Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91cf5905-ba41-371f-a5b9-11c99ed336f5.roa
File:                     91cf5905-ba41-371f-a5b9-11c99ed336f5.roa (raw, json)
Hash identifier:          X1mrhcBylKjpc1cO/LsiFSP5xJc5G4zUnFimfKq8tr4=
Subject key identifier:   01:90:73:E4:5E:BF:A6:D9:AC:4F:92:70:40:FC:21:F9:0A:81:A9:A6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845979A3A4B98AAFF25FA064500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91cf5905-ba41-371f-a5b9-11c99ed336f5.roa
Signing time:             Fri 19 Apr 2024 01:03:53 +0000
ROA not before:           Fri 19 Apr 2024 01:03:53 +0000
ROA not after:            Thu 18 Jul 2024 01:03:53 +0000
asID:                     6167
IP address blocks:        72.105.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:9a:3a:4b:98:aa:ff:25:fa:06:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 19 01:03:53 2024 GMT
            Not After : Jul 18 01:03:53 2024 GMT
        Subject: CN=540a8991-f4f1-4937-a209-05cbb6b6b4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:cf:50:37:94:7c:c4:e2:00:e6:49:2a:9b:
                    df:31:1f:53:be:91:f4:b8:04:1e:a0:08:4a:96:3d:
                    b4:fe:c3:de:14:aa:0e:c6:4e:a2:05:ff:dc:06:54:
                    1e:98:ff:19:21:af:d5:bb:39:a5:3f:aa:4a:76:08:
                    b2:fc:08:f7:1b:07:29:0f:eb:b9:0d:c2:1e:22:d5:
                    31:22:44:ea:77:b6:08:e4:36:33:a5:07:e8:8f:f8:
                    a1:1c:da:de:6c:00:2b:89:89:67:c9:c3:74:9b:71:
                    49:44:32:b7:75:96:92:30:f5:56:20:d8:77:d6:e9:
                    42:e7:f2:93:01:1e:7f:44:f5:59:67:d3:6e:c1:b0:
                    13:22:3c:f1:18:05:6d:32:09:40:ff:0e:5c:e4:53:
                    ef:43:13:09:1a:ca:b2:4f:2d:dd:78:2c:39:14:56:
                    8d:60:c6:4d:7c:ac:4f:25:de:ee:d2:40:c9:4b:b4:
                    e4:f2:11:f2:9c:ca:0a:c4:07:55:5f:8f:85:fd:cc:
                    d3:0a:7b:d6:e5:0a:7d:90:72:03:99:dd:b7:bf:ae:
                    f4:f7:2a:8b:90:32:60:97:a4:62:44:54:b5:9f:da:
                    d0:7d:c0:0d:66:1f:4a:ef:bf:2b:af:e4:63:42:08:
                    a5:02:a7:3a:8f:c0:e4:dd:68:94:8f:e2:a2:2f:76:
                    bf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:90:73:E4:5E:BF:A6:D9:AC:4F:92:70:40:FC:21:F9:0A:81:A9:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91cf5905-ba41-371f-a5b9-11c99ed336f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.105.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:85:2a:97:88:98:70:a7:f1:bd:2a:a7:d5:75:5f:19:ea:07:
         71:ef:39:eb:95:1e:7a:36:da:34:dc:75:a1:79:96:aa:fc:6d:
         1f:0a:fd:bb:05:75:e5:26:38:a3:ac:6a:ca:34:e9:75:68:1b:
         46:f8:75:b5:2c:c7:1e:2b:97:b0:0f:c3:11:ef:47:91:62:d3:
         46:dc:59:a0:af:4f:88:fa:0f:9a:16:d7:1a:66:bb:f8:3e:ef:
         7d:4e:e6:e8:b1:82:be:ff:fe:52:ba:85:c2:b7:fb:14:cf:1f:
         5b:32:0a:42:a1:f0:62:0c:44:94:b4:df:04:fa:48:ac:4c:40:
         f8:44:41:78:49:0f:bd:e3:9e:6f:31:04:9a:56:e3:5c:6f:ea:
         ac:af:cb:79:d3:78:a9:24:ba:fa:ba:e9:a9:5d:e0:da:1c:82:
         24:a5:50:af:aa:c1:53:97:21:c5:c7:65:7b:62:23:1a:e1:0d:
         ce:1a:62:05:7d:01:c0:3b:87:f3:05:34:6e:b4:6e:bd:4b:24:
         22:6f:56:15:46:69:22:3c:6a:49:ed:ae:dc:6f:5c:5a:eb:b0:
         5e:68:45:94:b3:a9:5c:0f:b7:72:78:35:61:a9:38:dc:50:e9:
         f2:c0:6b:13:ff:cb:89:94:e1:ae:52:dc:f8:d1:4f:28:a5:1b:
         da:15:ac:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWXmjpLmKr/JfoGRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDQxOTAxMDM1M1oXDTI0MDcxODAxMDM1M1owLzEtMCsGA1UEAxMk
NTQwYTg5OTEtZjRmMS00OTM3LWEyMDktMDVjYmI2YjZiNGYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXLPUDeUfMTiAOZJKpvfMR9TvpH0uAQeoAhK
lj20/sPeFKoOxk6iBf/cBlQemP8ZIa/VuzmlP6pKdgiy/Aj3GwcpD+u5DcIeItUx
IkTqd7YI5DYzpQfoj/ihHNrebAAriYlnycN0m3FJRDK3dZaSMPVWINh31ulC5/KT
AR5/RPVZZ9NuwbATIjzxGAVtMglA/w5c5FPvQxMJGsqyTy3deCw5FFaNYMZNfKxP
Jd7u0kDJS7Tk8hHynMoKxAdVX4+F/czTCnvW5Qp9kHIDmd23v6709yqLkDJgl6Ri
RFS1n9rQfcANZh9K778rr+RjQgilAqc6j8Dk3WiUj+KiL3a/cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAGQc+Rev6bZrE+ScED8IfkKgammMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTFjZjU5MDUtYmE0MS0z
NzFmLWE1YjktMTFjOTllZDMzNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSGm8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEeFKpeImHCn8b0qp9V1XxnqB3HvOeuVHno22jTcdaF5lqr8bR8K/bsF
deUmOKOsaso06XVoG0b4dbUsxx4rl7APwxHvR5Fi00bcWaCvT4j6D5oW1xpmu/g+
731O5uixgr7//lK6hcK3+xTPH1syCkKh8GIMRJS03wT6SKxMQPhEQXhJD73jnm8x
BJpW41xv6qyvy3nTeKkkuvq66ald4NocgiSlUK+qwVOXIcXHZXtiIxrhDc4aYgV9
AcA7h/MFNG60br1LJCJvVhVGaSI8akntrtxvXFrrsF5oRZSzqVwPt3J4NWGpONxQ
6fLAaxP/y4mU4a5S3PjRTyilG9oVrGQ=
-----END CERTIFICATE-----
Generated at Sat May 11 10:42:09 2024 by rpki-client on console-fra.rpki-client.org