Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c16078a9-2a6a-320d-b9bd-87578f68f57a.roa
File:                     c16078a9-2a6a-320d-b9bd-87578f68f57a.roa (raw, json)
Hash identifier:          I0ON1RBYGAIqnrmct5dN2ZVr5F1Hg4vaNryB+1/k0dg=
Subject key identifier:   C1:16:12:03:B1:9A:E7:18:E5:43:25:CE:A6:39:94:E0:FB:83:18:D1
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285844EC05492E5B2863E87939FAC0
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c16078a9-2a6a-320d-b9bd-87578f68f57a.roa
Signing time:             Sat 17 Feb 2024 14:00:30 +0000
ROA not before:           Sat 17 Feb 2024 14:00:30 +0000
ROA not after:            Fri 17 May 2024 13:00:30 +0000
asID:                     20454
IP address blocks:        67.43.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ec:05:49:2e:5b:28:63:e8:79:39:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Feb 17 14:00:30 2024 GMT
            Not After : May 17 13:00:30 2024 GMT
        Subject: CN=08eaa9d4-9fe2-4a18-9f39-e32afc91144f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:55:61:d7:e1:c3:9f:b9:1a:50:70:0f:6e:69:
                    98:b6:9c:d6:09:82:dd:13:0e:78:59:29:d6:ac:79:
                    46:6d:89:40:4e:77:6c:2e:7e:a3:f5:69:18:f4:d2:
                    ff:b7:a6:c6:d0:7b:80:9c:d6:b1:81:a2:fc:36:1a:
                    98:3a:12:60:f6:49:34:6e:35:4b:97:0b:ef:20:7e:
                    d3:1a:e3:2b:f0:4b:c7:4b:15:c1:52:aa:42:1d:ae:
                    32:21:40:06:5c:e9:0d:db:84:34:82:cd:6b:07:00:
                    21:ac:28:ff:e7:0e:07:8d:f9:96:62:02:08:07:58:
                    eb:f5:b7:98:19:8f:73:95:57:98:d4:da:c9:cc:fe:
                    de:ca:1b:32:e3:f0:e5:2f:ea:08:3f:83:d9:25:31:
                    6e:d1:51:4b:1b:59:c6:28:5b:54:d8:7c:b2:56:34:
                    0d:00:49:fc:e0:ec:e2:16:02:83:9c:44:37:b4:a8:
                    c1:e3:a6:ed:47:58:1b:03:0c:18:88:92:96:55:62:
                    b7:1f:f9:3f:23:34:ea:35:c4:fc:09:2b:87:49:7a:
                    31:28:da:53:03:4d:e5:23:33:3e:9b:fd:bd:78:a3:
                    94:7a:a7:42:01:2b:ed:12:9d:c8:8e:87:47:78:cd:
                    af:da:3d:bf:14:ce:ad:11:a3:72:f8:c7:97:13:9f:
                    38:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:16:12:03:B1:9A:E7:18:E5:43:25:CE:A6:39:94:E0:FB:83:18:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c16078a9-2a6a-320d-b9bd-87578f68f57a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:94:5d:b8:4f:58:4a:78:82:1a:32:5d:80:46:b5:2b:be:bc:
         f8:37:83:cd:b9:9f:5f:15:aa:9c:6f:25:5f:ca:81:1e:d7:52:
         7c:3e:48:42:e4:66:70:f6:30:2e:70:89:09:e1:a5:4e:18:07:
         5c:44:de:b2:38:7e:7a:32:36:99:cf:f5:a0:b5:6f:ed:a4:d8:
         8a:84:34:8e:7b:a6:94:88:ff:af:25:17:0e:57:85:d5:5e:de:
         da:bf:b5:a2:9a:36:24:1e:dd:79:74:02:b7:83:9e:fe:97:d2:
         b5:4b:d9:c4:4c:fc:6f:ab:07:4b:7e:aa:df:3c:57:de:5d:b6:
         bf:f1:7a:33:6b:a3:f5:9d:0a:63:8f:51:8a:e3:42:7e:f0:57:
         ce:fa:33:94:e0:9b:c5:41:34:cc:13:49:11:60:c6:8e:20:77:
         a1:2f:8b:32:b0:2a:28:ce:ec:b7:2c:11:59:49:ee:ad:15:7d:
         ae:da:22:96:89:ae:ee:9c:78:2b:62:2f:06:03:96:04:87:18:
         77:61:51:5d:0a:54:8b:5d:c7:f3:d5:b5:4e:e8:e9:a8:cd:50:
         57:32:2e:46:dc:1b:1a:34:b2:79:fd:34:83:d8:4d:df:f4:07:
         ae:dd:67:b2:d5:9b:6f:42:9d:a0:d6:0e:3f:17:52:16:66:ad:
         ff:06:a0:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETsBUkuWyhj6Hk5+sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli
NGU1MB4XDTI0MDIxNzE0MDAzMFoXDTI0MDUxNzEzMDAzMFowLzEtMCsGA1UEAxMk
MDhlYWE5ZDQtOWZlMi00YTE4LTlmMzktZTMyYWZjOTExNDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVVh1+HDn7kaUHAPbmmYtpzWCYLdEw54WSnW
rHlGbYlATndsLn6j9WkY9NL/t6bG0HuAnNaxgaL8NhqYOhJg9kk0bjVLlwvvIH7T
GuMr8EvHSxXBUqpCHa4yIUAGXOkN24Q0gs1rBwAhrCj/5w4HjfmWYgIIB1jr9beY
GY9zlVeY1NrJzP7eyhsy4/DlL+oIP4PZJTFu0VFLG1nGKFtU2HyyVjQNAEn84Ozi
FgKDnEQ3tKjB46btR1gbAwwYiJKWVWK3H/k/IzTqNcT8CSuHSXoxKNpTA03lIzM+
m/29eKOUeqdCASvtEp3IjodHeM2v2j2/FM6tEaNy+MeXE5845QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMEWEgOxmucY5UMlzqY5lOD7gxjRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk
NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvYzE2MDc4YTktMmE2YS0z
MjBkLWI5YmQtODc1NzhmNjhmNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3
ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5
YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3
N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQyssMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABuUXbhPWEp4ghoyXYBGtSu+vPg3g825n18VqpxvJV/KgR7XUnw+SELk
ZnD2MC5wiQnhpU4YB1xE3rI4fnoyNpnP9aC1b+2k2IqENI57ppSI/68lFw5XhdVe
3tq/taKaNiQe3Xl0AreDnv6X0rVL2cRM/G+rB0t+qt88V95dtr/xejNro/WdCmOP
UYrjQn7wV876M5Tgm8VBNMwTSRFgxo4gd6EvizKwKijO7LcsEVlJ7q0Vfa7aIpaJ
ru6ceCtiLwYDlgSHGHdhUV0KVItdx/PVtU7o6ajNUFcyLkbcGxo0snn9NIPYTd/0
B67dZ7LVm29CnaDWDj8XUhZmrf8GoKc=
-----END CERTIFICATE-----
Generated at Mon May 6 02:02:45 2024 by rpki-client on console-fra.rpki-client.org