Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/26d628e8-e5c1-31ca-ada6-4e6d90cc7555.roa
File:                     26d628e8-e5c1-31ca-ada6-4e6d90cc7555.roa (raw, json)
Hash identifier:          m0Fc9wIbDmM0vocw92jt3p24RIYmhzi/uVXmDvioHCs=
Subject key identifier:   32:18:23:67:97:35:30:6D:65:91:82:82:71:40:1E:21:72:61:43:6D
Certificate issuer:       /CN=d426c818-fe62-465f-8184-d4f8176e2692
Certificate serial:       010D0C9F4328584554981FB012926FF52CF41C00
Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/26d628e8-e5c1-31ca-ada6-4e6d90cc7555.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     6507
IP address blocks:        192.64.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:1f:b0:12:92:6f:f5:2c:f4:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=a6a2910b-509d-4d9c-ba13-d5b94654481a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f4:69:83:7d:16:20:ec:47:e0:2c:1d:50:7d:
                    ee:00:2c:f2:3a:95:d2:1c:ca:c5:68:3b:42:83:30:
                    61:0e:5c:09:a0:80:69:d5:40:a5:2b:22:26:ab:4f:
                    84:ab:ae:fb:7d:1e:a2:53:36:9d:91:3a:d4:af:0d:
                    00:76:2f:55:c8:12:ad:ee:1b:b5:4a:8c:73:48:97:
                    07:bc:19:35:c5:1e:e6:cc:3a:57:47:67:43:38:36:
                    24:da:1a:ec:cd:f5:36:9b:70:5e:b1:14:2d:7d:dc:
                    a0:ec:9e:88:f5:39:9a:02:82:2a:11:0e:ca:06:f0:
                    9e:f3:37:85:ab:8f:07:e4:77:84:59:51:04:74:d4:
                    71:97:ec:3e:c5:f3:39:79:ba:d0:a4:b2:38:6d:ff:
                    8c:97:2e:ca:31:c4:59:e8:cb:63:c7:8d:1b:71:a6:
                    bb:55:72:a3:0c:8e:a9:6d:61:18:da:84:c9:60:bc:
                    15:85:dd:1e:08:0f:28:ca:53:12:04:bc:0a:cf:87:
                    f5:7e:78:a2:bf:57:10:25:e7:5a:27:43:ba:41:97:
                    ee:d4:60:a6:02:88:c6:62:e2:9d:71:a4:16:3f:ef:
                    25:7d:83:ca:c9:0f:2b:1b:6f:75:5d:c6:5c:87:28:
                    31:dc:bd:9d:f6:3a:96:67:78:bb:7d:11:32:c2:7e:
                    9f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:18:23:67:97:35:30:6D:65:91:82:82:71:40:1E:21:72:61:43:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/26d628e8-e5c1-31ca-ada6-4e6d90cc7555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl

            X509v3 Authority Key Identifier:
                keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:e0:af:6f:8d:69:22:70:4a:f7:22:85:0a:33:ce:17:9b:b0:
         ab:50:ad:3f:46:9c:c7:1b:96:a8:c7:96:39:21:dc:5b:0e:79:
         0f:19:84:e2:40:c9:07:c7:9d:ae:47:7c:eb:af:04:be:b0:e5:
         29:8f:a3:4c:98:dc:42:26:d0:10:9b:a5:55:1a:bd:36:58:7c:
         53:00:0c:cc:80:95:41:b2:b9:73:04:04:a4:09:ac:c4:77:93:
         8b:7a:22:1c:8f:26:ab:e8:79:d5:45:ce:8b:6f:84:52:08:dc:
         55:02:13:4e:92:fd:c4:aa:87:90:0d:39:bd:5a:b9:09:5e:ff:
         3d:e6:9c:80:03:6a:ed:ad:20:56:d4:89:0d:ee:fd:61:2c:00:
         48:c3:64:66:c8:eb:6c:45:c4:b2:47:7d:1b:68:13:97:ce:1b:
         57:fa:46:f4:01:24:b5:8a:c3:5e:0d:90:cd:38:4e:e2:2a:ca:
         c4:da:c6:08:90:17:bb:65:d2:59:89:4f:c0:29:dd:f7:20:05:
         70:b7:fb:a3:2b:43:9b:aa:a2:3d:37:8a:7d:77:31:29:a5:b1:
         ca:f9:db:12:51:a4:ee:ed:41:62:0d:1b:2d:cb:5b:58:74:2a:
         c3:f9:28:1d:32:65:be:29:4a:cc:0b:26:86:e9:40:8d:2c:70:
         f3:3c:93:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVUmB+wEpJv9Sz0HAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQyNmM4MTgtZmU2Mi00NjVmLTgxODQtZDRmODE3NmUy
NjkyMB4XDTI0MDMyNjAxMDAyNVoXDTI0MDYyNDAxMDAyNVowLzEtMCsGA1UEAxMk
YTZhMjkxMGItNTA5ZC00ZDljLWJhMTMtZDViOTQ2NTQ0ODFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfRpg30WIOxH4CwdUH3uACzyOpXSHMrFaDtC
gzBhDlwJoIBp1UClKyImq0+Eq677fR6iUzadkTrUrw0Adi9VyBKt7hu1SoxzSJcH
vBk1xR7mzDpXR2dDODYk2hrszfU2m3BesRQtfdyg7J6I9TmaAoIqEQ7KBvCe8zeF
q48H5HeEWVEEdNRxl+w+xfM5ebrQpLI4bf+Mly7KMcRZ6Mtjx40bcaa7VXKjDI6p
bWEY2oTJYLwVhd0eCA8oylMSBLwKz4f1fniiv1cQJedaJ0O6QZfu1GCmAojGYuKd
caQWP+8lfYPKyQ8rG291XcZchygx3L2d9jqWZ3i7fREywn6f5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDIYI2eXNTBtZZGCgnFAHiFyYUNtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2
YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4MTc2ZTI2OTIvMjZkNjI4ZTgtZTVjMS0z
MWNhLWFkYTYtNGU2ZDkwY2M3NTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDQyNmM4MTgtZmU2Mi00NjVmLTgx
ODQtZDRmODE3NmUyNjkyL2Q0MjZjODE4LWZlNjItNDY1Zi04MTg0LWQ0ZjgxNzZl
MjY5Mi5jcmwwHwYDVR0jBBgwFoAU8F+ppzkydlY4j5FgaWTWQCUOPLswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4
MTc2ZTI2OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwECoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfgr2+NaSJwSvcihQozzhebsKtQrT9GnMcblqjHljkh3FsOeQ8ZhOJA
yQfHna5HfOuvBL6w5SmPo0yY3EIm0BCbpVUavTZYfFMADMyAlUGyuXMEBKQJrMR3
k4t6IhyPJqvoedVFzotvhFII3FUCE06S/cSqh5ANOb1auQle/z3mnIADau2tIFbU
iQ3u/WEsAEjDZGbI62xFxLJHfRtoE5fOG1f6RvQBJLWKw14NkM04TuIqysTaxgiQ
F7tl0lmJT8Ap3fcgBXC3+6MrQ5uqoj03in13MSmlscr52xJRpO7tQWINGy3LW1h0
KsP5KB0yZb4pSswLJobpQI0scPM8k5k=
-----END CERTIFICATE-----
Generated at Sun May 5 15:39:20 2024 by rpki-client on console-fra.rpki-client.org