Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa
File:                     1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa (raw, json)
Hash identifier:          0m2YEOLIq2XOjt5z9hDFsKhC6pgaKynHkvklQsT06qw=
Subject key identifier:   0F:DE:CF:CE:DE:30:8C:F2:B9:BC:4C:E8:03:C7:25:3A:1B:02:EB:FD
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858456822EABEB966BBBE4AA6FA00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa
Signing time:             Tue 02 Apr 2024 01:00:26 +0000
ROA not before:           Tue 02 Apr 2024 01:00:26 +0000
ROA not after:            Mon 01 Jul 2024 01:00:26 +0000
asID:                     3356
IP address blocks:        199.35.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:68:22:ea:be:b9:66:bb:be:4a:a6:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr  2 01:00:26 2024 GMT
            Not After : Jul  1 01:00:26 2024 GMT
        Subject: CN=4dcccf74-62fe-4064-a8e4-ae601fa94e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e5:fa:df:14:91:1d:dc:06:0e:34:7a:10:c0:
                    54:89:ef:68:78:c8:96:ec:ac:05:77:17:8a:58:06:
                    25:98:cd:f4:06:60:e5:92:e0:0d:05:6b:c9:0b:5b:
                    54:51:92:78:a1:5d:e8:3b:71:cf:c4:27:51:5d:c0:
                    e3:2c:c8:61:b8:2e:87:11:08:0a:c3:0f:99:bc:86:
                    aa:4f:8b:cd:5e:a1:1e:4d:50:ef:7c:d4:38:da:7f:
                    d3:9c:71:11:31:9e:ac:34:2c:a6:db:97:3e:75:61:
                    b2:38:5f:27:a6:0f:5c:a4:3f:ed:4b:10:24:76:60:
                    bc:7b:1f:b8:74:84:16:49:9f:1b:24:57:4b:34:71:
                    0b:05:1a:0a:3e:96:68:b2:67:32:25:e7:0a:83:43:
                    23:b3:36:a8:2a:51:d3:80:dd:85:15:4a:1c:4e:4e:
                    f5:5f:0b:04:6d:3f:03:6b:4e:37:31:bc:51:b7:74:
                    c4:55:c9:d9:81:c9:b5:fa:52:6b:b8:56:6a:62:0d:
                    8f:24:73:fd:74:0d:dd:64:ab:f5:f4:24:0e:2e:52:
                    63:c1:eb:c1:63:1f:f0:69:40:3f:98:de:74:97:59:
                    af:b8:c4:e1:b3:46:52:23:0d:2c:9b:9b:3f:2c:43:
                    78:a7:87:47:a8:56:12:73:80:25:e0:2a:43:ed:49:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DE:CF:CE:DE:30:8C:F2:B9:BC:4C:E8:03:C7:25:3A:1B:02:EB:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.35.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:11:26:b2:ec:51:c0:41:e9:fb:94:5d:26:e1:4b:0a:48:63:
         16:f5:c4:e5:a1:28:cd:b4:56:38:67:fb:18:d5:34:3d:fe:2a:
         75:86:b3:03:a0:a8:3a:a1:29:fd:fe:50:dc:8a:2e:81:7f:84:
         96:26:1c:88:47:0f:c0:5d:03:89:67:b7:87:d3:2d:35:2e:d3:
         52:5b:e7:65:d9:e6:9f:43:4c:d9:07:5a:26:57:29:f7:a8:9a:
         d8:df:e4:35:73:85:9b:5a:8d:77:52:04:86:4b:a4:83:f8:47:
         bd:c6:fe:49:68:fc:65:ad:d8:52:c4:81:a1:4a:3e:01:d9:c1:
         bb:95:3e:a2:a2:91:c4:91:7e:75:50:a1:84:cb:ac:82:83:bd:
         6d:50:c1:6e:b1:b9:7a:e9:0e:e2:66:b5:d9:b8:0e:2e:95:d5:
         6f:f2:0d:fb:96:7c:af:23:73:ae:d5:ef:44:53:d7:7c:52:7d:
         be:1c:6f:44:78:54:97:a9:76:39:e5:58:64:1d:34:d8:88:48:
         c0:20:5c:49:1a:c6:37:05:af:a5:35:00:92:8d:44:f0:32:d2:
         54:20:fc:dc:5e:64:54:5f:a3:6c:79:a6:66:43:50:da:9d:3f:
         93:e8:f0:62:ae:c8:e1:14:9a:4f:99:2c:db:6b:f1:4f:12:ad:
         73:80:9a:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVoIuq+uWa7vkqm+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI0MDQwMjAxMDAyNloXDTI0MDcwMTAxMDAyNlowLzEtMCsGA1UEAxMk
NGRjY2NmNzQtNjJmZS00MDY0LWE4ZTQtYWU2MDFmYTk0ZTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+X63xSRHdwGDjR6EMBUie9oeMiW7KwFdxeK
WAYlmM30BmDlkuANBWvJC1tUUZJ4oV3oO3HPxCdRXcDjLMhhuC6HEQgKww+ZvIaq
T4vNXqEeTVDvfNQ42n/TnHERMZ6sNCym25c+dWGyOF8npg9cpD/tSxAkdmC8ex+4
dIQWSZ8bJFdLNHELBRoKPpZosmcyJecKg0MjszaoKlHTgN2FFUocTk71XwsEbT8D
a043MbxRt3TEVcnZgcm1+lJruFZqYg2PJHP9dA3dZKv19CQOLlJjwevBYx/waUA/
mN50l1mvuMThs0ZSIw0sm5s/LEN4p4dHqFYSc4Al4CpD7UnEvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA/ez87eMIzyubxM6APHJTobAuv9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMWE0MDI2ODctNzNmMC0z
OGY5LWI5MDAtOWM5OGY0Y2QwYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxyOAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABwRJrLsUcBB6fuUXSbhSwpIYxb1xOWhKM20Vjhn+xjVND3+KnWGswOg
qDqhKf3+UNyKLoF/hJYmHIhHD8BdA4lnt4fTLTUu01Jb52XZ5p9DTNkHWiZXKfeo
mtjf5DVzhZtajXdSBIZLpIP4R73G/klo/GWt2FLEgaFKPgHZwbuVPqKikcSRfnVQ
oYTLrIKDvW1QwW6xuXrpDuJmtdm4Di6V1W/yDfuWfK8jc67V70RT13xSfb4cb0R4
VJepdjnlWGQdNNiISMAgXEkaxjcFr6U1AJKNRPAy0lQg/NxeZFRfo2x5pmZDUNqd
P5Po8GKuyOEUmk+ZLNtr8U8SrXOAmvk=
-----END CERTIFICATE-----
Generated at Fri May 3 01:31:49 2024 by rpki-client on console-fra.rpki-client.org