Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/8cfee125-6b6f-33a1-b7b3-0a35c69352c7.roa
File:                     8cfee125-6b6f-33a1-b7b3-0a35c69352c7.roa (raw, json)
Hash identifier:          zoG1vt+g3VlisGu60nzwppUfPShWIDeFCha2+eXN1/U=
Subject key identifier:   35:43:AC:60:E4:B6:A1:64:00:41:88:2E:95:07:02:36:B5:BE:8D:94
Certificate issuer:       /CN=1d7e3237-b117-456b-b736-2b3c2300bcfe
Certificate serial:       010D0C9F4328584531B29C53BEAA2C26ED9FA900
Authority key identifier: 15:BB:91:0D:76:63:3F:0F:69:00:4B:10:A0:61:2C:DB:26:71:73:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/8cfee125-6b6f-33a1-b7b3-0a35c69352c7.roa
Signing time:             Wed 13 Mar 2024 13:00:30 +0000
ROA not before:           Wed 13 Mar 2024 13:00:30 +0000
ROA not after:            Tue 11 Jun 2024 13:00:30 +0000
asID:                     834
IP address blocks:        162.245.64.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:b2:9c:53:be:aa:2c:26:ed:9f:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d7e3237-b117-456b-b736-2b3c2300bcfe
        Validity
            Not Before: Mar 13 13:00:30 2024 GMT
            Not After : Jun 11 13:00:30 2024 GMT
        Subject: CN=795b595a-4614-42a8-9f74-7b4f2e3f8be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:93:9d:f1:95:1e:66:6f:0f:55:cc:06:2f:a5:
                    40:d8:35:50:9b:3c:15:c8:15:92:64:eb:96:78:5d:
                    93:63:0b:ad:67:7a:44:ba:d5:36:d5:d1:b8:39:a5:
                    58:67:09:2d:53:3d:b2:90:19:89:fb:3a:28:0b:e1:
                    8e:20:50:9a:a5:5a:41:7b:d8:d4:ef:37:0c:cf:4e:
                    db:f8:f1:35:df:bd:04:61:e4:98:d7:da:e9:e1:7e:
                    a3:d4:89:be:2b:6f:b9:74:c9:1f:f3:87:ea:43:bc:
                    98:58:b5:97:0e:59:e2:06:5f:09:dc:98:83:88:b0:
                    3e:c1:03:4a:96:06:c3:d8:d9:78:bd:35:d2:84:52:
                    7d:16:78:4b:18:6c:27:0a:51:1a:37:34:86:7d:f8:
                    d8:13:a6:2c:dd:cf:38:e4:7a:99:b6:96:9c:c1:f5:
                    7f:96:54:90:15:80:5e:be:b0:b3:be:84:e3:9e:80:
                    b1:49:1e:9e:5e:72:92:01:04:e8:6b:dc:49:23:28:
                    b4:3d:2b:e5:a9:05:44:59:3e:e7:2e:0a:b3:50:57:
                    cb:72:17:dd:cb:48:da:a1:60:f3:31:c5:7a:f1:84:
                    c9:18:bb:b6:31:59:55:87:01:9e:f0:dc:d6:86:55:
                    0a:ff:00:a6:e3:4b:9b:40:2c:fc:3f:0e:6d:79:c4:
                    65:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:43:AC:60:E4:B6:A1:64:00:41:88:2E:95:07:02:36:B5:BE:8D:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/8cfee125-6b6f-33a1-b7b3-0a35c69352c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.crl

            X509v3 Authority Key Identifier:
