Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/f15006e2-b451-3ec6-8046-7a16333e00fc.roa
File:                     f15006e2-b451-3ec6-8046-7a16333e00fc.roa (raw, json)
Hash identifier:          1BB4E+43t3FOdCbW05bU9koBWCQBRzCJXbnpCFJ/K0A=
Subject key identifier:   2B:FE:B9:A7:79:8B:EB:E9:D1:F2:44:18:EC:A3:31:19:05:39:3D:12
Certificate issuer:       /CN=bb6338e8-3b98-45c0-936a-f7532d14c16b
Certificate serial:       010D0C9F432858455B92EEF65ABB523B737A1600
Authority key identifier: 34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/f15006e2-b451-3ec6-8046-7a16333e00fc.roa
Signing time:             Thu 28 Mar 2024 13:00:36 +0000
ROA not before:           Thu 28 Mar 2024 13:00:36 +0000
ROA not after:            Wed 26 Jun 2024 13:00:36 +0000
asID:                     18486
IP address blocks:        74.220.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:92:ee:f6:5a:bb:52:3b:73:7a:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb6338e8-3b98-45c0-936a-f7532d14c16b
        Validity
            Not Before: Mar 28 13:00:36 2024 GMT
            Not After : Jun 26 13:00:36 2024 GMT
        Subject: CN=c4d2e3bc-95dd-47f4-a0c4-3466e8d8900b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5b:4c:86:1c:e1:29:d0:d1:1c:b8:a8:47:18:
                    89:b9:63:d9:e2:40:04:70:3c:cf:2e:05:b6:9d:96:
                    97:01:a6:77:42:d6:b3:78:32:ec:af:64:d3:fd:66:
                    b0:56:a3:ea:a2:9f:a1:25:c3:b9:ea:9a:f6:3e:3f:
                    6a:92:3d:a5:f0:a1:c0:c3:ac:20:c4:1c:86:81:cd:
                    51:9c:f8:db:ee:ef:5a:a1:84:98:54:da:ac:43:f3:
                    39:82:2a:81:27:1a:f8:4b:0f:cc:a8:7c:ef:45:98:
                    d7:d6:9a:2d:42:69:cc:3e:1b:b8:61:bc:7a:37:35:
                    cb:40:b1:e8:27:00:db:58:b1:3d:49:e3:e2:e0:38:
                    50:76:14:7d:94:43:cd:d0:1e:73:0e:8c:52:18:c9:
                    f4:6f:c3:f1:2f:e4:1d:69:b2:12:8b:46:43:5b:5d:
                    83:f9:39:e6:9a:eb:4b:a0:84:8b:dd:34:3d:a2:ee:
                    50:81:78:5f:2e:66:42:a2:fc:0e:1c:2e:f8:16:f2:
                    c6:e6:fd:5e:8c:ea:41:33:77:ae:58:d1:99:fc:2c:
                    30:0b:1d:68:a6:f9:66:5e:db:70:9a:38:cf:38:74:
                    72:b9:bf:b9:af:b3:d8:4f:52:81:8a:8f:7c:bd:83:
                    0d:eb:e8:02:c9:9d:9b:a5:5f:fd:93:2f:c0:ac:33:
                    b4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FE:B9:A7:79:8B:EB:E9:D1:F2:44:18:EC:A3:31:19:05:39:3D:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/f15006e2-b451-3ec6-8046-7a16333e00fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl

            X509v3 Authority Key Identifier:
