Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54261464-8792-30fa-be99-10057f3c5054.roa
File:                     54261464-8792-30fa-be99-10057f3c5054.roa (raw, json)
Hash identifier:          5iLdTbFk9oodSqT2BhOWQnda+/HfVM40OwyT0oEz2lA=
Subject key identifier:   A6:4A:CC:D8:B3:A6:D2:82:DF:B7:43:05:B2:0B:EF:4C:E8:5F:71:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFC42565F620507F8FC6320
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54261464-8792-30fa-be99-10057f3c5054.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7922
IP address blocks:        24.40.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fc:42:56:5f:62:05:07:f8:fc:63:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=65df0807-d30c-4f48-9dfa-2c5e04bd4c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:ec:9b:22:1c:62:9b:c5:cb:05:94:4a:b9:
                    f3:e5:9d:6e:26:f4:c2:02:9a:d8:67:8f:a6:ee:08:
                    98:79:b6:41:ca:49:70:c5:5b:41:ec:e3:2a:31:f3:
                    bf:b5:51:2f:5f:89:8b:8c:30:74:5d:0f:40:ae:b0:
                    41:0b:4f:0b:58:a1:e0:7b:2b:a8:aa:ec:db:9f:04:
                    41:6a:ba:b9:eb:5a:ac:39:68:6e:72:bb:0e:6a:98:
                    db:f1:96:60:6d:a8:7c:fa:b3:de:e8:b2:88:42:42:
                    5f:7e:d0:f2:bc:1a:50:ca:27:c1:54:d9:d8:29:94:
                    6c:bb:25:40:ef:c6:5b:ee:d8:ea:f4:3a:41:5e:04:
                    90:d0:1a:bf:d0:6a:af:9f:d3:8a:12:2c:7a:1a:31:
                    e9:6d:59:dc:71:8a:69:35:0c:5e:bd:af:cd:06:43:
                    7f:df:39:7d:45:b2:a6:44:f9:5b:5b:a0:58:45:7d:
                    0e:f2:63:28:78:55:9b:41:80:9e:88:58:6b:e0:d9:
                    19:43:2b:7c:ed:b9:4b:f1:9f:ba:1d:67:78:7d:6b:
                    6a:45:b8:03:df:69:31:65:4a:06:ec:2c:e0:05:e1:
                    1c:95:55:3b:94:73:a5:26:16:e6:ec:53:cc:42:d8:
                    43:2a:04:2b:3d:6b:d9:84:4f:0a:ff:2d:c8:11:30:
                    8d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4A:CC:D8:B3:A6:D2:82:DF:B7:43:05:B2:0B:EF:4C:E8:5F:71:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54261464-8792-30fa-be99-10057f3c5054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.40.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ed:ee:b1:fe:4c:83:1c:2a:2e:45:e0:7e:a1:68:c3:ef:51:
         fe:56:f0:ad:14:d3:5d:57:da:b0:01:56:9c:bc:3b:03:05:ce:
         71:de:c5:8c:b1:43:53:32:46:6f:73:13:9c:f2:f2:46:12:15:
         72:0c:23:51:c9:8a:70:9e:27:36:d4:4b:29:27:61:5a:aa:ee:
         df:d9:ac:f0:2c:9b:be:00:14:79:80:7b:32:b9:ea:5d:01:74:
         f3:55:7d:91:a6:7f:53:ff:bc:f6:9a:ca:98:66:e2:c9:c7:76:
         b2:19:8b:b5:77:a0:26:18:77:c6:d4:6f:3f:1d:31:c8:86:ba:
         0b:80:f0:cf:4b:57:66:b1:97:23:b5:4b:29:ac:d7:8c:c8:fd:
         06:11:d8:4b:92:2e:fe:d6:38:16:be:42:a1:4b:14:a6:ff:5e:
         1a:c8:22:56:a0:fb:6a:48:fa:42:04:e4:b6:06:62:5c:a1:e1:
         60:8b:4d:bd:a7:a4:e1:f0:93:23:97:e7:95:a1:b2:6a:a9:be:
         09:76:e7:a2:98:d7:50:c9:ab:88:9a:89:2d:42:cc:6c:39:22:
         50:21:4e:33:12:50:d3:71:26:29:58:6f:67:07:fd:2b:63:91:
         23:e1:be:65:fc:aa:8e:7b:4b:e4:11:5d:e2:1d:9b:71:73:ba:
         79:b9:c2:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+/EJWX2IFB/j8YyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
NjVkZjA4MDctZDMwYy00ZjQ4LTlkZmEtMmM1ZTA0YmQ0YzVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnTsmyIcYpvFywWUSrnz5Z1uJvTCAprYZ4+m
7giYebZByklwxVtB7OMqMfO/tVEvX4mLjDB0XQ9ArrBBC08LWKHgeyuoquzbnwRB
arq561qsOWhucrsOapjb8ZZgbah8+rPe6LKIQkJfftDyvBpQyifBVNnYKZRsuyVA
78Zb7tjq9DpBXgSQ0Bq/0Gqvn9OKEix6GjHpbVnccYppNQxeva/NBkN/3zl9RbKm
RPlbW6BYRX0O8mMoeFWbQYCeiFhr4NkZQyt87blL8Z+6HWd4fWtqRbgD32kxZUoG
7CzgBeEclVU7lHOlJhbm7FPMQthDKgQrPWvZhE8K/y3IETCNVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKZKzNizptKC37dDBbIL70zoX3GPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTQyNjE0NjQtODc5Mi0z
MGZhLWJlOTktMTAwNTdmM2M1MDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGCgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACLt7rH+TIMcKi5F4H6haMPvUf5W8K0U011X2rABVpy8OwMFznHexYyx
Q1MyRm9zE5zy8kYSFXIMI1HJinCeJzbUSyknYVqq7t/ZrPAsm74AFHmAezK56l0B
dPNVfZGmf1P/vPaayphm4snHdrIZi7V3oCYYd8bUbz8dMciGuguA8M9LV2axlyO1
Syms14zI/QYR2EuSLv7WOBa+QqFLFKb/XhrIIlag+2pI+kIE5LYGYlyh4WCLTb2n
pOHwkyOX55Whsmqpvgl256KY11DJq4iaiS1CzGw5IlAhTjMSUNNxJilYb2cH/Stj
kSPhvmX8qo57S+QRXeIdm3Fzunm5wuM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:11 2024 by rpki-client on console-fra.rpki-client.org