IDJz4kppiURSze7d9t
GnvNtRGN3w+Tj1l//qxhCMr9LqfOaYutBAdJGHfVeIoA2uSbWQO1Fw6zcJxjDlWi
l6rEjlrxbJptP9AHYqzmMP50zcfef1SRVp/ues8z6cej8S3sB0GkvpXheOYiG8hO
/YfMwTwDewATrtOwQSddcKGma1RAQ5ekixK66mcDuCGLEKNwe/M965BxxbgQkMnv
1HBxqpjlKMug2odL8xzpG+mMy0npIZqSazNO666v3q0XPP1bB9sdRpopVsazbkH6
4ebSYzjvPHNgNUcOzJCHpfu6sYlFdm/Gdj+jC34zqfhqwPP8uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBOrhsyjCAJgJlv3CK5voRrIuHdGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NTNi
NWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThlMGJkYzljYTkvZWQ4MTY3NmMtMTNiZS0z
ZTkwLTk3ZDUtZGY4NThhMTNjMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDUzYjVlYWItM2NkNS00NzlhLWI1
YmEtYmE4ZTBiZGM5Y2E5LzQ1M2I1ZWFiLTNjZDUtNDc5YS1iNWJhLWJhOGUwYmRj
OWNhOS5jcmwwHwYDVR0jBBgwFoAUh4QPPiiN6/rAWHOqdzMqBhXT3AcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NTNiNWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThl
MGJkYzljYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwPMoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWh+svE09tm8RfbMKpN8DA2zh11MYoSuue/PyOJ+81PUvkEz1FHDni6
pZg+gkG/kI6MnhCh4q+gv2B0+C1Wfb5pnL6RvUQdweQ6ED7w4fiDe6z+ayam18E8
nYMRJJRhg/Z028etxa3wVzfA+8neMHwNhedHWz6pWTvDouf3u2XjseJmNChM4vzV
qYWGbJ/5YL6/+8uGnX6HcORRsjgTJjqaCFjZtBBc+uesdCvD2dA2aOumYDbJvY+/
SqvfTQGf2QgxHfm2WZ1jjpcoNyE/oAZvTZVcsIV/ZooaoNoFWM36ZRVSlGOCycn8
3Y2UWkQvMZhuggGMaNT6BSOEOfdnosM=
-----END CERTIFICATE-----
Generated at Sun May 26 02:55:46 2024 by rpki-client on console-fra.rpki-client.org