Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f0b612a7-a911-3a81-91d3-7c0d9943a891.roa
File:                     f0b612a7-a911-3a81-91d3-7c0d9943a891.roa (raw, json)
Hash identifier:          X7DYOBfFU1xz9xqBbobv3a7eqZSFo5dSfltKMK3pSfs=
Subject key identifier:   BC:0F:4B:5F:63:A3:CE:61:C9:5E:90:36:FA:26:23:E6:C0:06:76:31
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F89572860B057A555718AA80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f0b612a7-a911-3a81-91d3-7c0d9943a891.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     26077
IP address blocks:        65.19.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:72:86:0b:05:7a:55:57:18:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=5f6236cf-9afa-4781-8327-1b8ecc7318b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:df:80:b6:13:5b:47:95:55:40:61:2e:10:92:
                    47:61:64:87:fa:fc:0d:b0:e2:09:21:cb:52:c0:53:
                    24:b8:fa:d2:c2:79:32:52:40:97:66:c4:ae:f7:7d:
                    b8:62:26:00:b5:42:fe:b5:d4:97:02:04:2c:ac:c4:
                    eb:53:44:95:da:51:90:3e:2d:5c:55:84:f5:eb:21:
                    49:11:fc:fe:ff:47:62:9f:9c:7f:3e:e5:6c:60:12:
                    42:8a:d0:84:b5:02:7e:7b:98:1e:54:d3:b9:1d:0c:
                    1b:10:0f:eb:f3:89:68:42:5c:91:a3:e8:9a:56:17:
                    2b:88:36:0f:d6:8d:d8:1e:38:d8:ec:e1:d0:f3:7f:
                    6a:06:ab:6d:fd:f8:d7:da:b7:f2:51:1e:b2:4f:19:
                    9a:9d:3c:54:03:89:45:6d:bd:10:6f:62:af:8e:43:
                    93:1e:e1:b6:08:47:0c:21:1b:72:0a:04:3f:59:2b:
                    3a:ca:4f:af:d1:e2:26:a8:8d:dd:12:08:91:48:f8:
                    06:39:5f:15:3e:fe:00:a2:5c:b8:59:2d:55:cd:db:
                    9b:a1:8f:5b:7d:75:55:40:14:4c:e7:8c:1e:99:f9:
                    cd:dd:ba:f5:77:0f:b6:4e:3c:9b:dd:90:2f:18:75:
                    3b:62:c7:50:b6:ab:2a:d2:a1:1f:88:2c:09:f6:d6:
                    92:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0F:4B:5F:63:A3:CE:61:C9:5E:90:36:FA:26:23:E6:C0:06:76:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f0b612a7-a911-3a81-91d3-7c0d9943a891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.19.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:d9:90:f9:e3:b8:c8:2b:2e:fc:40:71:a8:cd:29:64:9c:94:
         21:74:28:0c:0c:44:aa:e9:9c:c2:0b:68:57:99:96:8d:02:b5:
         45:8e:d4:00:3d:eb:31:2d:43:db:39:14:79:d6:90:ee:14:a3:
         5e:d7:b0:72:51:f1:d2:68:0c:95:df:b3:c0:b4:d6:9b:6f:9d:
         2e:34:9a:41:12:99:8f:66:ba:58:4a:36:48:04:76:22:ff:85:
         b9:07:a2:ef:78:22:77:b4:4c:0a:65:8a:23:fa:82:40:3a:56:
         29:e8:50:98:69:bc:a1:2a:9d:27:eb:ed:2c:51:66:8f:50:f9:
         3b:1b:49:12:6b:74:6f:d4:c0:da:26:22:7e:f8:c7:04:48:1e:
         0c:e3:3a:f5:af:87:6c:22:6d:2e:1d:34:16:23:d6:98:8b:6d:
         77:22:fe:5c:0e:ba:09:31:a7:a4:6d:d7:53:21:01:4d:9b:f6:
         81:b7:b6:ba:09:c3:11:b2:64:ef:aa:94:e7:2d:95:0e:ff:d2:
         bd:b6:30:1a:57:d5:e4:91:15:7b:5c:80:45:8e:ab:d0:41:de:
         0b:07:7f:43:3b:bc:9a:35:23:1b:a0:f6:95:ff:9e:77:3a:a5:
         f1:bb:b9:dc:bc:3f:69:25:41:14:91:fa:b6:25:1a:f1:cd:2d:
         e9:85:98:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET4lXKGCwV6VVcYqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk
NWY2MjM2Y2YtOWFmYS00NzgxLTgzMjctMWI4ZWNjNzMxOGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9+AthNbR5VVQGEuEJJHYWSH+vwNsOIJIctS
wFMkuPrSwnkyUkCXZsSu9324YiYAtUL+tdSXAgQsrMTrU0SV2lGQPi1cVYT16yFJ
Efz+/0din5x/PuVsYBJCitCEtQJ+e5geVNO5HQwbEA/r84loQlyRo+iaVhcriDYP
1o3YHjjY7OHQ839qBqtt/fjX2rfyUR6yTxmanTxUA4lFbb0Qb2KvjkOTHuG2CEcM
IRtyCgQ/WSs6yk+v0eImqI3dEgiRSPgGOV8VPv4Aoly4WS1VzduboY9bfXVVQBRM
54wemfnN3br1dw+2Tjyb3ZAvGHU7YsdQtqsq0qEfiCwJ9taSiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLwPS19jo85hyV6QNvomI+bABnYxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjBiNjEyYTctYTkxMS0z
YTgxLTkxZDMtN2MwZDk5NDNhODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRO6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMbZkPnjuMgrLvxAcajNKWSclCF0KAwMRKrpnMILaFeZlo0CtUWO1AA9
6zEtQ9s5FHnWkO4Uo17XsHJR8dJoDJXfs8C01ptvnS40mkESmY9mulhKNkgEdiL/
hbkHou94Ine0TApliiP6gkA6VinoUJhpvKEqnSfr7SxRZo9Q+TsbSRJrdG/UwNom
In74xwRIHgzjOvWvh2wibS4dNBYj1piLbXci/lwOugkxp6Rt11MhAU2b9oG3troJ
wxGyZO+qlOctlQ7/0r22MBpX1eSRFXtcgEWOq9BB3gsHf0M7vJo1Ixug9pX/nnc6
pfG7udy8P2klQRSR+rYlGvHNLemFmLY=
-----END CERTIFICATE-----
Generated at Mon May 6 03:09:30 2024 by rpki-client on console-fra.rpki-client.org