Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa
File:                     17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa (raw, json)
Hash identifier:          llEUXlelmC5v6OseFLtiHs0qC4illCpPk/bRDZHH5b4=
Subject key identifier:   76:B4:4F:01:8D:F7:F4:13:2A:03:68:BC:AD:39:53:C1:A9:83:72:98
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F43285845CE08F6BDB4B910DAE1AA3A00
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     394285
IP address blocks:        174.137.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f6:bd:b4:b9:10:da:e1:aa:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=3bc4a60a-e8f0-47d3-a939-e4850774f64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:83:ef:4e:76:79:56:ab:b4:c0:3d:ff:dd:b1:
                    9b:b5:53:19:ed:7d:4d:2e:0e:af:29:a6:21:e3:4a:
                    15:3a:46:e0:ac:23:69:6d:ad:91:50:8e:ed:26:39:
                    66:1a:86:63:d1:d8:21:7d:c2:5d:f4:9f:91:3d:2a:
                    6d:ac:23:28:99:0b:d3:e2:32:96:de:0b:dc:45:0d:
                    44:9b:64:da:a4:ee:4e:1d:08:a1:8f:fb:16:e9:00:
                    09:8a:78:22:f4:2c:26:73:89:bd:8e:fd:0e:02:80:
                    5c:c5:c7:a6:66:6d:c2:03:1a:1a:69:11:61:4d:d8:
                    af:6d:f0:bf:8b:d7:f5:73:89:f4:57:f8:7b:98:8f:
                    6b:53:ac:1d:32:7e:0e:f0:61:33:1b:4d:b5:c6:25:
                    25:d7:73:fb:d7:29:63:b3:47:a7:ad:73:30:4c:37:
                    a4:4c:d3:07:fd:91:bf:cc:a5:c4:0c:48:87:0e:b2:
                    13:28:51:53:7d:0a:71:8b:ee:c7:29:43:e3:04:3c:
                    3e:3f:60:94:1d:a1:1e:0a:ef:65:e5:49:68:ee:56:
                    6d:7f:a6:d6:4e:ac:4b:0c:ac:d0:bb:24:38:47:37:
                    93:38:93:80:4b:5e:7f:d8:10:99:40:c9:51:5e:45:
                    6c:9b:e6:a9:81:a8:6b:f1:1e:93:82:9d:e6:f3:16:
                    c1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B4:4F:01:8D:F7:F4:13:2A:03:68:BC:AD:39:53:C1:A9:83:72:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a0:0d:cc:10:46:5b:dc:32:71:e3:16:4e:db:b2:20:00:1f:
         b6:22:a6:19:37:2d:ee:11:14:67:61:db:e4:88:2c:96:2c:ba:
         29:2a:59:b2:d0:7c:00:2a:d3:5b:fe:26:30:b8:04:a6:3f:73:
         1e:93:81:c3:b8:81:fe:25:02:b2:90:00:65:42:7a:a1:57:e6:
         13:77:b6:2c:04:dd:5b:60:ca:fe:b6:fd:c7:07:88:ad:8e:52:
         c3:33:3e:85:a0:2e:67:57:c8:01:1d:d1:cd:e3:c3:f6:75:bc:
         6e:41:07:8e:da:82:87:0f:73:d8:bb:18:4d:a8:7f:9e:d5:97:
         ee:e9:41:9f:81:9d:42:cb:dc:fe:4c:e5:cd:19:45:4e:dc:0c:
         0d:10:7f:e3:8c:b1:a7:a7:cf:37:f0:09:0e:e0:ce:16:66:e0:
         f7:0f:5f:ef:22:4a:a6:5c:25:19:2b:26:f6:ed:d3:41:b6:92:
         48:f3:c2:1b:ca:03:de:9a:e7:35:16:e7:01:35:97:b6:88:62:
         a0:ea:fc:71:5e:37:61:7e:9d:01:c5:b7:85:09:e8:02:90:8c:
         cd:2b:df:86:60:92:9c:63:7a:97:57:17:96:d1:98:51:6a:61:
         b9:5a:77:cf:dc:cf:8a:cc:d9:ee:c0:ee:30:45:17:2c:47:b0:
         0e:fe:f0:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXOCPa9tLkQ2uGqOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4
OGEwMB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk
M2JjNGE2MGEtZThmMC00N2QzLWE5MzktZTQ4NTA3NzRmNjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYPvTnZ5Vqu0wD3/3bGbtVMZ7X1NLg6vKaYh
40oVOkbgrCNpba2RUI7tJjlmGoZj0dghfcJd9J+RPSptrCMomQvT4jKW3gvcRQ1E
m2TapO5OHQihj/sW6QAJingi9Cwmc4m9jv0OAoBcxcemZm3CAxoaaRFhTdivbfC/
i9f1c4n0V/h7mI9rU6wdMn4O8GEzG021xiUl13P71yljs0enrXMwTDekTNMH/ZG/
zKXEDEiHDrITKFFTfQpxi+7HKUPjBDw+P2CUHaEeCu9l5Ulo7lZtf6bWTqxLDKzQ
uyQ4RzeTOJOAS15/2BCZQMlRXkVsm+apgahr8R6Tgp3m8xbB5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHa0TwGN9/QTKgNovK05U8Gpg3KYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk
NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMTdkM2E0ZTMtNzFmOC0z
ODJjLTgzYTQtMzQ3NWFkNjMwMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk
NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw
ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz
ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrolmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIygDcwQRlvcMnHjFk7bsiAAH7Yiphk3Le4RFGdh2+SILJYsuikqWbLQ
fAAq01v+JjC4BKY/cx6TgcO4gf4lArKQAGVCeqFX5hN3tiwE3Vtgyv62/ccHiK2O
UsMzPoWgLmdXyAEd0c3jw/Z1vG5BB47agocPc9i7GE2of57Vl+7pQZ+BnULL3P5M
5c0ZRU7cDA0Qf+OMsaenzzfwCQ7gzhZm4PcPX+8iSqZcJRkrJvbt00G2kkjzwhvK
A96a5zUW5wE1l7aIYqDq/HFeN2F+nQHFt4UJ6AKQjM0r34ZgkpxjepdXF5bRmFFq
Yblad8/cz4rM2e7A7jBFFyxHsA7+8IU=
-----END CERTIFICATE-----
Generated at Mon May 20 15:19:38 2024 by rpki-client on console-fra.rpki-client.org