Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4c083ae7-dea0-370d-b02a-eba4f4e18a74.roa
File:                     4c083ae7-dea0-370d-b02a-eba4f4e18a74.roa (raw, json)
Hash identifier:          jn2MCD5apfn3M/fyWPVQpGfa4pfI81WlHVhQVCLzawM=
Subject key identifier:   D3:04:F8:EA:C4:F7:B6:E1:53:FF:90:93:B8:DE:4E:38:98:0A:48:06
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285845BEAE18A5A3A557CF59098A80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4c083ae7-dea0-370d-b02a-eba4f4e18a74.roa
Signing time:             Fri 03 May 2024 01:00:24 +0000
ROA not before:           Fri 03 May 2024 01:00:24 +0000
ROA not after:            Thu 01 Aug 2024 01:00:24 +0000
asID:                     3356
IP address blocks:        207.83.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:ae:18:a5:a3:a5:57:cf:59:09:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May  3 01:00:24 2024 GMT
            Not After : Aug  1 01:00:24 2024 GMT
        Subject: CN=d032b172-dc3c-4282-abfc-bc397f5c485c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a5:2b:3a:ed:fa:ac:22:ea:cb:96:2a:13:57:
                    7c:30:6d:1f:9e:43:0c:9b:64:c1:31:e2:fb:33:1b:
                    07:ba:86:6d:54:6e:45:3e:87:ec:8c:46:96:05:7d:
                    87:32:f3:f1:43:cb:25:f3:45:37:7b:91:b5:b7:50:
                    05:f2:a7:56:ae:2b:0a:dc:1a:85:dd:0e:a4:a3:16:
                    58:96:ea:67:1c:0d:2e:0e:e6:18:a8:91:ea:17:93:
                    5c:7c:9f:6a:27:39:3d:84:de:f1:eb:78:c3:ad:d5:
                    6b:fd:c5:e7:74:ce:03:b9:3a:cc:0f:22:bb:dc:23:
                    56:ad:2d:83:37:63:83:85:3a:f6:d5:fc:ea:38:cf:
                    47:b6:7e:01:eb:f0:91:ec:8e:63:f1:74:21:91:8b:
                    52:80:35:e8:f7:9c:e5:55:ad:7d:fb:25:5a:e0:cc:
                    74:0b:9b:34:6d:32:fa:c3:a2:00:5e:5b:25:a4:d1:
                    0d:16:94:e9:40:e0:0d:d8:77:c0:69:81:d1:ed:c3:
                    f0:51:b3:56:e6:af:76:d1:07:51:9f:e2:85:41:e8:
                    f3:56:a0:f5:9f:37:50:3c:54:b4:eb:1a:96:09:47:
                    e7:7f:f0:3a:87:b8:36:fb:e3:2d:58:06:a0:50:27:
                    a2:60:6f:b7:e2:be:c5:a6:ec:4d:26:19:4e:50:9d:
                    60:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:04:F8:EA:C4:F7:B6:E1:53:FF:90:93:B8:DE:4E:38:98:0A:48:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4c083ae7-dea0-370d-b02a-eba4f4e18a74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.83.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:dc:39:44:49:51:15:be:15:46:9b:05:7d:4d:00:f4:70:72:
         f4:25:f1:e5:f5:6b:8a:1d:1c:6d:d5:1e:11:17:82:e7:d3:b9:
         0a:44:38:5b:8d:8e:3c:eb:00:3a:b0:0e:70:de:cf:ea:f6:67:
         1c:52:44:f8:eb:10:7d:ef:30:b7:5c:68:bb:ca:66:4f:c3:27:
         54:da:f3:9b:30:1e:a9:72:89:6a:62:d6:d7:4e:75:3c:38:16:
         da:d0:68:a9:52:fc:e7:85:f6:57:49:72:81:ac:d6:7f:57:29:
         65:83:db:66:32:1c:55:7d:5a:5d:74:66:d1:b5:83:1d:76:c4:
         06:d3:db:f8:b2:68:c0:3e:f8:16:8e:25:4f:48:4a:11:6e:70:
         a7:57:f8:75:d5:bc:b5:52:fc:3f:73:f5:4b:bb:f2:56:49:c5:
         68:42:49:8e:85:15:9d:01:3b:39:8d:89:6f:cf:3d:7b:3a:16:
         89:ea:75:e9:9b:9d:c9:bb:e6:6d:5b:dc:8c:5e:33:fb:9d:52:
         38:c8:aa:b5:03:3b:94:5c:09:f8:56:ab:01:db:ad:1f:49:ea:
         3a:2b:03:d2:5b:9a:36:88:6a:fc:ba:86:76:6d:c6:27:53:a0:
         69:14:df:b2:8f:43:39:f7:8e:d3:93:e7:e3:ea:43:54:0f:86:
         64:1a:6c:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW+rhilo6VXz1kJioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI0MDUwMzAxMDAyNFoXDTI0MDgwMTAxMDAyNFowLzEtMCsGA1UEAxMk
ZDAzMmIxNzItZGMzYy00MjgyLWFiZmMtYmMzOTdmNWM0ODVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqUrOu36rCLqy5YqE1d8MG0fnkMMm2TBMeL7
MxsHuoZtVG5FPofsjEaWBX2HMvPxQ8sl80U3e5G1t1AF8qdWrisK3BqF3Q6koxZY
lupnHA0uDuYYqJHqF5NcfJ9qJzk9hN7x63jDrdVr/cXndM4DuTrMDyK73CNWrS2D
N2ODhTr21fzqOM9Htn4B6/CR7I5j8XQhkYtSgDXo95zlVa19+yVa4Mx0C5s0bTL6
w6IAXlslpNENFpTpQOAN2HfAaYHR7cPwUbNW5q920QdRn+KFQejzVqD1nzdQPFS0
6xqWCUfnf/A6h7g2++MtWAagUCeiYG+34r7FpuxNJhlOUJ1gxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNME+OrE97bhU/+Qk7jeTjiYCkgGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNGMwODNhZTctZGVhMC0z
NzBkLWIwMmEtZWJhNGY0ZTE4YTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz1NgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3cOURJURW+FUabBX1NAPRwcvQl8eX1a4odHG3VHhEXgufTuQpEOFuN
jjzrADqwDnDez+r2ZxxSRPjrEH3vMLdcaLvKZk/DJ1Ta85swHqlyiWpi1tdOdTw4
FtrQaKlS/OeF9ldJcoGs1n9XKWWD22YyHFV9Wl10ZtG1gx12xAbT2/iyaMA++BaO
JU9IShFucKdX+HXVvLVS/D9z9Uu78lZJxWhCSY6FFZ0BOzmNiW/PPXs6Fonqdemb
ncm75m1b3IxeM/udUjjIqrUDO5RcCfhWqwHbrR9J6jorA9JbmjaIavy6hnZtxidT
oGkU37KPQzn3jtOT5+PqQ1QPhmQabPA=
-----END CERTIFICATE-----
Generated at Sat May 4 11:07:19 2024 by rpki-client on console-fra.rpki-client.org