Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/f7ccb026-a019-3bf5-9219-65ac3b7435b2.roa
File:                     f7ccb026-a019-3bf5-9219-65ac3b7435b2.roa (raw, json)
Hash identifier:          hE8grc+KiarqfSeZfYjQ+9mLCva5Wl+WdJygg/mR6cw=
Subject key identifier:   1F:E1:53:BA:7E:E6:C0:6F:29:F5:C8:0D:59:56:1D:F1:FC:7C:4C:9C
Certificate issuer:       /CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Certificate serial:       010D0C9F432858478721299574F2BF2B87416CD0
Authority key identifier: 01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/f7ccb026-a019-3bf5-9219-65ac3b7435b2.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     23154
IP address blocks:        143.116.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:29:95:74:f2:bf:2b:87:41:6c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44b8d6b-c6d4-47cc-9966-777065609e90
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=1bba7a60-1ce0-4988-bba3-e493751e49d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:fe:b3:59:7d:ee:37:89:d6:99:05:94:79:
                    c6:79:3b:53:3a:01:10:78:72:0c:2f:47:ab:a0:d1:
                    0b:30:7b:ce:37:5b:da:a7:e1:ff:f9:80:d5:71:e8:
                    d6:de:02:f5:b0:75:82:71:cc:78:66:75:88:e9:86:
                    ae:85:f0:b3:31:a1:ed:73:28:cb:11:a2:f4:6d:68:
                    f1:bd:03:e0:04:fa:64:e0:50:fb:00:b4:85:92:c8:
                    c6:96:a1:30:04:8f:60:fb:3a:28:72:8d:fe:41:3c:
                    ad:c2:ed:cf:f5:bd:3a:16:2e:5b:d3:f5:52:76:c4:
                    a6:00:d8:82:0d:cc:d0:ca:e3:bc:68:50:30:da:f5:
                    c5:d4:a6:48:05:92:f3:c2:21:72:9d:53:12:aa:e1:
                    22:60:1b:c9:03:d4:fd:dd:da:38:f1:39:80:43:71:
                    8c:a2:e6:45:87:33:d4:82:9b:1f:80:6d:27:3a:7a:
                    43:48:ed:02:65:c1:16:b1:55:61:a8:db:b3:64:fe:
                    74:8a:20:9f:3d:4b:e3:05:26:f0:53:18:47:76:bb:
                    43:26:74:a6:c7:cc:20:e8:fa:cb:5c:62:00:44:7b:
                    41:60:52:8c:b7:01:e1:07:9f:66:5b:4a:94:21:e7:
                    0d:01:54:6c:d1:72:4e:6b:89:98:53:66:47:60:78:
                    d5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E1:53:BA:7E:E6:C0:6F:29:F5:C8:0D:59:56:1D:F1:FC:7C:4C:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/f7ccb026-a019-3bf5-9219-65ac3b7435b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl

            X509v3 Authority Key Identifier:
                keyid:01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.116.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e9:2a:dc:19:ee:94:02:76:9f:a9:7f:78:c1:8a:f7:37:51:
         f7:0e:46:b7:62:cc:6d:8a:40:f4:0f:c9:10:01:6c:dc:d5:63:
         ba:ec:12:ce:58:3b:e8:7a:7e:85:36:fc:8b:87:e5:b2:c3:aa:
         30:31:aa:a2:b4:9a:04:9b:70:4c:f8:1b:4e:ee:f3:77:40:a8:
         8a:bb:2d:f8:34:c0:58:5c:d3:d8:99:fb:92:7c:e4:1e:cb:19:
         99:b6:6e:a3:61:a4:6d:9b:de:ac:5e:b1:bf:ae:09:02:77:1b:
         61:96:00:ec:2e:95:0c:07:0a:ea:d2:2b:98:ac:29:8b:3e:6c:
         78:95:55:b5:af:00:33:40:34:4e:63:4b:3a:3e:7b:34:b5:a5:
         ca:67:3d:d3:b6:6b:30:fa:98:12:06:50:b1:ae:7e:9c:c7:30:
         65:c0:8f:85:62:25:e1:16:08:15:ef:90:5d:95:e5:2c:5e:01:
         75:74:76:c0:86:36:a0:17:a3:e3:30:a1:48:f6:86:29:00:a0:
         1a:13:07:8a:bc:46:5b:83:42:0a:d6:45:95:ab:c9:74:5e:ac:
         20:84:6c:d3:82:14:c6:b7:3f:2a:10:4c:6d:b5:28:29:7a:43:
         cc:8f:d5:5a:98:8d:69:d8:1a:b7:54:3e:4f:9d:6f:d0:7a:b2:
         be:13:51:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeHISmVdPK/K4dBbNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQ0YjhkNmItYzZkNC00N2NjLTk5NjYtNzc3MDY1NjA5
ZTkwMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk
MWJiYTdhNjAtMWNlMC00OTg4LWJiYTMtZTQ5Mzc1MWU0OWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgX+s1l97jeJ1pkFlHnGeTtTOgEQeHIML0er
oNELMHvON1vap+H/+YDVcejW3gL1sHWCccx4ZnWI6YauhfCzMaHtcyjLEaL0bWjx
vQPgBPpk4FD7ALSFksjGlqEwBI9g+zooco3+QTytwu3P9b06Fi5b0/VSdsSmANiC
DczQyuO8aFAw2vXF1KZIBZLzwiFynVMSquEiYBvJA9T93do48TmAQ3GMouZFhzPU
gpsfgG0nOnpDSO0CZcEWsVVhqNuzZP50iiCfPUvjBSbwUxhHdrtDJnSmx8wg6PrL
XGIARHtBYFKMtwHhB59mW0qUIecNAVRs0XJOa4mYU2ZHYHjVrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB/hU7p+5sBvKfXIDVlWHfH8fEycMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNDRi
OGQ2Yi1jNmQ0LTQ3Y2MtOTk2Ni03NzcwNjU2MDllOTAvZjdjY2IwMjYtYTAxOS0z
YmY1LTkyMTktNjVhYzNiNzQzNWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTQ0YjhkNmItYzZkNC00N2NjLTk5
NjYtNzc3MDY1NjA5ZTkwL2E0NGI4ZDZiLWM2ZDQtNDdjYy05OTY2LTc3NzA2NTYw
OWU5MC5jcmwwHwYDVR0jBBgwFoAUAbszEM/IbpG9J5hf9i/TfsnLdsAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNDRiOGQ2Yi1jNmQ0LTQ3Y2MtOTk2Ni03Nzcw
NjU2MDllOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj3QPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADrpKtwZ7pQCdp+pf3jBivc3UfcORrdizG2KQPQPyRABbNzVY7rsEs5Y
O+h6foU2/IuH5bLDqjAxqqK0mgSbcEz4G07u83dAqIq7Lfg0wFhc09iZ+5J85B7L
GZm2bqNhpG2b3qxesb+uCQJ3G2GWAOwulQwHCurSK5isKYs+bHiVVbWvADNANE5j
Szo+ezS1pcpnPdO2azD6mBIGULGufpzHMGXAj4ViJeEWCBXvkF2V5SxeAXV0dsCG
NqAXo+MwoUj2hikAoBoTB4q8RluDQgrWRZWryXRerCCEbNOCFMa3PyoQTG21KCl6
Q8yP1VqYjWnYGrdUPk+db9B6sr4TUac=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:14 2024 by rpki-client on console-ams.rpki-client.org