Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/954fc092-2306-327d-b211-46995ab4a364.roa
File:                     954fc092-2306-327d-b211-46995ab4a364.roa (raw, json)
Hash identifier:          P6aMV/SSjGZdKwr1FaElIZjABlcYDaDI96BizVJH8Q8=
Subject key identifier:   B9:36:93:B4:A7:8F:50:89:B5:79:15:5B:A7:77:C9:DE:25:AC:84:5A
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285845371D2C61FF357D0375C43540
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/954fc092-2306-327d-b211-46995ab4a364.roa
Signing time:             Fri 15 Mar 2024 11:34:19 +0000
ROA not before:           Fri 15 Mar 2024 11:34:19 +0000
ROA not after:            Thu 13 Jun 2024 11:34:19 +0000
asID:                     64286
IP address blocks:        173.239.237.0/24 maxlen: 24
                          173.239.208.0/24 maxlen: 24
                          173.239.219.0/24 maxlen: 24
                          64.64.110.0/24 maxlen: 24
                          98.159.225.0/24 maxlen: 24
                          173.244.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:37:1d:2c:61:ff:35:7d:03:75:c4:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Mar 15 11:34:19 2024 GMT
            Not After : Jun 13 11:34:19 2024 GMT
        Subject: CN=62238bb0-5130-45d2-8a13-a8c5e0fa7b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:18:26:0e:07:89:c4:d0:d7:03:06:02:55:e3:
                    62:31:37:e3:82:51:e1:9c:01:32:e7:62:4c:1b:82:
                    18:98:5c:50:e9:af:e7:0d:13:a1:b1:8b:16:c3:82:
                    7f:c4:1e:23:7d:62:5d:54:24:df:bf:70:f6:c9:68:
                    23:cd:6e:db:2b:93:0a:79:71:60:76:34:5c:67:87:
                    1c:2d:d7:23:0f:b3:6c:ac:7a:e0:67:15:16:6b:12:
                    50:7e:c9:52:24:01:d0:71:50:00:da:b9:c1:69:02:
                    26:d3:60:e9:ac:6c:35:90:f4:39:db:40:00:0b:c0:
                    19:a0:8d:ba:57:3c:c5:85:cf:af:f5:18:8c:90:7d:
                    18:b8:fb:7b:b3:a2:04:d9:3a:2d:7c:bf:80:6a:cf:
                    49:4b:6b:93:99:3e:66:9b:fb:58:92:28:9e:16:3b:
                    85:1e:3f:50:fc:64:c4:d1:92:e7:79:09:c5:07:bb:
                    02:ae:13:62:f5:43:fc:90:1c:4f:d2:5e:a7:50:0a:
                    e4:0d:27:ed:3b:04:65:60:47:62:4c:7c:02:55:98:
                    07:f4:42:40:ad:84:a4:09:c2:a2:2f:42:a1:6f:f1:
                    4c:80:2a:89:4a:b2:5c:ac:31:95:63:41:28:9a:9a:
                    6a:fe:1a:b5:b4:66:0d:3d:e4:0a:43:e8:68:3a:e5:
                    9c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:36:93:B4:A7:8F:50:89:B5:79:15:5B:A7:77:C9:DE:25:AC:84:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/954fc092-2306-327d-b211-46995ab4a364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.110.0/24
                  98.159.225.0/24
                  173.239.208.0/24
                  173.239.219.0/24
                  173.239.237.0/24
                  173.244.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:83:6c:c7:de:02:be:19:83:4f:3c:28:74:60:07:6d:4a:a1:
         0d:39:87:d8:7b:95:0f:71:ef:67:2d:47:10:16:d7:8b:d3:36:
         fd:58:3a:29:79:b5:a3:aa:71:9b:e3:da:7f:ee:bb:58:9d:e1:
         7a:dd:05:52:33:7d:7d:43:43:34:c2:02:e9:d4:ba:e1:e2:18:
         17:ea:07:70:ac:b0:4b:76:f9:33:a9:c6:63:27:e4:7c:f7:85:
         50:b8:3b:d4:c6:2a:ee:1a:d1:ce:63:04:61:b6:79:57:24:71:
         7d:9b:92:f6:e1:72:bb:4d:7a:75:cb:40:b6:39:4f:ec:59:05:
         0f:91:bc:a1:9d:fc:20:9a:fc:66:a1:b9:1f:34:2d:64:0d:ec:
         aa:21:e0:df:d0:65:3e:2f:f0:29:fc:1d:21:51:de:5a:1f:4d:
         57:2d:87:82:87:57:8c:b6:61:26:be:68:29:a7:9b:1a:10:50:
         b6:c9:72:96:01:c4:5b:f5:09:4c:2c:6c:b2:0b:ac:d5:e0:e6:
         b5:53:b8:86:73:54:dd:a0:aa:7f:8e:76:74:79:66:7f:20:ec:
         39:1a:d2:57:62:a9:e2:12:f6:d2:50:2a:ce:52:7a:29:5d:d4:
         0f:b1:12:d3:fd:5c:8f:76:78:84:5d:b2:93:7d:dc:67:49:8b:
         6a:8c:bf:7a
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEU3HSxh/zV9A3XENUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI0MDMxNTExMzQxOVoXDTI0MDYxMzExMzQxOVowLzEtMCsGA1UEAxMk
NjIyMzhiYjAtNTEzMC00NWQyLThhMTMtYThjNWUwZmE3YjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBgmDgeJxNDXAwYCVeNiMTfjglHhnAEy52JM
G4IYmFxQ6a/nDROhsYsWw4J/xB4jfWJdVCTfv3D2yWgjzW7bK5MKeXFgdjRcZ4cc
LdcjD7NsrHrgZxUWaxJQfslSJAHQcVAA2rnBaQIm02DprGw1kPQ520AAC8AZoI26
VzzFhc+v9RiMkH0YuPt7s6IE2TotfL+Aas9JS2uTmT5mm/tYkiieFjuFHj9Q/GTE
0ZLneQnFB7sCrhNi9UP8kBxP0l6nUArkDSftOwRlYEdiTHwCVZgH9EJArYSkCcKi
L0Khb/FMgCqJSrJcrDGVY0Eomppq/hq1tGYNPeQKQ+hoOuWchwIDAQABo4IDczCC
A28wHQYDVR0OBBYEFLk2k7Snj1CJtXkVW6d3yd4lrIRaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvOTU0ZmMwOTItMjMwNi0z
MjdkLWIyMTEtNDY5OTVhYjRhMzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAQEBuAwQA
Yp/hAwQAre/QAwQAre/bAwQAre/tAwQArfQpMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJ6DbMfeAr4Zg088
KHRgB21KoQ05h9h7lQ9x72ctRxAW14vTNv1YOil5taOqcZvj2n/uu1id4XrdBVIz
fX1DQzTCAunUuuHiGBfqB3CssEt2+TOpxmMn5Hz3hVC4O9TGKu4a0c5jBGG2eVck
cX2bkvbhcrtNenXLQLY5T+xZBQ+RvKGd/CCa/GahuR80LWQN7Koh4N/QZT4v8Cn8
HSFR3lofTVcth4KHV4y2YSa+aCmnmxoQULbJcpYBxFv1CUwsbLILrNXg5rVTuIZz
VN2gqn+OdnR5Zn8g7Dka0ldiqeIS9tJQKs5Seild1A+xEtP9XI92eIRdspN93GdJ
i2qMv3o=
-----END CERTIFICATE-----
Generated at Sun May 12 15:17:53 2024 by rpki-client on console-ams.rpki-client.org