Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/8f1b570c-f52e-3240-82a2-20534ab237aa.roa
File:                     8f1b570c-f52e-3240-82a2-20534ab237aa.roa (raw, json)
Hash identifier:          kDj5xht0EF9/bv9TrSZf8PUagsGEFAKSBHFdtdq/yO4=
Subject key identifier:   EB:FB:09:63:23:D4:2E:77:8F:A1:55:D1:CC:6B:71:7B:8E:B8:3F:27
Certificate issuer:       /CN=23658315-b56f-46db-89d2-184000d7f7e1
Certificate serial:       010D0C9F4328584563F2FF090B998F27DC13E280
Authority key identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/8f1b570c-f52e-3240-82a2-20534ab237aa.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     14007
IP address blocks:        74.50.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f2:ff:09:0b:99:8f:27:dc:13:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23658315-b56f-46db-89d2-184000d7f7e1
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=0ae7b4e6-16f3-4868-90aa-7ff19c8e71d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4c:6c:42:db:f5:0f:f3:ce:17:20:7c:d1:6e:
                    4a:78:37:86:b2:c7:ba:17:78:29:03:fe:1d:b5:5a:
                    58:19:55:4b:54:16:2f:cb:11:9b:9d:9b:3d:d1:9f:
                    32:2f:12:0d:c4:13:77:de:2b:1d:07:7a:1f:6a:9b:
                    79:f1:15:fd:3f:21:03:fc:11:0d:cd:9b:d7:60:07:
                    93:5f:27:b4:b4:e8:ee:44:e7:62:33:a2:b5:ea:4a:
                    ef:26:97:46:52:06:d2:11:45:68:f0:e5:3e:65:e8:
                    d5:47:66:26:76:cc:6a:58:9f:63:e5:a0:25:7d:1f:
                    42:02:d1:08:f1:69:ef:ad:34:9e:d3:91:0a:57:8d:
                    81:2b:ea:d7:16:a3:c7:99:6b:b9:a4:f1:4f:94:40:
                    97:7b:3b:56:07:6b:1f:01:c9:1f:af:a4:2c:09:ab:
                    e3:a4:b8:43:95:52:ef:a1:4e:a4:c7:9a:f5:ed:01:
                    56:9a:26:c5:eb:c5:01:a6:ff:b4:a8:09:43:ad:a8:
                    7a:a1:49:b0:4f:6a:72:81:06:6d:ce:32:10:0d:f8:
                    36:94:18:cd:df:a7:4f:32:89:8f:25:4c:9f:33:ab:
                    70:8f:53:20:a5:f9:58:ec:52:cd:97:0a:3a:76:0a:
                    9b:3b:32:5d:6c:31:00:c6:80:30:9e:12:f4:60:31:
                    24:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FB:09:63:23:D4:2E:77:8F:A1:55:D1:CC:6B:71:7B:8E:B8:3F:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/8f1b570c-f52e-3240-82a2-20534ab237aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl

            X509v3 Authority Key Identifier:
                keyid:E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:b0:c2:0e:0e:b9:d5:9e:b8:9f:4e:21:28:26:dd:34:43:e3:
         8a:d8:54:28:1c:4b:66:ba:fc:cd:5f:16:22:07:2a:9b:81:47:
         62:c7:03:9a:bb:e9:50:9e:1f:c4:a8:44:24:4c:34:4d:48:3a:
         f5:94:c7:9f:ef:12:c8:12:b8:ac:20:10:63:f9:63:82:8a:c6:
         07:55:c6:a8:3c:38:60:a6:c3:0d:82:76:13:c1:b6:42:69:cb:
         82:5e:d0:40:77:14:93:4f:af:ae:4e:c7:e8:ec:0f:46:fd:53:
         e3:46:f4:42:3b:9d:f7:be:44:7d:a9:7c:07:65:f8:ad:e4:23:
         00:7c:2b:8d:dc:c4:20:67:fa:46:7c:30:a0:3d:2e:10:1a:54:
         7c:e4:76:3f:f8:98:5c:85:49:dc:40:f1:f8:a9:b0:75:f8:28:
         89:95:e3:93:00:9a:5c:6f:a2:57:0a:2d:e5:04:1a:42:56:16:
         f9:d7:fe:6a:00:20:9a:71:74:9a:8b:ed:bd:a0:67:b2:b3:c1:
         8e:f1:49:cb:d5:58:a9:f9:9d:94:0a:f2:58:99:64:f4:26:64:
         86:6c:a1:24:9a:d1:e0:db:df:5f:16:e4:98:f2:11:8d:c6:a6:
         8b:87:fe:da:16:30:07:56:7b:3f:45:c5:9e:e0:4b:5f:dd:65:
         bb:2b:e1:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVj8v8JC5mPJ9wT4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjM2NTgzMTUtYjU2Zi00NmRiLTg5ZDItMTg0MDAwZDdm
N2UxMB4XDTI0MDMzMTEzMDAzNloXDTI0MDYyOTEzMDAzNlowLzEtMCsGA1UEAxMk
MGFlN2I0ZTYtMTZmMy00ODY4LTkwYWEtN2ZmMTljOGU3MWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUxsQtv1D/POFyB80W5KeDeGsse6F3gpA/4d
tVpYGVVLVBYvyxGbnZs90Z8yLxINxBN33isdB3ofapt58RX9PyED/BENzZvXYAeT
Xye0tOjuROdiM6K16krvJpdGUgbSEUVo8OU+ZejVR2YmdsxqWJ9j5aAlfR9CAtEI
8WnvrTSe05EKV42BK+rXFqPHmWu5pPFPlECXeztWB2sfAckfr6QsCavjpLhDlVLv
oU6kx5r17QFWmibF68UBpv+0qAlDrah6oUmwT2pygQZtzjIQDfg2lBjN36dPMomP
JUyfM6twj1MgpflY7FLNlwo6dgqbOzJdbDEAxoAwnhL0YDEkkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOv7CWMj1C53j6FV0cxrcXuOuD8nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1
ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQwMDBkN2Y3ZTEvOGYxYjU3MGMtZjUyZS0z
MjQwLTgyYTItMjA1MzRhYjIzN2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjM2NTgzMTUtYjU2Zi00NmRiLTg5
ZDItMTg0MDAwZDdmN2UxLzIzNjU4MzE1LWI1NmYtNDZkYi04OWQyLTE4NDAwMGQ3
ZjdlMS5jcmwwHwYDVR0jBBgwFoAU5YfMbY7t14LlHY1OWXdrNmM0d3owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQw
MDBkN2Y3ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESjLgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMCwwg4OudWeuJ9OISgm3TRD44rYVCgcS2a6/M1fFiIHKpuBR2LHA5q7
6VCeH8SoRCRMNE1IOvWUx5/vEsgSuKwgEGP5Y4KKxgdVxqg8OGCmww2CdhPBtkJp
y4Je0EB3FJNPr65Ox+jsD0b9U+NG9EI7nfe+RH2pfAdl+K3kIwB8K43cxCBn+kZ8
MKA9LhAaVHzkdj/4mFyFSdxA8fipsHX4KImV45MAmlxvolcKLeUEGkJWFvnX/moA
IJpxdJqL7b2gZ7KzwY7xScvVWKn5nZQK8liZZPQmZIZsoSSa0eDb318W5JjyEY3G
pouH/toWMAdWez9FxZ7gS1/dZbsr4ek=
-----END CERTIFICATE-----
Generated at Fri May 10 03:25:34 2024 by rpki-client on console-fra.rpki-client.org