Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/118ac742-f269-3d97-8cdb-e754d2981ed6.roa
File:                     118ac742-f269-3d97-8cdb-e754d2981ed6.roa (raw, json)
Hash identifier:          XN0dM7cmFcPj7052H6avcv3XBfl3pY3liBPZ7m160b0=
Subject key identifier:   03:D0:AF:CA:DA:55:18:5E:43:AA:A0:00:DA:1A:4D:D1:76:8A:36:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF6D85ABA0BE3A5435D4000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/118ac742-f269-3d97-8cdb-e754d2981ed6.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        24.11.246.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:d8:5a:ba:0b:e3:a5:43:5d:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=a821c82e-b1b4-4a50-a8a4-bacf7dc89bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6a:23:2b:ae:1d:88:ad:8f:38:b4:ae:30:b0:
                    3b:5c:e4:85:52:ba:dc:6e:72:b5:8a:cc:11:df:a7:
                    1f:34:1b:5f:c3:a3:ee:79:60:ff:dd:9b:2b:98:f8:
                    df:a0:da:9e:01:2e:50:5e:e4:94:29:91:e6:03:25:
                    d2:cc:11:f6:81:22:63:10:d4:54:c3:47:b0:d1:e1:
                    3d:06:a6:ad:18:19:9d:50:e6:4b:2e:1f:dd:4e:96:
                    98:33:ec:2a:0c:c2:b1:70:7a:5c:09:fd:82:70:bc:
                    c3:fc:98:8b:c9:65:6e:73:46:a4:43:33:26:df:c2:
                    ef:84:97:59:bb:be:8c:09:c0:c6:6f:87:91:b4:e9:
                    ba:92:71:cd:a0:3c:27:4b:97:e6:ed:27:fc:c6:a1:
                    d3:72:27:3b:8e:d7:af:e5:08:2b:3e:d4:da:9c:3a:
                    0f:07:6a:41:47:d1:22:2c:84:cc:9b:fc:4f:1b:49:
                    3f:82:5d:c0:bf:8d:27:8a:a1:46:b0:e1:53:11:ad:
                    ff:96:71:be:50:51:e4:10:d1:d4:31:5d:67:19:fd:
                    96:22:e2:f3:26:0b:7f:91:04:f8:b7:c6:3b:3f:4e:
                    06:47:b7:92:8e:54:39:34:1d:2c:cb:84:39:3c:bd:
                    e8:4a:08:73:e3:b8:7d:1d:cb:68:2d:7c:8c:af:26:
                    12:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D0:AF:CA:DA:55:18:5E:43:AA:A0:00:DA:1A:4D:D1:76:8A:36:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/118ac742-f269-3d97-8cdb-e754d2981ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.11.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:73:46:cc:97:66:1b:d3:2e:77:9b:75:ec:bf:4e:73:6b:36:
         b9:ac:ed:ac:91:98:10:a7:52:01:94:72:5f:c9:ef:37:bd:85:
         0e:d6:1a:f6:21:fc:17:35:da:e0:bf:78:d2:26:ca:3b:68:77:
         5b:cb:fb:83:19:8c:7f:a6:14:98:fd:3a:22:f5:9f:70:de:e5:
         04:68:f4:ee:fc:a0:17:15:7d:b4:66:30:8d:65:00:25:8f:a1:
         bf:bd:2e:e6:25:ec:29:d7:ee:b5:16:01:76:52:66:3e:d3:62:
         15:0d:b3:e3:42:68:b5:e9:27:d2:0c:52:8a:a0:1f:ec:d5:03:
         10:12:7b:f3:1b:3a:3c:14:71:e6:a3:ea:fe:8a:0e:95:0c:c4:
         f5:51:37:33:44:e7:0d:40:36:e3:74:a0:75:0e:f9:03:3b:66:
         c4:4c:8f:24:5d:42:27:52:d4:4f:9e:16:bb:ca:9e:9a:9d:15:
         f9:06:42:23:dd:7b:eb:62:55:73:c1:70:8e:c9:04:d4:19:11:
         8a:38:c4:7a:08:ce:7f:11:cd:5c:88:2d:5c:13:6e:9b:30:ef:
         3e:7b:f1:5a:54:15:02:1f:05:05:4e:d7:cb:98:8e:f8:30:4d:
         42:a9:0b:b0:af:b2:18:1f:ce:a6:f5:0c:cf:ee:5d:cf:90:58:
         0b:ad:ea:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+9thaugvjpUNdQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
YTgyMWM4MmUtYjFiNC00YTUwLWE4YTQtYmFjZjdkYzg5YmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2ojK64diK2POLSuMLA7XOSFUrrcbnK1iswR
36cfNBtfw6PueWD/3ZsrmPjfoNqeAS5QXuSUKZHmAyXSzBH2gSJjENRUw0ew0eE9
BqatGBmdUOZLLh/dTpaYM+wqDMKxcHpcCf2CcLzD/JiLyWVuc0akQzMm38LvhJdZ
u76MCcDGb4eRtOm6knHNoDwnS5fm7Sf8xqHTcic7jtev5QgrPtTanDoPB2pBR9Ei
LITMm/xPG0k/gl3Av40niqFGsOFTEa3/lnG+UFHkENHUMV1nGf2WIuLzJgt/kQT4
t8Y7P04GR7eSjlQ5NB0sy4Q5PL3oSghz47h9HctoLXyMryYSVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAPQr8raVRheQ6qgANoaTdF2ijZVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTE4YWM3NDItZjI2OS0z
ZDk3LThjZGItZTc1NGQyOTgxZWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAv2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGVzRsyXZhvTLnebdey/TnNrNrms7ayRmBCnUgGUcl/J7ze9hQ7WGvYh
/Bc12uC/eNImyjtod1vL+4MZjH+mFJj9OiL1n3De5QRo9O78oBcVfbRmMI1lACWP
ob+9LuYl7CnX7rUWAXZSZj7TYhUNs+NCaLXpJ9IMUoqgH+zVAxASe/MbOjwUceaj
6v6KDpUMxPVRNzNE5w1ANuN0oHUO+QM7ZsRMjyRdQidS1E+eFrvKnpqdFfkGQiPd
e+tiVXPBcI7JBNQZEYo4xHoIzn8RzVyILVwTbpsw7z578VpUFQIfBQVO18uYjvgw
TUKpC7Cvshgfzqb1DM/uXc+QWAut6gM=
-----END CERTIFICATE-----
Generated at Sun Dec 22 03:35:08 2024 by rpki-client on console-fra.rpki-client.org