Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa3d6f72-a298-34f2-9aa7-98d609570cbb.roa
File:                     aa3d6f72-a298-34f2-9aa7-98d609570cbb.roa (raw, json)
Hash identifier:          U3mzAuQZzy8bobhWakJZI9SDnk37DAzwUPf5Qom65Jg=
Subject key identifier:   15:9B:14:B7:E3:BE:C3:0F:9B:EF:FF:B7:63:31:99:CB:CC:83:CD:B8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DEC141017BBD3FCBC6280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa3d6f72-a298-34f2-9aa7-98d609570cbb.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        198.45.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:ec:14:10:17:bb:d3:fc:bc:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=babac517-888a-48b1-885d-6798e1e41eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4f:0b:11:e0:e5:94:63:0f:8e:7c:cc:90:1f:
                    c9:fa:4a:58:b9:1d:ee:19:c6:56:c8:8e:08:3f:fe:
                    95:05:f2:b3:ed:6b:5d:69:41:59:1f:26:77:31:72:
                    09:7d:b4:28:31:8a:d9:b3:58:3e:69:be:4f:a2:3b:
                    c7:9f:06:0b:47:ad:9d:26:bd:23:d9:a2:2d:c6:cc:
                    d5:91:95:84:ab:99:ff:e6:4b:b6:00:d2:58:b2:c2:
                    26:06:2e:9d:88:7d:1a:e7:87:0f:14:0e:8d:9e:9b:
                    da:35:b5:13:23:76:c7:e4:e7:43:0d:63:64:4e:f7:
                    c5:56:3a:ec:5f:54:57:c4:83:6b:95:d9:3c:35:96:
                    36:26:6d:63:ca:76:b0:2c:75:eb:1b:ea:17:28:e3:
                    4e:11:35:6f:80:d5:fc:3d:69:80:35:c9:32:fd:f1:
                    c1:32:67:3c:05:55:0b:c1:e9:1f:47:f3:8d:3d:46:
                    57:b7:c2:b8:37:86:73:c0:64:63:ae:a3:de:e9:3a:
                    f9:f3:73:df:bf:e1:dd:27:6b:03:92:b5:16:5c:a8:
                    8b:69:57:2c:13:76:bb:51:f9:1a:3e:df:d9:cc:32:
                    c5:84:d6:d8:61:e5:41:5e:a2:95:fa:8a:48:7e:b8:
                    05:70:df:aa:59:f4:30:b7:e1:f2:7d:9c:b6:c9:92:
                    f5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9B:14:B7:E3:BE:C3:0F:9B:EF:FF:B7:63:31:99:CB:CC:83:CD:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa3d6f72-a298-34f2-9aa7-98d609570cbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:84:ba:12:04:c8:2a:ab:5c:25:6b:dd:da:09:57:10:c7:ef:
         11:34:79:d4:c0:75:07:a5:57:89:22:f2:91:a4:c2:d6:1c:f6:
         1d:6a:de:86:80:42:ab:dd:c5:35:3b:84:97:c5:8e:e9:0e:0a:
         16:10:97:8f:47:c5:89:8d:fa:45:50:85:5f:55:69:2a:d9:7e:
         ad:07:ba:9a:9f:2c:e9:db:77:ea:80:ae:c4:bf:2f:7a:df:bc:
         a2:2a:8e:f0:7d:b8:eb:66:96:92:9a:e8:59:b1:eb:b1:d6:99:
         a6:a0:6d:1b:1d:72:f5:a6:a3:26:78:d5:0f:ae:b3:c5:aa:a0:
         0b:18:ae:bb:4c:58:c9:b0:8f:75:4b:8d:2a:d6:31:e6:ce:16:
         ba:bb:9f:2a:c8:be:81:82:70:20:ca:57:86:f8:7a:43:0d:87:
         3d:00:e9:54:67:1e:08:2b:d9:ac:de:7b:4c:18:eb:31:a1:24:
         83:2f:bf:3c:f4:a3:d0:46:86:da:8c:de:03:01:39:e8:42:ef:
         45:34:27:ea:86:0e:0c:12:3d:8a:c0:ad:71:04:b4:a7:6d:7a:
         89:7f:33:03:e8:65:80:78:ea:29:6d:af:25:e1:ae:31:e5:43:
         50:84:58:dc:f8:56:55:c0:d1:cf:fa:57:5f:51:43:aa:bc:2a:
         f0:6e:76:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPewUEBe70/y8YoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
YmFiYWM1MTctODg4YS00OGIxLTg4NWQtNjc5OGUxZTQxZWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4U8LEeDllGMPjnzMkB/J+kpYuR3uGcZWyI4I
P/6VBfKz7WtdaUFZHyZ3MXIJfbQoMYrZs1g+ab5PojvHnwYLR62dJr0j2aItxszV
kZWEq5n/5ku2ANJYssImBi6diH0a54cPFA6NnpvaNbUTI3bH5OdDDWNkTvfFVjrs
X1RXxINrldk8NZY2Jm1jynawLHXrG+oXKONOETVvgNX8PWmANcky/fHBMmc8BVUL
wekfR/ONPUZXt8K4N4ZzwGRjrqPe6Tr583Pfv+HdJ2sDkrUWXKiLaVcsE3a7Ufka
Pt/ZzDLFhNbYYeVBXqKV+opIfrgFcN+qWfQwt+HyfZy2yZL1QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBWbFLfjvsMPm+//t2MxmcvMg824MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWEzZDZmNzItYTI5OC0z
NGYyLTlhYTctOThkNjA5NTcwY2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJKEuhIEyCqrXCVr3doJVxDH7xE0edTAdQelV4ki8pGkwtYc9h1q3oaA
QqvdxTU7hJfFjukOChYQl49HxYmN+kVQhV9VaSrZfq0HupqfLOnbd+qArsS/L3rf
vKIqjvB9uOtmlpKa6Fmx67HWmaagbRsdcvWmoyZ41Q+us8WqoAsYrrtMWMmwj3VL
jSrWMebOFrq7nyrIvoGCcCDKV4b4ekMNhz0A6VRnHggr2azee0wY6zGhJIMvvzz0
o9BGhtqM3gMBOehC70U0J+qGDgwSPYrArXEEtKdteol/MwPoZYB46iltryXhrjHl
Q1CEWNz4VlXA0c/6V19RQ6q8KvBudoI=
-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:41 2024 by rpki-client on console-ams.rpki-client.org