Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6450ff78-4b77-3031-99a7-ca08b8f2b879.roa
File:                     6450ff78-4b77-3031-99a7-ca08b8f2b879.roa (raw, json)
Hash identifier:          ScyDD2AHyaT6X1fEFehF0hKRlj0eRTvNAiiK3itoXh8=
Subject key identifier:   17:6A:9D:B8:81:50:6E:10:D5:D1:73:1F:49:B8:57:D4:3C:0B:0E:94
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAEF2ED7D3AED49B6CEED40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6450ff78-4b77-3031-99a7-ca08b8f2b879.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33667
IP address blocks:        173.14.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ae:f2:ed:7d:3a:ed:49:b6:ce:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=0f62e5fa-da93-48d4-a887-623ff3195d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1e:bd:29:98:0c:8c:cd:bb:1e:0e:ec:63:64:
                    85:ab:cc:0d:37:70:60:e1:ca:e7:3c:4f:c8:ce:49:
                    61:21:9f:6f:70:1e:58:f1:a4:24:5c:2d:13:bf:60:
                    da:42:5a:63:9d:ae:e7:26:d3:f5:81:98:8f:57:ac:
                    c4:c0:53:96:b3:66:88:75:d7:f3:88:e1:e6:50:15:
                    35:3d:5d:df:e9:3d:85:d8:2a:00:69:dd:e7:59:41:
                    b2:00:97:b7:43:44:72:7e:21:7d:ef:cd:70:48:b5:
                    ba:76:b5:96:31:13:97:f8:a1:f4:06:8b:26:22:bf:
                    8b:20:c3:eb:a5:80:28:b4:13:27:b3:6b:e1:c3:e2:
                    f8:ed:ff:29:9c:a6:5b:05:47:be:ad:46:d9:df:85:
                    4b:f0:84:53:03:f7:2b:bb:bf:cd:d9:99:f1:bb:3d:
                    91:b9:fd:53:45:8d:88:61:76:fe:79:0c:1f:1f:cc:
                    f8:09:47:ef:cf:05:8f:f9:cc:da:0b:8d:9b:5f:85:
                    ef:0a:2c:da:b1:0a:a0:3a:fe:c5:b5:50:d9:42:76:
                    42:8c:bb:60:f1:f6:0e:a8:b5:b0:b0:18:18:11:e8:
                    6e:88:0b:91:72:5c:46:ab:83:bd:74:48:5a:f8:fa:
                    e8:04:c0:fb:b3:a7:63:74:a8:f5:be:96:a6:14:b4:
                    db:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6A:9D:B8:81:50:6E:10:D5:D1:73:1F:49:B8:57:D4:3C:0B:0E:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6450ff78-4b77-3031-99a7-ca08b8f2b879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.14.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:78:9d:ad:ff:48:8a:fa:ca:12:10:d1:ab:d2:b0:a8:9d:30:
         94:05:03:02:05:55:c2:8d:38:e8:97:d3:2a:d6:be:7b:c4:27:
         a0:a5:f4:38:e3:45:f1:60:20:8c:34:03:59:8a:46:b5:16:8e:
         ec:55:89:6c:5f:b3:aa:06:db:b7:3c:42:9f:cf:f8:8c:24:d2:
         7e:e5:fc:8e:3f:ff:b7:86:12:66:db:cd:7d:77:ac:07:db:13:
         14:a1:b4:e8:dc:c1:69:44:2a:bc:5e:73:00:cb:29:d6:be:d7:
         bb:d0:ed:6f:b4:ac:a7:5d:31:81:1e:75:48:76:34:76:61:1b:
         ac:b5:28:91:c3:df:b8:41:12:da:6c:61:7f:a5:73:0b:00:76:
         52:d3:50:0a:84:fe:96:ad:03:cc:67:53:aa:60:d1:4f:c7:0e:
         97:ec:84:51:7e:62:90:14:b7:b2:5f:74:b3:c3:92:5a:03:a4:
         10:a1:46:56:58:23:5b:1c:ad:58:86:ce:e1:11:0a:c1:0c:8d:
         6d:f2:01:82:29:dd:39:8d:f4:41:96:e6:e3:f1:de:74:b8:98:
         44:59:a1:38:0f:93:be:15:5f:da:28:67:65:8f:aa:a1:f8:cb:
         67:8d:19:34:d1:0e:21:e2:73:f2:68:ae:ad:c9:d2:e2:10:f0:
         e2:0b:68:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrvLtfTrtSbbO7UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
MGY2MmU1ZmEtZGE5My00OGQ0LWE4ODctNjIzZmYzMTk1ZDNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh69KZgMjM27Hg7sY2SFq8wNN3Bg4crnPE/I
zklhIZ9vcB5Y8aQkXC0Tv2DaQlpjna7nJtP1gZiPV6zEwFOWs2aIddfziOHmUBU1
PV3f6T2F2CoAad3nWUGyAJe3Q0RyfiF9781wSLW6drWWMROX+KH0BosmIr+LIMPr
pYAotBMns2vhw+L47f8pnKZbBUe+rUbZ34VL8IRTA/cru7/N2Znxuz2Ruf1TRY2I
YXb+eQwfH8z4CUfvzwWP+czaC42bX4XvCizasQqgOv7FtVDZQnZCjLtg8fYOqLWw
sBgYEehuiAuRclxGq4O9dEha+ProBMD7s6djdKj1vpamFLTbewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBdqnbiBUG4Q1dFzH0m4V9Q8Cw6UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjQ1MGZmNzgtNGI3Ny0z
MDMxLTk5YTctY2EwOGI4ZjJiODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrQ7IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALp4na3/SIr6yhIQ0avSsKidMJQFAwIFVcKNOOiX0yrWvnvEJ6Cl9Djj
RfFgIIw0A1mKRrUWjuxViWxfs6oG27c8Qp/P+Iwk0n7l/I4//7eGEmbbzX13rAfb
ExShtOjcwWlEKrxecwDLKda+17vQ7W+0rKddMYEedUh2NHZhG6y1KJHD37hBEtps
YX+lcwsAdlLTUAqE/patA8xnU6pg0U/HDpfshFF+YpAUt7JfdLPDkloDpBChRlZY
I1scrViGzuERCsEMjW3yAYIp3TmN9EGW5uPx3nS4mERZoTgPk74VX9ooZ2WPqqH4
y2eNGTTRDiHic/Jorq3J0uIQ8OILaE0=
-----END CERTIFICATE-----
Generated at Sat May 4 14:52:07 2024 by rpki-client on console-ams.rpki-client.org