Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/37677602-0a43-34e8-9622-a4ac56d7d1e8.roa
File:                     37677602-0a43-34e8-9622-a4ac56d7d1e8.roa (raw, json)
Hash identifier:          ITc3pljAb3PO8e1PDdQTPx5fd+shQd2D/pvjdfEfd6k=
Subject key identifier:   C6:FF:4E:78:84:DC:73:CA:E7:48:AD:92:05:2F:E2:C6:82:20:56:FF
Certificate issuer:       /CN=aa912e91-41d3-4894-893c-8de4f94175f9
Certificate serial:       010D0C9F43285845304D379FFF796C1DB20E6880
Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/37677602-0a43-34e8-9622-a4ac56d7d1e8.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        192.153.76.0/24 maxlen: 24
                          199.201.127.0/24 maxlen: 24
                          64.52.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:37:9f:ff:79:6c:1d:b2:0e:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=d1616235-d4e3-458b-8912-db48f0c7e738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:e0:a9:bf:cb:ae:ff:b7:58:b8:9e:3a:05:
                    af:a3:0f:62:89:54:ff:1f:57:b5:1a:a7:8f:d6:01:
                    85:82:4a:8b:08:7b:4c:20:81:d2:0f:fd:5d:b3:eb:
                    f9:26:7b:79:59:92:5a:3a:a0:11:68:ce:e2:7b:15:
                    69:0d:e7:9e:6d:1f:f9:c5:fe:20:2d:53:36:e8:62:
                    34:14:40:10:7f:13:61:be:93:55:c7:86:dd:ff:84:
                    70:df:42:c0:6e:cd:34:4b:82:1d:51:ea:f0:e8:b4:
                    1f:bc:1e:14:71:fa:ad:04:45:3a:c6:db:38:ee:73:
                    82:36:ec:9f:94:26:2a:c6:b2:3b:b5:7f:57:89:84:
                    b2:f5:9d:33:8e:6a:9d:fc:0e:1a:5f:60:3f:e0:15:
                    90:fc:ef:b1:42:b7:23:90:fa:6e:5e:a7:cf:91:af:
                    1d:14:d1:ef:41:ae:8a:38:2d:9a:ce:b6:e9:5b:30:
                    fe:2f:b2:05:5e:4f:bd:e0:16:07:0e:3f:f6:ee:ea:
                    b2:d5:23:94:56:bd:0d:da:0a:48:d9:e4:4b:07:f6:
                    09:66:55:da:0a:09:1e:83:82:66:b6:72:32:c9:36:
                    fe:61:f5:3b:18:21:01:e5:7c:fd:44:f9:09:6f:99:
                    c0:e1:fd:32:99:85:47:33:cc:90:0e:5c:e8:4b:f7:
                    1d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FF:4E:78:84:DC:73:CA:E7:48:AD:92:05:2F:E2:C6:82:20:56:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/37677602-0a43-34e8-9622-a4ac56d7d1e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl

            X509v3 Authority Key Identifier:
                keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.111.0/24
                  192.153.76.0/24
                  199.201.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:08:e8:c9:4a:42:47:d3:ee:69:9a:c2:25:81:f1:e0:5a:76:
         46:c3:6d:81:50:8e:66:06:ee:8a:53:30:ec:c6:ca:ad:38:76:
         13:6d:13:82:4c:25:e3:24:d2:e6:49:4f:ee:20:05:7f:0f:dd:
         15:05:17:51:19:01:80:30:85:16:4b:a7:84:50:d1:6b:1f:8f:
         31:25:49:52:cd:c2:f5:5d:5f:d9:a1:75:2e:df:87:a9:b9:3c:
         0e:15:b1:65:2b:1b:d0:41:4f:1a:63:cf:a1:25:57:39:3a:d0:
         c4:fe:18:32:9b:01:0f:17:88:4b:ba:8a:2c:70:31:3f:6f:ab:
         a7:bc:f5:1e:92:f0:0c:14:e0:ef:33:72:04:c2:87:c9:3b:3c:
         02:31:fb:0a:d0:fc:aa:3c:3c:ad:5e:48:c6:91:44:11:04:15:
         f6:83:d7:40:a2:db:ed:31:28:48:cc:d7:3f:bd:ab:7e:fd:a6:
         1e:41:ce:04:31:47:12:f7:5e:39:8e:24:5b:49:ab:78:a1:24:
         d7:a6:d3:3a:81:6e:6e:a7:b2:61:95:11:88:cc:aa:78:57:c4:
         4d:66:c3:8b:ce:1a:80:99:13:82:95:a6:45:ba:f0:22:6e:49:
         2e:f4:08:bc:c8:36:f8:cf:4a:bd:1b:03:02:a1:f3:95:5a:68:
         ed:f7:8f:29
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEUwTTef/3lsHbIOaIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3
NWY5MB4XDTI0MDMxMzAxMDAyNloXDTI0MDYxMTAxMDAyNlowLzEtMCsGA1UEAxMk
ZDE2MTYyMzUtZDRlMy00NThiLTg5MTItZGI0OGYwYzdlNzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyHgqb/Lrv+3WLieOgWvow9iiVT/H1e1GqeP
1gGFgkqLCHtMIIHSD/1ds+v5Jnt5WZJaOqARaM7iexVpDeeebR/5xf4gLVM26GI0
FEAQfxNhvpNVx4bd/4Rw30LAbs00S4IdUerw6LQfvB4UcfqtBEU6xts47nOCNuyf
lCYqxrI7tX9XiYSy9Z0zjmqd/A4aX2A/4BWQ/O+xQrcjkPpuXqfPka8dFNHvQa6K
OC2azrbpWzD+L7IFXk+94BYHDj/27uqy1SOUVr0N2gpI2eRLB/YJZlXaCgkeg4Jm
tnIyyTb+YfU7GCEB5Xz9RPkJb5nA4f0ymYVHM8yQDlzoS/cdOQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFMb/TniE3HPK50itkgUv4saCIFb/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx
MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvMzc2Nzc2MDItMGE0My0z
NGU4LTk2MjItYTRhYzU2ZDdkMWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5
M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx
NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0
Zjk0MTc1ZjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQDRvAwQA
wJlMAwQAx8l/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBADwI6MlKQkfT7mmawiWB8eBadkbDbYFQjmYG7opT
MOzGyq04dhNtE4JMJeMk0uZJT+4gBX8P3RUFF1EZAYAwhRZLp4RQ0WsfjzElSVLN
wvVdX9mhdS7fh6m5PA4VsWUrG9BBTxpjz6ElVzk60MT+GDKbAQ8XiEu6iixwMT9v
q6e89R6S8AwU4O8zcgTCh8k7PAIx+wrQ/Ko8PK1eSMaRRBEEFfaD10Ci2+0xKEjM
1z+9q379ph5BzgQxRxL3XjmOJFtJq3ihJNem0zqBbm6nsmGVEYjMqnhXxE1mw4vO
GoCZE4KVpkW68CJuSS70CLzINvjPSr0bAwKh85VaaO33jyk=
-----END CERTIFICATE-----
Generated at Thu May 2 04:29:47 2024 by rpki-client on console-fra.rpki-client.org