Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/309d58ec-9dfe-3f07-b602-f7d2c3980950.roa
File:                     309d58ec-9dfe-3f07-b602-f7d2c3980950.roa (raw, json)
Hash identifier:          0u3+llziHosxSjCzLwFjSH+oX52/w16dnISXreiF/00=
Subject key identifier:   35:00:C4:9F:79:A5:EB:BB:1F:4B:ED:80:75:54:FA:D5:C2:BF:3E:F8
Certificate issuer:       /CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e
Certificate serial:       010D0C9F432858456F1DC1DF0F5F71248F9D2900
Authority key identifier: 6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/309d58ec-9dfe-3f07-b602-f7d2c3980950.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     63362
IP address blocks:        205.143.40.0/23 maxlen: 23
                          205.143.40.0/22 maxlen: 22
                          104.254.207.0/24 maxlen: 24
                          104.254.204.0/23 maxlen: 23
                          104.254.206.0/24 maxlen: 24
                          205.143.42.0/24 maxlen: 24
                          205.143.42.0/23 maxlen: 23
                          205.143.43.0/24 maxlen: 24
                          104.254.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:c1:df:0f:5f:71:24:8f:9d:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=bf600e36-08c5-499f-ac3c-1f8aff761e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3d:3e:c2:2f:0d:5b:81:1d:75:b4:71:78:95:
                    ef:26:98:11:31:0f:b8:95:f8:9f:5a:d9:0d:87:0e:
                    81:23:4c:25:ad:f5:bf:23:88:1e:11:0e:8e:ff:64:
                    79:e8:39:76:f6:97:42:47:ae:72:eb:6c:a4:62:d9:
                    b7:67:ad:69:0b:8a:fb:bf:ce:5b:85:da:10:77:d9:
                    ca:01:92:4c:c0:fa:33:62:77:d1:e2:f8:ec:0b:b1:
                    69:77:aa:6e:d5:a3:f8:c9:7e:58:d7:69:fb:c5:99:
                    63:e9:0c:23:f3:04:66:7e:82:dc:5f:e5:2e:03:56:
                    66:6c:0f:c7:69:25:3f:fa:e6:f3:4b:b9:f6:03:5f:
                    a0:4c:f9:43:22:8e:85:de:b1:a1:7c:40:c6:48:57:
                    3b:26:b1:e0:37:90:7b:9e:78:82:e9:34:62:85:22:
                    e1:59:7d:14:e1:a8:95:ef:6f:e8:39:60:8a:dc:6d:
                    b4:03:a5:d3:ac:95:5c:80:ea:dc:26:87:f6:84:36:
                    d1:83:44:bf:75:df:9f:22:56:49:dc:56:d0:9f:ce:
                    ec:71:ce:11:fe:37:c5:c3:4b:f5:0b:0d:12:b7:c7:
                    4b:09:e0:2e:97:98:41:ac:7e:9a:ae:e3:b0:9a:16:
                    71:09:d2:ab:da:88:e4:88:61:79:de:28:a9:1a:f0:
                    15:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:00:C4:9F:79:A5:EB:BB:1F:4B:ED:80:75:54:FA:D5:C2:BF:3E:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/309d58ec-9dfe-3f07-b602-f7d2c3980950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl

            X509v3 Authority Key Identifier:
                keyid:6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.204.0/22