                keyid:15:BB:91:0D:76:63:3F:0F:69:00:4B:10:A0:61:2C:DB:26:71:73:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.245.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:04:55:36:33:83:78:45:c8:6b:b4:4c:99:20:bd:dc:ac:10:
         57:55:68:0c:ac:84:51:39:9c:f5:a4:de:bc:1f:b3:a5:ea:d1:
         35:d1:62:03:1b:aa:67:5c:14:67:4e:7b:37:e7:d5:ba:b1:fe:
         83:71:89:af:f1:7b:a7:48:11:b3:3d:b4:08:2f:45:4d:12:1f:
         8b:aa:80:71:f1:92:49:31:38:bc:04:0b:e1:c4:c2:4e:3b:90:
         a6:7e:e4:bb:ba:7e:ea:e2:7c:c2:1c:6d:a0:6b:2e:aa:3f:35:
         90:c7:04:26:9b:e8:fe:0c:4d:5c:dd:c4:f4:d3:15:da:10:9e:
         a5:15:97:ba:64:fe:8c:52:a8:74:fc:cc:1f:71:69:f6:44:b9:
         e9:9f:d5:7e:f2:f3:a3:c7:c9:69:a8:8f:da:da:11:20:d7:5d:
         56:43:18:81:98:78:cb:b4:6b:4f:3c:df:10:7d:40:55:0b:6e:
         7b:b7:ea:c0:ce:0c:d0:fa:94:9b:60:c2:c8:4d:f8:7b:ef:9b:
         ad:3f:6f:b8:87:b8:c3:bc:ea:f8:f8:f0:90:18:93:61:5d:84:
         de:4b:e6:98:0f:50:5b:b0:a5:e1:18:7d:64:10:2d:9a:1f:1c:
         51:45:a4:d6:83:7f:65:53:e2:2c:35:ea:32:3f:12:10:5e:9a:
         d6:10:91:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUxspxTvqosJu2fqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQ3ZTMyMzctYjExNy00NTZiLWI3MzYtMmIzYzIzMDBi
Y2ZlMB4XDTI0MDMxMzEzMDAzMFoXDTI0MDYxMTEzMDAzMFowLzEtMCsGA1UEAxMk
Nzk1YjU5NWEtNDYxNC00MmE4LTlmNzQtN2I0ZjJlM2Y4YmUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJOd8ZUeZm8PVcwGL6VA2DVQmzwVyBWSZOuW
eF2TYwutZ3pEutU21dG4OaVYZwktUz2ykBmJ+zooC+GOIFCapVpBe9jU7zcMz07b
+PE1370EYeSY19rp4X6j1Im+K2+5dMkf84fqQ7yYWLWXDlniBl8J3JiDiLA+wQNK
lgbD2Nl4vTXShFJ9FnhLGGwnClEaNzSGffjYE6Ys3c845HqZtpacwfV/llSQFYBe
vrCzvoTjnoCxSR6eXnKSAQToa9xJIyi0PSvlqQVEWT7nLgqzUFfLchfdy0jaoWDz
McV68YTJGLu2MVlVhwGe8NzWhlUK/wCm40ubQCz8Pw5tecRlRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVDrGDktqFkAEGILpUHAja1vo2UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDdl
MzIzNy1iMTE3LTQ1NmItYjczNi0yYjNjMjMwMGJjZmUvOGNmZWUxMjUtNmI2Zi0z
M2ExLWI3YjMtMGEzNWM2OTM1MmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWQ3ZTMyMzctYjExNy00NTZiLWI3
MzYtMmIzYzIzMDBiY2ZlLzFkN2UzMjM3LWIxMTctNDU2Yi1iNzM2LTJiM2MyMzAw
YmNmZS5jcmwwHwYDVR0jBBgwFoAUFbuRDXZjPw9pAEsQoGEs2yZxcxswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDdlMzIzNy1iMTE3LTQ1NmItYjczNi0yYjNj
MjMwMGJjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBovVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUEVTYzg3hFyGu0TJkgvdysEFdVaAyshFE5nPWk3rwfs6Xq0TXRYgMb
qmdcFGdOezfn1bqx/oNxia/xe6dIEbM9tAgvRU0SH4uqgHHxkkkxOLwEC+HEwk47
kKZ+5Lu6furifMIcbaBrLqo/NZDHBCab6P4MTVzdxPTTFdoQnqUVl7pk/oxSqHT8
zB9xafZEuemf1X7y86PHyWmoj9raESDXXVZDGIGYeMu0a0883xB9QFULbnu36sDO
DND6lJtgwshN+Hvvm60/b7iHuMO86vj48JAYk2FdhN5L5pgPUFuwpeEYfWQQLZof
HFFFpNaDf2VT4iw16jI/EhBemtYQkQ0=
-----END CERTIFICATE-----
Generated at Thu May 2 12:24:58 2024 by rpki-client on console-ams.rpki-client.org