Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/e799c845-37a2-3edd-820c-f6bf8253148c.roa
File:                     e799c845-37a2-3edd-820c-f6bf8253148c.roa (raw, json)
Hash identifier:          2+nNhO1fyBePfmQw9g1P8hwXSYhhyjHfDySBCw/0t3k=
Subject key identifier:   FE:D1:B0:A5:45:48:25:76:99:B2:C8:A2:A6:4D:EC:3E:A8:61:5F:99
Certificate issuer:       /CN=046edc58-3188-4be4-bad7-643a593bcf38
Certificate serial:       010D0C9F43285845989C63C97530304242E3A980
Authority key identifier: 31:EF:CB:6B:90:66:B6:32:B4:3B:90:67:CD:AF:1E:20:6E:47:FD:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/e799c845-37a2-3edd-820c-f6bf8253148c.roa
Signing time:             Fri 19 Apr 2024 09:44:03 +0000
ROA not before:           Fri 19 Apr 2024 09:44:03 +0000
ROA not after:            Thu 18 Jul 2024 09:44:03 +0000
asID:                     52053
IP address blocks:        170.39.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/046edc58-3188-4be4-bad7-643a593bcf38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/046edc58-3188-4be4-bad7-643a593bcf38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:9c:63:c9:75:30:30:42:42:e3:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046edc58-3188-4be4-bad7-643a593bcf38
        Validity
            Not Before: Apr 19 09:44:03 2024 GMT
            Not After : Jul 18 09:44:03 2024 GMT
        Subject: CN=277f24b4-7b65-42d9-83a0-13535ae35425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:40:67:24:1d:6a:d2:dc:47:81:ff:c8:74:
                    4d:d2:4c:59:a2:04:37:3d:03:19:91:31:c7:7f:20:
                    85:f2:bf:29:42:1f:55:c2:f2:01:b0:cf:1f:6c:3d:
                    bb:56:d6:92:65:e1:c5:6c:4b:ab:0b:f0:71:bb:3a:
                    f6:28:e7:58:07:8e:dd:aa:6d:6e:96:3c:0d:5e:f8:
                    a3:49:c6:4e:6d:b5:a9:00:da:4f:2a:4d:de:31:b1:
                    2f:41:d6:fa:48:0d:17:c0:0e:3d:1f:c2:aa:8f:73:
                    bc:60:1a:4d:07:cc:9c:67:72:2d:c3:1c:db:23:e7:
                    dd:b0:d6:30:74:01:6b:cb:65:d1:44:97:65:1b:38:
                    55:71:c1:48:e6:5f:06:71:af:6e:05:32:09:89:c9:
                    5d:e0:3b:ea:d4:02:36:6a:8b:7d:c6:5d:bb:91:1c:
                    b1:2d:63:79:89:2f:e1:e3:0e:2a:20:2e:6e:03:23:
                    77:2f:bc:3a:13:63:20:b4:50:37:42:7e:12:ab:fa:
                    21:0f:ba:de:fb:a8:d7:5f:5a:24:92:95:22:29:85:
                    f3:bf:be:ae:69:bf:8b:47:93:4a:35:05:35:09:c4:
                    9e:dd:9b:15:c1:a4:75:b3:f9:a7:f3:b7:8f:38:5e:
                    e1:a6:68:ef:79:a9:74:68:5a:8d:53:fa:02:2f:50:
                    0c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D1:B0:A5:45:48:25:76:99:B2:C8:A2:A6:4D:EC:3E:A8:61:5F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/e799c845-37a2-3edd-820c-f6bf8253148c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/046edc58-3188-4be4-bad7-643a593bcf38.crl