                keyid:34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.220.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:7e:51:de:51:1b:66:b9:5a:49:c4:42:5b:ba:20:e4:3d:70:
         04:f8:53:b4:31:99:6e:e3:20:d5:28:cd:2a:3f:cb:75:ed:4e:
         d3:0b:2b:0d:3c:92:42:99:e5:97:88:35:68:b3:78:2d:47:31:
         b5:c9:db:0e:04:eb:da:73:84:37:0c:9f:e1:49:c5:2a:7f:74:
         ea:ab:d2:c6:49:90:23:c7:f9:d9:b2:8b:61:80:21:39:80:8d:
         a8:24:1b:7b:9a:98:ad:6c:d1:2c:08:db:d8:4f:6a:2b:29:8d:
         c4:4c:9b:27:5e:56:31:12:6c:d7:43:28:c0:b5:d7:56:15:6b:
         45:73:b1:77:b7:33:52:25:55:30:6c:d0:33:4c:78:51:79:37:
         1a:7f:18:66:72:8b:dc:51:da:38:42:02:0c:5f:9a:b8:dc:15:
         b1:59:ff:b1:9a:bb:1f:ef:0d:af:f0:f7:06:ba:db:0c:5a:72:
         09:20:39:c2:57:a5:2d:cf:82:c2:cf:2f:95:ab:c7:cd:48:c8:
         32:db:16:a9:f9:a5:ac:e4:68:2b:e1:de:f0:b6:c5:9a:42:f6:
         1c:9d:1c:50:89:e5:c7:74:ff:27:0f:a2:57:cd:a4:5f:61:1d:
         cc:6d:20:6a:26:d7:a9:98:71:dd:08:67:36:d6:99:52:42:7a:
         5d:b7:99:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVbku72WrtSO3N6FgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmI2MzM4ZTgtM2I5OC00NWMwLTkzNmEtZjc1MzJkMTRj
MTZiMB4XDTI0MDMyODEzMDAzNloXDTI0MDYyNjEzMDAzNlowLzEtMCsGA1UEAxMk
YzRkMmUzYmMtOTVkZC00N2Y0LWEwYzQtMzQ2NmU4ZDg5MDBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVtMhhzhKdDRHLioRxiJuWPZ4kAEcDzPLgW2
nZaXAaZ3QtazeDLsr2TT/WawVqPqop+hJcO56pr2Pj9qkj2l8KHAw6wgxByGgc1R
nPjb7u9aoYSYVNqsQ/M5giqBJxr4Sw/MqHzvRZjX1potQmnMPhu4Ybx6NzXLQLHo
JwDbWLE9SePi4DhQdhR9lEPN0B5zDoxSGMn0b8PxL+QdabISi0ZDW12D+TnmmutL
oISL3TQ9ou5QgXhfLmZCovwOHC74FvLG5v1ejOpBM3euWNGZ/CwwCx1opvlmXttw
mjjPOHRyub+5r7PYT1KBio98vYMN6+gCyZ2bpV/9ky/ArDO0qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCv+uad5i+vp0fJEGOyjMRkFOT0SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjYz
MzhlOC0zYjk4LTQ1YzAtOTM2YS1mNzUzMmQxNGMxNmIvZjE1MDA2ZTItYjQ1MS0z
ZWM2LTgwNDYtN2ExNjMzM2UwMGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmI2MzM4ZTgtM2I5OC00NWMwLTkz
NmEtZjc1MzJkMTRjMTZiL2JiNjMzOGU4LTNiOTgtNDVjMC05MzZhLWY3NTMyZDE0
YzE2Yi5jcmwwHwYDVR0jBBgwFoAUNPbX9h2WrJ6QQudVuREQXgnNTIIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjYzMzhlOC0zYjk4LTQ1YzAtOTM2YS1mNzUz
MmQxNGMxNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStxsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABx+Ud5RG2a5WknEQlu6IOQ9cAT4U7QxmW7jINUozSo/y3XtTtMLKw08
kkKZ5ZeINWizeC1HMbXJ2w4E69pzhDcMn+FJxSp/dOqr0sZJkCPH+dmyi2GAITmA
jagkG3uamK1s0SwI29hPaispjcRMmydeVjESbNdDKMC111YVa0VzsXe3M1IlVTBs
0DNMeFF5Nxp/GGZyi9xR2jhCAgxfmrjcFbFZ/7Gaux/vDa/w9wa62wxacgkgOcJX
pS3PgsLPL5Wrx81IyDLbFqn5pazkaCvh3vC2xZpC9hydHFCJ5cd0/ycPolfNpF9h
HcxtIGom16mYcd0IZzbWmVJCel23mdU=
-----END CERTIFICATE-----
Generated at Fri May 17 01:48:03 2024 by rpki-client on console-fra.rpki-client.org