Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/903f324b-0d1f-36bd-b5e7-d461dfa25f91.roa
File:                     903f324b-0d1f-36bd-b5e7-d461dfa25f91.roa (raw, json)
Hash identifier:          Ry94EKxioyuTQTmWUcq039hqZw/wirvqJHRDoEpS64A=
Subject key identifier:   8F:4B:B6:43:CD:41:F6:02:5E:C2:22:C9:8A:E2:85:17:34:DE:F4:DE
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16C06537DA8
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/903f324b-0d1f-36bd-b5e7-d461dfa25f91.roa
Signing time:             Thu 18 Jul 2019 18:23:50 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     19683
IP address blocks:        165.254.200.0/23 maxlen: 24
                          204.2.16.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6c:06:53:7d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=f5bb1417-025c-4c48-b534-dfb147daaf3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e0:7c:cc:26:19:d2:89:96:a3:f2:28:87:36:
                    f4:95:34:18:e8:a5:e1:b8:07:0e:94:f7:9c:28:b2:
                    1c:bc:91:58:65:f0:81:5e:bc:b6:26:bf:c5:d2:49:
                    20:fc:68:44:5f:a3:a7:32:e4:2a:a2:d1:b2:0b:3f:
                    25:a0:e0:1b:c5:f9:46:57:04:e4:9c:a3:a3:52:de:
                    d7:5b:27:42:d8:00:17:58:be:c9:60:9b:93:12:9e:
                    a3:bf:9a:ed:fa:51:9b:af:b2:87:62:4f:6f:5e:2d:
                    1a:37:8b:6c:24:10:48:23:16:4c:c1:81:73:8d:16:
                    20:a4:3f:73:ce:2f:97:5d:9f:8d:0c:10:80:df:46:
                    d1:ea:51:34:fc:4c:f4:ab:1e:f8:eb:0c:b1:4f:0a:
                    c8:53:af:a1:ab:4f:f1:a2:ee:7d:d2:7c:97:fc:f7:
                    49:28:0f:54:07:5e:39:e5:c4:ab:71:15:c4:3e:89:
                    d5:91:20:58:37:84:75:61:f2:c2:40:1d:97:d4:5f:
                    a4:24:5b:9e:c8:ae:b4:ac:ee:be:d2:b1:6e:81:53:
                    f2:da:52:a8:2f:af:cc:3b:94:04:42:ce:e5:36:b9:
                    2a:18:17:cf:d8:47:be:81:1c:39:76:13:5e:10:c4:
                    fa:a7:5a:50:68:94:f8:57:0f:2b:55:ac:28:f3:cf:
                    7a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4B:B6:43:CD:41:F6:02:5E:C2:22:C9:8A:E2:85:17:34:DE:F4:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/903f324b-0d1f-36bd-b5e7-d461dfa25f91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.200.0/23
                  204.2.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:33:93:60:4e:5b:d2:3c:69:0a:63:b6:31:ee:1a:41:07:03:
         aa:74:a3:b2:4b:c9:32:0d:15:9c:e8:77:22:5e:4e:f3:0d:37:
         c2:6a:57:22:d1:03:9f:11:69:07:68:85:d8:e7:d9:9a:d6:e6:
         94:e3:9b:30:b0:40:a6:b3:17:f2:b0:47:30:f6:62:ce:66:78:
         55:a7:c9:eb:ae:ac:80:93:70:96:0c:73:61:b3:de:93:fe:df:
         78:00:f3:39:3a:84:da:93:b5:c7:d2:b4:58:26:7a:2e:9f:5d:
         51:1a:af:6e:a3:6a:d9:02:cb:eb:48:53:78:50:57:98:28:ee:
         dc:83:95:11:c7:ff:a7:50:67:07:f2:67:bb:9d:7f:42:f7:ed:
         f5:18:38:c1:ed:18:e5:67:a0:f8:f6:8b:ec:09:88:69:2a:ee:
         95:1d:8a:f8:f0:d8:d5:73:21:71:dc:5b:3c:b1:9d:9f:bb:0a:
         5c:d2:09:aa:07:40:ab:6c:64:14:7d:74:f8:09:b7:1d:2c:d7:
         ca:6f:e3:58:52:4c:e0:71:01:0d:8a:81:64:52:6f:66:65:71:
         b4:b3:6b:9f:46:cc:d8:60:17:5c:04:5c:66:f5:62:49:15:fb:
         20:9d:8d:86:2a:35:b1:8c:92:36:7d:28:47:8f:a3:ce:a7:5a:
         61:3d:84:11
-----BEGIN CERTIFICATE-----
MIIGRTCCBS+gAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbAZTfagwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJGY1
YmIxNDE3LTAyNWMtNGM0OC1iNTM0LWRmYjE0N2RhYWYzYjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANzgfMwmGdKJlqPyKIc29JU0GOil4bgHDpT3nCiy
HLyRWGXwgV68tia/xdJJIPxoRF+jpzLkKqLRsgs/JaDgG8X5RlcE5Jyjo1Le11sn
QtgAF1i+yWCbkxKeo7+a7fpRm6+yh2JPb14tGjeLbCQQSCMWTMGBc40WIKQ/c84v
l12fjQwQgN9G0epRNPxM9Kse+OsMsU8KyFOvoatP8aLufdJ8l/z3SSgPVAdeOeXE
q3EVxD6J1ZEgWDeEdWHywkAdl9RfpCRbnsiutKzuvtKxboFT8tpSqC+vzDuUBELO
5Ta5KhgXz9hHvoEcOXYTXhDE+qdaUGiU+FcPK1WsKPPPetsCAwEAAaOCA1swggNX
MB0GA1UdDgQWBBSPS7ZDzUH2Al7CIsmK4oUXNN703jCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmLzkwM2YzMjRiLTBkMWYtMzZi
ZC1iNWU3LWQ0NjFkZmEyNWY5MS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAaX+yAMEAcwC
EDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3
DQEBCwOCAQEAbDOTYE5b0jxpCmO2Me4aQQcDqnSjskvJMg0VnOh3Il5O8w03wmpX
ItEDnxFpB2iF2OfZmtbmlOObMLBAprMX8rBHMPZizmZ4VafJ666sgJNwlgxzYbPe
k/7feADzOTqE2pO1x9K0WCZ6Lp9dURqvbqNq2QLL60hTeFBXmCju3IOVEcf/p1Bn
B/Jnu51/Qvft9Rg4we0Y5Weg+PaL7AmIaSrulR2K+PDY1XMhcdxbPLGdn7sKXNIJ
qgdAq2xkFH10+Am3HSzXym/jWFJM4HEBDYqBZFJvZmVxtLNrn0bM2GAXXARcZvVi
SRX7IJ2Nhio1sYySNn0oR4+jzqdaYT2EEQ==
-----END CERTIFICATE-----
Generated at Thu Mar 28 02:02:44 2024 by rpki-client on console-fra.rpki-client.org