Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/243aaf43-c9df-3a08-b963-f0e358be1f43.roa
File:                     243aaf43-c9df-3a08-b963-f0e358be1f43.roa (raw, json)
Hash identifier:          eTa+2J10wbT4auJ/Z8TCPZONPziHAY/v9qCHezL9Wpw=
Subject key identifier:   1B:EF:91:0E:B7:66:A8:41:DE:A3:BB:C7:1A:7A:9C:A5:5C:02:AF:70
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F432858477230F34C577770C12DDB9BC0
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/243aaf43-c9df-3a08-b963-f0e358be1f43.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     63199
IP address blocks:        148.153.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:f3:4c:57:77:70:c1:2d:db:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=59080312-1d89-43e8-8c03-28c696d0681f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b4:3b:14:9a:f6:f2:5e:b6:b8:03:e1:0b:1f:
                    b1:ee:9d:7e:7b:30:b0:3f:e9:d3:62:9b:ac:6e:43:
                    cb:11:58:e5:26:fd:70:08:3f:ca:75:cf:c0:dc:e8:
                    68:7b:93:0b:0e:d2:75:49:12:83:2e:57:98:87:33:
                    10:be:8a:b8:05:35:1e:f1:e9:a8:02:32:98:8e:f9:
                    e3:f3:76:6b:e8:04:9a:cb:d1:d6:ab:86:d0:94:61:
                    fe:06:eb:ac:d4:a0:bd:75:eb:83:dc:49:e3:ee:a7:
                    bf:83:df:a9:09:82:d6:3c:ec:7c:16:1f:da:15:f9:
                    3e:a4:51:98:e7:d7:41:07:19:ad:f6:82:ce:87:b7:
                    85:fd:82:2d:b7:32:63:f0:42:81:d8:d6:6d:b3:b4:
                    68:50:b0:af:63:1f:11:d0:12:1f:55:d5:a5:9c:ca:
                    be:0a:c1:9d:05:54:f7:0e:a5:c0:be:7e:4a:bb:65:
                    15:cf:ac:c2:36:e3:0a:4d:d5:ca:dd:a3:25:40:fd:
                    2b:c5:93:7f:65:5a:9c:77:3e:9f:e0:2c:f2:3f:ce:
                    a6:92:6b:12:aa:ca:c7:f8:48:ab:01:02:3b:ad:35:
                    e4:91:e1:ca:f3:fd:76:af:ff:44:0d:8a:dd:c1:75:
                    16:4a:eb:a7:30:e7:47:c2:c7:38:31:68:2c:eb:09:
                    b9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EF:91:0E:B7:66:A8:41:DE:A3:BB:C7:1A:7A:9C:A5:5C:02:AF:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/243aaf43-c9df-3a08-b963-f0e358be1f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:6e:c5:e0:4a:e0:69:51:f2:d7:3e:7d:59:88:11:0d:7c:c8:
         27:b6:4c:82:98:d5:0d:54:05:f5:ea:21:8a:d1:a2:f4:7c:af:
         cb:58:ba:92:9d:50:8e:85:79:45:12:92:e8:0b:77:a2:80:7b:
         6c:57:97:de:4f:09:1f:f1:25:7a:4d:b5:34:fa:37:56:33:a0:
         80:32:f9:37:fa:02:e8:ce:cc:87:3b:f6:a6:a8:ce:d6:80:b7:
         4c:c9:4e:8d:f3:a2:24:0d:4a:b2:d3:3f:74:8c:e6:2a:b6:79:
         dd:ba:b5:e3:52:88:df:52:95:06:f0:8b:e9:0e:8e:53:0f:d4:
         af:09:c2:76:77:21:56:8a:15:8e:e4:e1:7a:75:29:62:7c:84:
         8c:c3:cb:a1:83:d6:b1:57:cc:f3:f4:e6:23:9c:fc:ed:94:fa:
         43:84:a7:5e:98:fe:09:21:41:6e:7e:d5:48:ec:56:5c:aa:76:
         17:46:63:1b:58:57:44:a1:3c:7b:a5:fa:af:ee:63:69:2e:14:
         df:37:73:a6:49:f1:84:f4:e9:4b:d6:00:2c:86:eb:de:41:34:
         4b:ff:ac:61:00:b3:a7:c5:9a:17:8c:33:ed:3c:b6:6b:f2:23:
         74:8b:2a:2e:5c:e8:ea:5b:ad:1e:21:72:5d:76:d1:2c:65:4b:
         07:61:d7:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMPNMV3dwwS3bm8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx
YWE3MB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk
NTkwODAzMTItMWQ4OS00M2U4LThjMDMtMjhjNjk2ZDA2ODFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7Q7FJr28l62uAPhCx+x7p1+ezCwP+nTYpus
bkPLEVjlJv1wCD/Kdc/A3Ohoe5MLDtJ1SRKDLleYhzMQvoq4BTUe8emoAjKYjvnj
83Zr6ASay9HWq4bQlGH+Buus1KC9deuD3Enj7qe/g9+pCYLWPOx8Fh/aFfk+pFGY
59dBBxmt9oLOh7eF/YIttzJj8EKB2NZts7RoULCvYx8R0BIfVdWlnMq+CsGdBVT3
DqXAvn5Ku2UVz6zCNuMKTdXK3aMlQP0rxZN/ZVqcdz6f4CzyP86mkmsSqsrH+Eir
AQI7rTXkkeHK8/12r/9EDYrdwXUWSuunMOdHwsc4MWgs6wm5nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBvvkQ63ZqhB3qO7xxp6nKVcAq9wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1
ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMjQzYWFmNDMtYzlkZi0z
YTA4LWI5NjMtZjBlMzU4YmUxZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky
YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh
MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz
YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJuxeBK4GlR8tc+fVmIEQ18yCe2TIKY1Q1UBfXqIYrRovR8r8tYupKd
UI6FeUUSkugLd6KAe2xXl95PCR/xJXpNtTT6N1YzoIAy+Tf6AujOzIc79qaoztaA
t0zJTo3zoiQNSrLTP3SM5iq2ed26teNSiN9SlQbwi+kOjlMP1K8JwnZ3IVaKFY7k
4Xp1KWJ8hIzDy6GD1rFXzPP05iOc/O2U+kOEp16Y/gkhQW5+1UjsVlyqdhdGYxtY
V0ShPHul+q/uY2kuFN83c6ZJ8YT06UvWACyG695BNEv/rGEAs6fFmheMM+08tmvy
I3SLKi5c6OpbrR4hcl120SxlSwdh128=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org