Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a546b0b4-341e-32c7-ac09-a2d41ee017a5.roa
File:                     a546b0b4-341e-32c7-ac09-a2d41ee017a5.roa (raw, json)
Hash identifier:          XqKEJtowgb/5fFWzmXYXu4F/iCe0BtEakObCl+YzWlk=
Subject key identifier:   FC:6E:96:01:1A:14:EF:9F:2B:73:BC:38:72:FB:61:55:AD:6C:27:40
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858452D8289372B34C8F010DCB8B0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a546b0b4-341e-32c7-ac09-a2d41ee017a5.roa
Signing time:             Tue 12 Mar 2024 01:00:25 +0000
ROA not before:           Tue 12 Mar 2024 01:00:25 +0000
ROA not after:            Mon 10 Jun 2024 01:00:25 +0000
asID:                     19905
IP address blocks:        207.34.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:82:89:37:2b:34:c8:f0:10:dc:b8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 12 01:00:25 2024 GMT
            Not After : Jun 10 01:00:25 2024 GMT
        Subject: CN=34bd2f73-4f54-4586-aa0f-0c00c5f8227d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f4:29:ea:8e:47:b8:43:9d:27:57:62:4d:48:
                    08:70:53:14:fb:56:85:be:f0:31:2a:2a:30:40:fc:
                    96:1b:da:d7:c4:61:13:45:82:2a:be:f1:f9:2e:89:
                    57:29:8b:4e:39:e8:63:e1:ae:ef:63:a8:31:0a:4f:
                    63:57:63:80:05:95:14:38:c7:55:1c:24:f1:94:80:
                    35:94:18:e9:4f:dd:09:25:25:40:cf:90:7c:4a:7a:
                    99:e4:93:5c:8d:1a:b5:e8:48:49:bf:b9:75:8e:1b:
                    1c:97:a5:31:4f:6e:84:c8:43:43:b1:d1:b5:6b:f9:
                    08:0d:27:f0:94:92:15:7e:57:ef:7b:81:5c:50:1c:
                    d9:24:60:68:b5:0c:e5:09:4c:87:21:26:db:19:11:
                    22:78:2e:a3:b2:cf:9b:bf:9a:77:b7:76:19:0d:ca:
                    23:7a:ee:9c:d6:02:f8:5f:8c:0c:9f:ae:7b:d1:42:
                    22:4c:ec:78:9c:b9:68:86:c0:e8:f3:d3:a3:01:0f:
                    9d:b2:09:dc:d3:ab:75:7d:96:5a:72:ca:f7:5d:ab:
                    f4:93:2c:8b:dc:41:cd:3e:2f:e1:36:d5:7e:ec:0b:
                    ef:ab:51:76:a8:f1:e5:73:85:44:b2:bb:44:f1:fc:
                    22:07:63:b2:39:a1:f3:95:97:85:1f:83:b8:d7:38:
                    82:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6E:96:01:1A:14:EF:9F:2B:73:BC:38:72:FB:61:55:AD:6C:27:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a546b0b4-341e-32c7-ac09-a2d41ee017a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:8b:96:0c:34:43:b2:fc:92:ef:04:5e:2a:01:3d:19:e3:d6:
         9d:16:12:5d:68:9c:86:e2:d8:de:23:ae:c7:be:62:17:00:b4:
         93:28:91:12:5c:84:f8:40:2d:74:19:16:57:6d:4b:80:cc:67:
         cd:14:e5:94:d9:4f:a9:07:9a:bb:dd:68:8b:22:47:39:e7:54:
         ea:a8:9b:ab:d1:5c:fb:e0:29:41:ce:79:32:13:70:25:a9:37:
         74:a6:2b:82:25:de:bc:5f:c4:6d:40:65:df:37:97:59:6c:1d:
         0f:1f:08:8b:f2:8c:c7:39:8f:1a:a0:24:87:54:51:b8:0e:cc:
         aa:9f:9d:f4:92:00:e0:77:09:cc:88:5a:ae:16:22:65:e8:bb:
         53:a1:c6:ff:c1:f4:af:a4:fc:49:4a:df:f9:a0:0f:14:bc:d0:
         7a:e7:cb:bd:89:a3:b9:ad:40:a9:c8:26:bd:1a:97:ef:12:e7:
         7a:76:20:f2:75:b9:07:9c:94:ea:23:1e:d9:34:d0:6d:7b:52:
         a0:95:7e:f2:17:be:41:83:59:1b:df:3d:7d:3c:42:df:35:0a:
         46:78:2f:b4:47:57:c6:e1:3d:5c:9e:38:b1:55:ed:8b:0c:7b:
         8e:20:d9:66:3d:b6:65:4d:a9:52:0e:43:f5:ee:08:6c:58:cd:
         6a:0e:08:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUtgok3KzTI8BDcuLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDMxMjAxMDAyNVoXDTI0MDYxMDAxMDAyNVowLzEtMCsGA1UEAxMk
MzRiZDJmNzMtNGY1NC00NTg2LWFhMGYtMGMwMGM1ZjgyMjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/Qp6o5HuEOdJ1diTUgIcFMU+1aFvvAxKiow
QPyWG9rXxGETRYIqvvH5LolXKYtOOehj4a7vY6gxCk9jV2OABZUUOMdVHCTxlIA1
lBjpT90JJSVAz5B8SnqZ5JNcjRq16EhJv7l1jhscl6UxT26EyENDsdG1a/kIDSfw
lJIVflfve4FcUBzZJGBotQzlCUyHISbbGREieC6jss+bv5p3t3YZDcojeu6c1gL4
X4wMn6570UIiTOx4nLlohsDo89OjAQ+dsgnc06t1fZZacsr3Xav0kyyL3EHNPi/h
NtV+7Avvq1F2qPHlc4VEsrtE8fwiB2OyOaHzlZeFH4O41ziCgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPxulgEaFO+fK3O8OHL7YVWtbCdAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTU0NmIwYjQtMzQxZS0z
MmM3LWFjMDktYTJkNDFlZTAxN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyJ1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIGLlgw0Q7L8ku8EXioBPRnj1p0WEl1onIbi2N4jrse+YhcAtJMokRJc
hPhALXQZFldtS4DMZ80U5ZTZT6kHmrvdaIsiRznnVOqom6vRXPvgKUHOeTITcCWp
N3SmK4Il3rxfxG1AZd83l1lsHQ8fCIvyjMc5jxqgJIdUUbgOzKqfnfSSAOB3CcyI
Wq4WImXou1Ohxv/B9K+k/ElK3/mgDxS80Hrny72Jo7mtQKnIJr0al+8S53p2IPJ1
uQeclOojHtk00G17UqCVfvIXvkGDWRvfPX08Qt81CkZ4L7RHV8bhPVyeOLFV7YsM
e44g2WY9tmVNqVIOQ/XuCGxYzWoOCJY=
-----END CERTIFICATE-----
Generated at Thu May 2 14:55:20 2024 by rpki-client on console-fra.rpki-client.org