Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/480031fb-eaef-32dd-a329-e0c4efb5fcf7.roa
File:                     480031fb-eaef-32dd-a329-e0c4efb5fcf7.roa (raw, json)
Hash identifier:          nFFgd2DjIAa6iLn1v7xWu7VEJ6QdV6mR416BZ0Ym6DM=
Subject key identifier:   87:18:79:D6:98:00:A6:1D:30:09:81:FE:A1:78:85:DC:EA:96:73:3F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B10535EE8FF8DAB85AEE200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/480031fb-eaef-32dd-a329-e0c4efb5fcf7.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     21774
IP address blocks:        206.45.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:53:5e:e8:ff:8d:ab:85:ae:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=dca38463-c18f-48f8-a6d0-dbb4aa7b39e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:36:78:a5:c7:97:9b:7d:fd:11:3f:46:c7:f3:
                    d1:de:7b:be:f6:33:3c:d1:68:b9:29:69:48:2f:7a:
                    52:b9:85:0c:b6:2f:86:e9:7f:29:ec:9c:96:21:9b:
                    89:6d:f3:ec:16:71:3a:7b:75:ec:7b:1a:ca:75:ee:
                    e9:5c:49:84:da:ee:08:90:f2:6c:f2:51:1e:b3:f5:
                    95:c0:37:f3:b0:79:5b:a9:6d:31:d4:12:d2:09:a5:
                    63:cc:97:17:ff:89:46:1a:ed:6c:97:15:7f:0a:c6:
                    18:fb:03:40:8a:7e:74:8d:8c:12:f1:a1:8a:bc:ab:
                    2e:70:b9:41:b2:d2:51:c5:c8:3c:0e:e6:fa:02:a1:
                    ab:bd:48:d2:90:dc:ef:37:02:61:51:bb:76:16:4d:
                    1d:98:e3:27:b5:67:04:3c:76:8e:20:2e:51:69:3b:
                    fc:6e:44:d5:de:b9:47:aa:13:66:9f:17:c7:cc:b4:
                    29:47:cc:2b:a4:c4:67:af:70:8b:61:93:cc:ad:e6:
                    cf:db:2b:9a:4a:c1:ec:ca:61:1b:b9:b2:00:b0:4f:
                    ba:b3:ce:29:a8:3a:1c:f0:b3:95:1a:c0:c5:91:79:
                    2d:89:07:6b:64:ec:ad:95:dc:8a:bf:ef:0d:b3:f9:
                    ee:7f:d2:ba:b8:da:63:27:b8:3c:3a:ba:54:a3:53:
                    43:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:18:79:D6:98:00:A6:1D:30:09:81:FE:A1:78:85:DC:EA:96:73:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/480031fb-eaef-32dd-a329-e0c4efb5fcf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.45.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:65:c2:0a:30:be:71:4f:7b:8a:f1:b6:65:6e:c1:c3:cb:48:
         a5:c6:8a:24:99:1f:c8:78:0c:20:55:83:c3:4e:fa:98:96:e8:
         d3:16:2e:11:5e:ed:b9:7e:f9:7c:4e:72:10:cf:08:cc:3d:78:
         d1:49:b3:76:cf:b7:ee:78:29:de:e6:4e:ca:2a:da:24:c0:07:
         16:3c:a6:ed:df:af:77:ed:92:44:8c:dd:4e:a6:1b:02:70:09:
         e5:38:9e:65:05:63:1b:df:ca:a4:a3:b4:b3:1b:9b:5a:f5:57:
         e7:14:b0:2f:bd:68:62:8c:15:29:da:c1:6b:38:b6:13:66:bb:
         9d:09:13:1e:fd:1a:ac:4c:dd:cb:e8:77:ba:36:a5:8e:e3:fe:
         b5:a4:c6:a0:9a:06:af:be:da:cf:f7:98:66:86:1d:0d:97:5c:
         2e:7d:4e:9b:ca:fb:1a:15:87:0c:30:f0:ab:c5:79:46:c3:cb:
         12:1e:ce:a8:6d:28:1b:f8:8f:cb:b7:2f:67:bf:14:0e:84:50:
         2c:aa:c5:af:6a:ff:60:ab:3e:07:2f:67:29:c1:63:16:ff:22:
         11:f6:25:46:0a:e8:e6:6e:f9:21:7d:66:13:d9:3e:35:59:ff:
         5c:e0:e8:31:93:6a:3a:67:e1:8a:61:5c:9f:29:f6:d7:c3:c6:
         7b:c7:ca:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrEFNe6P+Nq4Wu4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZGNhMzg0NjMtYzE4Zi00OGY4LWE2ZDAtZGJiNGFhN2IzOWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTZ4pceXm339ET9Gx/PR3nu+9jM80Wi5KWlI
L3pSuYUMti+G6X8p7JyWIZuJbfPsFnE6e3XsexrKde7pXEmE2u4IkPJs8lEes/WV
wDfzsHlbqW0x1BLSCaVjzJcX/4lGGu1slxV/CsYY+wNAin50jYwS8aGKvKsucLlB
stJRxcg8Dub6AqGrvUjSkNzvNwJhUbt2Fk0dmOMntWcEPHaOIC5RaTv8bkTV3rlH
qhNmnxfHzLQpR8wrpMRnr3CLYZPMrebP2yuaSsHsymEbubIAsE+6s84pqDoc8LOV
GsDFkXktiQdrZOytldyKv+8Ns/nuf9K6uNpjJ7g8OrpUo1NDKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIcYedaYAKYdMAmB/qF4hdzqlnM/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNDgwMDMxZmItZWFlZi0z
MmRkLWEzMjktZTBjNGVmYjVmY2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzi0uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhlwgowvnFPe4rxtmVuwcPLSKXGiiSZH8h4DCBVg8NO+piW6NMWLhFe
7bl++XxOchDPCMw9eNFJs3bPt+54Kd7mTsoq2iTABxY8pu3fr3ftkkSM3U6mGwJw
CeU4nmUFYxvfyqSjtLMbm1r1V+cUsC+9aGKMFSnawWs4thNmu50JEx79GqxM3cvo
d7o2pY7j/rWkxqCaBq++2s/3mGaGHQ2XXC59TpvK+xoVhwww8KvFeUbDyxIezqht
KBv4j8u3L2e/FA6EUCyqxa9q/2CrPgcvZynBYxb/IhH2JUYK6OZu+SF9ZhPZPjVZ
/1zg6DGTajpn4YphXJ8p9tfDxnvHyhA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org