Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa
File:                     dfef9103-b23c-342c-83da-159fd5780ea7.roa (raw, json)
Hash identifier:          3DSLkZq95WJVY3T11XobawCjlj/wE4awKFFy8ciQUig=
Subject key identifier:   F6:5C:E4:CF:7E:8F:51:DE:31:34:31:3F:5D:9B:7E:B1:4E:68:37:8E
Certificate issuer:       /CN=1246a6a7-1908-49e7-9777-16290e028fb7
Certificate serial:       010D0C9F432858456F1DB1CE2FFE7ADBB1C36D00
Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     13638
IP address blocks:        65.254.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:b1:ce:2f:fe:7a:db:b1:c3:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=426784d5-849b-4d12-aa06-71f2bf6f337d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:93:74:57:da:69:7c:f3:13:e6:79:56:a1:
                    c1:c9:77:f9:dd:ad:d0:50:13:e2:2c:24:da:29:f5:
                    e9:66:2b:14:bf:ae:51:76:4c:b7:9e:b7:e5:8a:54:
                    e8:be:b5:be:6b:97:42:43:a8:5e:5e:3d:a3:c8:6b:
                    dc:0e:48:e5:d3:8e:03:89:f3:98:3c:86:91:6e:68:
                    1e:5c:05:37:26:28:ca:cd:e2:9d:46:26:68:cc:4f:
                    ff:68:ad:9a:ea:fb:74:fe:6d:a4:ac:ca:58:dc:09:
                    a3:ff:60:88:12:c9:7c:d2:ca:7c:2b:78:c2:a1:63:
                    67:97:b0:a9:db:a5:03:96:4b:0d:a1:57:cf:3c:ad:
                    77:28:e0:2d:de:ff:19:03:5f:c4:62:4c:cc:a2:6d:
                    bc:95:e2:62:3f:b4:fc:a3:80:12:e4:c2:3c:03:ba:
                    7b:74:45:80:52:13:85:07:4c:1d:ff:83:bc:36:e3:
                    01:7c:49:b6:ba:8c:7e:77:bf:1a:e8:21:fd:c1:d9:
                    12:ce:de:76:67:f2:60:1a:ff:3c:2a:e3:34:1f:e5:
                    15:6e:06:26:10:ef:1b:d3:7a:13:90:10:2d:37:b8:
                    9a:2d:42:fd:9f:50:fc:c4:ae:96:02:dd:aa:e0:d3:
                    be:62:53:1e:7a:3f:a2:6e:26:19:57:6f:7b:07:17:
                    92:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5C:E4:CF:7E:8F:51:DE:31:34:31:3F:5D:9B:7E:B1:4E:68:37:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl

            X509v3 Authority Key Identifier:
                keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:9a:f9:61:43:fa:0a:98:7f:fe:db:30:fd:53:9d:bb:5e:6d:
         b4:2d:b8:6b:ec:e7:83:30:00:92:45:0d:47:1b:16:67:8c:8f:
         d1:a1:eb:71:60:ed:d6:01:5a:77:15:7f:8e:d1:62:30:10:56:
         cd:fa:39:ba:a9:5e:5c:d4:1c:9c:d9:d8:6b:bb:5a:ed:0b:09:
         df:79:07:7b:76:f1:40:38:7d:46:91:7e:b9:ed:9d:d2:ce:97:
         0f:e9:28:16:40:a9:df:4b:bf:21:9e:d3:6d:38:56:41:75:50:
         40:7f:51:5a:32:1e:3d:47:9e:c1:27:3c:0c:4b:e3:bf:d8:cf:
         ca:47:04:45:1b:30:4b:92:94:77:25:86:46:c5:3a:09:15:e5:
         79:87:64:2b:58:32:a8:bb:55:e6:87:eb:8a:8c:b3:25:aa:0b:
         1c:37:b6:40:e8:8d:9f:e7:8b:a0:05:e1:8b:30:f7:67:b7:96:
         dd:07:1c:48:72:27:02:fd:78:7e:4c:49:03:a3:de:4a:47:ea:
         29:8c:64:cb:c6:d2:01:37:27:bf:0d:f7:09:3c:b2:d2:9f:c7:
         28:11:e1:4f:94:bc:4f:2c:ac:43:73:34:00:39:8c:53:77:de:
         34:e3:52:e7:d9:2b:82:28:92:79:21:aa:86:0a:78:59:8a:39:
         78:5e:53:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVvHbHOL/5627HDbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4
ZmI3MB4XDTI0MDQwNDEzMDAzNloXDTI0MDcwMzEzMDAzNlowLzEtMCsGA1UEAxMk
NDI2Nzg0ZDUtODQ5Yi00ZDEyLWFhMDYtNzFmMmJmNmYzMzdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneOTdFfaaXzzE+Z5VqHByXf53a3QUBPiLCTa
KfXpZisUv65Rdky3nrflilTovrW+a5dCQ6heXj2jyGvcDkjl044DifOYPIaRbmge
XAU3JijKzeKdRiZozE//aK2a6vt0/m2krMpY3Amj/2CIEsl80sp8K3jCoWNnl7Cp
26UDlksNoVfPPK13KOAt3v8ZA1/EYkzMom28leJiP7T8o4AS5MI8A7p7dEWAUhOF
B0wd/4O8NuMBfEm2uox+d78a6CH9wdkSzt52Z/JgGv88KuM0H+UVbgYmEO8b03oT
kBAtN7iaLUL9n1D8xK6WAt2q4NO+YlMeej+ibiYZV297BxeStwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPZc5M9+j1HeMTQxP12bfrFOaDeOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2
YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvZGZlZjkxMDMtYjIzYy0z
NDJjLTgzZGEtMTU5ZmQ1NzgwZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3
NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy
OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5
MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQf6QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJqa+WFD+gqYf/7bMP1TnbtebbQtuGvs54MwAJJFDUcbFmeMj9Gh63Fg
7dYBWncVf47RYjAQVs36ObqpXlzUHJzZ2Gu7Wu0LCd95B3t28UA4fUaRfrntndLO
lw/pKBZAqd9LvyGe0204VkF1UEB/UVoyHj1HnsEnPAxL47/Yz8pHBEUbMEuSlHcl
hkbFOgkV5XmHZCtYMqi7VeaH64qMsyWqCxw3tkDojZ/ni6AF4Ysw92e3lt0HHEhy
JwL9eH5MSQOj3kpH6imMZMvG0gE3J78N9wk8stKfxygR4U+UvE8srENzNAA5jFN3
3jTjUufZK4IoknkhqoYKeFmKOXheU7Q=
-----END CERTIFICATE-----
Generated at Wed May 22 01:42:14 2024 by rpki-client on console-ams.rpki-client.org