            X509v3 Authority Key Identifier:
                keyid:31:EF:CB:6B:90:66:B6:32:B4:3B:90:67:CD:AF:1E:20:6E:47:FD:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:c0:c9:ec:ca:f1:69:e8:3d:c4:41:49:9f:f8:3e:81:3c:de:
         43:dc:6f:d6:18:b6:48:9e:ff:cc:a7:4b:5d:37:d1:bf:dc:58:
         90:93:14:5c:f3:d2:36:23:fb:e6:e5:c8:0f:a0:b5:93:86:64:
         15:df:20:43:b2:92:99:81:d7:e4:5b:66:ec:52:97:5f:28:2e:
         69:6d:3e:a4:78:4d:d4:dd:a9:37:b7:7d:35:39:71:7a:ff:9c:
         d4:b2:b7:a3:93:10:74:21:d7:74:f8:56:b1:77:28:3d:1e:62:
         e5:92:2b:ad:83:1d:57:c2:e3:55:f3:0d:ef:72:9f:d4:23:38:
         65:5e:61:39:29:95:06:a6:07:ad:c6:90:1a:7c:8d:fb:e5:6e:
         80:cc:94:dd:70:ef:b3:b6:20:1a:39:81:4b:61:2e:fa:ec:71:
         79:f4:11:49:88:84:09:a4:78:a6:88:81:f9:31:82:e7:b6:22:
         4b:a2:67:ee:87:4e:2b:e9:94:5f:01:48:ca:11:14:5d:5f:da:
         2b:38:ff:34:ba:43:3f:95:b7:03:e1:88:34:49:82:a3:ff:89:
         d1:86:7f:14:f8:04:a8:1c:e4:26:ec:f3:77:60:7e:1e:df:b6:
         ef:3b:dc:4a:2c:14:eb:81:39:6a:36:55:cd:d9:13:d4:40:65:
         05:03:5e:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWYnGPJdTAwQkLjqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQ2ZWRjNTgtMzE4OC00YmU0LWJhZDctNjQzYTU5M2Jj
ZjM4MB4XDTI0MDQxOTA5NDQwM1oXDTI0MDcxODA5NDQwM1owLzEtMCsGA1UEAxMk
Mjc3ZjI0YjQtN2I2NS00MmQ5LTgzYTAtMTM1MzVhZTM1NDI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFVAZyQdatLcR4H/yHRN0kxZogQ3PQMZkTHH
fyCF8r8pQh9VwvIBsM8fbD27VtaSZeHFbEurC/Bxuzr2KOdYB47dqm1uljwNXvij
ScZObbWpANpPKk3eMbEvQdb6SA0XwA49H8Kqj3O8YBpNB8ycZ3ItwxzbI+fdsNYw
dAFry2XRRJdlGzhVccFI5l8Gca9uBTIJicld4Dvq1AI2aot9xl27kRyxLWN5iS/h
4w4qIC5uAyN3L7w6E2MgtFA3Qn4Sq/ohD7re+6jXX1okkpUiKYXzv76uab+LR5NK
NQU1CcSe3ZsVwaR1s/mn87ePOF7hpmjveal0aFqNU/oCL1AMJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP7RsKVFSCV2mbLIoqZN7D6oYV+ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNDZl
ZGM1OC0zMTg4LTRiZTQtYmFkNy02NDNhNTkzYmNmMzgvZTc5OWM4NDUtMzdhMi0z
ZWRkLTgyMGMtZjZiZjgyNTMxNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDQ2ZWRjNTgtMzE4OC00YmU0LWJh
ZDctNjQzYTU5M2JjZjM4LzA0NmVkYzU4LTMxODgtNGJlNC1iYWQ3LTY0M2E1OTNi
Y2YzOC5jcmwwHwYDVR0jBBgwFoAUMe/La5BmtjK0O5Bnza8eIG5H/eQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNDZlZGM1OC0zMTg4LTRiZTQtYmFkNy02NDNh
NTkzYmNmMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqifZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKvAyezK8WnoPcRBSZ/4PoE83kPcb9YYtkie/8ynS1030b/cWJCTFFzz
0jYj++blyA+gtZOGZBXfIEOykpmB1+RbZuxSl18oLmltPqR4TdTdqTe3fTU5cXr/
nNSyt6OTEHQh13T4VrF3KD0eYuWSK62DHVfC41XzDe9yn9QjOGVeYTkplQamB63G
kBp8jfvlboDMlN1w77O2IBo5gUthLvrscXn0EUmIhAmkeKaIgfkxgue2IkuiZ+6H
TivplF8BSMoRFF1f2is4/zS6Qz+VtwPhiDRJgqP/idGGfxT4BKgc5Cbs83dgfh7f
tu873EosFOuBOWo2Vc3ZE9RAZQUDXsw=
-----END CERTIFICATE-----
Generated at Sun May 26 08:14:17 2024 by rpki-client on console-ams.rpki-client.org