Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/3e610bf7-f81d-344c-b09a-26bf1c655ae8.roa
File:                     3e610bf7-f81d-344c-b09a-26bf1c655ae8.roa (raw, json)
Hash identifier:          qyY45uxT1Vt3Nl8qCaMPp99IxqjSPfwZH2Crsyy05j0=
Subject key identifier:   36:7A:DE:20:B7:28:CE:88:35:45:C0:0D:B1:57:63:3D:0F:43:9C:CD
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F4328584514802EAACB09503FE30470C0
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/3e610bf7-f81d-344c-b09a-26bf1c655ae8.roa
Signing time:             Sun 03 Mar 2024 02:00:27 +0000
ROA not before:           Sun 03 Mar 2024 02:00:27 +0000
ROA not after:            Sat 01 Jun 2024 01:00:27 +0000
asID:                     1299
IP address blocks:        204.156.84.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:14:80:2e:aa:cb:09:50:3f:e3:04:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Mar  3 02:00:27 2024 GMT
            Not After : Jun  1 01:00:27 2024 GMT
        Subject: CN=6935f69b-63fa-4ffc-8e63-2e2e3035d8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:3e:cd:1f:fd:e3:4d:f2:ee:3e:ad:7b:65:
                    2a:ed:68:8e:ea:78:1c:84:d9:28:5d:c7:1a:e6:b0:
                    da:b8:cf:12:7f:07:22:25:94:5c:2c:da:c1:da:1e:
                    ac:2d:70:08:35:13:67:ed:74:2d:9b:29:fd:99:b3:
                    24:03:20:d9:3c:49:25:2c:3f:91:ed:c6:4f:be:67:
                    42:b6:b5:f8:da:dd:54:33:a3:2f:41:bb:f9:79:0a:
                    72:25:1d:aa:cc:70:bb:13:76:b7:69:d7:c6:6c:e6:
                    76:df:d2:9a:40:51:38:36:03:fb:3d:34:5f:f2:21:
                    76:ac:ae:c3:bf:ff:88:16:a2:92:9d:55:79:e0:ee:
                    84:c9:c2:73:a0:1a:94:d7:d5:b2:51:13:99:23:82:
                    21:7a:8c:c2:55:d9:28:30:6f:61:36:61:1c:59:c4:
                    5b:9e:72:26:ce:ce:d3:0a:49:0c:d6:85:38:39:8f:
                    a5:3f:c5:56:89:f4:01:98:67:85:31:e3:b5:e1:fa:
                    85:e5:1b:e8:39:25:19:cc:cb:b6:a2:4c:c8:af:50:
                    1c:5e:fd:4a:49:bb:18:af:67:00:21:b7:72:1e:af:
                    c9:ad:4d:76:47:ad:ac:d7:90:4f:18:cc:b7:f2:a8:
                    00:48:65:6b:4b:6d:a2:23:b0:26:3f:ad:19:92:3f:
                    8f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7A:DE:20:B7:28:CE:88:35:45:C0:0D:B1:57:63:3D:0F:43:9C:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/3e610bf7-f81d-344c-b09a-26bf1c655ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:17:70:c2:a0:32:76:a7:b4:f6:07:cf:4e:31:d0:7f:2b:5b:
         f1:73:96:54:dc:14:0f:5d:8f:d6:0f:74:65:09:b3:49:4c:43:
