Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/364b006a-dadb-395d-bc34-448cd3148010.roa
File:                     364b006a-dadb-395d-bc34-448cd3148010.roa (raw, json)
Hash identifier:          9Skg7ah9gJ8h+zWKWz5yjmXIIqPfUsdtPbz9gK31C8U=
Subject key identifier:   F0:23:4F:92:48:46:D9:32:31:77:08:61:1E:DA:0D:EC:22:0A:A2:78
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285844F89554C9D5467DC27F2E90E0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/364b006a-dadb-395d-bc34-448cd3148010.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     62651
IP address blocks:        216.131.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:54:c9:d5:46:7d:c2:7f:2e:90:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=662d857f-3603-4365-82c2-1827edd9955f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fe:68:f2:e6:40:6a:8e:d7:20:d9:e1:f5:33:
                    d5:e5:07:70:a9:39:ae:14:a0:0c:28:67:2f:8c:a3:
                    d2:67:e5:61:d3:fb:16:65:15:88:9e:59:03:0e:12:
                    97:0c:05:da:25:de:77:2c:bf:70:5f:ec:0e:26:8a:
                    d2:be:dd:a5:19:72:6c:6e:96:9e:04:3f:71:2d:0c:
                    10:11:29:61:c6:86:1b:15:f0:e5:42:bb:30:8c:64:
                    66:d8:c7:f2:09:09:b8:3f:c4:e2:4f:0f:0c:5d:87:
                    05:81:8c:6e:c4:4e:78:7e:8a:dc:38:4d:6d:3e:71:
                    aa:33:39:48:b6:4e:ed:54:86:ae:60:36:66:1a:ae:
                    61:33:30:e9:e8:58:95:8a:1c:a8:40:4d:cc:da:94:
                    24:33:c8:81:31:5d:66:78:80:5d:7d:25:d8:1d:53:
                    42:3f:3e:bf:48:2e:49:be:ae:f3:dc:3e:37:2d:e7:
                    86:e0:37:97:b0:46:96:f7:d1:9f:0e:cd:37:7a:d7:
                    bd:54:39:92:b1:d4:cd:5f:09:05:0f:11:30:2e:58:
                    47:5a:bf:a6:47:74:ca:75:b9:72:30:2e:ee:b6:63:
                    d1:c2:65:9f:77:b5:22:eb:0e:33:f3:aa:1c:0b:e0:
                    e8:a7:c5:46:1f:c7:a0:7a:ab:ad:78:b7:b6:a4:c6:
                    c7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:23:4F:92:48:46:D9:32:31:77:08:61:1E:DA:0D:EC:22:0A:A2:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/364b006a-dadb-395d-bc34-448cd3148010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d0:8b:f3:bd:42:8c:a5:59:86:10:f0:9c:6e:28:c2:1a:30:
         52:d7:b6:cc:f0:07:ee:94:5d:41:16:3a:99:0f:95:53:7d:39:
         1f:42:2b:6a:fe:7a:48:e3:e1:96:6c:d4:aa:dc:d9:16:c3:d3:
         fd:6e:5f:44:63:af:61:19:10:55:c1:36:ff:2b:1a:7b:6d:63:
         6d:dc:3a:45:24:2a:84:91:f8:72:a7:18:d3:a5:9b:3c:23:d2:
         ba:d8:ab:7e:d2:06:87:44:85:6e:82:45:8c:96:ae:ad:8a:a0:
         05:93:ad:8b:03:59:1e:cd:34:d5:c9:50:06:23:52:2d:44:45:
         92:de:34:c7:b6:f1:98:7a:45:7c:7c:e1:53:a7:e1:4c:f3:70:
         43:f7:f8:93:cc:b7:36:0a:87:ad:c2:29:a2:3d:d4:6d:4c:f5:
         da:81:5d:ce:f8:2c:df:15:d1:98:d0:f4:08:5e:c1:32:09:95:
         0c:0c:78:a6:04:a6:7c:44:ef:96:dc:9c:30:ae:0b:8f:30:7c:
         cf:83:46:93:f8:26:78:41:13:0f:30:1e:cf:c7:89:dc:4a:35:
         d4:35:ff:53:bd:b8:44:28:b6:9f:89:99:49:3c:a0:5b:85:71:
         79:9a:28:a8:8b:88:48:a7:8c:ed:94:91:7a:8e:ce:db:ea:75:
         92:9c:a4:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET4lVTJ1UZ9wn8ukOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk
NjYyZDg1N2YtMzYwMy00MzY1LTgyYzItMTgyN2VkZDk5NTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4f5o8uZAao7XINnh9TPV5QdwqTmuFKAMKGcv
jKPSZ+Vh0/sWZRWInlkDDhKXDAXaJd53LL9wX+wOJorSvt2lGXJsbpaeBD9xLQwQ
ESlhxoYbFfDlQrswjGRm2MfyCQm4P8TiTw8MXYcFgYxuxE54forcOE1tPnGqMzlI
tk7tVIauYDZmGq5hMzDp6FiVihyoQE3M2pQkM8iBMV1meIBdfSXYHVNCPz6/SC5J
vq7z3D43LeeG4DeXsEaW99GfDs03ete9VDmSsdTNXwkFDxEwLlhHWr+mR3TKdbly
MC7utmPRwmWfd7Ui6w4z86ocC+Dop8VGH8egequteLe2pMbHFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPAjT5JIRtkyMXcIYR7aDewiCqJ4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMzY0YjAwNmEtZGFkYi0z
OTVkLWJjMzQtNDQ4Y2QzMTQ4MDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvQi/O9QoylWYYQ8JxuKMIaMFLXtszwB+6UXUEWOpkPlVN9OR9CK2r+
ekjj4ZZs1Krc2RbD0/1uX0Rjr2EZEFXBNv8rGnttY23cOkUkKoSR+HKnGNOlmzwj
0rrYq37SBodEhW6CRYyWrq2KoAWTrYsDWR7NNNXJUAYjUi1ERZLeNMe28Zh6RXx8
4VOn4UzzcEP3+JPMtzYKh63CKaI91G1M9dqBXc74LN8V0ZjQ9AhewTIJlQwMeKYE
pnxE75bcnDCuC48wfM+DRpP4JnhBEw8wHs/HidxKNdQ1/1O9uEQotp+JmUk8oFuF
cXmaKKiLiEinjO2UkXqOztvqdZKcpCs=
-----END CERTIFICATE-----
Generated at Fri May 10 03:03:07 2024 by rpki-client on console-ams.rpki-client.org