Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/8fad5de3-3c17-31e1-a859-fc1151b1239c.roa
File:                     8fad5de3-3c17-31e1-a859-fc1151b1239c.roa (raw, json)
Hash identifier:          XttZ6UnBuq7wi0KEk2luizTcmjqxR7eIh2plLb9St+Q=
Subject key identifier:   76:02:92:71:26:C4:14:CE:75:A6:42:7D:46:FE:36:5B:C7:52:BD:6B
Certificate issuer:       /CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d
Certificate serial:       010D0C9F43285845E836FC3D5D089D108484AE80
Authority key identifier: 64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/8fad5de3-3c17-31e1-a859-fc1151b1239c.roa
Signing time:             Fri 17 May 2024 22:04:24 +0000
ROA not before:           Fri 17 May 2024 22:04:24 +0000
ROA not after:            Thu 15 Aug 2024 22:04:24 +0000
asID:                     40100
IP address blocks:        208.68.156.0/24 maxlen: 24
                          208.68.157.0/24 maxlen: 24
                          208.68.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e8:36:fc:3d:5d:08:9d:10:84:84:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d
        Validity
            Not Before: May 17 22:04:24 2024 GMT
            Not After : Aug 15 22:04:24 2024 GMT
        Subject: CN=79d108fb-473e-4d4c-bcc0-029675c0a909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:90:e3:20:93:76:53:ba:4f:f4:ff:91:5e:4a:
                    00:09:d6:f3:0f:d7:a8:f9:dd:86:54:6b:77:a4:3c:
                    6c:d3:37:1f:57:d1:60:2b:f5:02:09:54:f7:b6:e4:
                    81:07:fb:59:2c:e7:53:e0:a8:7d:81:71:bc:c9:e7:
                    6f:58:8b:94:0d:00:1f:05:ef:c2:df:70:31:1b:42:
                    07:e1:63:6d:91:d1:cd:35:2a:9a:f7:d5:f3:c0:c1:
                    53:9b:5c:98:11:a3:45:40:bb:07:80:03:f4:06:fb:
                    7c:d1:54:9e:54:fc:59:9c:1e:89:30:6d:fd:c0:d0:
                    85:11:12:70:8d:3c:6c:a5:7f:a0:cc:f8:31:12:dd:
                    90:3d:6d:3f:30:59:8f:41:07:20:e4:a6:7e:fe:f0:
                    10:83:8d:cd:d0:8d:36:3c:53:8d:ec:ed:5a:d3:bb:
                    a8:0c:ab:88:f9:e3:76:d3:b8:c6:9d:ce:ca:0d:0e:
                    8b:45:ec:23:59:89:91:a4:60:7f:01:99:f9:85:46:
                    69:38:93:b7:f2:ff:04:79:59:c2:05:77:d9:a4:c6:
                    1b:1b:9c:7e:1d:e0:79:fa:9a:80:e3:a6:9c:38:be:
                    82:4a:d4:76:a6:38:07:3e:d0:41:2b:39:62:1a:8b:
                    03:55:36:fa:ce:f0:a9:1d:ae:af:b8:e0:57:19:7d:
                    07:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:02:92:71:26:C4:14:CE:75:A6:42:7D:46:FE:36:5B:C7:52:BD:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/8fad5de3-3c17-31e1-a859-fc1151b1239c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl

            X509v3 Authority Key Identifier:
                keyid:64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.156.0/23
