Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/a94e2fec-ab32-38b0-9031-8e2c6f1b0dc2.roa
File:                     a94e2fec-ab32-38b0-9031-8e2c6f1b0dc2.roa (raw, json)
Hash identifier:          NZ4SEWMKdc7kwgR/+JbcsSp5FNYt1avMu1i3CxdJSpM=
Subject key identifier:   4A:BA:67:05:86:7E:66:3E:F2:35:AF:F2:6F:8A:36:3C:0C:9F:49:89
Certificate issuer:       /CN=dac515b7-f8d7-42ab-b935-00cc0ff3d35b
Certificate serial:       010D0C9F4328584515E591BF4FB919DF81CD4900
Authority key identifier: 24:23:8B:A4:70:A5:FF:E2:68:6E:8F:BB:5D:41:87:0D:A9:1E:9D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/a94e2fec-ab32-38b0-9031-8e2c6f1b0dc2.roa
Signing time:             Sun 03 Mar 2024 14:00:31 +0000
ROA not before:           Sun 03 Mar 2024 14:00:31 +0000
ROA not after:            Sat 01 Jun 2024 13:00:31 +0000
asID:                     396163
IP address blocks:        69.194.4.0/23 maxlen: 24
                          208.117.95.0/24 maxlen: 24
                          208.84.92.0/23 maxlen: 24
                          208.84.90.0/24 maxlen: 24
                          198.181.60.0/23 maxlen: 24
                          162.251.240.0/21 maxlen: 24
                          104.225.212.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:15:e5:91:bf:4f:b9:19:df:81:cd:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac515b7-f8d7-42ab-b935-00cc0ff3d35b
        Validity
            Not Before: Mar  3 14:00:31 2024 GMT
            Not After : Jun  1 13:00:31 2024 GMT
        Subject: CN=ee3d27d6-2102-476f-b3cf-c950d475feb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0e:58:40:44:a6:21:fa:65:e0:d3:55:d3:f8:
                    c6:2d:4a:98:b1:6e:d1:8b:cd:53:ec:02:57:6d:ea:
                    76:f3:d2:87:9c:2b:6e:dc:09:9d:ac:bd:5d:c4:5c:
                    2f:25:1f:5b:cd:dc:4c:2e:e1:42:e6:ff:22:d7:17:
                    92:3d:9f:19:ae:36:26:91:0f:24:9c:d9:e7:77:b3:
                    cf:e3:62:d4:42:e4:be:89:80:56:59:95:27:ba:0b:
                    9b:8b:0a:73:09:c8:55:40:3e:67:45:14:79:63:ab:
                    cd:f2:62:f3:41:20:b5:ad:f0:5a:80:22:fe:8f:e0:
                    e9:87:ca:16:a1:27:a1:4f:a0:90:76:43:02:58:e5:
                    1c:c4:fd:fb:a7:64:72:f1:a8:dc:72:71:9b:11:17:
                    cd:a4:78:68:35:48:fa:b5:2a:1b:d4:2e:32:a5:8f:
                    a5:e1:6e:40:ed:b7:e4:fc:de:28:ba:cf:ce:3c:d8:
                    43:33:b9:a9:2b:86:a1:37:7f:46:47:f3:6b:d7:22:
                    22:d0:96:f6:c5:35:ec:d2:f1:48:7e:bf:ad:77:19:
                    68:7a:05:13:1b:cc:8b:be:e1:f7:e8:3e:70:3d:eb:
                    3c:d3:14:24:22:84:58:60:80:cb:f3:aa:f8:e0:d5:
                    22:e1:16:29:0c:7b:ba:e3:ba:9f:42:18:18:e4:a7:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BA:67:05:86:7E:66:3E:F2:35:AF:F2:6F:8A:36:3C:0C:9F:49:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/a94e2fec-ab32-38b0-9031-8e2c6f1b0dc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.crl

            X509v3 Authority Key Identifier:
