Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/756dd887-88da-36d1-9dcf-a1db2333d0ac.roa
File:                     756dd887-88da-36d1-9dcf-a1db2333d0ac.roa (raw, json)
Hash identifier:          XkzbAhQplw+YKen1LRewCjsnIJbO/k3FvXCXHAMJChM=
Subject key identifier:   A9:19:F0:7F:D1:51:27:A6:0E:DE:9B:2B:8B:C6:C6:81:95:94:1D:A4
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F432858452C1D40DB7DDB56FCCB9F1900
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/756dd887-88da-36d1-9dcf-a1db2333d0ac.roa
Signing time:             Mon 11 Mar 2024 13:00:31 +0000
ROA not before:           Mon 11 Mar 2024 13:00:31 +0000
ROA not after:            Sun 09 Jun 2024 13:00:31 +0000
asID:                     0
IP address blocks:        104.255.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:1d:40:db:7d:db:56:fc:cb:9f:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Mar 11 13:00:31 2024 GMT
            Not After : Jun  9 13:00:31 2024 GMT
        Subject: CN=b8ca3f61-7c22-4fa2-a8fd-d18a38b2158a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:c3:6b:66:8b:c1:b9:8d:70:a4:59:e9:7d:1d:
                    34:98:4f:d3:22:db:d6:e4:a9:72:75:26:bc:e6:e9:
                    bd:6b:1e:62:f2:df:7a:52:7a:6f:7a:cf:63:b0:3f:
                    06:3f:74:71:3d:be:fc:20:44:c5:d9:ea:3a:45:fb:
                    fd:f0:4c:f0:4f:e2:27:34:0a:55:cc:1d:01:03:13:
                    9c:8d:1d:cc:5e:dc:5d:e9:93:2f:23:ec:91:ea:b7:
                    d0:cf:01:94:13:d2:69:f8:ce:c0:9b:40:da:b6:f9:
                    d9:3b:1a:74:1d:72:31:dd:04:89:96:48:63:e3:5b:
                    39:7e:ed:2a:1d:6e:a7:07:40:7a:d0:70:f6:df:61:
                    39:4c:4e:28:dd:f8:ff:f9:cc:34:cb:aa:1e:63:3d:
                    df:cb:64:a0:c4:29:6a:08:f9:51:6c:d1:56:6e:59:
                    37:a8:48:78:7a:3a:1d:f7:4c:d7:85:ef:0d:9a:24:
                    3a:b7:6b:7f:4d:d3:3d:2d:a9:b5:03:d2:93:38:7e:
                    de:e1:47:c7:20:b6:01:c2:29:dc:16:ee:29:cd:76:
                    09:6a:4d:db:99:a7:85:75:09:23:dd:cc:5f:f7:96:
                    a1:f8:e1:06:b8:7b:ad:77:40:f8:5c:e0:73:1b:69:
                    18:d1:35:5d:c9:e7:a6:06:1e:2e:4b:d2:95:d6:56:
                    0a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:19:F0:7F:D1:51:27:A6:0E:DE:9B:2B:8B:C6:C6:81:95:94:1D:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/756dd887-88da-36d1-9dcf-a1db2333d0ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:53:3c:b8:9b:4a:67:93:6c:ac:a2:e7:60:21:9b:3f:b4:3b:
         08:ab:3f:d9:3f:5a:88:df:4f:03:33:26:83:79:43:ad:8a:7b:
         14:28:75:a5:91:55:a2:67:1b:37:f9:fe:f0:18:e3:da:e4:45:
         33:50:27:ea:a6:3e:4f:61:7d:54:e1:56:79:1b:bd:94:f1:84:
         d2:f6:68:30:15:80:e9:50:70:d2:6c:fb:59:e8:50:0f:e7:c9:
         4b:3b:9b:ca:6a:ea:c3:51:11:58:4c:a1:ea:b6:55:d3:77:c4:
         c1:0c:c7:68:48:d6:f0:3a:da:dc:a4:e8:b0:8e:af:af:4d:17:
         4f:e2:7d:f4:62:32:a3:3b:5d:d4:df:74:d6:96:76:aa:a2:dc:
         31:5d:a2:76:fd:d6:6f:cb:31:f5:bc:b2:c7:33:3a:5b:0c:99:
         c4:76:46:62:56:d3:2c:34:65:7e:4c:a6:0e:7b:a6:49:11:94:
         f6:f4:05:f2:33:7b:04:43:fa:f5:70:22:41:5f:8c:0c:a2:ac:
         c4:72:26:0b:5e:de:4a:74:47:8a:45:6d:61:d1:4c:bc:82:50:
         5c:95:b4:ef:88:da:60:1c:7e:e1:cb:ba:b6:c8:91:30:f1:8d:
         dd:9d:3a:c2:27:1b:3b:e2:4d:88:4c:3f:92:7a:fb:56:cc:96:
         d5:be:75:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUsHUDbfdtW/MufGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0
NjU4MB4XDTI0MDMxMTEzMDAzMVoXDTI0MDYwOTEzMDAzMVowLzEtMCsGA1UEAxMk
YjhjYTNmNjEtN2MyMi00ZmEyLWE4ZmQtZDE4YTM4YjIxNThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+sNrZovBuY1wpFnpfR00mE/TItvW5KlydSa8
5um9ax5i8t96Unpves9jsD8GP3RxPb78IETF2eo6Rfv98EzwT+InNApVzB0BAxOc
jR3MXtxd6ZMvI+yR6rfQzwGUE9Jp+M7Am0DatvnZOxp0HXIx3QSJlkhj41s5fu0q
HW6nB0B60HD232E5TE4o3fj/+cw0y6oeYz3fy2SgxClqCPlRbNFWblk3qEh4ejod
90zXhe8NmiQ6t2t/TdM9Lam1A9KTOH7e4UfHILYBwincFu4pzXYJak3bmaeFdQkj
3cxf95ah+OEGuHutd0D4XOBzG2kY0TVdyeemBh4uS9KV1lYKRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKkZ8H/RUSemDt6bK4vGxoGVlB2kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm
MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvNzU2ZGQ4ODctODhkYS0z
NmQxLTlkY2YtYTFkYjIzMzNkMGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk
ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz
NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz
NzY1MzQ2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP/hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKpTPLibSmeTbKyi52Ahmz+0OwirP9k/WojfTwMzJoN5Q62KexQodaWR
VaJnGzf5/vAY49rkRTNQJ+qmPk9hfVThVnkbvZTxhNL2aDAVgOlQcNJs+1noUA/n
yUs7m8pq6sNREVhMoeq2VdN3xMEMx2hI1vA62tyk6LCOr69NF0/iffRiMqM7XdTf
dNaWdqqi3DFdonb91m/LMfW8ssczOlsMmcR2RmJW0yw0ZX5Mpg57pkkRlPb0BfIz
ewRD+vVwIkFfjAyirMRyJgte3kp0R4pFbWHRTLyCUFyVtO+I2mAcfuHLurbIkTDx
jd2dOsInGzviTYhMP5J6+1bMltW+dW0=
-----END CERTIFICATE-----
Generated at Thu Apr 25 08:14:59 2024 by rpki-client on console-ams.rpki-client.org