Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3481c18c-093c-38b7-b201-f4bdb087042a.roa
File:                     3481c18c-093c-38b7-b201-f4bdb087042a.roa (raw, json)
Hash identifier:          +EebFvOFb6x3IHB2A9Vd7h4qpE+GugucMP6vdbusuyg=
Subject key identifier:   0A:2B:8E:87:8B:70:35:DD:51:11:DF:7C:9F:04:5D:BA:D4:24:AF:7B
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16D7F84C0C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3481c18c-093c-38b7-b201-f4bdb087042a.roa
Signing time:             Mon 30 Sep 2019 00:14:29 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     397677
IP address blocks:        165.254.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:7f:84:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=ccd24c37-c633-49c1-a45b-3da33cfcdc84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7e:7b:1f:19:4d:03:17:7b:79:bb:0c:fe:98:
                    fa:8d:07:70:ac:ce:e9:04:a1:1b:5e:a2:b9:33:3e:
                    cd:02:67:a6:c5:f2:c6:85:c2:4e:a8:ff:45:22:3b:
                    f5:79:7c:84:5e:3f:e7:95:5c:08:f2:06:44:03:61:
                    78:93:a1:7e:88:56:09:71:ef:91:26:e6:92:06:10:
                    06:bd:6d:6e:c0:33:d8:90:35:ea:67:9a:c6:d6:12:
                    be:05:5a:0e:5e:12:0c:84:e2:5b:48:17:db:b7:02:
                    72:ac:4e:1e:bf:96:48:bf:f7:3f:07:6b:21:2b:13:
                    06:f6:fb:e4:db:a1:98:54:4f:5b:8d:72:c6:0e:50:
                    ff:10:e0:e5:3e:ef:0b:ed:90:e2:2f:23:f8:47:2f:
                    64:7a:16:0e:48:b8:7a:58:7b:cd:e3:6d:9a:7e:63:
                    55:f2:e5:a4:68:d0:d4:48:62:61:a1:a5:40:04:5b:
                    6b:8a:70:18:68:01:4f:f8:f3:3d:37:3d:25:3b:d4:
                    32:03:62:14:30:f0:f3:70:02:98:69:10:d9:74:0c:
                    30:05:2c:fd:9d:15:5a:42:5a:62:04:8e:2a:07:c6:
                    64:49:41:84:c4:34:7f:34:ed:83:7b:6a:93:7f:8c:
                    14:4e:cd:57:ee:60:e0:54:a1:3f:61:34:38:a5:f7:
                    4d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2B:8E:87:8B:70:35:DD:51:11:DF:7C:9F:04:5D:BA:D4:24:AF:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3481c18c-093c-38b7-b201-f4bdb087042a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a9:82:8e:80:8f:be:7c:2c:22:4e:5f:4f:fe:7b:47:0c:72:
         2c:f7:8a:ac:80:dc:c4:30:c3:ec:5f:c3:2d:b3:f8:e6:3d:16:
         82:65:b5:6c:8e:78:96:24:51:bd:39:c2:05:a5:56:cc:60:97:
         b4:7a:04:ab:73:65:7f:8f:8d:2e:f2:6b:7b:81:7a:db:30:46:
         d1:7b:d9:1d:77:a1:20:b4:60:0f:ea:77:30:68:35:5c:7e:48:
         42:73:c9:67:01:26:0b:ad:7c:a1:28:96:9a:0b:a9:f7:51:e0:
         74:0e:ef:b9:50:a9:e8:3b:45:2a:f5:f8:fd:6a:d4:d8:13:57:
         84:b7:78:b0:4a:02:f5:a8:4d:b4:01:99:10:2d:c3:17:68:8c:
         5b:75:f0:1f:65:ba:c3:b6:2e:41:b7:e8:c1:00:63:b2:8d:6d:
         8a:da:6e:b2:8c:7b:2f:bd:07:50:63:c3:cd:4b:95:c1:c4:d7:
         4d:10:c3:8c:3c:f8:93:cd:89:27:c0:7f:9d:d5:79:85:a8:f6:
         f7:e1:60:2f:1f:fb:1c:a4:40:cf:03:3a:bf:09:7e:e0:34:bc:
         79:15:83:a1:51:47:c8:1b:61:60:15:7b:2c:78:6d:fa:d2:bf:
         ff:13:79:13:3d:72:5c:91:3f:ec:05:c1:89:67:1b:ef:ae:1f:
         2f:d5:be:c0
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbX+EwMAwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJGNj
ZDI0YzM3LWM2MzMtNDljMS1hNDViLTNkYTMzY2ZjZGM4NDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAK5+ex8ZTQMXe3m7DP6Y+o0HcKzO6QShG16iuTM+
zQJnpsXyxoXCTqj/RSI79Xl8hF4/55VcCPIGRANheJOhfohWCXHvkSbmkgYQBr1t
bsAz2JA16meaxtYSvgVaDl4SDITiW0gX27cCcqxOHr+WSL/3PwdrISsTBvb75Nuh
mFRPW41yxg5Q/xDg5T7vC+2Q4i8j+EcvZHoWDki4elh7zeNtmn5jVfLlpGjQ1Ehi
YaGlQARba4pwGGgBT/jzPTc9JTvUMgNiFDDw83ACmGkQ2XQMMAUs/Z0VWkJaYgSO
KgfGZElBhMQ0fzTtg3tqk3+MFE7NV+5g4FShP2E0OKX3TZUCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQKK46Hi3A13VER33yfBF261CSvezCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmLzM0ODFjMThjLTA5M2MtMzhi
Ny1iMjAxLWY0YmRiMDg3MDQyYS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKX+PjBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAXKmCjoCPvnwsIk5fT/57RwxyLPeKrIDcxDDD7F/DLbP45j0WgmW1bI54liRR
vTnCBaVWzGCXtHoEq3Nlf4+NLvJre4F62zBG0XvZHXehILRgD+p3MGg1XH5IQnPJ
ZwEmC618oSiWmgup91HgdA7vuVCp6DtFKvX4/WrU2BNXhLd4sEoC9ahNtAGZEC3D
F2iMW3XwH2W6w7YuQbfowQBjso1titpusox7L70HUGPDzUuVwcTXTRDDjDz4k82J
J8B/ndV5haj29+FgLx/7HKRAzwM6vwl+4DS8eRWDoVFHyBthYBV7LHht+tK//xN5
Ez1yXJE/7AXBiWcb764fL9W+wA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:59 2024 by rpki-client on console-fra.rpki-client.org