Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/b400e87e-018c-3e74-a61d-6416c06baf20.roa
File:                     b400e87e-018c-3e74-a61d-6416c06baf20.roa (raw, json)
Hash identifier:          y7556Qljk3yOJfqW5IpGcfbmvi0Quq/WR8V1N0UU/+Q=
Subject key identifier:   50:6E:06:2F:DF:F4:A2:01:B0:E3:80:F7:77:1D:33:8C:7D:9A:39:69
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F43285845AB234D68602F79CF9F4AC000
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/b400e87e-018c-3e74-a61d-6416c06baf20.roa
Signing time:             Fri 26 Apr 2024 01:00:25 +0000
ROA not before:           Fri 26 Apr 2024 01:00:25 +0000
ROA not after:            Thu 25 Jul 2024 01:00:25 +0000
asID:                     395963
IP address blocks:        205.213.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:23:4d:68:60:2f:79:cf:9f:4a:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Apr 26 01:00:25 2024 GMT
            Not After : Jul 25 01:00:25 2024 GMT
        Subject: CN=b8831b22-065a-44b1-8703-b9b913da985e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ef:00:15:ce:1a:bf:4a:0b:f7:0a:4f:41:f8:
                    ad:55:7d:32:70:5f:6b:e8:61:1d:81:81:a6:1c:24:
                    44:18:c1:27:5a:1a:46:14:58:dc:0e:f0:43:10:be:
                    41:d8:c5:96:0b:f2:c5:ba:5a:99:42:74:92:b4:d2:
                    dc:3f:2b:1b:d1:16:1a:0f:17:ad:30:f7:6f:34:f6:
                    85:dd:f3:81:2f:bc:73:a1:d2:24:c8:51:0d:76:59:
                    b1:29:4c:f4:b5:9e:6f:52:df:67:6a:61:d8:d9:76:
                    65:be:76:38:b9:7f:3c:9d:7e:52:f9:dc:fb:b2:d7:
                    2c:bc:56:10:4c:25:21:1b:b4:ab:ac:b9:87:01:d2:
                    b5:fa:e7:a9:48:78:04:78:85:14:ef:79:a3:c1:85:
                    44:c0:d1:ff:f8:a7:ef:d0:da:2d:03:11:b5:1f:a6:
                    1a:c6:de:95:9b:e3:40:94:be:97:d1:27:ec:48:db:
                    95:df:a3:a0:99:a4:38:f2:de:88:0c:27:ab:e3:d4:
                    60:44:d5:d7:7e:ad:fe:fc:ad:99:3c:e8:24:f7:0e:
                    e3:4e:f0:a4:24:77:5c:7e:82:23:2f:4d:26:27:ed:
                    6e:68:d0:e3:b0:f4:c9:b7:f8:b0:c0:6b:83:a8:58:
                    a4:d9:4c:63:33:30:7a:ba:38:f1:41:e8:1e:bf:27:
                    b9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6E:06:2F:DF:F4:A2:01:B0:E3:80:F7:77:1D:33:8C:7D:9A:39:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/b400e87e-018c-3e74-a61d-6416c06baf20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.213.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:3e:cf:91:74:bb:55:81:07:d9:d5:67:92:87:22:a2:66:60:
         38:58:4c:b0:4c:65:8b:02:ba:7b:f7:16:3b:32:7f:a5:4e:90:
         3a:5d:de:f1:48:ed:49:53:63:70:ea:aa:88:25:23:45:01:80:
         e8:09:51:af:af:81:5a:5e:63:b3:dc:5c:57:48:3b:da:c9:a5:
         7c:39:94:97:fb:19:1e:aa:cb:48:21:31:49:e4:82:e3:1c:9f:
         96:b9:4a:90:9d:1b:c9:e8:a4:28:f6:0d:cb:fc:77:4f:79:7c:
         ee:70:7d:ce:65:65:5c:50:34:0c:a1:54:1b:4d:94:f0:af:4e:
         ad:6d:96:dc:31:03:83:e4:d8:83:81:20:68:98:51:87:4a:4a:
         d5:63:c4:07:b1:c1:d2:4a:41:38:da:c2:71:07:8f:d2:41:44:
         13:bb:4e:cf:81:59:12:19:2d:a7:dd:65:67:fc:68:da:73:fc:
         c4:dc:68:43:5a:cf:9b:e9:0d:cc:b2:a1:08:6e:41:1d:3f:a0:
         fe:d8:09:37:ca:cd:0a:a2:cb:85:72:97:87:ec:dd:98:93:02:
         b8:80:91:6d:97:4c:c4:37:76:53:f5:11:c0:97:20:09:e9:8a:
         bc:09:ca:8b:11:c3:b5:1a:9d:f6:84:64:4e:45:24:96:d2:34:
         23:88:99:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWrI01oYC95z59KwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4
NDc5MB4XDTI0MDQyNjAxMDAyNVoXDTI0MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk
Yjg4MzFiMjItMDY1YS00NGIxLTg3MDMtYjliOTEzZGE5ODVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7O8AFc4av0oL9wpPQfitVX0ycF9r6GEdgYGm
HCREGMEnWhpGFFjcDvBDEL5B2MWWC/LFulqZQnSStNLcPysb0RYaDxetMPdvNPaF
3fOBL7xzodIkyFENdlmxKUz0tZ5vUt9namHY2XZlvnY4uX88nX5S+dz7stcsvFYQ
TCUhG7SrrLmHAdK1+uepSHgEeIUU73mjwYVEwNH/+Kfv0NotAxG1H6Yaxt6Vm+NA
lL6X0SfsSNuV36OgmaQ48t6IDCer49RgRNXXfq3+/K2ZPOgk9w7jTvCkJHdcfoIj
L00mJ+1uaNDjsPTJt/iwwGuDqFik2UxjMzB6ujjxQegevye5jwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFBuBi/f9KIBsOOA93cdM4x9mjlpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz
Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvYjQwMGU4N2UtMDE4Yy0z
ZTc0LWE2MWQtNjQxNmMwNmJhZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5
ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0
ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz
Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzdUDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH4+z5F0u1WBB9nVZ5KHIqJmYDhYTLBMZYsCunv3Fjsyf6VOkDpd3vFI
7UlTY3DqqoglI0UBgOgJUa+vgVpeY7PcXFdIO9rJpXw5lJf7GR6qy0ghMUnkguMc
n5a5SpCdG8nopCj2Dcv8d095fO5wfc5lZVxQNAyhVBtNlPCvTq1tltwxA4Pk2IOB
IGiYUYdKStVjxAexwdJKQTjawnEHj9JBRBO7Ts+BWRIZLafdZWf8aNpz/MTcaENa
z5vpDcyyoQhuQR0/oP7YCTfKzQqiy4Vyl4fs3ZiTAriAkW2XTMQ3dlP1EcCXIAnp
irwJyosRw7UanfaEZE5FJJbSNCOImS8=
-----END CERTIFICATE-----
Generated at Sun May 19 03:38:56 2024 by rpki-client on console-ams.rpki-client.org