                keyid:24:23:8B:A4:70:A5:FF:E2:68:6E:8F:BB:5D:41:87:0D:A9:1E:9D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.194.4.0/23
                  104.225.212.0/23
                  162.251.240.0/21
                  198.181.60.0/23
                  208.84.90.0/24
                  208.84.92.0/23
                  208.117.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:71:0b:7c:dd:11:e4:4d:ac:23:f1:94:50:06:5a:73:a8:86:
         34:39:ad:19:2f:c7:d9:d0:d3:67:f1:84:a7:71:85:f1:33:82:
         0e:e6:a4:4b:ce:6e:00:ed:d4:fa:59:61:8c:93:dd:e4:eb:aa:
         5c:ca:93:6b:6a:c5:cc:76:9c:18:2b:dd:1b:2d:4e:e8:5c:f2:
         e0:1d:f8:45:54:d2:45:a2:29:49:eb:61:4e:00:fd:be:33:40:
         50:1c:a8:d6:31:91:71:e8:3d:cd:60:42:a2:f1:c6:7b:4e:dc:
         9a:b1:8e:b1:aa:d2:ff:40:cf:ff:b2:40:2c:66:48:89:00:53:
         4e:81:fa:6f:a6:48:59:28:57:fd:51:a1:e4:7e:73:7e:11:a3:
         1b:d1:65:53:a7:18:96:bb:9b:76:06:d7:d7:a4:43:96:9c:96:
         b6:29:9a:8d:c9:82:09:24:6e:af:12:e8:f2:76:a1:73:51:3b:
         4d:1e:13:57:18:91:a1:dc:e0:7a:f8:00:ed:28:b8:db:dd:ed:
         da:8d:8c:3f:0e:9c:55:ed:d5:9f:80:45:c3:8b:99:38:1b:69:
         a2:63:e7:23:4b:32:0f:5b:94:74:13:70:f8:e0:10:4f:9d:6c:
         72:05:a4:39:ae:ed:5f:ee:fd:1a:17:8d:af:55:71:e1:8a:be:
         aa:1b:b8:68
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEUV5ZG/T7kZ34HNSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGFjNTE1YjctZjhkNy00MmFiLWI5MzUtMDBjYzBmZjNk
MzViMB4XDTI0MDMwMzE0MDAzMVoXDTI0MDYwMTEzMDAzMVowLzEtMCsGA1UEAxMk
ZWUzZDI3ZDYtMjEwMi00NzZmLWIzY2YtYzk1MGQ0NzVmZWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w5YQESmIfpl4NNV0/jGLUqYsW7Ri81T7AJX
bep289KHnCtu3AmdrL1dxFwvJR9bzdxMLuFC5v8i1xeSPZ8ZrjYmkQ8knNnnd7PP
42LUQuS+iYBWWZUnugubiwpzCchVQD5nRRR5Y6vN8mLzQSC1rfBagCL+j+Dph8oW
oSehT6CQdkMCWOUcxP37p2Ry8ajccnGbERfNpHhoNUj6tSob1C4ypY+l4W5A7bfk
/N4ous/OPNhDM7mpK4ahN39GR/Nr1yIi0Jb2xTXs0vFIfr+tdxloegUTG8yLvuH3
6D5wPes80xQkIoRYYIDL86r44NUi4RYpDHu647qfQhgY5KcThQIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFEq6ZwWGfmY+8jWv8m+KNjwMn0mJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYWM1
MTViNy1mOGQ3LTQyYWItYjkzNS0wMGNjMGZmM2QzNWIvYTk0ZTJmZWMtYWIzMi0z
OGIwLTkwMzEtOGUyYzZmMWIwZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGFjNTE1YjctZjhkNy00MmFiLWI5
MzUtMDBjYzBmZjNkMzViL2RhYzUxNWI3LWY4ZDctNDJhYi1iOTM1LTAwY2MwZmYz
ZDM1Yi5jcmwwHwYDVR0jBBgwFoAUJCOLpHCl/+Jobo+7XUGHDakeneswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYWM1MTViNy1mOGQ3LTQyYWItYjkzNS0wMGNj
MGZmM2QzNWIuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBRcIEAwQB
aOHUAwQDovvwAwQBxrU8AwQA0FRaAwQB0FRcAwQA0HVfMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFJxC3zd
EeRNrCPxlFAGWnOohjQ5rRkvx9nQ02fxhKdxhfEzgg7mpEvObgDt1PpZYYyT3eTr
qlzKk2tqxcx2nBgr3RstTuhc8uAd+EVU0kWiKUnrYU4A/b4zQFAcqNYxkXHoPc1g
QqLxxntO3JqxjrGq0v9Az/+yQCxmSIkAU06B+m+mSFkoV/1RoeR+c34RoxvRZVOn
GJa7m3YG19ekQ5aclrYpmo3Jggkkbq8S6PJ2oXNRO00eE1cYkaHc4Hr4AO0ouNvd
7dqNjD8OnFXt1Z+ARcOLmTgbaaJj5yNLMg9blHQTcPjgEE+dbHIFpDmu7V/u/RoX
ja9VceGKvqobuGg=
-----END CERTIFICATE-----
Generated at Sat May 18 01:32:41 2024 by rpki-client on console-fra.rpki-client.org