Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/baa9ca6c-d91a-3ec2-9ddf-189f29592b11.roa
File:                     baa9ca6c-d91a-3ec2-9ddf-189f29592b11.roa (raw, json)
Hash identifier:          uXpnRVXcOG532AhjTUDN/rlOOQ9eel82M25bOWiDqA8=
Subject key identifier:   06:69:7B:F4:61:B7:33:16:B4:D9:4F:6C:E1:4E:34:A4:47:35:FA:AF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DE76825CABFE5AEE9AFB0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/baa9ca6c-d91a-3ec2-9ddf-189f29592b11.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.63.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:e7:68:25:ca:bf:e5:ae:e9:af:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=eed8d9fd-a0da-4288-a7a0-83b645743058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:70:35:43:e2:2e:65:5f:2d:58:4f:41:81:50:
                    f8:58:05:49:3d:83:25:69:e9:d2:c3:d2:e1:47:0f:
                    46:60:4f:75:55:ac:74:a9:cc:bb:53:fe:61:bc:9b:
                    b5:2f:11:a9:3c:50:46:d7:1a:89:70:52:7d:e4:97:
                    d9:64:5c:bf:50:68:55:59:db:0d:17:cb:70:f2:a7:
                    dc:8e:fd:13:17:7c:8b:80:4d:38:4a:f8:5f:5d:1a:
                    c4:10:ba:55:f5:5a:13:2a:70:1a:e7:2f:51:db:4c:
                    ea:71:13:94:77:f4:71:15:92:d2:91:7f:fa:40:40:
                    70:55:22:ce:b7:41:b8:04:35:74:bd:8c:77:ab:32:
                    e4:36:c1:b0:f2:4d:26:20:a4:be:4a:98:69:47:f1:
                    7b:16:a0:d7:0c:6c:e8:68:5f:f1:b1:1b:65:23:44:
                    3c:ac:f4:42:3f:4a:f3:37:6c:57:f5:32:db:09:d4:
                    41:18:f7:a0:90:d2:9d:41:e4:ac:b6:01:30:1e:45:
                    88:7c:aa:2b:ce:3e:04:bd:26:c0:42:e6:a1:fb:b9:
                    96:80:74:96:27:89:8f:71:a7:67:41:67:25:3a:44:
                    c9:1c:37:db:f3:91:b6:a1:94:19:b7:db:f1:4e:44:
                    7b:df:01:93:df:48:1b:43:28:13:37:27:de:0c:d4:
                    40:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:69:7B:F4:61:B7:33:16:B4:D9:4F:6C:E1:4E:34:A4:47:35:FA:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/baa9ca6c-d91a-3ec2-9ddf-189f29592b11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ca:67:da:27:78:a5:e7:a5:f3:97:79:f5:d8:05:5a:db:af:
         38:bd:f7:be:06:99:be:38:f2:37:6a:b0:bf:14:75:5b:04:cd:
         0b:28:9c:0d:6d:6e:bc:fc:4a:7b:50:60:2b:55:1f:6f:f5:ca:
         29:3f:3f:1b:7b:ed:16:f2:f7:6d:9e:82:7f:fd:7b:24:8d:54:
         5d:21:88:e5:e9:ed:13:0b:49:5f:0f:b8:a2:92:32:3b:59:e5:
         15:e7:09:dd:fe:16:78:ff:3c:35:c0:35:2c:a7:2b:62:d0:e3:
         07:5c:21:0f:a1:97:40:8e:b7:b7:34:3e:db:c2:9c:9b:a1:b8:
         f6:fa:70:ac:a1:f3:17:87:24:16:40:bc:a5:7d:b5:fa:b1:46:
         66:4d:da:46:ef:67:a6:e2:b1:0e:fe:e0:9e:b6:b6:03:9a:29:
         59:d3:31:15:a0:b3:c9:73:1a:fb:96:dc:b4:f6:8a:a3:5e:be:
         22:b4:08:f3:b6:7d:92:84:08:1e:7c:07:41:44:89:be:85:a1:
         c5:fe:06:61:97:fc:e6:8f:f1:4d:81:ac:1a:9c:20:29:3d:cd:
         14:bb:ec:99:93:ae:39:34:65:04:86:be:15:3a:2f:86:49:ea:
         04:7d:ba:39:7a:79:34:d8:6e:a6:07:d5:e2:61:b5:7a:cb:7b:
         57:b6:6d:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPedoJcq/5a7pr7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
ZWVkOGQ5ZmQtYTBkYS00Mjg4LWE3YTAtODNiNjQ1NzQzMDU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXA1Q+IuZV8tWE9BgVD4WAVJPYMlaenSw9Lh
Rw9GYE91Vax0qcy7U/5hvJu1LxGpPFBG1xqJcFJ95JfZZFy/UGhVWdsNF8tw8qfc
jv0TF3yLgE04SvhfXRrEELpV9VoTKnAa5y9R20zqcROUd/RxFZLSkX/6QEBwVSLO
t0G4BDV0vYx3qzLkNsGw8k0mIKS+SphpR/F7FqDXDGzoaF/xsRtlI0Q8rPRCP0rz
N2xX9TLbCdRBGPegkNKdQeSstgEwHkWIfKorzj4EvSbAQuah+7mWgHSWJ4mPcadn
QWclOkTJHDfb85G2oZQZt9vxTkR73wGT30gbQygTNyfeDNRA2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAZpe/RhtzMWtNlPbOFONKRHNfqvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmFhOWNhNmMtZDkxYS0z
ZWMyLTlkZGYtMTg5ZjI5NTkyYjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD+kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACDKZ9oneKXnpfOXefXYBVrbrzi9974Gmb448jdqsL8UdVsEzQsonA1t
brz8SntQYCtVH2/1yik/Pxt77Rby922egn/9eySNVF0hiOXp7RMLSV8PuKKSMjtZ
5RXnCd3+Fnj/PDXANSynK2LQ4wdcIQ+hl0COt7c0PtvCnJuhuPb6cKyh8xeHJBZA
vKV9tfqxRmZN2kbvZ6bisQ7+4J62tgOaKVnTMRWgs8lzGvuW3LT2iqNeviK0CPO2
fZKECB58B0FEib6FocX+BmGX/OaP8U2BrBqcICk9zRS77JmTrjk0ZQSGvhU6L4ZJ
6gR9ujl6eTTYbqYH1eJhtXrLe1e2bcA=
-----END CERTIFICATE-----
Generated at Sun Apr 28 00:51:19 2024 by rpki-client on console-ams.rpki-client.org