Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/bdda455b-993a-3e0f-9601-63a4469b829a.roa
File:                     bdda455b-993a-3e0f-9601-63a4469b829a.roa (raw, json)
Hash identifier:          pE4Wa03+SYkMmJE39b2pVFywUsIZdLd+2amL1ihatTQ=
Subject key identifier:   B2:3C:0A:09:8A:BC:43:7B:E2:16:C2:3B:12:F3:42:AD:23:C0:5E:D7
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F43285845068AC5CC86DF4FD430FCF680
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/bdda455b-993a-3e0f-9601-63a4469b829a.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     22773
IP address blocks:        161.129.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:c5:cc:86:df:4f:d4:30:fc:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=dfa6bb4e-56e8-47f0-a556-bae4fa322033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:63:11:51:5d:08:f2:2c:46:70:d4:31:79:03:
                    56:0d:f2:86:2f:c4:a7:7e:e9:a9:c7:50:5f:9d:69:
                    de:67:4c:59:6d:ae:f5:83:92:28:ca:58:04:a3:5b:
                    c7:67:ac:5f:d1:d7:ae:d6:37:7c:1e:52:cc:0f:6d:
                    28:8a:60:41:2d:1e:19:8e:ce:56:ca:17:01:4e:b7:
                    32:0b:e6:7e:d1:02:94:a0:57:01:76:14:02:02:28:
                    68:11:4a:31:08:87:96:e3:57:f6:f9:ea:55:1a:49:
                    18:1c:a6:b5:18:6c:1c:f8:3c:ea:4d:1a:6a:f9:9b:
                    b1:8c:a6:df:d3:51:97:2c:a4:b6:27:67:0b:41:a0:
                    3b:d3:fd:5c:be:0e:25:ac:73:ae:6b:b4:b2:4e:81:
                    cb:b4:74:b0:fa:d3:eb:78:f3:c5:62:78:16:78:fb:
                    6a:dc:d4:78:52:bc:c0:41:a7:d9:ef:30:ac:77:5f:
                    8f:39:18:74:42:f0:c5:7a:52:23:6b:60:48:90:89:
                    37:8a:74:8d:03:04:d6:72:3b:f8:0a:fb:ef:f3:e6:
                    0f:f7:b9:4e:3b:1b:74:3c:90:9f:9d:e6:a4:66:1b:
                    cb:8b:b9:ac:c0:f3:10:03:67:b6:58:db:93:f0:1e:
                    c3:f9:9d:d6:71:e6:e6:6a:ea:66:8e:f0:e0:21:56:
                    28:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3C:0A:09:8A:BC:43:7B:E2:16:C2:3B:12:F3:42:AD:23:C0:5E:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/bdda455b-993a-3e0f-9601-63a4469b829a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:37:5d:d9:95:dc:07:90:c0:0c:96:26:17:92:d8:39:31:de:
         8f:78:00:8c:36:47:ed:47:19:70:af:22:4c:ca:13:0e:b1:8a:
         30:fe:93:f0:96:50:04:3e:25:1e:18:1a:1a:ff:3a:af:15:b8:
         44:bb:e9:20:1a:13:d4:2f:7e:7c:62:5f:81:20:5e:07:b1:6a:
         ac:55:e8:25:fd:fb:d1:85:4c:e1:6b:3f:33:b3:1c:1a:f3:36:
         81:40:64:01:ce:65:58:cb:cf:b0:e5:b4:1e:82:77:4f:db:5c:
         89:d7:c9:c7:44:ef:6e:52:69:f9:0f:b4:c7:29:f5:c9:2c:a5:
         d8:3f:1c:e5:e5:6b:4c:02:a0:eb:26:40:47:85:fb:ee:0e:4b:
         72:ba:51:f8:bd:77:b1:0b:a0:35:d9:d8:3d:d7:c4:ba:9e:ac:
         cb:cc:27:14:b9:96:ad:2b:8d:24:f0:1e:4e:de:fe:80:39:fe:
         fa:86:5e:4f:c6:7b:69:9f:7f:14:6d:a1:68:2c:cf:1b:4b:70:
         43:17:87:b5:2e:fd:51:56:ef:9b:9d:0a:be:8b:32:70:cf:40:
         4b:4a:82:b2:c3:cc:f9:b5:71:7b:f7:37:78:27:9b:fe:36:95:
         10:7b:ae:ea:38:5b:72:dc:80:86:39:7b:9c:68:2a:87:25:f8:
         89:0d:f5:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUGisXMht9P1DD89oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx
NzVkMB4XDTI0MDIyNzAyMDAyNloXDTI0MDUyNzAxMDAyNlowLzEtMCsGA1UEAxMk
ZGZhNmJiNGUtNTZlOC00N2YwLWE1NTYtYmFlNGZhMzIyMDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+GMRUV0I8ixGcNQxeQNWDfKGL8Snfumpx1Bf
nWneZ0xZba71g5IoylgEo1vHZ6xf0deu1jd8HlLMD20oimBBLR4Zjs5WyhcBTrcy
C+Z+0QKUoFcBdhQCAihoEUoxCIeW41f2+epVGkkYHKa1GGwc+DzqTRpq+ZuxjKbf
01GXLKS2J2cLQaA70/1cvg4lrHOua7SyToHLtHSw+tPrePPFYngWePtq3NR4UrzA
QafZ7zCsd1+PORh0QvDFelIja2BIkIk3inSNAwTWcjv4Cvvv8+YP97lOOxt0PJCf
neakZhvLi7mswPMQA2e2WNuT8B7D+Z3WcebmaupmjvDgIVYoswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLI8CgmKvEN74hbCOxLzQq0jwF7XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw
ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvYmRkYTQ1NWItOTkzYS0z
ZTBmLTk2MDEtNjNhNDQ2OWI4MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky
MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw
MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh
YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADk3XdmV3AeQwAyWJheS2Dkx3o94AIw2R+1HGXCvIkzKEw6xijD+k/CW
UAQ+JR4YGhr/Oq8VuES76SAaE9QvfnxiX4EgXgexaqxV6CX9+9GFTOFrPzOzHBrz
NoFAZAHOZVjLz7DltB6Cd0/bXInXycdE725SafkPtMcp9ckspdg/HOXla0wCoOsm
QEeF++4OS3K6Ufi9d7ELoDXZ2D3XxLqerMvMJxS5lq0rjSTwHk7e/oA5/vqGXk/G
e2mffxRtoWgszxtLcEMXh7Uu/VFW75udCr6LMnDPQEtKgrLDzPm1cXv3N3gnm/42
lRB7ruo4W3LcgIY5e5xoKocl+IkN9bY=
-----END CERTIFICATE-----
Generated at Fri Apr 26 03:59:28 2024 by rpki-client on console-ams.rpki-client.org