Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53c5897a-eadb-3003-8e7d-473a2baec3e7.roa
File:                     53c5897a-eadb-3003-8e7d-473a2baec3e7.roa (raw, json)
Hash identifier:          1HqvVYWu6wnGivj1hfGXFIvVqSrH2D8nhM9KXDy9Vlo=
Subject key identifier:   43:9F:F8:A1:50:04:23:F4:22:F1:54:48:97:9E:8F:03:40:06:38:8B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CF0E5A492AD7FB2457E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53c5897a-eadb-3003-8e7d-473a2baec3e7.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        24.130.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:f0:e5:a4:92:ad:7f:b2:45:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=8f90ac27-ea52-4389-8ad5-f916ddb4c29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:51:82:4f:e5:b3:a6:75:6c:1b:bf:cc:e4:f4:
                    62:f8:64:56:59:af:50:0a:f2:0b:8b:05:9e:89:f1:
                    68:07:40:cc:77:4d:6b:b4:a2:7e:ac:64:41:d9:37:
                    f9:46:77:21:90:3c:c6:0c:d3:96:4d:5e:a1:27:f4:
                    58:00:e6:49:01:40:de:a6:b0:a0:01:96:85:f5:b3:
                    65:53:8f:bc:fc:43:9d:e7:8f:2a:ec:45:ec:73:b6:
                    51:01:75:be:09:74:c4:b9:ae:90:ee:cf:4e:b5:7e:
                    ae:d1:37:f8:12:55:dd:eb:7d:05:07:48:d8:54:7e:
                    bd:60:2a:cc:54:f3:e7:c4:0d:49:c8:09:4a:2b:cd:
                    a6:50:20:2f:d8:e1:af:f7:73:4c:f8:64:77:95:8c:
                    53:91:5e:e5:ca:8a:74:08:9a:d7:56:76:6e:46:4b:
                    73:c0:9c:7a:9c:78:6a:13:14:07:91:6a:56:56:4b:
                    40:1a:4a:bd:7d:b1:59:29:6d:12:df:2c:ea:b0:21:
                    4f:e7:f3:71:87:a9:1f:9a:d8:56:52:78:a5:f8:2a:
                    dc:bd:f9:29:f4:48:58:02:c2:bf:16:79:c6:24:40:
                    87:93:58:08:54:32:b0:94:3b:ea:34:ea:0d:1e:e1:
                    78:98:ad:7d:df:11:e8:39:cd:81:e3:43:3e:44:da:
                    21:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9F:F8:A1:50:04:23:F4:22:F1:54:48:97:9E:8F:03:40:06:38:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53c5897a-eadb-3003-8e7d-473a2baec3e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.130.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:6b:b5:ea:7c:9b:09:d9:9d:1e:74:f9:3a:cc:59:32:97:94:
         54:37:7b:a2:a3:82:7d:c5:11:32:94:c4:ba:f0:72:f2:15:c0:
         e7:05:95:ca:f5:88:68:1b:4d:de:16:60:2f:00:9a:30:00:e1:
         03:24:7b:a4:d8:23:dc:b7:fc:36:35:42:ed:be:a9:70:6f:d4:
         48:a7:ae:90:03:9a:6d:3f:17:12:74:46:5a:1a:69:ad:d2:b0:
         a9:03:b7:ab:57:86:ae:b2:17:4a:2b:d0:00:2c:5e:03:98:81:
         03:14:b7:f6:e0:bb:3c:03:b3:de:a3:00:ac:d5:7b:4a:d1:59:
         b7:70:73:c2:a8:3c:54:15:16:17:d5:14:e0:ca:e3:6a:e0:02:
         23:ad:96:e8:84:e8:db:18:ed:02:3a:06:8c:82:ab:90:02:27:
         15:07:90:58:43:46:f1:da:00:33:e8:4a:f4:76:80:46:ed:db:
         bf:ff:15:3e:30:8f:f3:5f:fd:df:19:22:cf:a8:cb:19:4f:3a:
         50:6b:3a:ae:11:fe:73:d8:6d:57:04:30:60:0c:ec:aa:3a:ea:
         e1:68:da:51:f7:dd:e6:85:95:c0:9c:1b:65:4d:88:de:ba:a3:
         e8:2c:18:6f:a5:9d:1d:5f:96:68:13:23:93:51:3a:eb:ff:71:
         7c:46:55:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnPDlpJKtf7JFfoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
OGY5MGFjMjctZWE1Mi00Mzg5LThhZDUtZjkxNmRkYjRjMjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FGCT+WzpnVsG7/M5PRi+GRWWa9QCvILiwWe
ifFoB0DMd01rtKJ+rGRB2Tf5RnchkDzGDNOWTV6hJ/RYAOZJAUDeprCgAZaF9bNl
U4+8/EOd548q7EXsc7ZRAXW+CXTEua6Q7s9OtX6u0Tf4ElXd630FB0jYVH69YCrM
VPPnxA1JyAlKK82mUCAv2OGv93NM+GR3lYxTkV7lyop0CJrXVnZuRktzwJx6nHhq
ExQHkWpWVktAGkq9fbFZKW0S3yzqsCFP5/Nxh6kfmthWUnil+Crcvfkp9EhYAsK/
FnnGJECHk1gIVDKwlDvqNOoNHuF4mK193xHoOc2B40M+RNohtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEOf+KFQBCP0IvFUSJeejwNABjiLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTNjNTg5N2EtZWFkYi0z
MDAzLThlN2QtNDczYTJiYWVjM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGIKQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFlrtep8mwnZnR50+TrMWTKXlFQ3e6Kjgn3FETKUxLrwcvIVwOcFlcr1
iGgbTd4WYC8AmjAA4QMke6TYI9y3/DY1Qu2+qXBv1EinrpADmm0/FxJ0Rloaaa3S
sKkDt6tXhq6yF0or0AAsXgOYgQMUt/bguzwDs96jAKzVe0rRWbdwc8KoPFQVFhfV
FODK42rgAiOtluiE6NsY7QI6BoyCq5ACJxUHkFhDRvHaADPoSvR2gEbt27//FT4w
j/Nf/d8ZIs+oyxlPOlBrOq4R/nPYbVcEMGAM7Ko66uFo2lH33eaFlcCcG2VNiN66
o+gsGG+lnR1flmgTI5NROuv/cXxGVbM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:55:26 2024 by rpki-client on console-ams.rpki-client.org