Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/da7f4729-e05f-3e1a-8770-0da9b2748dd1.roa
File:                     da7f4729-e05f-3e1a-8770-0da9b2748dd1.roa (raw, json)
Hash identifier:          CtJFb/VyfTTU/V6SMwI0gop+xx7GkpZ02RSmRWDZZqQ=
Subject key identifier:   FB:FF:2A:A7:10:90:EC:73:ED:47:19:92:F9:35:E4:76:86:BA:3C:FE
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F43285847EBBF7B0C06DAF82223484600
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/da7f4729-e05f-3e1a-8770-0da9b2748dd1.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     14241
IP address blocks:        136.228.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:7b:0c:06:da:f8:22:23:48:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=b18f0e62-8b43-4910-a4c0-2058845ee13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1b:66:52:b4:e2:e8:f3:b2:f4:5c:18:12:5a:
                    68:03:58:98:e9:7a:4f:ca:a4:16:43:6d:07:eb:6a:
                    75:ae:54:12:ec:a8:17:f1:39:df:f1:8c:a8:9c:73:
                    f0:c2:1d:0f:0e:b0:1f:e1:c4:89:de:d7:f9:9b:00:
                    18:7f:ad:28:55:dd:a7:f2:da:f0:0a:a4:34:ee:97:
                    4e:51:7a:51:d7:ec:ad:e9:43:44:c7:4f:c1:f5:a5:
                    94:ea:8d:6b:ff:38:2a:4d:dd:7f:78:34:f8:0e:17:
                    2d:3c:1c:86:c7:f1:2d:f0:7f:b6:ac:4a:a4:6a:08:
                    2f:30:14:ad:fa:c0:37:00:2e:63:1d:d6:2d:f1:1b:
                    f5:73:c2:5a:6c:5f:b2:85:93:d7:10:8c:2c:99:2f:
                    01:13:cd:32:2c:eb:52:52:4a:10:e6:c3:06:19:83:
                    bf:27:0f:03:5a:9a:7e:6f:50:64:42:d7:8a:b5:f5:
                    9e:c6:56:5b:aa:f6:87:6c:0b:b9:5b:97:08:33:1d:
                    09:36:07:51:f6:5b:ba:ce:25:8a:26:d3:16:dc:aa:
                    32:ac:b3:5a:a0:3f:37:69:20:44:e3:09:c8:34:15:
                    ed:65:06:50:c4:64:5f:44:12:f5:58:27:7f:84:7f:
                    f9:6b:e2:62:8f:68:e2:65:79:36:ec:5f:e1:28:ff:
                    b6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FF:2A:A7:10:90:EC:73:ED:47:19:92:F9:35:E4:76:86:BA:3C:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/da7f4729-e05f-3e1a-8770-0da9b2748dd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:68:7f:bd:56:df:11:0c:f3:1e:b6:1a:42:89:b1:3e:71:87:
         11:4e:c4:b2:9e:4d:22:50:79:24:cd:ec:75:e2:60:22:4e:da:
         0d:af:45:ef:6d:47:6a:07:cf:31:f2:74:63:05:1e:43:1d:3e:
         b6:ad:bc:00:88:68:8c:db:c5:a6:77:2d:13:a9:6c:8a:b7:f8:
         d6:ac:8b:12:4e:a6:c2:ca:76:52:b4:00:df:6b:c6:d7:76:f0:
         2a:0d:77:94:03:79:0c:7a:40:3a:49:96:d2:75:bd:f1:2e:3e:
         78:52:23:00:ec:c1:fa:af:c5:38:0a:f8:18:68:10:b8:36:4e:
         a9:ee:31:9e:ac:de:9e:23:e5:9e:c8:3f:b4:3c:20:eb:c9:86:
         a5:d3:d7:15:d3:9f:20:4e:07:0d:d6:1b:e1:8b:51:f4:85:62:
         8d:f5:5a:1d:87:ce:f0:a6:f4:04:2c:ea:96:b6:9b:8d:05:ef:
         af:6e:46:86:08:76:d4:18:51:ef:00:69:b9:62:c2:5e:f4:f7:
         6d:7a:79:b4:65:3d:fe:c1:b9:d8:cf:74:35:1f:8d:0c:d3:d8:
         a6:77:d0:da:e9:ca:7e:e0:ea:27:61:7f:80:c3:44:f9:67:41:
         33:60:b1:32:8b:d6:c3:59:34:c8:c0:dc:54:c1:b9:78:ff:af:
         60:66:0d:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrv3sMBtr4IiNIRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjA2MzgxNGQtNTE4My00OWRlLTkwZWUtODRjYmJlY2Rl
NDIyMB4XDTI0MTExODE0MDA0MFoXDTI1MDIxNjE0MDA0MFowLzEtMCsGA1UEAxMk
YjE4ZjBlNjItOGI0My00OTEwLWE0YzAtMjA1ODg0NWVlMTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBtmUrTi6POy9FwYElpoA1iY6XpPyqQWQ20H
62p1rlQS7KgX8Tnf8YyonHPwwh0PDrAf4cSJ3tf5mwAYf60oVd2n8trwCqQ07pdO
UXpR1+yt6UNEx0/B9aWU6o1r/zgqTd1/eDT4DhctPByGx/Et8H+2rEqkaggvMBSt
+sA3AC5jHdYt8Rv1c8JabF+yhZPXEIwsmS8BE80yLOtSUkoQ5sMGGYO/Jw8DWpp+
b1BkQteKtfWexlZbqvaHbAu5W5cIMx0JNgdR9lu6ziWKJtMW3KoyrLNaoD83aSBE
4wnINBXtZQZQxGRfRBL1WCd/hH/5a+Jij2jiZXk27F/hKP+2LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPv/KqcQkOxz7UcZkvk15HaGujz+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MDYz
ODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNiYmVjZGU0MjIvZGE3ZjQ3MjktZTA1Zi0z
ZTFhLTg3NzAtMGRhOWIyNzQ4ZGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjA2MzgxNGQtNTE4My00OWRlLTkw
ZWUtODRjYmJlY2RlNDIyLzYwNjM4MTRkLTUxODMtNDlkZS05MGVlLTg0Y2JiZWNk
ZTQyMi5jcmwwHwYDVR0jBBgwFoAU+oFKWYuHd/AMGvqgYA7Dhlv3AcAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82MDYzODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNi
YmVjZGU0MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOQhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABtof71W3xEM8x62GkKJsT5xhxFOxLKeTSJQeSTN7HXiYCJO2g2vRe9t
R2oHzzHydGMFHkMdPratvACIaIzbxaZ3LROpbIq3+NasixJOpsLKdlK0AN9rxtd2
8CoNd5QDeQx6QDpJltJ1vfEuPnhSIwDswfqvxTgK+BhoELg2TqnuMZ6s3p4j5Z7I
P7Q8IOvJhqXT1xXTnyBOBw3WG+GLUfSFYo31Wh2HzvCm9AQs6pa2m40F769uRoYI
dtQYUe8Aabliwl709216ebRlPf7BudjPdDUfjQzT2KZ30Nrpyn7g6idhf4DDRPln
QTNgsTKL1sNZNMjA3FTBuXj/r2BmDe0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:03 2024 by rpki-client on console-ams.rpki-client.org