Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/6cd2f3fb-e54b-3ae8-8c81-b7ad27098123.roa
File:                     6cd2f3fb-e54b-3ae8-8c81-b7ad27098123.roa (raw, json)
Hash identifier:          Wckekn7Y7v++oP96ddohqtnKyrN2SwgHLhwRB6xgKeY=
Subject key identifier:   61:71:D8:23:E0:C0:1F:E9:D2:FF:F0:7F:27:31:E4:C8:72:5C:05:ED
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F432858451A1586E6303A62F741949000
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/6cd2f3fb-e54b-3ae8-8c81-b7ad27098123.roa
Signing time:             Tue 05 Mar 2024 02:00:26 +0000
ROA not before:           Tue 05 Mar 2024 02:00:26 +0000
ROA not after:            Mon 03 Jun 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        104.218.203.0/24 maxlen: 24
                          104.218.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:15:86:e6:30:3a:62:f7:41:94:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Mar  5 02:00:26 2024 GMT
            Not After : Jun  3 01:00:26 2024 GMT
        Subject: CN=a7acdba7-83c0-4299-a57c-578d9fdf2a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:01:78:cd:e4:33:72:8a:3b:51:f1:6b:b8:
                    02:01:65:a9:37:b2:58:57:3a:79:cf:89:67:94:fd:
                    6f:d2:19:b3:5b:f1:89:12:4f:7a:07:26:ad:4c:7a:
                    2f:69:12:e1:3d:05:e7:9e:78:ed:59:b8:ef:f0:69:
                    81:cc:88:cd:fd:44:95:f3:99:e2:bb:ea:56:ec:28:
                    ab:5a:6b:d3:9c:3b:0c:63:0a:3e:c4:e5:a8:34:d0:
                    2b:cb:35:50:b9:8c:a8:d0:c0:8d:b8:82:76:11:e7:
                    8d:33:c7:d5:8a:bc:5c:23:01:97:72:cf:b8:b6:ac:
                    62:73:2d:4d:4b:7e:e2:1c:b8:bb:da:0e:71:e7:bf:
                    25:dc:08:66:94:e0:83:76:d1:eb:ae:66:10:fc:4c:
                    7d:66:4d:b2:cf:6e:72:40:db:84:00:c9:6b:51:44:
                    91:9e:da:6e:49:c2:9f:b6:5c:e3:64:2e:50:c5:23:
                    1a:ff:6f:25:fd:c1:8f:97:78:13:35:05:1a:ed:6a:
                    92:55:26:d7:04:4c:4d:95:54:ef:55:5f:ab:bb:e6:
                    8d:1d:8b:b8:51:c7:4f:e4:1a:00:5a:93:a1:14:df:
                    36:4a:65:d2:ea:f1:ef:ad:5e:d8:6a:3e:64:82:02:
                    51:4b:20:d9:c6:43:bf:c4:7b:43:a7:69:77:77:81:
                    9d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:71:D8:23:E0:C0:1F:E9:D2:FF:F0:7F:27:31:E4:C8:72:5C:05:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/6cd2f3fb-e54b-3ae8-8c81-b7ad27098123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.200.0/24
                  104.218.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:21:64:d5:17:a9:81:f8:bf:30:e2:b1:f4:0a:86:86:f4:d6:
         49:6d:da:a4:e1:81:77:4d:73:68:98:7f:00:28:6d:40:e5:e5:
         49:4d:32:b7:c0:22:1c:dc:80:3b:98:f8:a5:67:f2:76:f5:a2:
         90:96:4d:f6:b6:0e:08:de:b0:b2:f2:e6:a4:8c:97:a3:27:33:
         28:bd:6f:25:25:8c:15:95:d5:1d:1a:9d:2a:fe:84:c7:dd:9f:
         1d:76:fc:bb:86:f6:0b:61:a9:48:9c:30:d8:6d:6f:9e:8c:01:
         74:50:bc:ba:d1:f0:c2:37:bd:4b:37:af:c3:db:9c:cc:9e:f6:
         eb:b4:0e:ad:9c:62:4e:91:36:ed:f6:2c:ff:ca:9c:11:57:7d:
         25:b4:75:7c:11:d7:b2:e3:44:99:a4:0d:6e:48:2a:89:1d:ea:
         78:08:3f:c7:de:88:74:a6:76:4e:29:45:a6:4d:95:95:e8:72:
         a8:d2:35:4a:06:58:b5:d9:88:a1:de:04:31:95:13:4a:b2:41:
         87:18:b8:9c:61:7d:8b:c4:88:df:97:3d:71:13:71:a0:90:61:
         7d:e6:ba:7c:4f:61:bb:31:74:9f:58:55:6c:66:a7:27:d6:87:
         d2:a2:04:48:fe:d0:25:d8:8a:c6:fd:b9:11:54:e7:94:2b:50:
         a1:23:f5:d0
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEUaFYbmMDpi90GUkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5
MGNmMB4XDTI0MDMwNTAyMDAyNloXDTI0MDYwMzAxMDAyNlowLzEtMCsGA1UEAxMk
YTdhY2RiYTctODNjMC00Mjk5LWE1N2MtNTc4ZDlmZGYyYTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNMBeM3kM3KKO1Hxa7gCAWWpN7JYVzp5z4ln
lP1v0hmzW/GJEk96ByatTHovaRLhPQXnnnjtWbjv8GmBzIjN/USV85niu+pW7Cir
WmvTnDsMYwo+xOWoNNAryzVQuYyo0MCNuIJ2EeeNM8fVirxcIwGXcs+4tqxicy1N
S37iHLi72g5x578l3AhmlOCDdtHrrmYQ/Ex9Zk2yz25yQNuEAMlrUUSRntpuScKf
tlzjZC5QxSMa/28l/cGPl3gTNQUa7WqSVSbXBExNlVTvVV+ru+aNHYu4UcdP5BoA
WpOhFN82SmXS6vHvrV7Yaj5kggJRSyDZxkO/xHtDp2l3d4Gd3wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGFx2CPgwB/p0v/wfycx5MhyXAXtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl
NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvNmNkMmYzZmItZTU0Yi0z
YWU4LThjODEtYjdhZDI3MDk4MTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi
MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0
OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4
NTU1NDkwY2YuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaNrIAwQA
aNrLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADMhZNUXqYH4vzDisfQKhob01klt2qThgXdNc2iYfwAobUDl
5UlNMrfAIhzcgDuY+KVn8nb1opCWTfa2DgjesLLy5qSMl6MnMyi9byUljBWV1R0a
nSr+hMfdnx12/LuG9gthqUicMNhtb56MAXRQvLrR8MI3vUs3r8PbnMye9uu0Dq2c
Yk6RNu32LP/KnBFXfSW0dXwR17LjRJmkDW5IKokd6ngIP8feiHSmdk4pRaZNlZXo
cqjSNUoGWLXZiKHeBDGVE0qyQYcYuJxhfYvEiN+XPXETcaCQYX3munxPYbsxdJ9Y
VWxmpyfWh9KiBEj+0CXYisb9uRFU55QrUKEj9dA=
-----END CERTIFICATE-----
Generated at Thu May 2 04:21:09 2024 by rpki-client on console-ams.rpki-client.org