Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ca6a8e5b-899c-38a8-af78-abb6438b49ed.roa
File:                     ca6a8e5b-899c-38a8-af78-abb6438b49ed.roa (raw, json)
Hash identifier:          sTzUf0iNbg+9dqNZQWJl15Auo+wIRvXpJTahJDc+S3Q=
Subject key identifier:   5D:30:90:B3:E1:8F:25:2C:28:36:89:A9:23:07:60:F4:35:AF:DE:56
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285844FE2AE7BC14E056DEBDDF5D40
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ca6a8e5b-899c-38a8-af78-abb6438b49ed.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     11135
IP address blocks:        65.59.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:e7:bc:14:e0:56:de:bd:df:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=049b1cdf-2d07-4210-b477-db8720074c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:65:f2:f3:b4:5a:86:36:32:34:05:35:6f:09:
                    68:eb:5a:64:cf:bf:b4:d3:34:d1:ab:9e:22:ca:22:
                    0b:a0:4d:1e:9e:c6:d4:ae:7f:e0:01:12:74:9b:a9:
                    b0:81:09:14:d7:6e:4e:4d:87:0e:a0:89:16:2a:38:
                    7c:39:b2:69:ca:98:6e:6f:5c:20:39:b2:05:95:f3:
                    ec:2c:62:c7:5e:8e:73:78:9f:66:b1:ce:81:71:1d:
                    fc:0c:2d:a8:5f:d0:bf:2a:6f:84:ba:30:b0:f9:ed:
                    39:de:52:0c:42:f0:97:01:20:e8:04:ae:4e:0a:95:
                    5b:cb:5e:e3:80:ec:36:1b:7d:43:ed:2d:31:5a:53:
                    8a:51:3d:8f:c1:1b:55:27:f1:94:db:95:1e:40:e5:
                    c6:6b:b2:5a:92:3d:15:db:35:09:a4:6f:4e:ef:7c:
                    52:4f:64:63:4e:b0:69:2c:68:4f:7d:00:34:2c:db:
                    c5:17:73:f2:5e:c3:e2:47:1c:aa:2d:66:65:f2:c8:
                    64:01:a1:c7:0f:68:41:38:b5:f7:3e:ba:35:13:6f:
                    78:40:2c:0e:9c:99:40:62:88:ad:55:a3:a0:8e:f9:
                    11:02:88:e3:94:3c:9c:05:4c:9d:ff:f2:9f:6b:0d:
                    de:62:13:a9:9d:4b:b7:ce:10:d6:2f:dc:98:ed:02:
                    63:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:30:90:B3:E1:8F:25:2C:28:36:89:A9:23:07:60:F4:35:AF:DE:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ca6a8e5b-899c-38a8-af78-abb6438b49ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.59.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:58:6a:eb:ec:dc:d9:9d:99:71:72:40:5c:fa:5b:52:a5:0f:
         77:3e:21:7d:c6:67:60:d8:97:d2:49:18:4c:7f:08:74:e5:88:
         0b:a5:7a:b0:e3:1c:d6:b7:95:a2:fe:ed:a0:c9:8a:84:9d:5f:
         75:b8:63:2c:de:45:ca:80:07:de:05:67:b4:cd:83:7b:e8:43:
         1b:e0:08:82:db:57:15:dd:a7:cd:c5:70:56:22:87:2d:93:5c:
         5a:d1:f6:3d:1b:26:b5:93:63:b8:cb:7d:ef:16:62:cb:88:f7:
         5d:5e:6d:cd:94:ef:bc:42:e9:b5:31:fb:83:67:c5:5a:c9:60:
         b8:99:d2:df:d1:b2:80:4a:f9:90:19:31:6a:b8:a0:ff:d3:3f:
         c0:d9:78:88:02:8e:19:ff:de:23:42:6e:35:7f:b4:4e:5f:35:
         f7:42:9d:a6:f5:9d:5e:28:b1:3e:bd:8c:eb:78:6a:5e:c2:24:
         53:7b:f3:8d:c0:ce:46:b2:6b:07:cf:6d:94:70:7f:c9:42:c7:
         24:45:90:31:cc:f2:df:9e:70:c4:0e:b9:13:f0:2d:dd:db:35:
         16:6f:9e:48:57:c0:dc:59:25:e0:8f:c6:94:b0:5b:d3:8b:10:
         c6:96:9d:a4:ce:95:47:0a:d7:32:9b:90:2a:33:7b:fe:6b:b1:
         11:eb:41:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET+Kue8FOBW3r3fXUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI0MDIyNDAyMDAyNloXDTI0MDUyNDAxMDAyNlowLzEtMCsGA1UEAxMk
MDQ5YjFjZGYtMmQwNy00MjEwLWI0NzctZGI4NzIwMDc0YzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2Xy87RahjYyNAU1bwlo61pkz7+00zTRq54i
yiILoE0ensbUrn/gARJ0m6mwgQkU125OTYcOoIkWKjh8ObJpyphub1wgObIFlfPs
LGLHXo5zeJ9msc6BcR38DC2oX9C/Km+EujCw+e053lIMQvCXASDoBK5OCpVby17j
gOw2G31D7S0xWlOKUT2PwRtVJ/GU25UeQOXGa7Jakj0V2zUJpG9O73xST2RjTrBp
LGhPfQA0LNvFF3PyXsPiRxyqLWZl8shkAaHHD2hBOLX3Pro1E294QCwOnJlAYoit
VaOgjvkRAojjlDycBUyd//Kfaw3eYhOpnUu3zhDWL9yY7QJjVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF0wkLPhjyUsKDaJqSMHYPQ1r95WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvY2E2YThlNWItODk5Yy0z
OGE4LWFmNzgtYWJiNjQzOGI0OWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTv2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFYauvs3NmdmXFyQFz6W1KlD3c+IX3GZ2DYl9JJGEx/CHTliAulerDj
HNa3laL+7aDJioSdX3W4YyzeRcqAB94FZ7TNg3voQxvgCILbVxXdp83FcFYihy2T
XFrR9j0bJrWTY7jLfe8WYsuI911ebc2U77xC6bUx+4NnxVrJYLiZ0t/RsoBK+ZAZ
MWq4oP/TP8DZeIgCjhn/3iNCbjV/tE5fNfdCnab1nV4osT69jOt4al7CJFN7843A
zkayawfPbZRwf8lCxyRFkDHM8t+ecMQOuRPwLd3bNRZvnkhXwNxZJeCPxpSwW9OL
EMaWnaTOlUcK1zKbkCoze/5rsRHrQYE=
-----END CERTIFICATE-----
Generated at Mon May 6 11:52:16 2024 by rpki-client on console-fra.rpki-client.org