Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/dcf15059-d931-3160-9874-4ac8df593854.roa
File:                     dcf15059-d931-3160-9874-4ac8df593854.roa (raw, json)
Hash identifier:          /DEdZwWFOb5c4L8grQKJHoNSCvVAkuzWDlMomWlEL6s=
Subject key identifier:   A3:F6:73:8E:33:32:6B:41:D7:C8:8C:4A:64:95:8E:1B:4D:D9:62:FB
Certificate issuer:       /CN=5d613e84-be93-4d7a-a56c-57a378f2c325
Certificate serial:       010D0C9F432858475910B20B0A0C8EBCC96F65E0
Authority key identifier: 83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/dcf15059-d931-3160-9874-4ac8df593854.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     23188
IP address blocks:        104.153.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:b2:0b:0a:0c:8e:bc:c9:6f:65:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d613e84-be93-4d7a-a56c-57a378f2c325
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=7615ccb7-5346-46ca-bc50-0935b0d5b424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4f:78:22:cc:9f:61:30:64:06:ff:86:5a:f7:
                    5a:1b:b2:45:e0:22:43:2f:d5:23:22:e6:1e:cf:da:
                    8e:f5:25:fe:3d:f8:3a:81:e2:ab:c8:44:1c:c4:a2:
                    38:1d:dd:65:56:78:83:c7:01:55:5f:ec:a5:26:84:
                    01:52:cd:13:e6:40:fb:f0:64:8a:9c:c3:cc:44:8a:
                    e3:f9:fa:a4:97:d4:35:ae:50:72:9c:7f:6a:c5:3d:
                    33:70:89:31:99:65:69:2e:ac:1d:bc:bf:20:22:28:
                    66:89:7f:81:f1:e8:88:1e:e3:cf:30:1b:45:aa:e7:
                    91:0d:0a:d5:10:7a:57:57:c0:47:20:e7:fc:70:a4:
                    81:82:c2:c2:32:fd:65:2f:a1:0f:33:83:a3:57:d6:
                    64:93:31:7d:94:c0:92:3d:b7:94:b3:bf:db:54:da:
                    e1:5c:73:4f:b0:1e:fc:1e:92:17:ac:f1:8e:b4:90:
                    d0:bc:37:f4:65:d2:a1:2b:80:a8:79:58:ef:d2:da:
                    eb:8e:ad:13:eb:09:4b:41:87:55:8b:c2:92:fe:7c:
                    40:96:b5:b3:04:5e:bf:14:86:ef:f3:54:0c:80:f4:
                    3a:65:56:e9:f1:73:1b:e6:65:83:85:6a:9b:f5:69:
                    73:63:58:d5:45:97:9d:79:c1:24:0a:15:02:28:89:
                    f2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F6:73:8E:33:32:6B:41:D7:C8:8C:4A:64:95:8E:1B:4D:D9:62:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/dcf15059-d931-3160-9874-4ac8df593854.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl

            X509v3 Authority Key Identifier:
                keyid:83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:9e:68:69:d5:f3:2e:83:1d:9e:03:b6:ce:ff:fe:6b:e5:f8:
         5f:9d:80:70:10:7a:2a:52:99:e4:a3:0c:08:cd:88:cc:8e:7c:
         1b:ef:a2:96:a8:9a:34:11:01:8d:2c:aa:da:bb:ce:73:a4:4d:
         c2:50:13:05:03:94:b0:31:c1:27:2e:19:4c:b0:d3:48:29:84:
         20:7e:d3:12:2b:a9:b6:85:c9:91:ba:c1:cf:f6:a8:cf:e3:b0:
         dd:15:e0:93:e8:4b:2a:48:44:5c:8a:f3:c6:32:41:ab:73:55:
         42:9b:e6:69:e6:9e:c2:1d:5c:da:f3:24:4c:6f:ee:a1:16:fc:
         44:f1:e8:91:9f:e9:2f:3c:be:88:90:70:09:8e:ac:2a:63:9e:
         bf:ab:02:b6:8f:1f:39:ff:91:f9:f2:f0:95:81:b0:b5:d9:c3:
         d9:2d:1a:12:71:5b:af:72:46:2f:ff:69:ad:e0:40:5d:97:2a:
         c4:90:47:a5:2f:dc:01:4b:6c:0d:e5:af:4a:d1:bf:64:32:a3:
         28:38:09:51:d5:f5:a7:c2:31:d5:f5:d6:bf:63:f7:09:da:24:
         4c:41:20:16:49:35:bf:bd:39:6a:c7:34:f3:70:3d:13:e6:1b:
         6e:65:52:ff:35:00:1a:6f:33:60:db:e7:de:53:f0:c7:95:e5:
         5a:4b:02:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdZELILCgyOvMlvZeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ2MTNlODQtYmU5My00ZDdhLWE1NmMtNTdhMzc4ZjJj
MzI1MB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk
NzYxNWNjYjctNTM0Ni00NmNhLWJjNTAtMDkzNWIwZDViNDI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU94IsyfYTBkBv+GWvdaG7JF4CJDL9UjIuYe
z9qO9SX+Pfg6geKryEQcxKI4Hd1lVniDxwFVX+ylJoQBUs0T5kD78GSKnMPMRIrj
+fqkl9Q1rlBynH9qxT0zcIkxmWVpLqwdvL8gIihmiX+B8eiIHuPPMBtFqueRDQrV
EHpXV8BHIOf8cKSBgsLCMv1lL6EPM4OjV9ZkkzF9lMCSPbeUs7/bVNrhXHNPsB78
HpIXrPGOtJDQvDf0ZdKhK4CoeVjv0trrjq0T6wlLQYdVi8KS/nxAlrWzBF6/FIbv
81QMgPQ6ZVbp8XMb5mWDhWqb9WlzY1jVRZedecEkChUCKInyzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKP2c44zMmtB18iMSmSVjhtN2WL7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZDYx
M2U4NC1iZTkzLTRkN2EtYTU2Yy01N2EzNzhmMmMzMjUvZGNmMTUwNTktZDkzMS0z
MTYwLTk4NzQtNGFjOGRmNTkzODU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWQ2MTNlODQtYmU5My00ZDdhLWE1
NmMtNTdhMzc4ZjJjMzI1LzVkNjEzZTg0LWJlOTMtNGQ3YS1hNTZjLTU3YTM3OGYy
YzMyNS5jcmwwHwYDVR0jBBgwFoAUg9l+5YkNlHKjca9r0BTQzHTTHZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81ZDYxM2U4NC1iZTkzLTRkN2EtYTU2Yy01N2Ez
NzhmMmMzMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJkQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6eaGnV8y6DHZ4Dts7//mvl+F+dgHAQeipSmeSjDAjNiMyOfBvvopao
mjQRAY0sqtq7znOkTcJQEwUDlLAxwScuGUyw00gphCB+0xIrqbaFyZG6wc/2qM/j
sN0V4JPoSypIRFyK88YyQatzVUKb5mnmnsIdXNrzJExv7qEW/ETx6JGf6S88voiQ
cAmOrCpjnr+rAraPHzn/kfny8JWBsLXZw9ktGhJxW69yRi//aa3gQF2XKsSQR6Uv
3AFLbA3lr0rRv2Qyoyg4CVHV9afCMdX11r9j9wnaJExBIBZJNb+9OWrHNPNwPRPm
G25lUv81ABpvM2Db595T8MeV5VpLAoQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:37 2024 by rpki-client on console-fra.rpki-client.org