Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/17257513-0a31-325d-b71f-a854a1b5e0a5.roa
File:                     17257513-0a31-325d-b71f-a854a1b5e0a5.roa (raw, json)
Hash identifier:          EjzGw8zrfBPrjfTghq/W3bvRv7DtICITg3o6Wvz9dY0=
Subject key identifier:   E9:53:79:C2:36:B3:34:0F:3B:7B:58:1D:77:6B:AA:00:A9:BA:52:B0
Certificate issuer:       /CN=2c480684-ece9-4dd6-8ec6-0437d826102d
Certificate serial:       010D0C9F432858463DB451631F12AD1669319800
Authority key identifier: DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/17257513-0a31-325d-b71f-a854a1b5e0a5.roa
Signing time:             Mon 17 Jun 2024 13:00:33 +0000
ROA not before:           Mon 17 Jun 2024 13:00:33 +0000
ROA not after:            Sun 15 Sep 2024 13:00:33 +0000
asID:                     46616
IP address blocks:        208.114.54.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:3d:b4:51:63:1f:12:ad:16:69:31:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c480684-ece9-4dd6-8ec6-0437d826102d
        Validity
            Not Before: Jun 17 13:00:33 2024 GMT
            Not After : Sep 15 13:00:33 2024 GMT
        Subject: CN=84fd46e6-91ed-40b7-b874-cc2bc18fa475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5f:62:08:e5:34:8e:be:c4:b5:c4:90:d2:53:
                    15:9f:08:a5:4a:dd:b9:8b:64:e5:11:bd:88:7b:4b:
                    c0:de:e3:fc:16:2e:74:4b:a7:2b:be:e2:8f:16:3d:
                    47:ea:a9:69:5e:cb:5a:a8:a7:39:cc:af:ce:c4:12:
                    c6:3b:0c:5d:9b:de:de:0a:d1:f7:db:79:8a:e6:2c:
                    3c:a3:66:0f:a7:d5:8b:16:89:d0:11:d5:b9:5c:2d:
                    53:19:8d:ae:2e:d4:3d:cf:f5:4b:b0:13:50:c5:d7:
                    47:02:c7:b3:a3:2f:13:eb:18:c7:45:8f:58:66:75:
                    94:03:9c:a5:55:28:1c:7d:21:ac:2f:82:97:78:ba:
                    fc:d6:e3:77:60:21:db:6b:4f:3a:97:0c:53:b0:ee:
                    62:45:2c:78:f7:ef:41:10:5b:f6:09:8a:3e:fa:d8:
                    e6:15:b6:62:f0:a1:55:d8:ef:6d:97:d7:79:b5:3a:
                    ed:96:57:b1:14:ee:97:d6:1b:1e:53:fd:dd:77:d1:
                    a7:b1:f3:ec:d3:45:df:c1:03:0d:03:bd:9d:54:3d:
                    6c:01:ca:47:e1:35:14:70:d4:9c:49:ea:4a:6d:e0:
                    77:97:f8:93:54:b2:34:e0:4f:3c:62:c6:cd:d3:56:
                    1e:1e:9e:54:56:6c:c5:86:32:d8:80:f6:06:1c:28:
                    67:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:53:79:C2:36:B3:34:0F:3B:7B:58:1D:77:6B:AA:00:A9:BA:52:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/17257513-0a31-325d-b71f-a854a1b5e0a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl

            X509v3 Authority Key Identifier:
                keyid:DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.114.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ab:aa:c2:55:b1:04:7f:6a:38:d7:61:53:9f:bc:bc:b9:db:
         e7:6f:ec:a4:64:76:b4:4c:cd:b8:8a:49:0e:34:00:2a:9d:0c:
         3c:87:5b:46:7b:9b:28:13:ff:30:e8:2b:39:2a:23:df:e6:0c:
         d2:8f:53:82:e4:9d:f9:e2:a0:d7:06:f5:44:a8:55:35:37:6a:
         6c:92:ab:1e:01:1d:af:d7:53:7a:3c:06:7d:37:ef:c3:4d:17:
         d3:80:fc:07:59:c3:72:19:d3:ee:0c:87:59:05:ab:d7:aa:a2:
         d8:87:14:89:26:e6:c7:77:e1:40:50:90:a9:ce:e7:14:10:16:
         49:8e:a4:aa:b9:38:a9:80:cd:78:d6:27:e6:4a:b9:18:e7:e8:
         44:1a:c4:51:f9:1b:b0:79:3a:5a:af:a0:8e:54:1f:d2:9e:3c:
         80:3a:45:74:70:9f:d4:b5:70:33:10:3a:09:0b:a1:c0:06:36:
         f9:ef:2e:06:06:50:ed:81:ee:84:45:19:b0:53:ef:c5:43:48:
         e8:7c:3f:db:53:1f:84:b5:c2:09:b7:47:f1:11:56:e7:8e:02:
         a0:43:ae:12:5a:73:6d:d0:54:f9:df:9e:d3:c5:13:da:ca:8c:
         d3:b2:3d:1a:9d:f7:c1:2a:14:00:bf:fd:d0:99:fa:be:15:9c:
         bf:63:46:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEY9tFFjHxKtFmkxmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmM0ODA2ODQtZWNlOS00ZGQ2LThlYzYtMDQzN2Q4MjYx
MDJkMB4XDTI0MDYxNzEzMDAzM1oXDTI0MDkxNTEzMDAzM1owLzEtMCsGA1UEAxMk
ODRmZDQ2ZTYtOTFlZC00MGI3LWI4NzQtY2MyYmMxOGZhNDc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV9iCOU0jr7EtcSQ0lMVnwilSt25i2TlEb2I
e0vA3uP8Fi50S6crvuKPFj1H6qlpXstaqKc5zK/OxBLGOwxdm97eCtH323mK5iw8
o2YPp9WLFonQEdW5XC1TGY2uLtQ9z/VLsBNQxddHAsezoy8T6xjHRY9YZnWUA5yl
VSgcfSGsL4KXeLr81uN3YCHba086lwxTsO5iRSx49+9BEFv2CYo++tjmFbZi8KFV
2O9tl9d5tTrtllexFO6X1hseU/3dd9GnsfPs00XfwQMNA72dVD1sAcpH4TUUcNSc
SepKbeB3l/iTVLI04E88YsbN01YeHp5UVmzFhjLYgPYGHChnQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOlTecI2szQPO3tYHXdrqgCpulKwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYzQ4
MDY4NC1lY2U5LTRkZDYtOGVjNi0wNDM3ZDgyNjEwMmQvMTcyNTc1MTMtMGEzMS0z
MjVkLWI3MWYtYTg1NGExYjVlMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmM0ODA2ODQtZWNlOS00ZGQ2LThl
YzYtMDQzN2Q4MjYxMDJkLzJjNDgwNjg0LWVjZTktNGRkNi04ZWM2LTA0MzdkODI2
MTAyZC5jcmwwHwYDVR0jBBgwFoAU228xi315cPYMwgcg0hNv9Pw2VXMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yYzQ4MDY4NC1lY2U5LTRkZDYtOGVjNi0wNDM3
ZDgyNjEwMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0HI2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABmrqsJVsQR/ajjXYVOfvLy52+dv7KRkdrRMzbiKSQ40ACqdDDyHW0Z7
mygT/zDoKzkqI9/mDNKPU4LknfnioNcG9USoVTU3amySqx4BHa/XU3o8Bn0378NN
F9OA/AdZw3IZ0+4Mh1kFq9eqotiHFIkm5sd34UBQkKnO5xQQFkmOpKq5OKmAzXjW
J+ZKuRjn6EQaxFH5G7B5OlqvoI5UH9KePIA6RXRwn9S1cDMQOgkLocAGNvnvLgYG
UO2B7oRFGbBT78VDSOh8P9tTH4S1wgm3R/ERVueOAqBDrhJac23QVPnfntPFE9rK
jNOyPRqd98EqFAC//dCZ+r4VnL9jRr8=
-----END CERTIFICATE-----
Generated at Fri Jun 28 17:39:13 2024 by rpki-client on console-ams.rpki-client.org