                  208.68.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:1f:26:60:25:3f:a4:38:f8:70:11:c4:fc:5e:82:d3:47:03:
         58:b3:9f:46:b8:77:86:7a:67:16:ec:ad:d2:f3:77:58:93:85:
         8a:99:75:3d:11:df:df:04:55:3a:df:e5:ec:40:d6:f8:f7:9f:
         00:26:3c:ad:05:72:3e:6d:c6:61:78:f5:05:bb:5a:7f:41:54:
         6b:35:2d:cb:a8:e6:19:fc:96:66:24:de:6c:5b:9c:39:ed:1c:
         d6:4c:ed:2d:78:60:15:73:89:54:9c:ae:b7:65:a3:d6:9a:f6:
         c0:73:71:18:25:d2:16:ef:5f:3a:d0:70:ca:34:65:7d:28:e9:
         11:21:35:bc:e8:b5:1b:d5:27:af:50:57:86:b3:17:63:28:d0:
         de:92:01:37:1c:c4:26:6e:3e:e2:d8:80:9a:e5:9b:89:ec:65:
         b5:8c:36:0a:6d:70:b5:b4:34:92:93:a0:65:64:55:c4:90:9d:
         ac:b6:3c:4e:a6:5e:96:03:e9:f4:ba:14:7c:cb:19:c8:d8:ab:
         c6:a0:2b:ec:96:9a:ee:3d:76:b6:bb:90:72:12:7f:a2:c6:c5:
         12:ed:36:5f:fe:b9:75:0f:f7:5b:e3:af:ad:60:6c:78:6b:a3:
         98:81:7a:72:14:b0:a3:81:9b:03:4c:a8:e6:41:85:79:46:d3:
         f7:03:74:2f
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEXoNvw9XQidEISEroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDVhNGVmNjctM2VkMC00ZGU5LWFmYWItYWIxZWI0ZGMz
YjBkMB4XDTI0MDUxNzIyMDQyNFoXDTI0MDgxNTIyMDQyNFowLzEtMCsGA1UEAxMk
NzlkMTA4ZmItNDczZS00ZDRjLWJjYzAtMDI5Njc1YzBhOTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZDjIJN2U7pP9P+RXkoACdbzD9eo+d2GVGt3
pDxs0zcfV9FgK/UCCVT3tuSBB/tZLOdT4Kh9gXG8yedvWIuUDQAfBe/C33AxG0IH
4WNtkdHNNSqa99XzwMFTm1yYEaNFQLsHgAP0Bvt80VSeVPxZnB6JMG39wNCFERJw
jTxspX+gzPgxEt2QPW0/MFmPQQcg5KZ+/vAQg43N0I02PFON7O1a07uoDKuI+eN2
07jGnc7KDQ6LRewjWYmRpGB/AZn5hUZpOJO38v8EeVnCBXfZpMYbG5x+HeB5+pqA
46acOL6CStR2pjgHPtBBKzliGosDVTb6zvCpHa6vuOBXGX0HawIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFHYCknEmxBTOdaZCfUb+NlvHUr1rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80NWE0
ZWY2Ny0zZWQwLTRkZTktYWZhYi1hYjFlYjRkYzNiMGQvOGZhZDVkZTMtM2MxNy0z
MWUxLWE4NTktZmMxMTUxYjEyMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDVhNGVmNjctM2VkMC00ZGU5LWFm
YWItYWIxZWI0ZGMzYjBkLzQ1YTRlZjY3LTNlZDAtNGRlOS1hZmFiLWFiMWViNGRj
M2IwZC5jcmwwHwYDVR0jBBgwFoAUZHP0/sCp2Tpv5nmwPPeHGId5EX0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80NWE0ZWY2Ny0zZWQwLTRkZTktYWZhYi1hYjFl
YjRkYzNiMGQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0EScAwQA
0ESfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABQfJmAlP6Q4+HARxPxegtNHA1izn0a4d4Z6ZxbsrdLzd1iT
hYqZdT0R398EVTrf5exA1vj3nwAmPK0Fcj5txmF49QW7Wn9BVGs1Lcuo5hn8lmYk
3mxbnDntHNZM7S14YBVziVScrrdlo9aa9sBzcRgl0hbvXzrQcMo0ZX0o6REhNbzo
tRvVJ69QV4azF2Mo0N6SATccxCZuPuLYgJrlm4nsZbWMNgptcLW0NJKToGVkVcSQ
nay2PE6mXpYD6fS6FHzLGcjYq8agK+yWmu49dra7kHISf6LGxRLtNl/+uXUP91vj
r61gbHhro5iBenIUsKOBmwNMqOZBhXlG0/cDdC8=
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:42 2024 by rpki-client on console-ams.rpki-client.org