Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4b374d9-382f-3914-b85f-4b00ec1af5d2.roa
File:                     d4b374d9-382f-3914-b85f-4b00ec1af5d2.roa (raw, json)
Hash identifier:          kF+PYkmhvQhCWgzhGuP2VvelBQeAocTIkCjFXFO5TRE=
Subject key identifier:   2F:41:FA:A0:3B:7A:F0:38:B3:CB:C2:4C:5E:1F:8A:0F:81:7C:C5:28
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584540BC140012E03D3EF69B6600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4b374d9-382f-3914-b85f-4b00ec1af5d2.roa
Signing time:             Mon 18 Mar 2024 22:16:46 +0000
ROA not before:           Mon 18 Mar 2024 22:16:46 +0000
ROA not after:            Sun 16 Jun 2024 22:16:46 +0000
asID:                     15169
IP address blocks:        108.177.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bc:14:00:12:e0:3d:3e:f6:9b:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 18 22:16:46 2024 GMT
            Not After : Jun 16 22:16:46 2024 GMT
        Subject: CN=4df498b0-a83e-4993-8c92-90e146402201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:51:45:d4:2a:0c:ae:b3:31:cb:b4:c8:fa:a9:
                    ee:d8:fa:61:2c:c3:0a:10:f4:29:52:e4:bc:47:60:
                    4f:67:09:3a:5b:44:72:f8:96:2c:0d:ea:c4:ab:cc:
                    c8:2a:10:db:04:2e:c9:b1:21:3e:13:31:53:10:4a:
                    f4:2f:11:0f:37:ae:65:03:96:09:ab:cc:2e:cf:db:
                    04:b0:cb:24:78:8c:e9:5d:18:14:f7:37:11:0a:e6:
                    9a:2b:a8:60:64:93:1f:55:18:de:60:d5:6c:7e:d1:
                    0a:e0:c7:b8:f9:6f:0b:73:4f:cc:89:8d:25:ed:b9:
                    27:c7:55:40:26:06:51:7a:f1:a0:c1:02:3f:f0:41:
                    0f:ae:92:6c:36:78:31:7e:25:17:44:3a:45:53:cd:
                    7d:cf:34:35:50:12:9e:37:46:3f:09:81:69:8e:d7:
                    f5:8f:b2:93:de:21:30:1e:31:e4:dc:ab:29:ed:7c:
                    29:99:53:b9:d8:09:87:a5:11:00:27:0a:5d:28:6c:
                    66:54:b7:b0:b0:11:b3:c5:3c:37:7a:d5:8c:56:0d:
                    a1:4c:e8:49:ed:86:61:7c:2c:d3:64:ad:30:f3:20:
                    c1:73:e8:0b:0a:be:60:f5:c9:07:0f:60:5f:bb:db:
                    1f:c1:d3:ec:6c:85:1a:7f:5c:e7:fc:76:35:a5:e3:
                    61:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:41:FA:A0:3B:7A:F0:38:B3:CB:C2:4C:5E:1F:8A:0F:81:7C:C5:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4b374d9-382f-3914-b85f-4b00ec1af5d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:ef:c9:8e:5f:9c:3d:b7:e8:92:5b:22:4e:61:39:fe:bd:79:
         45:8c:a2:ce:f3:4f:dd:32:5d:aa:fb:64:48:93:1b:90:b0:d2:
         06:fa:dd:fa:4e:08:88:1d:f3:d4:1e:f9:d4:55:6f:42:3f:83:
         7c:2a:02:93:9f:4e:3f:e0:e3:d6:80:83:0d:d6:57:88:14:01:
         bf:f5:7c:2e:63:d7:c8:f5:b7:f6:c7:ce:94:75:dc:3d:ef:77:
         07:a8:96:84:b0:82:e6:aa:f0:d1:56:1b:22:26:34:6f:88:4f:
         2a:df:c8:bf:75:92:80:d2:3f:65:95:1d:c6:6b:5c:8f:05:ea:
         f6:28:af:73:6d:53:0e:70:c3:ba:19:3d:49:c3:db:ba:28:ca:
         1c:8c:68:32:57:e4:49:d9:06:67:03:dc:81:f1:df:5e:01:13:
         01:db:40:01:51:c8:b4:0b:17:03:6e:9c:d7:29:1b:30:66:2e:
         1b:ea:7a:fe:17:09:d6:d9:2c:03:4b:6d:c9:27:37:70:39:81:
         45:31:61:fb:d2:cc:bd:73:b8:6f:f6:4e:8f:2d:ea:e4:84:0c:
         b6:44:45:be:e5:fa:16:9d:f7:a3:25:1b:ac:34:be:04:27:67:
         5d:19:bc:d7:44:c1:4e:39:70:fc:ec:4f:42:65:dd:8e:20:1b:
         cb:d2:dd:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAvBQAEuA9PvabZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MDMxODIyMTY0NloXDTI0MDYxNjIyMTY0NlowLzEtMCsGA1UEAxMk
NGRmNDk4YjAtYTgzZS00OTkzLThjOTItOTBlMTQ2NDAyMjAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1FF1CoMrrMxy7TI+qnu2PphLMMKEPQpUuS8
R2BPZwk6W0Ry+JYsDerEq8zIKhDbBC7JsSE+EzFTEEr0LxEPN65lA5YJq8wuz9sE
sMskeIzpXRgU9zcRCuaaK6hgZJMfVRjeYNVsftEK4Me4+W8Lc0/MiY0l7bknx1VA
JgZRevGgwQI/8EEPrpJsNngxfiUXRDpFU819zzQ1UBKeN0Y/CYFpjtf1j7KT3iEw
HjHk3Ksp7XwpmVO52AmHpREAJwpdKGxmVLewsBGzxTw3etWMVg2hTOhJ7YZhfCzT
ZK0w8yDBc+gLCr5g9ckHD2Bfu9sfwdPsbIUaf1zn/HY1peNhywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC9B+qA7evA4s8vCTF4fig+BfMUoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDRiMzc0ZDktMzgyZi0z
OTE0LWI4NWYtNGIwMGVjMWFmNWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALfvyY5fnD236JJbIk5hOf69eUWMos7zT90yXar7ZEiTG5Cw0gb63fpO
CIgd89Qe+dRVb0I/g3wqApOfTj/g49aAgw3WV4gUAb/1fC5j18j1t/bHzpR13D3v
dweoloSwguaq8NFWGyImNG+ITyrfyL91koDSP2WVHcZrXI8F6vYor3NtUw5ww7oZ
PUnD27ooyhyMaDJX5EnZBmcD3IHx314BEwHbQAFRyLQLFwNunNcpGzBmLhvqev4X
CdbZLANLbcknN3A5gUUxYfvSzL1zuG/2To8t6uSEDLZERb7l+had96MlG6w0vgQn
Z10ZvNdEwU45cPzsT0Jl3Y4gG8vS3aE=
-----END CERTIFICATE-----
Generated at Sat May 18 01:44:21 2024 by rpki-client on console-fra.rpki-client.org