Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/9be6ce7a-8d16-3b7c-b11a-f3b0ba3d41c1.roa
File:                     9be6ce7a-8d16-3b7c-b11a-f3b0ba3d41c1.roa (raw, json)
Hash identifier:          OpYmwJmkVCB4mODAghQDhgWzdYc4THOZWuOQO65qHfg=
Subject key identifier:   37:A4:B7:3C:93:99:F5:71:71:82:34:97:BF:8B:9D:6F:9B:0B:29:F4
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F43285845936893E47383F1619A060100
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/9be6ce7a-8d16-3b7c-b11a-f3b0ba3d41c1.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     398493
IP address blocks:        104.250.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:93:e4:73:83:f1:61:9a:06:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=543f37c2-ca52-4ea0-834c-7b412c767da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:16:63:71:2e:d2:b9:57:13:e3:6c:6e:9c:9b:
                    90:6d:1a:bc:f6:7d:db:13:97:a8:29:89:c5:77:2e:
                    c8:03:fd:f8:c8:e1:27:12:56:d3:a2:c7:43:86:cc:
                    6d:8d:cf:4f:45:2a:9f:4c:7e:fd:3f:16:c9:d6:db:
                    be:94:19:a5:3a:b7:f6:39:18:a6:b1:f7:f4:3e:bb:
                    39:37:20:ac:c5:8c:1a:66:93:2c:76:ae:c6:ca:20:
                    33:8e:19:20:2b:19:db:a1:f7:3a:85:14:e2:7f:2f:
                    d6:47:7a:7e:af:e3:30:f2:70:65:0f:7b:43:20:51:
                    d0:44:14:10:fc:49:63:ad:62:6c:d4:17:f1:8d:90:
                    8e:e9:0e:19:c0:fb:a4:99:11:2c:08:fa:fc:49:bf:
                    89:11:36:4f:d8:c1:14:10:32:3e:ce:f4:9f:33:4b:
                    90:d0:57:ef:d0:49:f6:00:dd:c7:52:ce:84:d8:50:
                    ab:8e:fb:d6:00:2f:86:05:1b:74:56:90:a9:a6:7b:
                    76:a2:e9:b5:00:85:4c:42:13:49:8c:a6:d7:e5:8d:
                    72:2a:46:b7:48:07:56:74:54:c7:4a:2d:46:7c:10:
                    fb:8c:11:8d:d7:31:c3:be:97:db:42:18:cc:e8:23:
                    74:c8:d1:0c:54:3e:fc:1b:e8:73:f6:d4:44:ab:3d:
                    cc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A4:B7:3C:93:99:F5:71:71:82:34:97:BF:8B:9D:6F:9B:0B:29:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/9be6ce7a-8d16-3b7c-b11a-f3b0ba3d41c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:1d:7b:91:59:c3:f8:48:bb:ac:d4:fb:69:6f:5f:a6:5a:3c:
         3d:4f:5e:8d:e9:f1:3c:7a:1a:42:10:b5:34:e1:67:77:57:3c:
         c4:58:9c:b9:22:c7:90:09:d2:aa:19:8a:8e:9c:04:60:e7:a2:
         fc:90:ae:e9:7a:32:f8:10:5b:97:69:69:5b:9d:3e:b9:73:41:
         99:55:4c:bd:55:df:de:7f:df:8f:64:b9:46:48:58:b9:9c:0f:
         97:b0:5e:e2:9f:c9:71:d2:22:7f:5e:a8:4c:6f:7e:37:41:3d:
         29:21:da:d7:ba:6f:6a:1d:64:dc:25:81:77:3e:d6:5e:39:1e:
         42:4d:7a:d0:7d:69:90:9f:14:74:12:be:59:97:fe:1f:64:e9:
         9d:b0:da:23:88:4b:d6:09:e2:44:f4:08:b5:6e:fd:60:21:b4:
         76:d8:50:2c:67:c0:1c:dd:ba:5c:ca:ca:a4:e7:44:af:85:74:
         da:c7:1a:a5:43:1e:30:a7:96:d7:18:65:02:cb:b8:df:2a:90:
         3c:53:ea:7f:4c:f2:7b:f0:36:e7:e5:3f:06:bf:f2:43:e1:e6:
         f0:d5:07:0a:e0:12:55:7c:02:b0:61:b1:12:3c:b4:bb:ca:6a:
         02:fe:4a:8b:0d:e9:8a:fd:f0:19:b1:92:94:26:b8:e7:a4:2b:
         96:9c:66:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaJPkc4PxYZoGAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGVkZWM1NzYtODdkMC00ZWM2LTllMTMtMzk0MjMwOTk2
ZTUzMB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk
NTQzZjM3YzItY2E1Mi00ZWEwLTgzNGMtN2I0MTJjNzY3ZGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxZjcS7SuVcT42xunJuQbRq89n3bE5eoKYnF
dy7IA/34yOEnElbTosdDhsxtjc9PRSqfTH79PxbJ1tu+lBmlOrf2ORimsff0Prs5
NyCsxYwaZpMsdq7GyiAzjhkgKxnbofc6hRTify/WR3p+r+Mw8nBlD3tDIFHQRBQQ
/EljrWJs1BfxjZCO6Q4ZwPukmREsCPr8Sb+JETZP2MEUEDI+zvSfM0uQ0Ffv0En2
AN3HUs6E2FCrjvvWAC+GBRt0VpCppnt2oum1AIVMQhNJjKbX5Y1yKka3SAdWdFTH
Si1GfBD7jBGN1zHDvpfbQhjM6CN0yNEMVD78G+hz9tREqz3MQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDektzyTmfVxcYI0l7+LnW+bCyn0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZWRl
YzU3Ni04N2QwLTRlYzYtOWUxMy0zOTQyMzA5OTZlNTMvOWJlNmNlN2EtOGQxNi0z
YjdjLWIxMWEtZjNiMGJhM2Q0MWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGVkZWM1NzYtODdkMC00ZWM2LTll
MTMtMzk0MjMwOTk2ZTUzLzBlZGVjNTc2LTg3ZDAtNGVjNi05ZTEzLTM5NDIzMDk5
NmU1My5jcmwwHwYDVR0jBBgwFoAUVVR18A9v9kbDTjKoTV/FyuaYCIcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZWRlYzU3Ni04N2QwLTRlYzYtOWUxMy0zOTQy
MzA5OTZlNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPrsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFEde5FZw/hIu6zU+2lvX6ZaPD1PXo3p8Tx6GkIQtTThZ3dXPMRYnLki
x5AJ0qoZio6cBGDnovyQrul6MvgQW5dpaVudPrlzQZlVTL1V395/349kuUZIWLmc
D5ewXuKfyXHSIn9eqExvfjdBPSkh2te6b2odZNwlgXc+1l45HkJNetB9aZCfFHQS
vlmX/h9k6Z2w2iOIS9YJ4kT0CLVu/WAhtHbYUCxnwBzdulzKyqTnRK+FdNrHGqVD
HjCnltcYZQLLuN8qkDxT6n9M8nvwNuflPwa/8kPh5vDVBwrgElV8ArBhsRI8tLvK
agL+SosN6Yr98BmxkpQmuOekK5acZhc=
-----END CERTIFICATE-----
Generated at Mon May 27 08:10:07 2024 by rpki-client on console-ams.rpki-client.org