Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b4e558b1-5ef2-3376-97bc-0cf43645916e.roa
File:                     b4e558b1-5ef2-3376-97bc-0cf43645916e.roa (raw, json)
Hash identifier:          OcYvuCNoxn3EYIS96KPUlQqPQS3vN1jKnmetQd/J3ns=
Subject key identifier:   53:BD:9E:99:04:5D:37:CB:13:CB:3A:66:84:81:2B:26:DD:96:63:4E
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583E29BBCAEB5F8BD1F9F624CC00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b4e558b1-5ef2-3376-97bc-0cf43645916e.roa
Signing time:             Tue 10 Apr 2018 11:26:02 +0000
ROA not before:           Tue 10 Apr 2018 11:26:02 +0000
ROA not after:            Sat 08 Apr 2028 04:00:00 +0000
asID:                     3948
IP address blocks:        165.254.109.0/24 maxlen: 24
                          2001:418:1401:c3::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:29:bb:ca:eb:5f:8b:d1:f9:f6:24:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 11:26:02 2018 GMT
            Not After : Apr  8 04:00:00 2028 GMT
        Subject: CN=a5227a7c-ea7e-474f-8edf-4728fa8d1ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:20:06:b2:c6:76:9b:04:db:b8:42:2b:93:ad:
                    5c:a4:16:cf:d7:01:28:79:17:ce:f7:bb:df:2b:f9:
                    2e:be:9d:62:15:2a:db:77:f1:17:30:97:25:d5:1d:
                    e9:ee:a9:d5:a3:c3:20:0c:84:55:e5:09:5e:28:05:
                    9b:8c:ab:66:75:d8:e6:98:e8:99:63:38:35:82:c6:
                    58:ad:ee:29:f5:f2:72:34:86:fe:ca:08:d1:1d:0c:
                    89:1d:a2:0b:a1:c5:90:2e:52:98:20:8b:85:88:f1:
                    44:d2:86:00:e4:78:6b:9f:59:fd:01:50:13:e6:49:
                    bf:8d:af:95:4b:42:77:80:3c:07:cd:0a:47:22:44:
                    35:fe:e2:0a:19:60:cb:2f:82:b6:c2:64:94:65:f5:
                    90:08:77:6d:77:42:ca:2a:e8:eb:ca:0d:7d:e0:c2:
                    6d:4d:2e:c6:fc:78:c8:61:4b:f5:3c:a9:bc:f9:dd:
                    bd:b8:32:33:9d:e1:83:d4:44:de:18:f4:07:f6:bd:
                    90:78:ae:1c:2e:96:84:c5:23:1b:4d:41:fc:06:af:
                    de:20:d9:94:4d:06:72:90:94:45:2d:61:96:f0:1d:
                    34:01:76:73:78:7b:5e:c6:19:cd:fd:49:b3:5a:2e:
                    b1:02:0b:d3:7d:68:ee:ad:93:aa:dd:3c:63:a7:b8:
                    9d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BD:9E:99:04:5D:37:CB:13:CB:3A:66:84:81:2B:26:DD:96:63:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b4e558b1-5ef2-3376-97bc-0cf43645916e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.109.0/24
                IPv6:
                  2001:418:1401:c3::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b0:ce:43:d9:30:21:47:9c:58:2f:04:df:d3:73:9d:97:87:
         42:ad:1a:67:27:4d:d6:a0:e1:28:4f:32:6d:eb:dd:18:83:9a:
         93:7c:29:03:3f:d5:10:2a:bf:6d:c8:4b:df:02:8b:19:83:b8:
         5d:94:9f:09:f1:47:1e:21:11:5d:ec:2b:d5:de:0a:98:6a:f7:
         fa:d8:2f:a7:a6:57:e1:65:7e:14:4c:72:cc:b5:db:1b:40:4c:
         6b:f5:6a:1c:a0:87:cd:8a:e9:ed:4b:8c:d7:87:3e:9b:7f:0e:
         02:a4:42:80:36:5e:2c:a0:b8:f9:a4:71:d7:65:f1:1f:9d:c5:
         30:76:34:0e:68:c3:9f:71:a1:0e:5d:9e:5c:c5:11:8d:93:46:
         bc:ae:9b:3b:86:82:9f:2a:19:83:3e:13:e2:61:7b:69:a3:12:
         8c:81:6c:c4:f5:79:05:2c:dd:41:35:e8:87:ec:04:ef:c0:64:
         bf:19:6c:8c:8d:22:f9:f4:ff:3d:ac:42:e1:f2:8c:3f:2d:cf:
         ec:bd:8d:33:08:6e:76:88:ef:18:a8:0d:ce:44:62:b3:79:7f:
         79:01:71:9c:7b:23:62:0c:9e:2b:e3:ee:b3:ad:dd:69:dd:25:
         70:2b:b0:52:ba:13:d0:01:cb:59:48:4e:24:6f:4f:bb:2e:7d:
         ac:1b:02:f6
-----BEGIN CERTIFICATE-----
MIIGVjCCBT6gAwIBAgIUAQ0Mn0MoWD4pu8rrX4vR+fYkzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTE4MDQxMDExMjYwMloXDTI4MDQwODA0MDAwMFowLzEtMCsGA1UEAxMk
YTUyMjdhN2MtZWE3ZS00NzRmLThlZGYtNDcyOGZhOGQxYWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yAGssZ2mwTbuEIrk61cpBbP1wEoeRfO97vf
K/kuvp1iFSrbd/EXMJcl1R3p7qnVo8MgDIRV5QleKAWbjKtmddjmmOiZYzg1gsZY
re4p9fJyNIb+ygjRHQyJHaILocWQLlKYIIuFiPFE0oYA5Hhrn1n9AVAT5km/ja+V
S0J3gDwHzQpHIkQ1/uIKGWDLL4K2wmSUZfWQCHdtd0LKKujryg194MJtTS7G/HjI
YUv1PKm8+d29uDIzneGD1ETeGPQH9r2QeK4cLpaExSMbTUH8Bq/eINmUTQZykJRF
LWGW8B00AXZzeHtexhnN/UmzWi6xAgvTfWjurZOq3Txjp7idMQIDAQABo4IDaDCC
A2QwHQYDVR0OBBYEFFO9npkEXTfLE8s6ZoSBKybdlmNOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjRlNTU4YjEtNWVmMi0z
Mzc2LTk3YmMtMGNmNDM2NDU5MTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMDIGCCsGAQUFBwEHAQH/BCMwITAMBAIAATAGAwQApf5tMBEE
AgACMAsDCQAgAQQYFAEAwzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI
KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw
cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXsM5D2TAhR5xYLwTf03Odl4dCrRpn
J03WoOEoTzJt690Yg5qTfCkDP9UQKr9tyEvfAosZg7hdlJ8J8UceIRFd7CvV3gqY
avf62C+nplfhZX4UTHLMtdsbQExr9WocoIfNiuntS4zXhz6bfw4CpEKANl4soLj5
pHHXZfEfncUwdjQOaMOfcaEOXZ5cxRGNk0a8rps7hoKfKhmDPhPiYXtpoxKMgWzE
9XkFLN1BNeiH7ATvwGS/GWyMjSL59P89rELh8ow/Lc/svY0zCG52iO8YqA3ORGKz
eX95AXGceyNiDJ4r4+6zrd1p3SVwK7BSuhPQActZSE4kb0+7Ln2sGwL2
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:16 2024 by rpki-client on console-ams.rpki-client.org