                  205.143.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:5e:e8:7d:22:d2:f9:90:0b:e4:9b:76:aa:e5:bd:18:9d:88:
         92:ca:ae:1f:43:c8:f1:5a:3a:2e:cc:99:ca:10:70:a9:b3:03:
         96:9c:64:28:5a:03:b8:ee:f3:d1:3d:f1:c0:f5:11:42:1b:00:
         13:83:6f:12:bd:bb:17:4a:91:77:b9:a9:a3:04:62:a6:da:75:
         44:e2:30:87:b7:d5:b3:b2:72:fe:61:1f:93:ba:08:be:ce:83:
         25:27:ff:58:d8:c1:a6:a9:b1:e8:66:8b:f6:c9:d5:bc:fd:30:
         93:84:88:1c:2a:39:43:15:49:65:e3:53:70:7c:4c:58:ad:cd:
         3c:d2:c0:5f:ae:fb:77:53:23:54:f4:19:91:62:ba:31:38:81:
         fb:8b:fd:f8:b5:3c:9c:95:49:0d:2d:fc:7e:47:cf:a9:b9:c7:
         25:7e:2e:59:e0:77:0f:ae:bc:0f:42:13:48:65:69:b7:49:ea:
         22:a4:a8:1f:c9:f6:91:79:0c:09:fd:fd:26:73:77:7f:ff:78:
         2a:31:28:19:ec:e2:24:95:bc:d0:c4:b3:61:2b:7c:ae:8a:4d:
         4d:08:ed:ea:df:52:36:62:01:c5:de:83:38:b0:90:f1:80:05:
         a6:69:a1:e9:4d:52:40:24:04:b9:68:21:23:49:9b:6b:36:cd:
         f5:d2:ed:aa
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEVvHcHfD19xJI+dKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY5Njk2ZjYtN2NhNS00ZWI3LWJkMjEtZWFlZTNiMWUz
ZjhlMB4XDTI0MDQwNDEzMDAzNloXDTI0MDcwMzEzMDAzNlowLzEtMCsGA1UEAxMk
YmY2MDBlMzYtMDhjNS00OTlmLWFjM2MtMWY4YWZmNzYxZTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz0+wi8NW4EddbRxeJXvJpgRMQ+4lfifWtkN
hw6BI0wlrfW/I4geEQ6O/2R56Dl29pdCR65y62ykYtm3Z61pC4r7v85bhdoQd9nK
AZJMwPozYnfR4vjsC7Fpd6pu1aP4yX5Y12n7xZlj6Qwj8wRmfoLcX+UuA1ZmbA/H
aSU/+ubzS7n2A1+gTPlDIo6F3rGhfEDGSFc7JrHgN5B7nniC6TRihSLhWX0U4aiV
72/oOWCK3G20A6XTrJVcgOrcJof2hDbRg0S/dd+fIlZJ3FbQn87scc4R/jfFw0v1
Cw0St8dLCeAul5hBrH6aruOwmhZxCdKr2ojkiGF53iipGvAVJwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFDUAxJ95peu7H0vtgHVU+tXCvz74MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjk2
OTZmNi03Y2E1LTRlYjctYmQyMS1lYWVlM2IxZTNmOGUvMzA5ZDU4ZWMtOWRmZS0z
ZjA3LWI2MDItZjdkMmMzOTgwOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY5Njk2ZjYtN2NhNS00ZWI3LWJk
MjEtZWFlZTNiMWUzZjhlL2RmOTY5NmY2LTdjYTUtNGViNy1iZDIxLWVhZWUzYjFl
M2Y4ZS5jcmwwHwYDVR0jBBgwFoAUai8hIT8V+XfCa+8aWB9BHFhrfqMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjk2OTZmNi03Y2E1LTRlYjctYmQyMS1lYWVl
M2IxZTNmOGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCaP7MAwQC
zY8oMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAF1e6H0i0vmQC+SbdqrlvRidiJLKrh9DyPFaOi7MmcoQcKmz
A5acZChaA7ju89E98cD1EUIbABODbxK9uxdKkXe5qaMEYqbadUTiMIe31bOycv5h
H5O6CL7OgyUn/1jYwaapsehmi/bJ1bz9MJOEiBwqOUMVSWXjU3B8TFitzTzSwF+u
+3dTI1T0GZFiujE4gfuL/fi1PJyVSQ0t/H5Hz6m5xyV+Llngdw+uvA9CE0hlabdJ
6iKkqB/J9pF5DAn9/SZzd3//eCoxKBns4iSVvNDEs2ErfK6KTU0I7erfUjZiAcXe
gziwkPGABaZpoelNUkAkBLloISNJm2s2zfXS7ao=
-----END CERTIFICATE-----
Generated at Sun May 26 21:26:43 2024 by rpki-client on console-fra.rpki-client.org