Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2ba568db-f1ff-3fa7-b5e9-a25cbe6d877c.roa
File:                     2ba568db-f1ff-3fa7-b5e9-a25cbe6d877c.roa (raw, json)
Hash identifier:          OR2LHGhCNQ7iVmXx+iThvU2Xrng2Jpyux0SWgu0D25U=
Subject key identifier:   2E:79:0E:F7:48:68:5F:B0:EB:94:2C:0E:47:7A:02:E4:7C:7D:CC:3D
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858452EE7E4733593C67312131180
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2ba568db-f1ff-3fa7-b5e9-a25cbe6d877c.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     15247
IP address blocks:        208.181.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:e4:73:35:93:c6:73:12:13:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=edbb320b-1786-491a-b7df-64eb63eb98c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:26:74:30:15:71:cc:47:aa:66:f7:e3:4c:fc:
                    19:9f:c2:4b:b3:5b:cb:e3:22:17:52:a3:3e:c4:3a:
                    94:11:f1:34:04:ef:a4:43:78:1f:a4:9c:f9:77:1d:
                    fb:e4:97:cc:fa:cd:ca:f5:62:92:a5:53:13:d0:7e:
                    d7:c4:4c:f3:db:07:a3:ab:14:3f:a6:b0:f1:65:25:
                    8e:e3:17:61:95:f4:dd:70:68:67:1e:0e:c5:84:b2:
                    68:e0:82:71:6c:e5:6c:3d:c1:4b:92:81:1f:87:6b:
                    bd:fe:86:89:3d:a1:e4:df:0a:dd:c9:e3:35:91:27:
                    3f:39:35:fb:97:90:4f:66:1a:47:71:c0:81:26:f9:
                    fa:ca:d5:9f:be:e4:61:a1:42:ea:c9:2f:fd:fb:36:
                    84:71:62:de:03:ac:f4:9f:bf:01:88:ba:a7:ad:d0:
                    95:8f:d7:29:f0:e9:95:9e:91:32:d2:ab:41:ec:19:
                    2c:59:f4:35:a9:f6:cb:26:c6:ec:ad:b7:e9:19:b3:
                    a4:b3:43:42:f7:bf:fd:66:a8:62:05:ea:f9:97:95:
                    25:2b:73:b1:2b:dd:c4:c9:b2:b2:6d:63:2f:fa:33:
                    c0:39:b9:dd:75:cf:b8:c2:dd:e3:80:fb:e8:38:6e:
                    03:e2:7a:30:c3:dd:6a:8b:44:21:b9:51:b1:aa:35:
                    e1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:79:0E:F7:48:68:5F:B0:EB:94:2C:0E:47:7A:02:E4:7C:7D:CC:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2ba568db-f1ff-3fa7-b5e9-a25cbe6d877c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:36:f5:8d:76:97:a8:e7:a7:93:6a:fe:4c:1a:7a:06:64:88:
         ac:ed:34:5b:fb:25:0a:52:4c:45:9d:49:08:77:0e:26:82:2f:
         3b:67:f4:3f:2f:71:45:03:50:d7:4c:f6:a9:ca:88:da:f5:b9:
         6c:35:ae:de:fa:54:1e:a0:3c:7f:4c:08:25:cb:25:22:4e:a4:
         19:17:42:c4:51:72:45:aa:9a:1c:87:3b:49:ac:be:91:30:cb:
         9c:91:1e:a3:db:9b:b1:35:6b:eb:62:0f:ce:a7:95:64:10:18:
         33:2a:03:5e:76:08:fa:bb:89:e7:29:24:0e:8c:fd:ab:31:ed:
         0c:37:7f:d9:20:a9:be:06:62:59:eb:8a:91:39:45:21:0b:cb:
         66:ba:1b:5d:21:65:47:d2:b6:c2:c4:ea:49:f8:cc:10:95:10:
         50:50:fa:84:61:54:ee:fa:4f:94:28:32:c1:04:ed:e2:f2:18:
         0c:46:5e:1c:0a:7b:b4:04:7c:5b:76:76:e8:e8:25:ba:c4:bb:
         29:87:6b:e0:e0:95:bd:d7:e1:1e:da:6e:87:c5:95:3d:05:20:
         b3:02:5a:0b:1f:11:f6:68:b7:5f:73:ce:c7:64:f4:e5:ce:09:
         3c:7b:2e:92:84:c4:39:0e:b3:09:9b:fa:6b:8c:2b:71:b5:12:
         a3:13:72:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUu5+RzNZPGcxITEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDMxMjEzMDAyOFoXDTI0MDYxMDEzMDAyOFowLzEtMCsGA1UEAxMk
ZWRiYjMyMGItMTc4Ni00OTFhLWI3ZGYtNjRlYjYzZWI5OGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSZ0MBVxzEeqZvfjTPwZn8JLs1vL4yIXUqM+
xDqUEfE0BO+kQ3gfpJz5dx375JfM+s3K9WKSpVMT0H7XxEzz2wejqxQ/prDxZSWO
4xdhlfTdcGhnHg7FhLJo4IJxbOVsPcFLkoEfh2u9/oaJPaHk3wrdyeM1kSc/OTX7
l5BPZhpHccCBJvn6ytWfvuRhoULqyS/9+zaEcWLeA6z0n78BiLqnrdCVj9cp8OmV
npEy0qtB7BksWfQ1qfbLJsbsrbfpGbOks0NC97/9ZqhiBer5l5UlK3OxK93EybKy
bWMv+jPAObnddc+4wt3jgPvoOG4D4noww91qi0QhuVGxqjXhkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC55DvdIaF+w65QsDkd6AuR8fcw9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmJhNTY4ZGItZjFmZi0z
ZmE3LWI1ZTktYTI1Y2JlNmQ4NzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LVlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJI29Y12l6jnp5Nq/kwaegZkiKztNFv7JQpSTEWdSQh3DiaCLztn9D8v
cUUDUNdM9qnKiNr1uWw1rt76VB6gPH9MCCXLJSJOpBkXQsRRckWqmhyHO0msvpEw
y5yRHqPbm7E1a+tiD86nlWQQGDMqA152CPq7iecpJA6M/asx7Qw3f9kgqb4GYlnr
ipE5RSELy2a6G10hZUfStsLE6kn4zBCVEFBQ+oRhVO76T5QoMsEE7eLyGAxGXhwK
e7QEfFt2dujoJbrEuymHa+Dglb3X4R7abofFlT0FILMCWgsfEfZot19zzsdk9OXO
CTx7LpKExDkOswmb+muMK3G1EqMTcl0=
-----END CERTIFICATE-----
Generated at Sat May 18 16:10:59 2024 by rpki-client on console-ams.rpki-client.org