Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84087b24-b3ca-3e6e-b8ce-25bea801b6e2.roa
File:                     84087b24-b3ca-3e6e-b8ce-25bea801b6e2.roa (raw, json)
Hash identifier:          pf8GOnalccaPGnTQVh9KV0LUoOHtp9i2GBd9WcroRfg=
Subject key identifier:   A9:74:83:4D:46:B6:AE:10:7C:1E:D4:AE:10:EC:83:BD:3B:A3:94:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584570830786906680F8E2912B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84087b24-b3ca-3e6e-b8ce-25bea801b6e2.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     20447
IP address blocks:        199.170.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:83:07:86:90:66:80:f8:e2:91:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=65827c91-a01a-4000-9b13-078cf9d78edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:44:1f:e6:39:80:c9:ac:af:fb:9e:b7:14:f4:
                    5f:b6:78:68:b0:13:bd:53:6c:eb:cb:16:31:57:82:
                    8e:b9:c9:5a:15:95:e7:06:81:72:b5:38:64:2b:2c:
                    a1:ad:35:64:e1:d2:4b:77:62:71:c7:a4:47:35:71:
                    86:90:20:7d:ee:c7:3a:56:aa:75:54:59:7a:dc:36:
                    30:5a:37:94:93:87:f0:2b:c9:85:5e:73:78:e3:0f:
                    30:e5:e3:f1:80:c9:0b:66:d6:9d:15:ca:74:70:cc:
                    48:58:61:fd:92:73:c4:7d:24:75:98:4c:da:26:fe:
                    42:00:75:bd:43:bd:40:85:b2:c9:22:48:df:af:aa:
                    ea:bd:aa:54:5f:7e:3e:a0:5e:6d:06:0a:4e:b3:d3:
                    37:ae:9b:24:e3:be:e9:82:8b:e4:e8:f5:09:41:45:
                    5f:51:85:86:87:8e:3a:f4:46:e4:a5:88:55:1d:fb:
                    b1:61:b4:6a:d9:ed:23:da:3e:bd:f9:c1:e5:9d:51:
                    00:17:32:73:26:75:75:de:06:eb:5d:cd:f0:a7:43:
                    03:3b:ab:f6:e2:18:aa:04:0c:9c:80:78:47:15:b8:
                    18:26:21:15:9b:78:20:b0:94:0c:64:53:a4:ab:c5:
                    98:28:36:a4:70:64:57:ae:fc:72:47:ee:b2:bb:38:
                    17:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:74:83:4D:46:B6:AE:10:7C:1E:D4:AE:10:EC:83:BD:3B:A3:94:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84087b24-b3ca-3e6e-b8ce-25bea801b6e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.170.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:7c:38:85:c9:a3:ca:24:49:9b:2c:65:4e:c8:65:11:5f:e6:
         04:b9:be:8a:e6:f8:82:3e:bf:b9:01:6e:64:ca:ac:78:20:b9:
         3c:7f:cb:5b:49:71:17:11:20:41:dd:44:b8:b9:b4:fa:3a:43:
         b4:61:38:b2:1a:46:40:64:e7:0a:09:97:34:3e:e1:d8:1e:32:
         99:f0:fb:c6:8a:54:e6:9d:07:b4:05:b1:35:6c:9b:a9:d0:f6:
         ef:50:5d:77:2e:02:dd:95:ef:02:ad:09:53:ef:95:d6:1a:08:
         6e:49:a1:6f:5d:40:32:78:66:d9:6b:af:f6:e9:f6:cb:02:aa:
         5e:4c:59:d4:cb:f4:78:e8:19:76:ce:87:d5:3d:79:d3:35:76:
         64:5a:40:09:7a:c5:47:a7:b2:1f:1e:0a:4b:66:75:2c:46:ec:
         2b:10:65:8c:44:ce:d2:65:cd:9b:19:a3:0e:8c:4f:c1:07:52:
         83:30:4c:48:db:f0:cc:ae:72:69:3f:92:3f:c9:c8:aa:0c:36:
         63:21:7a:ac:bf:f5:3d:55:a6:9e:c9:c7:13:bc:5e:01:2d:0e:
         2f:63:93:68:8d:6a:20:d5:bf:f7:4b:fb:1a:a3:62:22:fc:6e:
         6f:94:24:29:18:a9:0f:02:3b:bd:3e:72:e3:23:89:e8:74:1a:
         b6:0a:01:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVwgweGkGaA+OKRK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDQwNTAxMDAyOFoXDTI0MDcwNDAxMDAyOFowLzEtMCsGA1UEAxMk
NjU4MjdjOTEtYTAxYS00MDAwLTliMTMtMDc4Y2Y5ZDc4ZWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEQf5jmAyayv+563FPRftnhosBO9U2zryxYx
V4KOuclaFZXnBoFytThkKyyhrTVk4dJLd2Jxx6RHNXGGkCB97sc6Vqp1VFl63DYw
WjeUk4fwK8mFXnN44w8w5ePxgMkLZtadFcp0cMxIWGH9knPEfSR1mEzaJv5CAHW9
Q71AhbLJIkjfr6rqvapUX34+oF5tBgpOs9M3rpsk477pgovk6PUJQUVfUYWGh446
9EbkpYhVHfuxYbRq2e0j2j69+cHlnVEAFzJzJnV13gbrXc3wp0MDO6v24hiqBAyc
gHhHFbgYJiEVm3ggsJQMZFOkq8WYKDakcGRXrvxyR+6yuzgXgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKl0g01Gtq4QfB7UrhDsg707o5QAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODQwODdiMjQtYjNjYS0z
ZTZlLWI4Y2UtMjViZWE4MDFiNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6oZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABl8OIXJo8okSZssZU7IZRFf5gS5vorm+II+v7kBbmTKrHgguTx/y1tJ
cRcRIEHdRLi5tPo6Q7RhOLIaRkBk5woJlzQ+4dgeMpnw+8aKVOadB7QFsTVsm6nQ
9u9QXXcuAt2V7wKtCVPvldYaCG5JoW9dQDJ4Ztlrr/bp9ssCql5MWdTL9HjoGXbO
h9U9edM1dmRaQAl6xUensh8eCktmdSxG7CsQZYxEztJlzZsZow6MT8EHUoMwTEjb
8Myucmk/kj/JyKoMNmMheqy/9T1Vpp7JxxO8XgEtDi9jk2iNaiDVv/dL+xqjYiL8
bm+UJCkYqQ8CO70+cuMjieh0GrYKAVU=
-----END CERTIFICATE-----
Generated at Sun May 19 17:25:03 2024 by rpki-client on console-ams.rpki-client.org