Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/ca10f6ee-236c-3990-9aa6-b5221dab876b.roa
File:                     ca10f6ee-236c-3990-9aa6-b5221dab876b.roa (raw, json)
Hash identifier:          oLK7Z3SBJeFkje7R87JmibOnde7TTYWHMY/szlyfSOc=
Subject key identifier:   54:26:BB:27:48:2B:DC:CB:29:68:06:16:84:9B:5F:58:C8:3C:2D:0A
Certificate issuer:       /CN=37cfb708-8bc0-4a74-971e-28d677315695
Certificate serial:       010D0C9F43285845883DDEEDAE953F1B7F612980
Authority key identifier: AD:56:82:21:E8:9F:5E:3B:60:94:2F:89:79:58:A0:E6:12:08:E8:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/ca10f6ee-236c-3990-9aa6-b5221dab876b.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     395439
IP address blocks:        209.204.3.0/24 maxlen: 24
                          209.204.1.0/24 maxlen: 24
                          209.204.0.0/19 maxlen: 19
                          209.204.29.0/24 maxlen: 24
                          209.204.28.0/24 maxlen: 24
                          209.204.0.0/24 maxlen: 24
                          209.204.2.0/24 maxlen: 24
                          209.204.30.0/24 maxlen: 24
                          209.204.6.0/24 maxlen: 24
                          209.204.25.0/24 maxlen: 24
                          209.204.27.0/24 maxlen: 24
                          209.204.26.0/24 maxlen: 24
                          209.204.48.0/20 maxlen: 20
                          209.204.31.0/24 maxlen: 24
                          209.204.8.0/24 maxlen: 24
                          209.204.7.0/24 maxlen: 24
                          209.204.10.0/24 maxlen: 24
                          209.204.9.0/24 maxlen: 24
                          209.204.5.0/24 maxlen: 24
                          209.204.4.0/24 maxlen: 24
                          209.204.24.0/24 maxlen: 24
                          209.204.20.0/22 maxlen: 22
                          209.204.16.0/24 maxlen: 24
                          209.204.15.0/24 maxlen: 24
                          209.204.18.0/23 maxlen: 23
                          209.204.17.0/24 maxlen: 24
                          209.204.12.0/24 maxlen: 24
                          209.204.11.0/24 maxlen: 24
                          209.204.14.0/24 maxlen: 24
                          209.204.13.0/24 maxlen: 24
                          2605:7bc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:de:ed:ae:95:3f:1b:7f:61:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37cfb708-8bc0-4a74-971e-28d677315695
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=9a2ad2ff-b5bd-41ae-8a4a-d6434b6e44ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:e4:7b:5d:cf:65:6f:7b:69:c0:76:de:b6:
                    af:82:1e:ca:88:17:62:f7:9c:14:01:d3:88:d4:16:
                    d8:79:a7:d3:02:d0:c8:d0:48:47:2f:f9:c4:e8:af:
                    f5:8e:b4:f2:ed:78:94:6c:ba:9e:d4:18:f1:a2:dc:
                    a6:61:33:69:a7:ce:66:e7:10:68:aa:8c:1d:da:c1:
                    7b:f3:64:b5:ef:dc:a0:4d:71:56:ed:ef:ca:c3:1d:
                    94:10:97:e2:4f:bb:e1:76:a6:2b:92:c8:3e:8d:87:
                    ab:29:82:0a:e2:1e:63:68:0e:e6:ad:d0:e0:6f:20:
                    6f:61:70:66:5e:0a:31:f9:7b:b8:4b:37:a4:d8:b9:
                    b9:87:55:de:27:e7:c6:a1:19:72:66:26:be:14:ed:
                    b5:33:3f:5d:3a:80:6a:25:91:f8:3f:5b:50:ff:be:
                    46:0a:8a:fe:80:c6:90:31:de:05:3b:98:5b:b7:b5:
                    0d:12:fb:1d:ed:47:94:52:73:f1:d8:ee:8c:80:53:
                    68:9e:b0:5c:da:39:64:3e:8a:c7:32:71:41:01:71:
