Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/983ae15e-1db8-30c0-bc0d-198c56489ac3.roa
File:                     983ae15e-1db8-30c0-bc0d-198c56489ac3.roa (raw, json)
Hash identifier:          ibyu7pma4v3uxknzRUr7iMu1l+GOoleW65weGVMvOtw=
Subject key identifier:   8C:E9:EC:60:9B:E4:9B:01:B9:3C:B4:3A:44:CC:42:5C:51:F3:06:47
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285844EED007F516C6FCB8F0FC9C00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/983ae15e-1db8-30c0-bc0d-198c56489ac3.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     11404
IP address blocks:        216.243.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:d0:07:f5:16:c6:fc:b8:f0:fc:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=cbdb7dd4-2f4b-48bd-a9d2-584e3df2e2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e8:f3:b0:69:e3:5c:99:04:97:3c:82:15:ef:
                    7b:5e:8f:77:13:e9:76:cf:a3:5d:72:08:af:e3:01:
                    c7:ba:24:9b:62:00:cf:36:9e:c9:f8:0a:7f:43:60:
                    1e:52:12:00:0c:2e:a7:4a:2b:10:7c:5e:ef:75:96:
                    96:76:e3:06:36:8d:41:23:b7:8a:36:85:1d:e4:dc:
                    60:11:0a:a4:b0:c4:90:f5:80:90:c1:3c:40:a6:5e:
                    5f:56:1a:bf:95:f7:88:b9:8b:b6:29:84:1b:04:06:
                    a1:ff:7d:0f:a3:ee:b2:81:ee:bf:e6:96:d1:c4:5f:
                    e0:60:51:2a:ad:bc:8c:1b:f8:d1:c8:5c:c0:ff:ba:
                    8c:e9:59:3f:fa:2f:eb:8d:db:cd:e6:e3:8e:93:34:
                    60:18:1b:be:be:a0:69:c8:4d:ca:3b:15:bc:e1:4c:
                    5f:33:27:e5:a7:14:8c:58:2b:18:d5:89:ce:aa:3e:
                    bd:4d:9a:01:84:76:21:26:3f:7a:65:c2:a8:09:3a:
                    a6:33:61:d6:da:0d:fc:a2:0f:40:92:09:c2:6a:49:
                    5f:1a:cc:28:33:ea:47:bd:24:6b:3e:84:57:2b:4a:
                    f5:e9:05:26:d8:59:6b:4e:aa:28:f6:7a:8c:6b:f9:
                    a7:f6:50:74:3d:85:af:28:ac:9b:c5:22:34:ef:f3:
                    40:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E9:EC:60:9B:E4:9B:01:B9:3C:B4:3A:44:CC:42:5C:51:F3:06:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/983ae15e-1db8-30c0-bc0d-198c56489ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.243.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:35:ef:a8:4d:a6:06:78:ff:9d:af:8c:bc:b7:53:33:8f:16:
         19:f8:04:c5:6b:33:fa:95:ec:9c:95:53:f9:e3:bf:00:ee:bf:
         03:0d:92:c4:6b:9d:5a:eb:d2:31:d1:f5:a9:b4:b9:e2:a5:0d:
         61:f3:45:84:90:a6:3c:af:e5:0d:c8:25:96:30:9e:eb:6e:3d:
         8c:69:9a:0a:fe:8d:ff:c4:25:a0:af:7d:8c:b5:ee:bd:3a:99:
         f9:74:71:d1:4c:d4:2c:50:bb:bc:ce:8f:84:16:a2:4c:1e:b8:
         df:46:c6:65:49:e8:92:43:68:29:3f:68:41:63:00:f1:5d:74:
         75:60:2b:f5:4f:10:9c:0e:f5:62:7a:25:4d:00:c7:c1:af:d6:
         da:d1:a6:76:d6:40:76:c8:de:f0:f9:dd:2b:1f:26:55:0e:c0:
         cf:4d:76:71:b7:0b:0a:21:43:c8:70:a8:05:ab:17:34:1c:4b:
         c9:aa:82:8d:0d:bc:9d:b6:6a:0a:dd:f4:08:54:be:74:cd:25:
         3f:02:0b:78:07:4f:e8:e8:7b:d6:8e:6a:84:54:0e:fd:88:14:
         c8:62:6e:f3:b1:11:4e:dd:7b:51:d7:b7:82:a7:81:92:fd:74:
         d5:52:b3:f1:20:7e:2c:d4:c1:db:3f:af:58:18:4b:7e:4f:74:
         f9:18:00:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETu0Af1Fsb8uPD8nAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk
Y2JkYjdkZDQtMmY0Yi00OGJkLWE5ZDItNTg0ZTNkZjJlMmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+jzsGnjXJkElzyCFe97Xo93E+l2z6Ndcgiv
4wHHuiSbYgDPNp7J+Ap/Q2AeUhIADC6nSisQfF7vdZaWduMGNo1BI7eKNoUd5Nxg
EQqksMSQ9YCQwTxApl5fVhq/lfeIuYu2KYQbBAah/30Po+6yge6/5pbRxF/gYFEq
rbyMG/jRyFzA/7qM6Vk/+i/rjdvN5uOOkzRgGBu+vqBpyE3KOxW84UxfMyflpxSM
WCsY1YnOqj69TZoBhHYhJj96ZcKoCTqmM2HW2g38og9AkgnCaklfGswoM+pHvSRr
PoRXK0r16QUm2FlrTqoo9nqMa/mn9lB0PYWvKKybxSI07/NA1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIzp7GCb5JsBuTy0OkTMQlxR8wZHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOTgzYWUxNWUtMWRiOC0z
MGMwLWJjMGQtMTk4YzU2NDg5YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2PMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFo176hNpgZ4/52vjLy3UzOPFhn4BMVrM/qV7JyVU/njvwDuvwMNksRr
nVrr0jHR9am0ueKlDWHzRYSQpjyv5Q3IJZYwnutuPYxpmgr+jf/EJaCvfYy17r06
mfl0cdFM1CxQu7zOj4QWokweuN9GxmVJ6JJDaCk/aEFjAPFddHVgK/VPEJwO9WJ6
JU0Ax8Gv1trRpnbWQHbI3vD53SsfJlUOwM9NdnG3CwohQ8hwqAWrFzQcS8mqgo0N
vJ22agrd9AhUvnTNJT8CC3gHT+joe9aOaoRUDv2IFMhibvOxEU7de1HXt4KngZL9
dNVSs/EgfizUwds/r1gYS35PdPkYADk=
-----END CERTIFICATE-----
Generated at Thu May 2 22:30:40 2024 by rpki-client on console-ams.rpki-client.org