Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/248312dc-19c8-397f-8f1b-0b15ff00a2ea.roa
File:                     248312dc-19c8-397f-8f1b-0b15ff00a2ea.roa (raw, json)
Hash identifier:          RyvYpqncJr0tM9uP5edHUJOsoPDFG5HHiS1xfx258Ac=
Subject key identifier:   69:5C:B1:CC:C3:97:1D:FE:68:BD:97:54:D1:54:84:6F:C1:6F:3B:1A
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F432858453317EB15AEE1C95AD38F5E40
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/248312dc-19c8-397f-8f1b-0b15ff00a2ea.roa
Signing time:             Thu 14 Mar 2024 01:00:25 +0000
ROA not before:           Thu 14 Mar 2024 01:00:25 +0000
ROA not after:            Wed 12 Jun 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        173.199.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:17:eb:15:ae:e1:c9:5a:d3:8f:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Mar 14 01:00:25 2024 GMT
            Not After : Jun 12 01:00:25 2024 GMT
        Subject: CN=73c3da69-4d44-4bf0-9d3f-e4d3d98e797d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:c6:27:a9:ee:55:98:63:2d:16:5b:37:bc:
                    ef:1c:8b:ff:61:5a:09:9c:10:d7:41:7d:97:2e:82:
                    df:34:b7:f8:8b:f0:ea:b5:90:93:18:3a:07:82:64:
                    38:16:2d:17:8f:2d:cd:f2:ae:f4:9d:9a:66:5c:7b:
                    c1:9c:e6:48:ae:c0:d9:5c:84:94:78:0d:fd:7c:92:
                    94:3b:f9:44:3f:4f:17:00:ad:ee:93:05:cf:a7:f4:
                    f7:ea:bf:d8:e6:18:b4:bf:01:b4:da:00:77:fd:3d:
                    84:15:2d:9a:27:6a:33:f9:63:cb:6d:11:b7:8b:d7:
                    84:20:d0:1f:11:f1:ab:f7:8c:27:40:a3:18:a2:f2:
                    1e:67:22:3f:c7:da:bf:d7:ef:6d:ba:6f:b5:24:30:
                    16:8d:63:c1:0d:f5:ab:b6:9b:93:fb:6d:35:a2:e0:
                    8e:a8:35:29:8e:47:be:af:bf:0e:f4:e1:20:57:2c:
                    f6:06:af:54:10:d9:0d:fe:57:1f:ff:d5:18:64:2a:
                    cb:54:30:a6:d4:ed:67:dd:da:0e:6f:75:a9:7f:56:
                    f1:72:eb:90:08:be:1d:ee:a2:47:08:f6:04:60:34:
                    98:91:e9:97:c6:82:a2:8b:65:20:00:5d:ad:d6:43:
                    19:2a:03:a6:59:d2:c3:bc:91:3d:a9:55:f3:b1:81:
                    e4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5C:B1:CC:C3:97:1D:FE:68:BD:97:54:D1:54:84:6F:C1:6F:3B:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/248312dc-19c8-397f-8f1b-0b15ff00a2ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:57:05:95:80:fc:96:86:c6:75:dc:76:b3:f8:69:4a:9e:d7:
         a1:09:d0:64:57:25:24:a5:42:a1:ae:82:99:a9:e2:37:2d:a8:
         c3:66:3f:39:c9:93:70:b3:14:0f:bc:15:65:72:60:f0:ca:90:
         d4:3f:38:73:fc:ec:5e:df:02:b1:5e:07:7f:cf:2f:d3:c8:78:
         b0:3f:de:b7:b5:45:c4:ca:09:83:63:38:a7:c8:24:a6:3c:12:
         d7:7a:85:54:5b:af:b4:aa:ea:0e:de:d1:84:b9:9e:7d:ea:74:
         0d:ef:1c:e3:e1:c4:e5:88:fd:e1:36:22:76:52:6d:e2:6d:e2:
         3b:d3:a8:99:17:e0:9d:c5:a3:ce:ee:c3:61:70:50:12:22:bf:
         0a:0c:76:4d:56:fb:e2:a8:58:c8:8b:d8:aa:98:46:45:05:61:
         3c:49:ed:e1:a2:54:3e:d8:81:11:d8:13:2a:48:de:3e:70:55:
         a7:67:2d:bb:43:09:ff:2b:71:b5:30:2d:58:3d:9f:8c:88:b3:
         c4:ca:8c:d1:f7:5c:b6:fa:c5:80:50:11:a4:84:82:6f:79:79:
         62:61:2e:a0:63:c6:21:ed:66:ce:56:0b:21:9b:54:ff:ec:a6:
         f2:eb:2e:77:a5:ed:46:bd:41:3b:6d:7b:cf:67:af:8d:fb:4b:
         27:fe:10:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUzF+sVruHJWtOPXkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI0MDMxNDAxMDAyNVoXDTI0MDYxMjAxMDAyNVowLzEtMCsGA1UEAxMk
NzNjM2RhNjktNGQ0NC00YmYwLTlkM2YtZTRkM2Q5OGU3OTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusTGJ6nuVZhjLRZbN7zvHIv/YVoJnBDXQX2X
LoLfNLf4i/DqtZCTGDoHgmQ4Fi0Xjy3N8q70nZpmXHvBnOZIrsDZXISUeA39fJKU
O/lEP08XAK3ukwXPp/T36r/Y5hi0vwG02gB3/T2EFS2aJ2oz+WPLbRG3i9eEINAf
EfGr94wnQKMYovIeZyI/x9q/1+9tum+1JDAWjWPBDfWrtpuT+201ouCOqDUpjke+
r78O9OEgVyz2Bq9UENkN/lcf/9UYZCrLVDCm1O1n3doOb3Wpf1bxcuuQCL4d7qJH
CPYEYDSYkemXxoKii2UgAF2t1kMZKgOmWdLDvJE9qVXzsYHkowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGlcsczDlx3+aL2XVNFUhG/BbzsaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMjQ4MzEyZGMtMTljOC0z
OTdmLThmMWItMGIxNWZmMDBhMmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcc7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACVXBZWA/JaGxnXcdrP4aUqe16EJ0GRXJSSlQqGugpmp4jctqMNmPznJ
k3CzFA+8FWVyYPDKkNQ/OHP87F7fArFeB3/PL9PIeLA/3re1RcTKCYNjOKfIJKY8
Etd6hVRbr7Sq6g7e0YS5nn3qdA3vHOPhxOWI/eE2InZSbeJt4jvTqJkX4J3Fo87u
w2FwUBIivwoMdk1W++KoWMiL2KqYRkUFYTxJ7eGiVD7YgRHYEypI3j5wVadnLbtD
Cf8rcbUwLVg9n4yIs8TKjNH3XLb6xYBQEaSEgm95eWJhLqBjxiHtZs5WCyGbVP/s
pvLrLnel7Ua9QTtte89nr437Syf+ECo=
-----END CERTIFICATE-----
Generated at Thu May 2 01:25:52 2024 by rpki-client on console-fra.rpki-client.org