Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9abeb351-ad7a-33a7-8821-218970296a71.roa
File:                     9abeb351-ad7a-33a7-8821-218970296a71.roa (raw, json)
Hash identifier:          kcINCZD/hW7L7PSZmAkpqmXS3MywKGiei5CXxUWfcYE=
Subject key identifier:   D8:B1:86:7C:BE:AD:51:9F:B7:BF:A3:04:95:3B:A0:D2:96:85:1C:4C
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F43285847C1DF4FAF39D0039A8B6DD780
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9abeb351-ad7a-33a7-8821-218970296a71.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     16509
IP address blocks:        136.226.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:4f:af:39:d0:03:9a:8b:6d:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=f445a2aa-73c9-4cd2-9d43-933f1537eb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:46:8c:7f:e4:5b:ba:47:62:a9:99:86:f3:43:
                    7e:34:2b:ea:85:5b:89:72:b6:04:e4:92:24:47:72:
                    25:34:6d:44:f5:f4:63:97:e3:6e:bd:ee:64:28:25:
                    37:40:6a:4d:38:fa:36:62:a1:40:f5:7a:c9:47:0b:
                    81:da:80:ea:cd:7a:c7:07:24:15:ad:14:7f:c4:dd:
                    ed:5d:cf:21:3e:e0:fd:16:83:03:d3:02:a9:58:e7:
                    77:e0:63:27:a3:da:99:4f:bf:42:18:1e:aa:dd:a6:
                    54:2e:ef:15:2d:33:fe:9d:c2:d6:ef:84:da:29:7d:
                    99:43:ce:86:2d:13:1d:3b:28:3a:6a:aa:72:c5:ed:
                    91:e4:ef:3d:d2:cc:59:79:b3:df:5d:c8:df:c8:db:
                    17:9c:41:b9:3b:72:48:9f:ca:cc:d1:89:b4:90:aa:
                    56:e6:c2:55:4b:2c:b6:ba:99:70:9b:70:a2:d4:ec:
                    8f:44:5d:26:a2:c1:61:bf:13:d6:e2:ef:08:58:47:
                    99:d8:f8:89:8e:e4:8d:0d:b1:95:1d:39:0e:cd:a0:
                    37:80:91:d8:5a:21:92:3d:02:3d:81:4a:3f:b9:1f:
                    9d:df:3c:6f:9a:71:e4:dd:2c:b0:b8:d7:e3:3f:b7:
                    c2:bf:9c:37:f5:7f:86:14:0e:63:48:4b:3c:f2:c1:
                    48:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B1:86:7C:BE:AD:51:9F:B7:BF:A3:04:95:3B:A0:D2:96:85:1C:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9abeb351-ad7a-33a7-8821-218970296a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:3a:f6:6b:db:10:fc:ca:cc:81:20:b9:ff:93:57:eb:38:d8:
         8b:90:c2:10:4c:c6:93:dc:47:fa:4b:70:51:5b:29:7a:37:fc:
         16:19:a2:ed:4f:d1:80:b9:fc:c9:c6:1f:3f:ff:bf:5f:bc:6c:
         9a:aa:92:ac:9a:87:0b:a0:8d:31:d5:6b:33:10:e4:e7:b3:39:
         de:1c:ed:6d:ec:46:61:4a:3f:8c:d1:3b:79:ac:af:75:5d:31:
         d7:52:f5:2e:6d:c1:0d:4f:55:ff:03:54:a3:73:12:ae:53:cd:
         67:35:8d:60:9e:10:39:1e:ba:93:c2:66:77:f2:e5:09:05:89:
         f9:b3:0b:65:a2:a2:25:db:dd:30:df:60:98:f5:8f:1e:84:95:
         11:de:7b:b3:c1:ee:9c:20:d2:ce:78:1d:c2:67:7f:a0:38:92:
         23:91:72:d7:d4:db:4b:f1:a9:65:c7:d1:ef:28:e2:36:da:2d:
         ed:22:bd:0f:bf:f9:6f:6a:20:bf:39:85:a7:05:68:29:c0:fb:
         cf:09:61:b1:a4:c7:28:7e:89:7b:cf:50:3a:3c:6c:27:7a:28:
         8c:47:ca:e3:c1:49:11:51:a6:e2:b6:7e:58:49:f5:62:3c:ea:
         e9:e1:ac:7a:4f:98:40:6b:dd:c9:bf:fa:81:fe:a4:75:84:af:
         6d:c6:ff:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfB30+vOdADmott14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk
ZjQ0NWEyYWEtNzNjOS00Y2QyLTlkNDMtOTMzZjE1MzdlYjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUaMf+RbukdiqZmG80N+NCvqhVuJcrYE5JIk
R3IlNG1E9fRjl+Nuve5kKCU3QGpNOPo2YqFA9XrJRwuB2oDqzXrHByQVrRR/xN3t
Xc8hPuD9FoMD0wKpWOd34GMno9qZT79CGB6q3aZULu8VLTP+ncLW74TaKX2ZQ86G
LRMdOyg6aqpyxe2R5O890sxZebPfXcjfyNsXnEG5O3JIn8rM0Ym0kKpW5sJVSyy2
uplwm3Ci1OyPRF0mosFhvxPW4u8IWEeZ2PiJjuSNDbGVHTkOzaA3gJHYWiGSPQI9
gUo/uR+d3zxvmnHk3SywuNfjP7fCv5w39X+GFA5jSEs88sFIOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNixhny+rVGft7+jBJU7oNKWhRxMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOWFiZWIzNTEtYWQ3YS0z
M2E3LTg4MjEtMjE4OTcwMjk2YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOLbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACA69mvbEPzKzIEguf+TV+s42IuQwhBMxpPcR/pLcFFbKXo3/BYZou1P
0YC5/MnGHz//v1+8bJqqkqyahwugjTHVazMQ5OezOd4c7W3sRmFKP4zRO3msr3Vd
MddS9S5twQ1PVf8DVKNzEq5TzWc1jWCeEDkeupPCZnfy5QkFifmzC2WioiXb3TDf
YJj1jx6ElRHee7PB7pwg0s54HcJnf6A4kiORctfU20vxqWXH0e8o4jbaLe0ivQ+/
+W9qIL85hacFaCnA+88JYbGkxyh+iXvPUDo8bCd6KIxHyuPBSRFRpuK2flhJ9WI8
6unhrHpPmEBr3cm/+oH+pHWEr23G/9o=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:59 2024 by rpki-client on console-ams.rpki-client.org