Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0aaff42c-f77e-3dfb-8b4e-f66e1126b7c5.roa
File:                     0aaff42c-f77e-3dfb-8b4e-f66e1126b7c5.roa (raw, json)
Hash identifier:          OCWvwEyamsHISfbixbnImVJAii1x9KRZJmSuymmqcKM=
Subject key identifier:   DA:E4:1D:BE:F4:F5:F3:EE:CF:7B:2D:33:2C:8F:2A:4A:60:9A:63:79
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B2FF92C21F7405E1184800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0aaff42c-f77e-3dfb-8b4e-f66e1126b7c5.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        64.231.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b2:ff:92:c2:1f:74:05:e1:18:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=dcd78f93-3bdc-4f3c-8f1a-ec9ea296199a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b3:c2:5f:55:89:cf:08:9d:84:1a:62:36:e2:
                    1e:c2:88:d9:a5:ae:36:0b:2e:e6:84:a9:54:10:44:
                    24:e9:46:2a:3a:12:46:ce:53:e9:3d:94:6e:fb:21:
                    5a:97:06:8e:d8:74:3c:b6:28:c1:13:57:38:26:9e:
                    d2:4b:41:a8:7e:45:b5:d7:a7:50:e2:17:55:c5:a4:
                    2d:78:87:07:7c:cb:2e:10:13:88:92:c0:d6:33:48:
                    e9:67:15:87:27:82:05:ee:47:50:c8:9d:80:ed:e3:
                    c7:8e:21:4d:b2:ef:e8:ec:a0:0c:8a:77:24:4c:5e:
                    77:8e:b3:cd:26:5f:09:64:5d:e1:3e:91:12:ec:9d:
                    07:dd:e3:11:89:af:b0:13:08:cf:2e:ab:65:3c:b7:
                    90:03:38:f7:17:b8:70:73:71:af:11:aa:e6:d1:f5:
                    c1:33:5f:38:39:92:e2:43:31:02:43:f8:a8:ed:5a:
                    79:92:1a:bf:51:2c:a4:53:a0:b2:54:32:5c:2b:e5:
                    9c:12:51:c4:06:5a:b5:db:af:20:bb:02:25:57:ab:
                    63:6f:d4:0e:9e:9f:78:80:1e:94:6b:a8:a0:50:f5:
                    2e:1a:cc:12:fb:14:50:2a:9f:e4:5b:2d:e8:86:59:
                    79:26:a0:c6:0c:a0:3b:c6:1c:70:d7:6b:97:0f:cf:
                    d9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E4:1D:BE:F4:F5:F3:EE:CF:7B:2D:33:2C:8F:2A:4A:60:9A:63:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0aaff42c-f77e-3dfb-8b4e-f66e1126b7c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.231.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:7d:49:09:c2:60:15:10:2d:ce:f8:c8:52:ef:eb:d4:37:e7:
         85:c6:97:3a:c6:54:2e:fa:c4:fa:29:a0:b4:5e:80:57:ad:04:
         f4:80:15:95:3d:15:cd:25:fd:a8:86:fb:b0:76:26:63:0f:b2:
         43:0c:77:7d:76:b3:25:7f:58:de:01:16:9d:78:fc:37:66:8d:
         40:59:4d:ee:c4:90:6c:eb:8b:44:bb:98:db:6f:ac:b4:f2:56:
         50:ea:59:4b:b7:c5:18:c9:f9:eb:a9:5e:43:92:36:7f:fe:99:
         68:df:cf:16:e9:0e:df:12:90:e2:e6:2c:83:b6:e7:03:e7:0d:
         46:a5:6c:19:cd:13:57:fa:96:86:e8:7a:41:09:34:40:cc:24:
         a6:d2:a7:84:1f:bf:db:e1:a1:58:9f:41:4c:88:f7:2e:3f:fe:
         ec:a6:be:23:f3:57:a3:bd:ef:16:4e:b9:b2:a7:92:cb:33:12:
         42:70:df:c5:78:61:72:b2:4b:23:6f:da:6d:40:8e:e6:13:ff:
         8c:f5:4e:fc:6d:74:7c:01:19:f0:a0:9d:06:4d:e0:fd:0e:6d:
         32:86:43:88:52:f7:1e:09:31:68:60:94:a2:49:23:f9:32:44:
         2c:22:8a:ab:d2:b0:db:b6:2c:d6:ad:d3:c5:9f:7f:d2:e7:8e:
         19:e0:44:4a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVWsv+Swh90BeEYSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGNkNzhmOTMtM2JkYy00ZjNjLThmMWEtZWM5ZWEyOTYxOTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLPCX1WJzwidhBpiNuIewojZpa42Cy7mhKlU
EEQk6UYqOhJGzlPpPZRu+yFalwaO2HQ8tijBE1c4Jp7SS0GofkW116dQ4hdVxaQt
eIcHfMsuEBOIksDWM0jpZxWHJ4IF7kdQyJ2A7ePHjiFNsu/o7KAMinckTF53jrPN
Jl8JZF3hPpES7J0H3eMRia+wEwjPLqtlPLeQAzj3F7hwc3GvEarm0fXBM184OZLi
QzECQ/io7Vp5khq/USykU6CyVDJcK+WcElHEBlq1268guwIlV6tjb9QOnp94gB6U
a6igUPUuGswS+xRQKp/kWy3ohll5JqDGDKA7xhxw12uXD8/ZhQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNrkHb709fPuz3stMyyPKkpgmmN5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMGFhZmY0MmMtZjc3ZS0z
ZGZiLThiNGUtZjY2ZTExMjZiN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQOcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeX1JCcJgFRAtzvjIUu/r1DfnhcaXOsZULvrE+imgtF6AV60E9IAVlT0V
zSX9qIb7sHYmYw+yQwx3fXazJX9Y3gEWnXj8N2aNQFlN7sSQbOuLRLuY22+stPJW
UOpZS7fFGMn566leQ5I2f/6ZaN/PFukO3xKQ4uYsg7bnA+cNRqVsGc0TV/qWhuh6
QQk0QMwkptKnhB+/2+GhWJ9BTIj3Lj/+7Ka+I/NXo73vFk65sqeSyzMSQnDfxXhh
crJLI2/abUCO5hP/jPVO/G10fAEZ8KCdBk3g/Q5tMoZDiFL3HgkxaGCUokkj+TJE
LCKKq9Kw27Ys1q3TxZ9/0ueOGeBESg==
-----END CERTIFICATE-----
Generated at Mon May 20 01:40:42 2024 by rpki-client on console-ams.rpki-client.org