Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/c6492204-28f2-37fd-b247-ea6f897ad2f3.roa
File:                     c6492204-28f2-37fd-b247-ea6f897ad2f3.roa (raw, json)
Hash identifier:          GsgL5onfIyxAlocZXYnZSVyY+OPp8kZBKgr0dIRbCHE=
Subject key identifier:   00:57:9B:1F:96:DC:BE:2B:84:B5:14:5E:13:9D:EB:9E:D2:70:F2:52
Certificate issuer:       /CN=4af28314-8fe0-47ff-83fe-2ca111b759a7
Certificate serial:       010D0C9F43285847A5D6A21E7FDC046E0505A210
Authority key identifier: 03:36:A2:35:7E:18:31:11:23:8D:BE:B0:62:AA:60:0A:E5:CC:3C:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/c6492204-28f2-37fd-b247-ea6f897ad2f3.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        198.160.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:a2:1e:7f:dc:04:6e:05:05:a2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4af28314-8fe0-47ff-83fe-2ca111b759a7
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=82a518d7-5a44-400f-891b-b9ecc2ffa3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:10:dd:4a:f2:a1:54:f6:66:f2:89:34:c3:
                    bd:b7:f0:e8:c2:07:89:fd:d2:dc:a4:78:9e:a7:24:
                    c4:6e:a3:28:49:0b:23:f2:bf:0e:6b:9f:47:3e:2d:
                    26:03:b5:28:bf:fd:4b:af:61:b5:c4:a0:94:a5:be:
                    03:e1:d3:85:df:3b:4e:f2:11:26:a0:4f:19:6a:1e:
                    30:a0:0a:5e:86:1e:d1:25:3a:41:b7:53:90:85:09:
                    d5:67:23:b2:ba:65:17:79:84:6b:ec:51:1c:cc:36:
                    8c:22:4f:57:5a:25:e3:d8:2d:30:ab:07:6e:61:ec:
                    73:b3:83:d3:b6:58:d3:8b:e0:9a:54:c8:d6:7f:76:
                    81:f6:9c:d9:3c:a7:65:10:0a:6c:6d:77:c7:9a:d7:
                    b5:ad:72:80:5b:ef:95:01:e7:e2:30:a8:00:60:b2:
                    51:1f:ea:9a:8c:6c:ad:b5:ed:5e:3c:10:dd:96:08:
                    57:74:36:34:64:96:89:fe:6f:21:c2:a0:b5:2c:21:
                    70:6f:f1:52:bc:e2:22:8e:f9:b8:ad:3a:47:98:91:
                    5e:03:77:eb:41:19:db:50:07:c9:da:63:6d:7d:f6:
                    a3:27:d0:ac:31:b9:74:f5:dd:5e:1d:ed:12:ad:d0:
                    b1:c5:74:f9:84:b2:2d:ec:ac:84:7e:ea:5c:ae:fd:
                    1f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:57:9B:1F:96:DC:BE:2B:84:B5:14:5E:13:9D:EB:9E:D2:70:F2:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/c6492204-28f2-37fd-b247-ea6f897ad2f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.crl

            X509v3 Authority Key Identifier:
                keyid:03:36:A2:35:7E:18:31:11:23:8D:BE:B0:62:AA:60:0A:E5:CC:3C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:4d:bf:cd:2e:da:3e:65:05:30:2e:60:ca:b9:02:b0:72:ae:
