Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/16b04eee-d55c-3fd2-bb8e-98d37ca474eb.roa
File:                     16b04eee-d55c-3fd2-bb8e-98d37ca474eb.roa (raw, json)
Hash identifier:          y8DmmTpnLkrl2q5tDhSH9EKCh+BWpaSKEkh47psjhqk=
Subject key identifier:   B6:91:0B:5D:81:4A:09:0B:BB:E8:3F:50:DA:B1:99:65:36:66:7A:60
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F432858454C380A83F9BDF7C1B085AE90
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/16b04eee-d55c-3fd2-bb8e-98d37ca474eb.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     237
IP address blocks:        204.38.0.0/16 maxlen: 16
                          198.108.0.0/14 maxlen: 14
                          35.71.0.0/18 maxlen: 18
                          207.72.0.0/14 maxlen: 14
                          204.39.128.0/18 maxlen: 18
                          35.63.0.0/16 maxlen: 16
                          35.25.0.0/16 maxlen: 16
                          192.122.184.0/24 maxlen: 24
                          35.62.0.0/16 maxlen: 16
                          35.37.0.0/16 maxlen: 16
                          35.68.0.0/15 maxlen: 15
                          35.64.0.0/14 maxlen: 14
                          192.122.181.0/24 maxlen: 24
                          35.70.0.0/16 maxlen: 16
                          192.122.184.0/21 maxlen: 21
                          192.122.182.0/23 maxlen: 23
                          192.122.192.0/21 maxlen: 21
                          192.203.195.0/24 maxlen: 24
                          192.122.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:0a:83:f9:bd:f7:c1:b0:85:ae:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=a2932eeb-640c-4946-a6c2-e96bbae5b632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:18:88:76:92:ba:91:ff:f3:36:1e:aa:59:
                    7e:c8:f4:be:c9:fc:70:66:ce:40:45:3a:8a:0e:3b:
                    80:56:33:79:dc:b6:27:3d:35:f4:fa:b2:20:25:81:
                    9c:ac:9a:85:29:f3:63:8e:de:63:34:a9:35:9c:bf:
                    b7:eb:4b:ac:9e:61:ee:e7:38:45:e1:c2:9c:cf:fb:
                    cd:14:58:92:8a:01:f6:40:56:fa:0d:6b:14:b2:60:
                    11:80:04:ca:0d:73:3b:da:11:0d:c1:f3:d7:7e:69:
                    20:27:97:e6:f6:90:d8:15:a6:e2:18:45:d9:fa:3b:
                    8a:ed:2a:cf:6f:61:68:30:11:c9:9d:43:de:a7:c6:
                    ac:6d:89:24:c2:ef:b1:80:8f:f0:89:cf:f9:8b:ae:
                    38:d1:be:19:ee:9d:62:25:a0:a1:3e:bd:b9:d9:87:
                    41:d2:f3:0a:a8:81:7c:00:3f:e5:91:e6:0d:80:3f:
                    43:87:ab:ec:7e:6d:ba:1a:e7:77:27:6e:bc:c4:b3:
                    56:c6:e7:0f:22:e2:dc:89:03:b2:35:dc:1f:ca:d0:
                    9b:e0:c0:7f:55:56:fd:30:70:3b:66:54:33:9c:05:
                    ef:4b:8a:57:d7:ac:53:ed:71:0e:3e:6b:37:01:f8:
                    ce:7b:82:6a:53:35:ac:5c:f4:50:ca:23:84:f0:0b:
                    e1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:91:0B:5D:81:4A:09:0B:BB:E8:3F:50:DA:B1:99:65:36:66:7A:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/16b04eee-d55c-3fd2-bb8e-98d37ca474eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.25.0.0/16
