Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/237a50c0-d85e-3ba2-8503-4ea809e4a78b.roa
File:                     237a50c0-d85e-3ba2-8503-4ea809e4a78b.roa (raw, json)
Hash identifier:          B7/XXaIFAbTx+QoGqSXJvDRr8R+NceW8wmxEH+18MQI=
Subject key identifier:   CC:AE:E0:5A:18:E4:98:E3:45:9D:17:3E:F9:D8:D4:3A:50:20:B1:3B
Certificate issuer:       /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial:       010D0C9F4328584734C883150B147E123C295E00
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/237a50c0-d85e-3ba2-8503-4ea809e4a78b.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     25649
IP address blocks:        104.153.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:83:15:0b:14:7e:12:3c:29:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=20279237-c5c7-4a7f-8e94-9876f35af415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4f:70:89:7c:b0:91:25:c0:b6:c4:f6:f2:52:
                    0c:81:88:5c:f1:61:c0:3d:df:50:61:07:33:73:47:
                    89:73:a7:83:b3:70:3b:27:85:1b:b1:99:a4:17:ac:
                    f3:b0:5d:ea:6d:c1:3d:d7:25:71:c5:5a:f2:d4:a3:
                    2b:aa:52:4c:bf:24:2f:fe:a3:24:99:86:15:15:20:
                    dc:d6:9a:47:a8:42:09:34:46:a5:90:89:83:42:cd:
                    4e:45:93:82:6f:f5:59:95:49:57:e4:f9:97:4b:0f:
                    09:9c:94:e9:c9:36:c0:ae:1c:f1:35:22:7a:ed:b2:
                    06:34:55:ae:c0:d0:90:15:01:fe:73:13:d9:e0:64:
                    e5:f1:11:b2:25:96:f2:43:2c:c2:4f:56:f3:f5:3d:
                    43:a3:5a:74:2b:1b:d9:aa:fc:2e:64:23:c7:81:44:
                    f9:ea:70:03:c9:c5:55:c4:5e:47:f0:b4:07:a0:9a:
                    f2:ca:30:bf:ce:3a:74:ca:98:23:f2:b3:4b:db:c6:
                    49:55:e4:b9:e4:c0:d7:51:14:2a:99:70:54:1b:5e:
                    58:3b:8d:73:9b:70:1f:9f:ce:e9:57:6c:ae:37:15:
                    54:bd:c3:5f:7f:2f:c5:0a:fe:a2:c5:60:4d:9f:47:
                    86:2f:cb:cd:7a:95:e3:f2:f1:fb:9d:43:c6:f5:b3:
                    81:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AE:E0:5A:18:E4:98:E3:45:9D:17:3E:F9:D8:D4:3A:50:20:B1:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/237a50c0-d85e-3ba2-8503-4ea809e4a78b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl

            X509v3 Authority Key Identifier:
                keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b3:45:e3:ee:a1:db:eb:13:0c:64:b9:ea:5b:38:51:2b:d8:
         bb:7f:39:f2:39:0f:d9:a3:80:62:d1:be:17:d0:71:a5:d8:5a:
         75:0d:c2:a5:bd:9e:f3:c1:f1:0c:61:00:6b:92:aa:27:9f:3f:
         f9:8d:fd:64:5b:95:3e:7b:d1:78:1f:6f:0e:e0:a8:88:b7:97:
         84:ff:51:57:a4:77:ec:d5:54:26:17:84:bc:3c:1f:b5:29:9d:
         e0:db:cf:08:b7:ad:11:1b:5e:83:19:72:53:31:de:54:fc:95:
         cd:a1:e0:f5:84:f2:15:3d:bd:b8:28:e1:40:64:1b:77:ab:ae:
         0c:1b:a9:b3:38:c5:ac:4d:b2:5e:bc:b4:f7:0a:22:bc:ad:f4:
         7a:b5:38:83:8b:8d:d8:7b:28:6c:87:08:78:d9:14:19:83:99:
         af:e7:4c:f9:53:0c:e4:b3:fe:55:93:21:9a:17:ee:77:ea:12:
         ff:d2:fe:e7:fa:4b:af:62:aa:af:1d:52:49:30:7d:bf:7d:8b:
         92:d4:71:78:10:36:11:d2:c8:38:cd:55:3e:54:47:b1:e1:e0:
         50:92:a1:cf:e3:18:19:70:9e:e2:66:63:00:cc:0b:bd:ec:8a:
         9c:67:dc:0a:ee:f4:7e:61:b5:e0:1e:e8:db:7e:28:b4:69:6e:
         00:7a:02:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0yIMVCxR+EjwpXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy
ZThlMB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
MjAyNzkyMzctYzVjNy00YTdmLThlOTQtOTg3NmYzNWFmNDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5k9wiXywkSXAtsT28lIMgYhc8WHAPd9QYQcz
c0eJc6eDs3A7J4UbsZmkF6zzsF3qbcE91yVxxVry1KMrqlJMvyQv/qMkmYYVFSDc
1ppHqEIJNEalkImDQs1ORZOCb/VZlUlX5PmXSw8JnJTpyTbArhzxNSJ67bIGNFWu
wNCQFQH+cxPZ4GTl8RGyJZbyQyzCT1bz9T1Do1p0KxvZqvwuZCPHgUT56nADycVV
xF5H8LQHoJryyjC/zjp0ypgj8rNL28ZJVeS55MDXURQqmXBUG15YO41zm3Afn87p
V2yuNxVUvcNffy/FCv6ixWBNn0eGL8vNepXj8vH7nUPG9bOBhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMyu4FoY5JjjRZ0XPvnY1DpQILE7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj
ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvMjM3YTUwYzAtZDg1ZS0z
YmEyLTg1MDMtNGVhODA5ZTRhNzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh
NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw
MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw
YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJnMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACOzRePuodvrEwxkuepbOFEr2Lt/OfI5D9mjgGLRvhfQcaXYWnUNwqW9
nvPB8QxhAGuSqiefP/mN/WRblT570Xgfbw7gqIi3l4T/UVekd+zVVCYXhLw8H7Up
neDbzwi3rREbXoMZclMx3lT8lc2h4PWE8hU9vbgo4UBkG3errgwbqbM4xaxNsl68
tPcKIryt9Hq1OIOLjdh7KGyHCHjZFBmDma/nTPlTDOSz/lWTIZoX7nfqEv/S/uf6
S69iqq8dUkkwfb99i5LUcXgQNhHSyDjNVT5UR7Hh4FCSoc/jGBlwnuJmYwDMC73s
ipxn3Aru9H5hteAe6Nt+KLRpbgB6Aq0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:54 2024 by rpki-client on console-fra.rpki-client.org