Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/54dc260a-4693-33bd-9183-63d2835feaa9.roa
File:                     54dc260a-4693-33bd-9183-63d2835feaa9.roa (raw, json)
Hash identifier:          /diiGOFzsfnaeZiesYlKeStdjDdPPLS5gr2514eEYXQ=
Subject key identifier:   D7:56:85:A8:8E:CD:5E:E5:64:49:78:40:BE:61:A7:1D:BD:67:A6:06
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F432858474585EAD11A4C2D68FB6C3C80
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/54dc260a-4693-33bd-9183-63d2835feaa9.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     13760
IP address blocks:        199.187.136.0/23 maxlen: 23
                          199.187.140.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:ea:d1:1a:4c:2d:68:fb:6c:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=d67f01d4-5a14-4b66-8151-d440240589db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fb:e2:c9:6a:c5:94:61:ac:23:d4:ea:06:79:
                    eb:8e:00:98:42:f6:f3:85:e5:ac:82:2a:04:5d:c3:
                    78:13:a6:7d:1e:32:ad:04:12:c9:ff:42:17:fb:00:
                    c0:2a:83:65:f1:04:7b:46:a0:ee:f7:50:69:15:dd:
                    c8:d5:a5:e0:de:8a:e7:e1:24:8e:ef:4f:0b:d9:2f:
                    15:3b:17:48:e3:4d:45:84:7f:74:20:4a:42:db:de:
                    88:7b:12:77:de:54:e5:b0:65:d6:98:71:be:e9:ba:
                    a4:f9:11:4a:df:88:f2:f5:74:0f:e8:26:6d:ba:bc:
                    0c:43:a7:3d:8f:9a:46:bc:f9:9e:d1:62:1d:d2:1f:
                    b9:12:bd:5f:6a:51:91:ea:50:2b:5c:c0:12:9e:cd:
                    86:52:3e:4a:f1:80:5e:37:59:fe:7f:d2:31:5a:d0:
                    eb:5d:f9:6a:45:74:64:87:60:d0:d2:6b:e1:95:b4:
                    ba:e4:17:c1:f0:b5:f0:8f:a5:a2:c9:d7:79:8c:42:
                    55:a3:e6:ff:4c:3c:ae:ed:a7:ea:72:d1:08:0f:4c:
                    e8:61:71:15:fb:27:90:14:ca:f6:1b:f0:e1:b5:8c:
                    71:7a:70:e5:39:cd:6d:28:d0:51:c8:11:3d:e2:81:
                    55:3c:bb:2f:e4:83:31:60:3d:35:fe:08:d0:08:76:
                    89:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:56:85:A8:8E:CD:5E:E5:64:49:78:40:BE:61:A7:1D:BD:67:A6:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/54dc260a-4693-33bd-9183-63d2835feaa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.136.0/23
                  199.187.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:c3:c4:fc:d5:3f:e6:29:70:56:4d:1e:2f:72:f9:2d:93:94:
         4f:66:fe:e5:60:29:33:bd:d3:53:25:98:2b:ae:a7:8a:5d:99:
         88:49:72:e5:55:46:7f:0f:8c:0f:f8:e1:4d:aa:72:89:33:61:
         a6:44:75:32:18:21:8e:87:19:fb:61:ea:31:3d:f1:de:92:14:
         4b:ef:b3:bc:98:3b:b6:aa:fd:14:eb:0f:ff:c0:02:d4:35:e2:
         fd:ca:a3:88:26:0d:ea:4c:1e:e8:50:3c:86:29:03:fa:4c:5f:
         48:24:0d:b9:cc:7b:eb:3a:54:47:c6:92:b0:12:8f:97:6a:43:
         c4:67:86:9c:46:71:42:01:31:60:d1:ab:cf:a0:1b:2b:64:82:
         ee:86:a1:cc:c0:c3:59:06:a8:7e:db:52:aa:0e:9f:da:b3:5f:
         c0:29:0b:23:ab:c4:e6:1a:09:5d:e6:c4:eb:6c:f3:77:c4:86:
         1f:3e:2c:4e:46:95:fd:e8:f5:69:97:be:e3:4c:67:21:9d:06:
         06:23:1e:5f:90:b9:99:ac:ca:f8:f9:de:28:bb:cd:46:88:32:
         7b:cb:4e:d3:b8:15:43:03:29:57:fd:ea:e7:b7:32:ca:f7:a8:
         a5:92:e7:26:d6:7b:89:19:02:89:ec:c6:58:1d:68:ed:04:b2:
         aa:f9:e7:60
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEdFherRGkwtaPtsPIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm
MzQyMB4XDTI0MDkyMDAxMDAzMVoXDTI0MTIxOTAyMDAzMVowLzEtMCsGA1UEAxMk
ZDY3ZjAxZDQtNWExNC00YjY2LTgxNTEtZDQ0MDI0MDU4OWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/viyWrFlGGsI9TqBnnrjgCYQvbzheWsgioE
XcN4E6Z9HjKtBBLJ/0IX+wDAKoNl8QR7RqDu91BpFd3I1aXg3orn4SSO708L2S8V
OxdI401FhH90IEpC296IexJ33lTlsGXWmHG+6bqk+RFK34jy9XQP6CZturwMQ6c9
j5pGvPme0WId0h+5Er1falGR6lArXMASns2GUj5K8YBeN1n+f9IxWtDrXflqRXRk
h2DQ0mvhlbS65BfB8LXwj6Wiydd5jEJVo+b/TDyu7afqctEID0zoYXEV+yeQFMr2
G/DhtYxxenDlOc1tKNBRyBE94oFVPLsv5IMxYD01/gjQCHaJ0wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFNdWhaiOzV7lZEl4QL5hpx29Z6YGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0
MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvNTRkYzI2MGEtNDY5My0z
M2JkLTkxODMtNjNkMjgzNWZlYWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi
MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy
ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz
YTQ1MmYzNDIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBx7uIAwQB
x7uMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAILDxPzVP+YpcFZNHi9y+S2TlE9m/uVgKTO901MlmCuup4pd
mYhJcuVVRn8PjA/44U2qcokzYaZEdTIYIY6HGfth6jE98d6SFEvvs7yYO7aq/RTr
D//AAtQ14v3Ko4gmDepMHuhQPIYpA/pMX0gkDbnMe+s6VEfGkrASj5dqQ8RnhpxG
cUIBMWDRq8+gGytkgu6GoczAw1kGqH7bUqoOn9qzX8ApCyOrxOYaCV3mxOts83fE
hh8+LE5Glf3o9WmXvuNMZyGdBgYjHl+QuZmsyvj53ii7zUaIMnvLTtO4FUMDKVf9
6ue3Msr3qKWS5ybWe4kZAonsxlgdaO0Esqr552A=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:51 2024 by rpki-client on console-ams.rpki-client.org