         a6:d8:99:75:55:73:37:e1:1b:1f:57:cb:9f:63:ec:ca:55:7d:
         a2:1b:c7:95:7f:bd:b2:6b:b9:56:2a:01:e1:de:85:ba:bb:a6:
         84:94:f6:ce:0b:da:aa:5d:d5:5e:be:c9:71:cb:52:57:08:f8:
         5c:15:ac:c3:14:31:a0:0a:40:57:10:fb:50:a4:91:a3:29:47:
         4e:cc:d5:77:30:12:a9:db:c3:84:46:ec:65:f7:a5:8f:f3:ea:
         ed:56:54:98:13:06:32:5d:60:23:c0:1a:68:5e:42:ae:fe:19:
         b1:71:02:f4:d8:03:90:47:11:d8:b6:6f:16:a1:58:be:87:f5:
         cb:3d:6d:07:33:1e:57:18:b5:45:c9:01:0e:4a:c2:95:b0:fe:
         03:2a:29:4b:95:b0:4d:dc:0b:6e:0b:ac:d8:23:e1:8c:33:f2:
         a9:a7:2d:d2:d2:cb:19:53:f2:86:6a:b8:41:14:85:34:30:93:
         03:08:fd:b5:d5:08:65:fb:be:b4:09:53:44:43:6e:47:b7:0b:
         08:41:6a:55:00:41:cc:b3:40:37:76:1c:3c:b9:e8:b0:f6:94:
         b7:79:78:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUUgC6qywlQP+MEcMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2JjNzM0ODMtNjAzNC00ZGMwLWJiZjUtZTRkODJiZjI4
YWY5MB4XDTI0MDMwMzAyMDAyN1oXDTI0MDYwMTAxMDAyN1owLzEtMCsGA1UEAxMk
NjkzNWY2OWItNjNmYS00ZmZjLThlNjMtMmUyZTMwMzVkOGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGw+zR/9403y7j6te2Uq7WiO6ngchNkoXcca
5rDauM8SfwciJZRcLNrB2h6sLXAINRNn7XQtmyn9mbMkAyDZPEklLD+R7cZPvmdC
trX42t1UM6MvQbv5eQpyJR2qzHC7E3a3adfGbOZ239KaQFE4NgP7PTRf8iF2rK7D
v/+IFqKSnVV54O6EycJzoBqU19WyUROZI4IheozCVdkoMG9hNmEcWcRbnnImzs7T
CkkM1oU4OY+lP8VWifQBmGeFMeO14fqF5RvoOSUZzMu2okzIr1AcXv1KSbsYr2cA
IbdyHq/JrU12R62s15BPGMy38qgASGVrS22iI7AmP60Zkj+PVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDZ63iC3KM6INUXADbFXYz0PQ5zNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYmM3
MzQ4My02MDM0LTRkYzAtYmJmNS1lNGQ4MmJmMjhhZjkvM2U2MTBiZjctZjgxZC0z
NDRjLWIwOWEtMjZiZjFjNjU1YWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2JjNzM0ODMtNjAzNC00ZGMwLWJi
ZjUtZTRkODJiZjI4YWY5L2NiYzczNDgzLTYwMzQtNGRjMC1iYmY1LWU0ZDgyYmYy
OGFmOS5jcmwwHwYDVR0jBBgwFoAUXtsNbM5NizgqaOXw+ekRwi1IZsQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYmM3MzQ4My02MDM0LTRkYzAtYmJmNS1lNGQ4
MmJmMjhhZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzJxUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0XcMKgMnantPYHz04x0H8rW/FzllTcFA9dj9YPdGUJs0lMQ6bYmXVV
czfhGx9Xy59j7MpVfaIbx5V/vbJruVYqAeHehbq7poSU9s4L2qpd1V6+yXHLUlcI
+FwVrMMUMaAKQFcQ+1CkkaMpR07M1XcwEqnbw4RG7GX3pY/z6u1WVJgTBjJdYCPA
GmheQq7+GbFxAvTYA5BHEdi2bxahWL6H9cs9bQczHlcYtUXJAQ5KwpWw/gMqKUuV
sE3cC24LrNgj4Ywz8qmnLdLSyxlT8oZquEEUhTQwkwMI/bXVCGX7vrQJU0RDbke3
CwhBalUAQcyzQDd2HDy56LD2lLd5eI0=
-----END CERTIFICATE-----
Generated at Wed May 15 17:50:24 2024 by rpki-client on console-fra.rpki-client.org