         41:6e:1e:f2:78:57:d2:68:1e:e0:e3:22:45:23:3f:27:70:ae:
         2b:dd:e4:59:fb:16:dc:d7:bd:d5:cd:b9:03:ad:f8:5a:c2:f3:
         d5:b4:07:8a:2f:30:18:7a:57:93:0c:5e:c5:e1:f2:cd:ad:6b:
         85:6c:5d:9b:d0:6e:4e:13:fb:b9:c0:54:fe:8c:6e:1d:23:10:
         70:05:c9:7e:02:ec:93:40:e4:01:a4:7d:16:9f:69:73:4d:b7:
         7c:66:9e:d1:47:ed:96:50:88:00:88:76:79:9b:5e:ca:1e:25:
         92:95:37:67:b3:f6:3f:4b:83:29:77:cf:71:82:84:0a:73:85:
         63:e7:92:01:a8:04:10:4c:13:41:85:f9:10:2c:84:a7:54:df:
         d1:ea:e7:e0:14:12:03:ad:dc:8d:15:ef:a4:98:43:6e:c7:a9:
         e4:f2:88:a2:43:cb:5e:89:e6:39:4e:7a:38:74:86:dd:33:3c:
         64:c9:ac:66:b8:15:12:91:c1:6b:cf:98:0d:fb:02:3b:e5:19:
         1f:78:31:0c:c3:02:27:da:e9:d3:dc:c2:e1:04:db:f2:67:b7:
         a1:37:27:48:2e:43:1d:b6:c0:1e:61:f5:8f:25:94:01:e4:3c:
         d5:1b:e7:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1qIef9wEbgUFohAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFmMjgzMTQtOGZlMC00N2ZmLTgzZmUtMmNhMTExYjc1
OWE3MB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk
ODJhNTE4ZDctNWE0NC00MDBmLTg5MWItYjllY2MyZmZhM2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD4Q3UryoVT2ZvKJNMO9t/DowgeJ/dLcpHie
pyTEbqMoSQsj8r8Oa59HPi0mA7Uov/1Lr2G1xKCUpb4D4dOF3ztO8hEmoE8Zah4w
oApehh7RJTpBt1OQhQnVZyOyumUXeYRr7FEczDaMIk9XWiXj2C0wqwduYexzs4PT
tljTi+CaVMjWf3aB9pzZPKdlEApsbXfHmte1rXKAW++VAefiMKgAYLJRH+qajGyt
te1ePBDdlghXdDY0ZJaJ/m8hwqC1LCFwb/FSvOIijvm4rTpHmJFeA3frQRnbUAfJ
2mNtffajJ9CsMbl09d1eHe0SrdCxxXT5hLIt7KyEfupcrv0fDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFABXmx+W3L4rhLUUXhOd657ScPJSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80YWYy
ODMxNC04ZmUwLTQ3ZmYtODNmZS0yY2ExMTFiNzU5YTcvYzY0OTIyMDQtMjhmMi0z
N2ZkLWIyNDctZWE2Zjg5N2FkMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGFmMjgzMTQtOGZlMC00N2ZmLTgz
ZmUtMmNhMTExYjc1OWE3LzRhZjI4MzE0LThmZTAtNDdmZi04M2ZlLTJjYTExMWI3
NTlhNy5jcmwwHwYDVR0jBBgwFoAUAzaiNX4YMREjjb6wYqpgCuXMPCEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80YWYyODMxNC04ZmUwLTQ3ZmYtODNmZS0yY2Ex
MTFiNzU5YTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqAkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACdNv80u2j5lBTAuYMq5ArByrkFuHvJ4V9JoHuDjIkUjPydwrivd5Fn7
FtzXvdXNuQOt+FrC89W0B4ovMBh6V5MMXsXh8s2ta4VsXZvQbk4T+7nAVP6Mbh0j
EHAFyX4C7JNA5AGkfRafaXNNt3xmntFH7ZZQiACIdnmbXsoeJZKVN2ez9j9Lgyl3
z3GChApzhWPnkgGoBBBME0GF+RAshKdU39Hq5+AUEgOt3I0V76SYQ27HqeTyiKJD
y16J5jlOejh0ht0zPGTJrGa4FRKRwWvPmA37AjvlGR94MQzDAifa6dPcwuEE2/Jn
t6E3J0guQx22wB5h9Y8llAHkPNUb5/4=
-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:06 2024 by rpki-client on console-fra.rpki-client.org