Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f5f04e48-9ba8-31b7-b9b6-3da43a11767d.roa
File:                     f5f04e48-9ba8-31b7-b9b6-3da43a11767d.roa (raw, json)
Hash identifier:          24xgkM2nNBTZL7NiIi0dtGhvgHVzxjqjInaPs/VrKwQ=
Subject key identifier:   EC:27:43:B4:15:DC:85:FB:FA:13:53:4D:70:AC:F0:8E:D1:84:D0:FD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B2FC9325C5255B97C61F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f5f04e48-9ba8-31b7-b9b6-3da43a11767d.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        64.229.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b2:fc:93:25:c5:25:5b:97:c6:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=1603a9a4-f1fa-45af-9835-654561f30c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:90:5a:9e:13:26:dd:c3:a3:9e:b6:5c:1b:5b:
                    4a:59:50:3c:cc:90:41:8a:b4:ff:6f:8b:10:26:d3:
                    b6:7d:63:7a:bb:bb:d8:14:f5:28:a1:0a:dc:66:59:
                    07:3c:dd:b3:0a:36:68:63:ce:b6:f5:88:0b:5c:ff:
                    3c:2b:31:b8:17:8f:e5:ec:22:00:5f:47:f8:80:dc:
                    56:97:0e:72:4a:47:0d:2e:31:b7:57:16:7a:bb:e6:
                    84:29:72:c7:9f:04:fb:3e:30:67:93:31:9f:0e:2b:
                    3c:b3:74:9c:aa:85:6f:eb:51:50:e1:bc:5f:b4:0d:
                    b1:87:40:05:8a:c8:6d:36:1e:5c:e2:51:f0:20:5a:
                    2b:dc:3d:a4:0d:f0:ca:4e:05:a1:78:31:ac:29:86:
                    b3:6a:73:4f:ca:73:ad:47:f3:ca:8f:37:69:b8:dc:
                    66:60:04:8f:dd:5f:2d:ee:d3:cf:5a:63:f8:6a:f2:
                    ac:d1:bd:42:e4:b4:a7:37:1e:ae:54:64:5b:41:cf:
                    de:09:bb:89:fd:49:75:ac:94:82:24:c0:75:0f:aa:
                    09:21:10:30:26:32:38:ac:c3:6e:5e:dd:3f:04:37:
                    48:44:2d:98:b2:9d:5e:5c:d0:f8:52:88:ab:e9:12:
                    a9:03:ff:16:ee:cb:2f:ce:b5:e3:6f:b3:17:f8:df:
                    43:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:27:43:B4:15:DC:85:FB:FA:13:53:4D:70:AC:F0:8E:D1:84:D0:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f5f04e48-9ba8-31b7-b9b6-3da43a11767d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.229.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:2e:4a:5b:1e:a7:6a:3c:14:4e:7b:27:8e:dc:84:d4:13:06:
         f1:47:a4:c4:ab:13:e6:f7:b6:4f:af:ed:ec:c9:7c:dc:85:67:
         2e:ae:61:43:e9:18:e0:40:a2:d7:48:c6:e5:50:2c:12:fe:12:
         f9:d4:83:68:e6:ba:8a:f4:a0:d2:ad:80:41:f7:e8:14:e4:6d:
         49:10:81:6a:88:7c:a3:4b:c0:e5:6d:f0:73:78:ea:95:e7:c1:
         4c:c4:d0:3d:9b:c9:c9:be:7f:b8:d1:99:ce:93:8a:de:b7:f5:
         a9:d6:b8:eb:3d:f3:73:8b:e0:48:0d:5d:06:ce:6a:f4:c6:a1:
         58:a2:d2:cf:25:f1:d9:56:5e:af:7e:cc:5d:e4:54:7a:70:3f:
         b6:41:6a:ad:3e:71:88:80:b5:88:63:94:8e:29:72:5e:ec:7a:
         6d:fd:39:41:80:fb:9d:5c:de:15:17:34:41:08:5f:d8:9e:d1:
         44:ba:71:e4:d8:d1:26:a5:18:5e:5b:1b:c5:3b:30:00:33:38:
         5d:e0:dd:05:6e:a2:4c:3d:b3:48:e1:5c:5a:d2:d7:a4:52:52:
         74:cf:0a:11:40:fd:bf:6c:63:96:88:f9:bd:74:4d:98:09:10:
         61:59:63:36:65:a6:ac:c9:48:e0:32:81:7a:08:70:20:28:7f:
         ca:ab:d2:fb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVWsvyTJcUlW5fGHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
MTYwM2E5YTQtZjFmYS00NWFmLTk4MzUtNjU0NTYxZjMwYzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pBanhMm3cOjnrZcG1tKWVA8zJBBirT/b4sQ
JtO2fWN6u7vYFPUooQrcZlkHPN2zCjZoY8629YgLXP88KzG4F4/l7CIAX0f4gNxW
lw5ySkcNLjG3VxZ6u+aEKXLHnwT7PjBnkzGfDis8s3ScqoVv61FQ4bxftA2xh0AF
ishtNh5c4lHwIFor3D2kDfDKTgWheDGsKYazanNPynOtR/PKjzdpuNxmYASP3V8t
7tPPWmP4avKs0b1C5LSnNx6uVGRbQc/eCbuJ/Ul1rJSCJMB1D6oJIRAwJjI4rMNu
Xt0/BDdIRC2Ysp1eXND4Uoir6RKpA/8W7ssvzrXjb7MX+N9DiQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOwnQ7QV3IX7+hNTTXCs8I7RhND9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZjVmMDRlNDgtOWJhOC0z
MWI3LWI5YjYtM2RhNDNhMTE3NjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQOUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmC5KWx6najwUTnsnjtyE1BMG8UekxKsT5ve2T6/t7Ml83IVnLq5hQ+kY
4ECi10jG5VAsEv4S+dSDaOa6ivSg0q2AQffoFORtSRCBaoh8o0vA5W3wc3jqlefB
TMTQPZvJyb5/uNGZzpOK3rf1qda46z3zc4vgSA1dBs5q9MahWKLSzyXx2VZer37M
XeRUenA/tkFqrT5xiIC1iGOUjilyXux6bf05QYD7nVzeFRc0QQhf2J7RRLpx5NjR
JqUYXlsbxTswADM4XeDdBW6iTD2zSOFcWtLXpFJSdM8KEUD9v2xjloj5vXRNmAkQ
YVljNmWmrMlI4DKBeghwICh/yqvS+w==
-----END CERTIFICATE-----
Generated at Fri May 17 01:48:01 2024 by rpki-client on console-fra.rpki-client.org