Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c45cfbe-6dad-323b-b9b4-fe3d22fe6ff6.roa
File:                     0c45cfbe-6dad-323b-b9b4-fe3d22fe6ff6.roa (raw, json)
Hash identifier:          VF6qCfx4gJhqkPQKvq9SJsMWH0K4w4mO8aWqISaNt4g=
Subject key identifier:   C1:2D:4C:97:92:18:4D:4D:82:A2:DA:15:07:E8:B4:79:B8:DD:2B:F3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0F3976980707CA5E73C500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c45cfbe-6dad-323b-b9b4-fe3d22fe6ff6.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     7122
IP address blocks:        170.199.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:39:76:98:07:07:ca:5e:73:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=2808237a-e1d1-451b-8c54-6cf8b71a1489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d4:fc:d2:10:39:30:1b:b1:79:93:38:5c:a0:
                    12:dc:f5:f3:82:00:c4:b4:78:e5:3c:2a:10:7e:64:
                    46:62:ce:74:fb:a9:c4:a8:36:cd:69:64:fb:01:6b:
                    4c:71:06:b9:0c:c2:85:fd:94:29:60:7e:6d:a9:93:
                    23:1d:79:1e:5b:01:58:99:01:0c:0d:cc:91:5c:a8:
                    2e:cf:c2:b8:8b:21:e5:bd:8d:ac:28:94:14:ae:d3:
                    d5:3a:9d:c9:49:0a:82:6d:fb:23:43:6a:4d:03:85:
                    b9:65:78:c1:33:59:31:7a:41:b7:c9:1d:fc:ab:0d:
                    75:10:c9:07:6c:88:cb:97:d0:01:00:29:8a:d0:d3:
                    82:c7:0d:61:69:55:a0:2a:a8:42:04:f2:46:9e:1e:
                    09:91:bf:d7:2f:28:be:43:ad:f3:67:53:d2:47:58:
                    d4:77:38:c7:bb:ef:d5:48:b7:4b:d8:6b:3b:5c:7e:
                    2a:3a:ac:0f:29:fd:46:44:ef:0e:9a:12:55:de:44:
                    74:84:fc:8c:21:99:5e:a2:27:c9:30:58:80:58:c4:
                    87:81:6e:6c:00:59:1a:86:04:48:76:2e:20:45:f1:
                    ef:84:75:b6:38:70:9f:b4:67:fe:12:66:6b:3f:ac:
                    f6:ca:6b:8a:5e:ef:9d:ce:74:f9:33:c1:62:14:07:
                    23:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2D:4C:97:92:18:4D:4D:82:A2:DA:15:07:E8:B4:79:B8:DD:2B:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c45cfbe-6dad-323b-b9b4-fe3d22fe6ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:8f:b1:48:02:b1:77:6f:89:17:84:6a:fc:fc:f0:62:9f:11:
         a5:7a:ba:c7:c7:86:32:d1:95:24:2b:dc:bd:0c:d7:e5:46:03:
         94:94:c1:a0:fb:b5:82:7a:32:e0:4b:19:88:1d:1e:a7:c2:47:
         c4:e8:84:d4:e8:57:65:e1:cb:78:c6:2d:5c:31:12:a5:32:28:
         8e:b9:74:07:76:36:44:74:c8:3c:0b:02:33:4b:08:48:c7:6a:
         5b:58:97:a1:79:97:43:0c:e0:72:bc:dc:e0:b1:f2:b2:35:53:
         2b:79:70:9f:8e:3c:69:9c:15:5a:47:92:23:2f:5d:5b:95:d5:
         21:9c:58:57:2e:d5:75:97:c0:49:ef:c7:dd:07:98:8f:2b:34:
         98:80:db:f0:28:c6:6e:b5:21:99:db:e5:70:1e:4b:6a:ef:c4:
         75:61:61:88:5f:40:d5:ff:2f:4a:c9:bc:3b:05:72:74:37:0f:
         be:f7:b9:20:43:a9:da:53:a1:9b:88:8f:89:73:d5:d0:98:48:
         40:d6:a1:29:8a:15:e7:ca:38:e5:94:68:96:6a:5a:fc:40:d6:
         b6:34:3a:1a:7b:e4:dd:90:de:54:32:5f:62:e9:03:82:bb:b7:
         32:b4:83:85:68:66:39:94:76:84:87:f8:e7:4e:76:ce:ef:d0:
         48:14:b7:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrDzl2mAcHyl5zxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
MjgwODIzN2EtZTFkMS00NTFiLThjNTQtNmNmOGI3MWExNDg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdT80hA5MBuxeZM4XKAS3PXzggDEtHjlPCoQ
fmRGYs50+6nEqDbNaWT7AWtMcQa5DMKF/ZQpYH5tqZMjHXkeWwFYmQEMDcyRXKgu
z8K4iyHlvY2sKJQUrtPVOp3JSQqCbfsjQ2pNA4W5ZXjBM1kxekG3yR38qw11EMkH
bIjLl9ABACmK0NOCxw1haVWgKqhCBPJGnh4Jkb/XLyi+Q63zZ1PSR1jUdzjHu+/V
SLdL2Gs7XH4qOqwPKf1GRO8OmhJV3kR0hPyMIZleoifJMFiAWMSHgW5sAFkahgRI
di4gRfHvhHW2OHCftGf+EmZrP6z2ymuKXu+dznT5M8FiFAcjWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMEtTJeSGE1NgqLaFQfotHm43SvzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMGM0NWNmYmUtNmRhZC0z
MjNiLWI5YjQtZmUzZDIyZmU2ZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHqscAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqPsUgCsXdviReEavz88GKfEaV6usfHhjLRlSQr3L0M1+VGA5SUwaD7
tYJ6MuBLGYgdHqfCR8TohNToV2Xhy3jGLVwxEqUyKI65dAd2NkR0yDwLAjNLCEjH
altYl6F5l0MM4HK83OCx8rI1Uyt5cJ+OPGmcFVpHkiMvXVuV1SGcWFcu1XWXwEnv
x90HmI8rNJiA2/Aoxm61IZnb5XAeS2rvxHVhYYhfQNX/L0rJvDsFcnQ3D773uSBD
qdpToZuIj4lz1dCYSEDWoSmKFefKOOWUaJZqWvxA1rY0Ohp75N2Q3lQyX2LpA4K7
tzK0g4VoZjmUdoSH+OdOds7v0EgUt5A=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:08 2024 by rpki-client on console-fra.rpki-client.org