Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/39b7c76c-67f2-3331-bd05-f18ba704ea86.roa
File:                     39b7c76c-67f2-3331-bd05-f18ba704ea86.roa (raw, json)
Hash identifier:          pWgKsTHGI5pQ55XVrAJ1MBOIQkBa90aAQxredWsgxl8=
Subject key identifier:   1B:30:D5:12:BA:61:FA:BF:54:DF:23:91:47:74:36:5E:E5:74:96:91
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328583E52B0C2FC2BE517BB2D01AE80
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/39b7c76c-67f2-3331-bd05-f18ba704ea86.roa
Signing time:             Tue 21 Jun 2022 12:00:00 +0000
ROA not before:           Tue 21 Jun 2022 12:00:00 +0000
ROA not after:            Thu 10 Jan 2030 05:00:00 +0000
asID:                     36692
IP address blocks:        204.194.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:52:b0:c2:fc:2b:e5:17:bb:2d:01:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jun 21 12:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2030 GMT
        Subject: CN=e47819ac-0c94-427a-ab10-30a63a4443d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d4:91:07:56:9a:39:cd:51:9a:df:12:e9:d1:
                    30:26:8b:4e:21:16:14:2b:fd:ad:04:c3:3f:98:4d:
                    80:c3:b1:29:14:27:a7:c2:00:8b:03:66:82:6c:96:
                    61:d7:cd:b4:aa:31:59:49:46:37:49:22:42:a8:d0:
                    11:23:d1:21:56:ae:52:37:38:32:dc:3d:db:fa:fb:
                    a7:90:00:a0:8b:c4:07:7e:3e:fc:72:ba:69:59:e5:
                    c6:25:70:7f:c4:1e:09:21:60:6b:97:b9:d1:04:00:
                    60:32:3a:fc:a1:a4:ac:f8:b9:d0:1b:17:5f:5b:ab:
                    cf:80:fe:33:81:d7:7b:df:b1:d4:fb:d2:b4:7d:4d:
                    f3:44:5f:e7:dd:b6:a2:8c:e9:c4:3f:ec:90:86:f2:
                    79:db:a1:3e:c4:64:cc:b1:78:82:34:47:34:43:0a:
                    c0:dc:f8:ae:f1:50:44:98:c1:ef:be:e7:73:b9:f7:
                    cd:7f:f3:a2:8a:ac:fb:bf:b4:a2:6a:3b:4e:1f:81:
                    59:d4:4b:0d:c9:f1:f9:b4:b4:28:da:cd:1a:91:0b:
                    17:61:ee:18:10:d7:33:a3:31:05:4c:cd:74:51:44:
                    f0:79:ff:bb:29:66:42:e7:7d:39:f6:7a:67:70:ae:
                    c5:81:9d:7a:29:48:31:b6:b2:66:46:df:d9:dc:7a:
                    1b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:30:D5:12:BA:61:FA:BF:54:DF:23:91:47:74:36:5E:E5:74:96:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/39b7c76c-67f2-3331-bd05-f18ba704ea86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:b5:f4:ca:01:2e:67:54:1d:97:33:da:17:1b:8b:b8:b9:90:
         26:53:c0:ff:eb:7a:d8:e3:a3:29:5c:09:11:e9:2d:93:db:d3:
         4b:59:73:fc:a1:cd:b1:a4:45:a1:89:78:60:51:ca:42:16:ec:
         75:ab:94:1e:96:45:1e:77:52:3e:c3:c0:03:d9:b2:d7:a7:f5:
         c7:f1:29:0b:48:a7:89:c5:f8:b3:8c:bb:f3:c8:84:b0:6f:7b:
         05:c0:50:09:d5:8e:9e:53:ab:6e:c3:ad:b1:5b:82:b8:0a:62:
         aa:13:71:80:8c:c7:b1:4f:d0:b6:3a:4b:fb:b5:79:a0:bf:78:
         75:fa:1f:19:48:af:54:6d:29:2f:27:7d:6c:c8:55:78:31:f3:
         5f:8b:4e:53:66:44:b7:86:56:0d:21:96:21:73:e8:1c:78:48:
         dc:34:69:2f:8f:17:06:8d:06:62:c7:de:20:86:d1:ee:66:32:
         05:27:4d:2b:23:48:51:30:62:48:7c:3c:8b:2e:f1:9c:43:e4:
         c9:43:46:4e:e3:87:3d:31:f3:cb:ee:5f:69:ec:98:72:7c:19:
         25:1b:95:d0:30:46:6f:94:c5:85:c8:4f:9c:7e:40:ec:2e:06:
         d3:cb:53:84:49:e0:73:d5:1f:26:dc:e2:93:e5:65:48:5e:c0:
         ea:46:cb:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5SsML8K+UXuy0BroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk
ZWZjMB4XDTIyMDYyMTEyMDAwMFoXDTMwMDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZTQ3ODE5YWMtMGM5NC00MjdhLWFiMTAtMzBhNjNhNDQ0M2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidSRB1aaOc1Rmt8S6dEwJotOIRYUK/2tBMM/
mE2Aw7EpFCenwgCLA2aCbJZh1820qjFZSUY3SSJCqNARI9EhVq5SNzgy3D3b+vun
kACgi8QHfj78crppWeXGJXB/xB4JIWBrl7nRBABgMjr8oaSs+LnQGxdfW6vPgP4z
gdd737HU+9K0fU3zRF/n3baijOnEP+yQhvJ526E+xGTMsXiCNEc0QwrA3Piu8VBE
mMHvvudzuffNf/Oiiqz7v7SiajtOH4FZ1EsNyfH5tLQo2s0akQsXYe4YENczozEF
TM10UUTwef+7KWZC53059npncK7FgZ16KUgxtrJmRt/Z3Hob9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBsw1RK6Yfq/VN8jkUd0Nl7ldJaRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj
YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvMzliN2M3NmMtNjdmMi0z
MzMxLWJkMDUtZjE4YmE3MDRlYTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm
MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi
ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw
NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMLtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI+19MoBLmdUHZcz2hcbi7i5kCZTwP/retjjoylcCRHpLZPb00tZc/yh
zbGkRaGJeGBRykIW7HWrlB6WRR53Uj7DwAPZsten9cfxKQtIp4nF+LOMu/PIhLBv
ewXAUAnVjp5Tq27DrbFbgrgKYqoTcYCMx7FP0LY6S/u1eaC/eHX6HxlIr1RtKS8n
fWzIVXgx81+LTlNmRLeGVg0hliFz6Bx4SNw0aS+PFwaNBmLH3iCG0e5mMgUnTSsj
SFEwYkh8PIsu8ZxD5MlDRk7jhz0x88vuX2nsmHJ8GSUbldAwRm+UxYXIT5x+QOwu
BtPLU4RJ4HPVHybc4pPlZUhewOpGy/s=
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:37:41 2024 by rpki-client on console-fra.rpki-client.org