Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4f1ce8c1-6f8a-37dc-a714-fb6e34664afc.roa
File:                     4f1ce8c1-6f8a-37dc-a714-fb6e34664afc.roa (raw, json)
Hash identifier:          pPHAYtp+xTsL5iFs6ncMw72eEfrvznqlcBjr6Hm7I/Y=
Subject key identifier:   00:25:A8:AC:78:DC:48:F5:19:B1:C0:22:84:78:C2:84:92:56:5A:1F
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858455A2D86AEF86DFB828B8053C0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4f1ce8c1-6f8a-37dc-a714-fb6e34664afc.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     203963
IP address blocks:        140.228.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:86:ae:f8:6d:fb:82:8b:80:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=ec63d1c3-0611-466a-8ba1-fe5eb65fc2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:29:20:ea:83:39:ce:27:9d:05:62:13:e4:21:
                    ec:3c:1e:42:25:61:9d:6e:f9:bd:ca:b5:5e:b6:2c:
                    90:66:03:8f:04:eb:cb:6e:d6:87:4e:42:76:30:75:
                    a1:42:70:a7:00:e5:b3:c9:3a:7d:7d:af:96:b0:b5:
                    6f:54:4f:14:48:2c:69:49:f3:47:f0:e1:9b:31:e7:
                    7e:fe:cd:4b:75:76:b0:85:c2:e5:09:8a:8f:1e:5a:
                    69:df:44:70:90:28:4b:19:b3:ce:d4:f3:ea:e8:f6:
                    e9:77:a4:f5:55:fd:ca:2b:a4:71:21:c8:c6:31:84:
                    8e:30:e1:c1:d4:7b:21:20:d6:56:70:fd:64:eb:4a:
                    22:25:5f:ad:9f:fa:dd:e1:c2:e8:71:33:cc:de:b2:
                    30:84:ae:fc:9a:37:6e:b7:01:e0:ca:4f:74:15:6e:
                    90:2d:42:d5:35:ce:a6:f4:5b:40:68:e0:55:e8:f3:
                    2c:a0:61:fd:6b:6a:00:5c:07:b7:d3:af:15:34:7e:
                    82:a4:76:1a:c0:ac:b6:ae:c6:24:f5:a3:94:05:7d:
                    27:e1:a9:25:5d:6a:63:8b:32:6d:d2:11:11:9c:76:
                    40:cc:1d:8b:32:6c:7d:04:26:84:30:a4:bf:33:ce:
                    8d:2a:fc:50:df:6a:0a:e5:a4:eb:58:80:56:18:05:
                    1a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:25:A8:AC:78:DC:48:F5:19:B1:C0:22:84:78:C2:84:92:56:5A:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4f1ce8c1-6f8a-37dc-a714-fb6e34664afc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:13:ab:33:6b:c0:e2:73:e1:02:65:61:d6:ff:0c:3a:77:da:
         72:02:be:45:13:be:d6:f8:37:35:89:b8:fc:0e:94:39:2e:ed:
         a8:20:e5:8f:63:73:86:08:2c:3c:15:f9:c8:cc:e5:3f:5e:f2:
         a5:5c:12:65:a9:fc:a8:46:39:06:81:2d:88:4c:71:eb:bb:a8:
         28:18:8d:b0:3a:0d:93:9f:9f:1c:76:de:a2:bb:cb:72:2e:e2:
         69:78:ca:54:c6:06:45:ef:e9:c4:3f:7f:91:6c:bd:b3:e9:f1:
         4c:1a:b9:cf:bf:8d:cb:05:84:93:f6:9b:f1:a3:7f:3e:f5:60:
         e2:38:97:6e:39:c4:2b:64:1c:83:f2:3d:17:5c:c6:5f:bb:28:
         01:71:39:50:bc:4a:51:93:18:55:38:06:69:96:aa:5e:de:34:
         bf:74:d1:38:2f:dc:5e:0f:d4:7b:ab:aa:f4:ce:d2:0c:9f:b4:
         6e:64:d0:79:38:99:28:96:b9:2d:7c:f5:74:56:c8:42:49:42:
         b7:fa:d1:45:ad:ff:af:8f:77:c6:f1:bc:42:e1:ed:df:24:36:
         a2:9d:bd:e6:67:6c:b6:bd:f1:9f:95:d4:95:47:09:88:fa:b5:
         af:0f:a8:dd:5e:76:b2:bb:9c:2a:2d:bd:b0:fa:85:57:3e:b1:
         4c:70:6d:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVaLYau+G37gouAU8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI0MDMyODAxMDAyN1oXDTI0MDYyNjAxMDAyN1owLzEtMCsGA1UEAxMk
ZWM2M2QxYzMtMDYxMS00NjZhLThiYTEtZmU1ZWI2NWZjMmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgykg6oM5ziedBWIT5CHsPB5CJWGdbvm9yrVe
tiyQZgOPBOvLbtaHTkJ2MHWhQnCnAOWzyTp9fa+WsLVvVE8USCxpSfNH8OGbMed+
/s1LdXawhcLlCYqPHlpp30RwkChLGbPO1PPq6Pbpd6T1Vf3KK6RxIcjGMYSOMOHB
1HshINZWcP1k60oiJV+tn/rd4cLocTPM3rIwhK78mjdutwHgyk90FW6QLULVNc6m
9FtAaOBV6PMsoGH9a2oAXAe3068VNH6CpHYawKy2rsYk9aOUBX0n4aklXWpjizJt
0hERnHZAzB2LMmx9BCaEMKS/M86NKvxQ32oK5aTrWIBWGAUaVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAAlqKx43Ej1GbHAIoR4woSSVlofMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNGYxY2U4YzEtNmY4YS0z
N2RjLWE3MTQtZmI2ZTM0NjY0YWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIcTqzNrwOJz4QJlYdb/DDp32nICvkUTvtb4NzWJuPwOlDku7agg5Y9j
c4YILDwV+cjM5T9e8qVcEmWp/KhGOQaBLYhMceu7qCgYjbA6DZOfnxx23qK7y3Iu
4ml4ylTGBkXv6cQ/f5FsvbPp8Uwauc+/jcsFhJP2m/Gjfz71YOI4l245xCtkHIPy
PRdcxl+7KAFxOVC8SlGTGFU4BmmWql7eNL900Tgv3F4P1HurqvTO0gyftG5k0Hk4
mSiWuS189XRWyEJJQrf60UWt/6+Pd8bxvELh7d8kNqKdveZnbLa98Z+V1JVHCYj6
ta8PqN1edrK7nCotvbD6hVc+sUxwbXc=
-----END CERTIFICATE-----
Generated at Sat May 4 16:50:40 2024 by rpki-client on console-ams.rpki-client.org