                  35.37.0.0/16
                  35.62.0.0-35.71.63.255
                  192.122.181.0-192.122.200.255
                  192.203.195.0/24
                  198.108.0.0/14
                  204.38.0.0/16
                  204.39.128.0/18
                  207.72.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b0:6f:73:4f:c3:0c:41:26:5a:3a:de:01:b2:9d:55:c9:68:
         9a:98:c3:f7:ed:54:78:51:bd:23:4e:86:77:8d:f5:0a:57:12:
         6a:33:43:50:27:c9:d8:25:99:f5:74:52:53:6e:38:9a:48:01:
         c6:07:54:0a:c3:86:5e:3d:9b:50:29:31:9f:c5:16:a7:c5:3b:
         76:58:da:00:69:ab:45:8a:92:ff:35:18:64:ad:cf:47:53:9c:
         96:c7:92:8a:d1:b3:70:13:01:a6:05:1b:f1:6a:4e:bb:83:5c:
         34:a3:87:84:ce:e6:42:2f:b8:35:f9:5c:72:2e:e0:3e:1e:6d:
         f7:a7:36:14:75:c4:28:30:ac:17:45:97:f3:0e:28:47:e8:3b:
         cb:2c:6c:10:0f:97:7c:0f:0e:87:66:34:20:bd:a3:d4:4c:12:
         94:12:12:a6:47:9c:aa:b6:53:64:fa:5d:4a:b1:dd:30:64:93:
         cd:d7:20:ac:a9:be:fa:57:68:02:8c:0e:7c:f8:14:f5:bf:01:
         20:27:06:57:c6:7d:91:60:8f:b0:1c:51:83:d7:03:e3:27:a3:
         79:34:2e:7f:4a:0d:85:ad:36:26:45:02:2e:cb:66:c5:eb:1d:
         9e:e3:aa:e0:b4:50:de:a7:14:19:3b:35:26:f4:c0:cc:3b:12:
         a2:bf:a0:1c
-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWEVMOAqD+b33wbCFrpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk
ZWZlMB4XDTI0MDMyMzAxMDAyNFoXDTI0MDYyMTAxMDAyNFowLzEtMCsGA1UEAxMk
YTI5MzJlZWItNjQwYy00OTQ2LWE2YzItZTk2YmJhZTViNjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdQYiHaSupH/8zYeqll+yPS+yfxwZs5ARTqK
DjuAVjN53LYnPTX0+rIgJYGcrJqFKfNjjt5jNKk1nL+360usnmHu5zhF4cKcz/vN
FFiSigH2QFb6DWsUsmARgATKDXM72hENwfPXfmkgJ5fm9pDYFabiGEXZ+juK7SrP
b2FoMBHJnUPep8asbYkkwu+xgI/wic/5i6440b4Z7p1iJaChPr252YdB0vMKqIF8
AD/lkeYNgD9Dh6vsfm26Gud3J268xLNWxucPIuLciQOyNdwfytCb4MB/VVb9MHA7
ZlQznAXvS4pX16xT7XEOPms3AfjOe4JqUzWsXPRQyiOE8AvhnQIDAQABo4IDjzCC
A4swHQYDVR0OBBYEFLaRC12BSgkLu+g/UNqxmWU2ZnpgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz
MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvMTZiMDRlZWUtZDU1Yy0z
ZmQyLWJiOGUtOThkMzdjYTQ3NGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz
MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4
ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm
ODc1OGRlZmUuY2VyMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwMAIxkDAwAj
JTALAwMBIz4DBAYjRwAwDAMEAMB6tQMEAMB6yAMEAMDLwwMDAsZsAwMAzCYDBAbM
J4ADAwLPSDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW
LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G
CSqGSIb3DQEBCwUAA4IBAQCbsG9zT8MMQSZaOt4Bsp1VyWiamMP37VR4Ub0jToZ3
jfUKVxJqM0NQJ8nYJZn1dFJTbjiaSAHGB1QKw4ZePZtQKTGfxRanxTt2WNoAaatF
ipL/NRhkrc9HU5yWx5KK0bNwEwGmBRvxak67g1w0o4eEzuZCL7g1+VxyLuA+Hm33
pzYUdcQoMKwXRZfzDihH6DvLLGwQD5d8Dw6HZjQgvaPUTBKUEhKmR5yqtlNk+l1K
sd0wZJPN1yCsqb76V2gCjA58+BT1vwEgJwZXxn2RYI+wHFGD1wPjJ6N5NC5/Sg2F
rTYmRQIuy2bF6x2e46rgtFDepxQZOzUm9MDMOxKiv6Ac
-----END CERTIFICATE-----
Generated at Mon May 13 10:13:26 2024 by rpki-client on console-fra.rpki-client.org