Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/cba14259-da0c-305c-8613-f3e5ffe33056.roa
File:                     cba14259-da0c-305c-8613-f3e5ffe33056.roa (raw, json)
Hash identifier:          V4rKX2FHwSz9/L1Wskx/EoPRDgYLTotCp3yXc4KQ9IQ=
Subject key identifier:   1D:FE:93:76:0F:BF:A7:55:29:DE:0B:E2:60:49:F5:57:71:27:0F:69
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F43285845B4E8D3A3E9DDABE2904B5900
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/cba14259-da0c-305c-8613-f3e5ffe33056.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     39618
IP address blocks:        104.218.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d3:a3:e9:dd:ab:e2:90:4b:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=7c6f2915-1d4a-4bef-b91b-b3463c7f0f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:6f:ab:d8:85:7c:1a:33:dd:f9:5f:83:20:
                    af:3b:e8:72:ed:c3:0a:60:c8:67:95:d9:1c:49:9c:
                    0f:4c:d8:ad:0d:05:6a:d2:c0:78:5d:29:0f:8b:5d:
                    10:59:ac:14:e9:b4:58:ee:8b:10:41:b5:4d:fd:3f:
                    d0:5d:ac:a4:0f:19:90:5d:22:44:1f:1e:89:ee:ab:
                    61:0c:8c:31:54:a7:08:ee:98:18:dd:b5:08:32:96:
                    81:a8:c2:5f:7f:d4:23:b2:65:18:2b:e9:0f:d0:6d:
                    d7:4b:3f:62:2d:16:c0:fa:cb:35:ad:df:57:07:44:
                    57:e9:51:e3:7a:bd:ef:13:d8:1a:5f:7f:ff:8d:ac:
                    c8:ec:14:26:1f:82:f2:5d:e7:71:a7:ca:97:d1:85:
                    c0:f1:9f:ca:6c:e9:e1:f3:65:93:8f:85:5e:cc:95:
                    37:ae:3e:32:b7:97:0e:ad:14:ca:31:d5:fd:95:86:
                    26:2f:63:0d:b9:3a:c3:53:8c:8b:0b:37:19:2e:e9:
                    9b:95:d3:5f:60:1c:5a:c0:a9:82:fb:24:31:6c:fe:
                    79:9c:35:ec:a1:2b:df:ba:91:79:a4:57:e1:9c:51:
                    ef:12:33:85:02:47:74:5d:dc:f8:c7:f4:bd:53:81:
                    75:a4:64:b8:8f:84:03:82:63:63:e6:b1:b5:22:bf:
                    77:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FE:93:76:0F:BF:A7:55:29:DE:0B:E2:60:49:F5:57:71:27:0F:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/cba14259-da0c-305c-8613-f3e5ffe33056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:12:61:8e:bf:1b:2d:2b:af:81:b3:71:6f:a7:bb:1b:75:03:
         3b:4f:6d:21:0a:f0:ed:f5:8d:9f:a3:90:ce:c6:be:65:a6:3c:
         c6:f1:df:07:3e:e8:ae:ef:e3:47:b3:77:f6:a3:d5:64:1f:d8:
         79:ec:ad:dd:21:f2:76:a9:e3:0d:be:ff:55:5a:01:e6:18:81:
         c8:66:d3:b3:4c:12:13:47:14:9b:5d:6e:dd:8f:6f:ce:ac:19:
         38:4e:04:b7:ba:1b:05:17:e0:2e:b6:c8:f2:e9:9c:c7:b4:60:
         e5:ab:98:28:b9:3e:00:56:81:7c:96:40:11:a0:b5:e9:97:a4:
         54:a9:d6:a3:2d:62:33:6f:5c:8e:93:56:7d:bb:96:27:cd:dc:
         95:d6:37:c3:4c:c3:3d:80:3b:51:9b:ea:2b:9a:20:2c:c9:e1:
         ac:b9:bd:13:d7:fa:b9:52:08:97:b3:44:0d:33:cd:e3:03:c7:
         9c:38:54:f5:53:ab:05:26:b7:55:4d:93:14:25:16:7d:84:9e:
         50:46:ed:37:00:fb:1f:18:a5:ea:d8:6d:b0:52:33:39:45:e4:
         f3:b9:86:ea:fd:20:a4:dc:06:cb:8a:aa:5d:6e:93:1b:c1:ac:
         e3:e9:6a:47:09:07:75:13:f3:a2:93:ba:d8:7e:bf:0f:e2:41:
         cc:a4:e9:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW06NOj6d2r4pBLWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2MmE3MzMtMGUxMy00MDEyLTgyOTQtZmNlNjU1ZTRh
NDFhMB4XDTI0MDQyOTEzMDAzM1oXDTI0MDcyODEzMDAzM1owLzEtMCsGA1UEAxMk
N2M2ZjI5MTUtMWQ0YS00YmVmLWI5MWItYjM0NjNjN2YwZjZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6Fvq9iFfBoz3flfgyCvO+hy7cMKYMhnldkc
SZwPTNitDQVq0sB4XSkPi10QWawU6bRY7osQQbVN/T/QXaykDxmQXSJEHx6J7qth
DIwxVKcI7pgY3bUIMpaBqMJff9QjsmUYK+kP0G3XSz9iLRbA+ss1rd9XB0RX6VHj
er3vE9gaX3//jazI7BQmH4LyXedxp8qX0YXA8Z/KbOnh82WTj4VezJU3rj4yt5cO
rRTKMdX9lYYmL2MNuTrDU4yLCzcZLumbldNfYBxawKmC+yQxbP55nDXsoSvfupF5
pFfhnFHvEjOFAkd0Xdz4x/S9U4F1pGS4j4QDgmNj5rG1Ir93fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB3+k3YPv6dVKd4L4mBJ9VdxJw9pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYy
YTczMy0wZTEzLTQwMTItODI5NC1mY2U2NTVlNGE0MWEvY2JhMTQyNTktZGEwYy0z
MDVjLTg2MTMtZjNlNWZmZTMzMDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2MmE3MzMtMGUxMy00MDEyLTgy
OTQtZmNlNjU1ZTRhNDFhL2RkNjJhNzMzLTBlMTMtNDAxMi04Mjk0LWZjZTY1NWU0
YTQxYS5jcmwwHwYDVR0jBBgwFoAUkRNYtHaun6GwfpONvDcsq5c9dt8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYyYTczMy0wZTEzLTQwMTItODI5NC1mY2U2
NTVlNGE0MWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNrsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJASYY6/Gy0rr4GzcW+nuxt1AztPbSEK8O31jZ+jkM7GvmWmPMbx3wc+
6K7v40ezd/aj1WQf2Hnsrd0h8nap4w2+/1VaAeYYgchm07NMEhNHFJtdbt2Pb86s
GThOBLe6GwUX4C62yPLpnMe0YOWrmCi5PgBWgXyWQBGgtemXpFSp1qMtYjNvXI6T
Vn27lifN3JXWN8NMwz2AO1Gb6iuaICzJ4ay5vRPX+rlSCJezRA0zzeMDx5w4VPVT
qwUmt1VNkxQlFn2EnlBG7TcA+x8YperYbbBSMzlF5PO5hur9IKTcBsuKql1ukxvB
rOPpakcJB3UT86KTuth+vw/iQcyk6Ys=
-----END CERTIFICATE-----
Generated at Fri May 17 21:08:58 2024 by rpki-client on console-ams.rpki-client.org