Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa
File:                     047692f9-4c45-3534-9455-58a8a7660d58.roa (raw, json)
Hash identifier:          f84iCytpLSbOb2q9C0RJa2EwadrzB4FxbTZrIl8uyvg=
Subject key identifier:   81:A4:D2:90:58:6C:E2:AD:23:5E:77:CE:DF:3D:2C:7B:7F:D6:9B:7D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462652842F1F9869DBB01800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa
Signing time:             Wed 20 Mar 2024 20:49:52 +0000
ROA not before:           Wed 20 Mar 2024 20:49:52 +0000
ROA not after:            Tue 18 Jun 2024 20:49:52 +0000
asID:                     15169
IP address blocks:        208.76.68.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:26:52:84:2f:1f:98:69:db:b0:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:49:52 2024 GMT
            Not After : Jun 18 20:49:52 2024 GMT
        Subject: CN=7792a4c7-fd85-46ea-b999-fed9859bec16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:30:67:97:03:d8:53:e7:1b:67:3b:b7:09:87:
                    7f:ce:4c:b3:d9:31:b8:23:cd:10:a3:e1:c3:6b:bb:
                    10:24:09:aa:87:08:e1:56:df:dc:29:af:d9:b1:7e:
                    f2:76:25:e8:5e:55:9a:2e:66:61:29:9a:d4:a8:52:
                    18:c8:18:00:8a:96:c4:e9:8f:ca:58:32:51:4f:d3:
                    7b:e7:6b:0b:b1:50:f7:87:ba:d5:8f:3b:a3:c7:d7:
                    bd:57:f4:c3:f3:f3:65:a0:2e:44:1a:03:1c:d8:c9:
                    79:44:05:54:7a:98:11:1f:62:a4:16:2a:7e:aa:29:
                    6c:3b:cc:62:dc:32:5a:af:58:07:5f:85:55:b9:67:
                    4c:39:22:b5:cb:4e:4f:99:bb:b9:68:cd:a3:73:10:
                    87:71:7f:f9:9b:57:2b:2a:d7:49:b4:a6:2a:32:18:
                    36:73:79:6d:c2:eb:98:a5:3e:ce:15:80:da:86:c0:
                    5a:07:60:50:5d:03:3a:de:7e:3f:4e:5a:67:fe:93:
                    d4:7d:28:0f:62:22:dc:93:c4:6f:95:2a:9a:31:48:
                    c0:7c:a5:07:22:48:fd:93:27:cc:c8:f9:e5:26:de:
                    40:32:3b:8b:e4:fb:d7:2e:f7:b8:e1:dc:68:f4:75:
                    02:b5:89:1c:87:73:bb:86:c8:9e:a3:41:58:d5:b7:
                    da:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A4:D2:90:58:6C:E2:AD:23:5E:77:CE:DF:3D:2C:7B:7F:D6:9B:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:7f:33:48:e3:b4:78:62:15:6a:47:b4:20:fe:6e:79:15:3d:
         2f:65:e0:31:19:0a:10:99:06:35:4f:df:25:20:ce:3b:a1:a2:
         b3:21:c7:c0:33:3f:79:e0:53:fe:82:50:51:15:76:7f:80:7e:
         49:5b:00:8c:8c:aa:5a:e1:45:6e:a6:bf:b8:1d:92:d6:20:59:
         ad:aa:37:fa:a8:9d:b6:9e:69:4a:25:08:40:b3:8a:c8:b0:12:
         f2:76:7e:cf:e5:0d:fc:e7:19:65:43:ff:86:3c:11:a8:d6:17:
         93:79:a6:f3:a8:ed:45:01:5c:fa:70:f4:b4:ea:de:e4:d9:1c:
         ac:95:05:4f:e2:73:b1:ff:58:8c:f6:c8:1e:7a:b5:ff:01:82:
         86:5a:af:19:34:3a:23:d8:85:1c:75:8b:2c:b6:59:7a:54:cf:
         3e:97:f0:ec:6e:6e:24:e6:34:02:2d:28:6f:c6:8c:5b:cc:d9:
         c5:3b:74:fb:bd:e7:51:09:49:e1:33:65:02:48:05:6a:f5:fb:
         3f:fb:5c:46:7c:8d:dc:96:d0:f2:80:48:16:17:a4:32:ee:f5:
         6f:70:7e:72:f8:e7:87:ee:10:ea:60:c4:87:bd:e4:eb:c2:ff:
         dc:69:11:91:f0:ba:aa:f4:bd:6e:39:f2:84:4e:9f:a5:95:b1:
         79:d0:7d:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGJlKELx+YaduwGAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MDMyMDIwNDk1MloXDTI0MDYxODIwNDk1MlowLzEtMCsGA1UEAxMk
Nzc5MmE0YzctZmQ4NS00NmVhLWI5OTktZmVkOTg1OWJlYzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszBnlwPYU+cbZzu3CYd/zkyz2TG4I80Qo+HD
a7sQJAmqhwjhVt/cKa/ZsX7ydiXoXlWaLmZhKZrUqFIYyBgAipbE6Y/KWDJRT9N7
52sLsVD3h7rVjzujx9e9V/TD8/NloC5EGgMc2Ml5RAVUepgRH2KkFip+qilsO8xi
3DJar1gHX4VVuWdMOSK1y05Pmbu5aM2jcxCHcX/5m1crKtdJtKYqMhg2c3ltwuuY
pT7OFYDahsBaB2BQXQM63n4/Tlpn/pPUfSgPYiLck8RvlSqaMUjAfKUHIkj9kyfM
yPnlJt5AMjuL5PvXLve44dxo9HUCtYkch3O7hsieo0FY1bfamwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIGk0pBYbOKtI153zt89LHt/1pt9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDQ3NjkyZjktNGM0NS0z
NTM0LTk0NTUtNThhOGE3NjYwZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ExEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKl/M0jjtHhiFWpHtCD+bnkVPS9l4DEZChCZBjVP3yUgzjuhorMhx8Az
P3ngU/6CUFEVdn+AfklbAIyMqlrhRW6mv7gdktYgWa2qN/qonbaeaUolCECzisiw
EvJ2fs/lDfznGWVD/4Y8EajWF5N5pvOo7UUBXPpw9LTq3uTZHKyVBU/ic7H/WIz2
yB56tf8BgoZarxk0OiPYhRx1iyy2WXpUzz6X8OxubiTmNAItKG/GjFvM2cU7dPu9
51EJSeEzZQJIBWr1+z/7XEZ8jdyW0PKASBYXpDLu9W9wfnL454fuEOpgxIe95OvC
/9xpEZHwuqr0vW458oROn6WVsXnQfZA=
-----END CERTIFICATE-----
Generated at Fri May 17 22:52:17 2024 by rpki-client on console-ams.rpki-client.org