                    34:2d:30:ce:52:f1:2e:c4:93:ed:3f:60:c3:c9:5d:
                    ac:b4:44:bf:fc:0d:f2:20:cd:95:ca:5d:dc:4c:8c:
                    24:06:7d:96:a9:27:1b:2a:24:c6:0d:2d:8f:f3:a3:
                    ce:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:26:BB:27:48:2B:DC:CB:29:68:06:16:84:9B:5F:58:C8:3C:2D:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/ca10f6ee-236c-3990-9aa6-b5221dab876b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.crl

            X509v3 Authority Key Identifier:
                keyid:AD:56:82:21:E8:9F:5E:3B:60:94:2F:89:79:58:A0:E6:12:08:E8:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.204.0.0/19
                  209.204.48.0/20
                IPv6:
                  2605:7bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:78:16:2f:a5:42:91:0e:9e:91:d5:fb:f5:20:a7:04:75:65:
         d3:56:66:9a:41:7f:ed:88:57:f0:ef:ca:17:a7:65:f2:58:c6:
         fd:6c:21:62:aa:09:a8:7d:06:e6:4c:9b:98:7a:89:e9:e0:6c:
         2f:24:61:33:cd:9f:bf:b9:08:34:24:de:64:01:ab:d8:b8:4f:
         73:05:d9:01:ff:f5:05:a4:7c:5f:b6:a9:6d:7a:c1:4f:db:b0:
         c8:aa:fd:58:f1:d2:0e:a9:9b:c1:b7:d8:66:c9:0a:a3:12:7b:
         47:2c:38:e5:32:38:d9:89:8f:c1:53:78:f2:3f:6f:00:42:56:
         ef:36:61:b5:de:0f:3c:76:7e:e0:99:91:bb:1c:a8:0a:4e:5b:
         68:a5:f8:3a:60:cc:95:db:cf:fd:07:c0:1d:38:4d:48:3b:14:
         c1:02:07:82:55:70:15:3d:91:a3:50:5f:32:81:be:a0:34:a3:
         29:40:36:81:29:e5:21:25:50:e8:a5:c6:87:8a:eb:62:cc:46:
         92:47:9a:28:43:b2:b1:e8:18:08:61:be:44:e7:3a:76:f8:d2:
         58:3d:77:59:94:3d:86:60:22:23:3d:90:55:4e:55:6b:bd:e6:
         5a:64:2e:0a:e7:c1:e1:a7:1c:12:a9:fe:d8:ad:95:d6:66:37:
         d4:c0:be:2c
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEWIPd7trpU/G39hKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdjZmI3MDgtOGJjMC00YTc0LTk3MWUtMjhkNjc3MzE1
Njk1MB4XDTI0MDQxMzEzMDAzNFoXDTI0MDcxMjEzMDAzNFowLzEtMCsGA1UEAxMk
OWEyYWQyZmYtYjViZC00MWFlLThhNGEtZDY0MzRiNmU0NGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPvke13PZW97acB23ravgh7KiBdi95wUAdOI
1BbYeafTAtDI0EhHL/nE6K/1jrTy7XiUbLqe1BjxotymYTNpp85m5xBoqowd2sF7
82S179ygTXFW7e/Kwx2UEJfiT7vhdqYrksg+jYerKYIK4h5jaA7mrdDgbyBvYXBm
Xgox+Xu4Szek2Lm5h1XeJ+fGoRlyZia+FO21Mz9dOoBqJZH4P1tQ/75GCor+gMaQ
Md4FO5hbt7UNEvsd7UeUUnPx2O6MgFNonrBc2jlkPorHMnFBAXE0LTDOUvEuxJPt
P2DDyV2stES//A3yIM2Vyl3cTIwkBn2WqScbKiTGDS2P86POKwIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFFQmuydIK9zLKWgGFoSbX1jIPC0KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zN2Nm
YjcwOC04YmMwLTRhNzQtOTcxZS0yOGQ2NzczMTU2OTUvY2ExMGY2ZWUtMjM2Yy0z
OTkwLTlhYTYtYjUyMjFkYWI4NzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzdjZmI3MDgtOGJjMC00YTc0LTk3
MWUtMjhkNjc3MzE1Njk1LzM3Y2ZiNzA4LThiYzAtNGE3NC05NzFlLTI4ZDY3NzMx
NTY5NS5jcmwwHwYDVR0jBBgwFoAUrVaCIeifXjtglC+JeVig5hII6DwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zN2NmYjcwOC04YmMwLTRhNzQtOTcxZS0yOGQ2
NzczMTU2OTUuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQF0cwAAwQE
0cwwMA0EAgACMAcDBQAmBXvAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE54Fi+lQpEOnpHV+/UgpwR1ZdNW
ZppBf+2IV/DvyhenZfJYxv1sIWKqCah9BuZMm5h6iengbC8kYTPNn7+5CDQk3mQB
q9i4T3MF2QH/9QWkfF+2qW16wU/bsMiq/Vjx0g6pm8G32GbJCqMSe0csOOUyONmJ
j8FTePI/bwBCVu82YbXeDzx2fuCZkbscqApOW2il+DpgzJXbz/0HwB04TUg7FMEC
B4JVcBU9kaNQXzKBvqA0oylANoEp5SElUOilxoeK62LMRpJHmihDsrHoGAhhvkTn
Onb40lg9d1mUPYZgIiM9kFVOVWu95lpkLgrnweGnHBKp/titldZmN9TAviw=
-----END CERTIFICATE-----
Generated at Fri May 3 06:32:23 2024 by rpki-client on console-fra.rpki-client.org