Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ea0226b-f463-3913-be8d-e4708ccaeaa9.roa
File:                     5ea0226b-f463-3913-be8d-e4708ccaeaa9.roa (raw, json)
Hash identifier:          r1U78aYmrJxghNTDIgb8/7K5b9AmjsSruUGVEvOpzkU=
Subject key identifier:   22:3D:89:BD:AD:1C:5E:D3:23:C3:A3:30:C5:81:B7:A2:20:9E:0B:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E56E71A28D43E38ED26AE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ea0226b-f463-3913-be8d-e4708ccaeaa9.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        24.99.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:6e:71:a2:8d:43:e3:8e:d2:6a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=6d3aacfc-372b-4a33-a4a3-e4f205ae6136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:75:e0:00:7a:d3:ab:a8:ed:b1:25:6c:73:
                    fd:d8:4a:55:a7:43:f9:7c:57:79:47:72:8e:91:4f:
                    ce:22:a9:f5:11:eb:48:e3:29:3c:65:83:10:36:a7:
                    80:d6:9b:73:ea:ed:13:de:52:ea:b2:2b:2b:13:92:
                    85:7c:ec:9a:84:ba:01:4e:a7:a8:9a:0b:60:ba:1e:
                    87:f7:eb:44:be:53:ae:97:f6:92:61:b2:ca:54:86:
                    5e:29:35:8a:be:25:ce:be:ec:26:27:26:8c:a2:69:
                    9d:bd:cb:f3:f3:28:fe:60:f4:01:01:81:62:92:2d:
                    d9:a2:0a:ad:77:fc:ee:bd:52:25:0e:9a:db:f7:6a:
                    c5:b1:ce:c9:ae:fa:e2:4b:43:ac:9e:8e:0b:a3:c9:
                    c5:69:0c:c6:ed:db:4b:de:67:7c:5d:db:e6:2b:10:
                    76:70:99:c5:57:d5:1d:46:73:5b:a1:87:43:6c:2d:
                    a8:c7:4d:3f:b2:55:9b:c3:ad:57:ce:df:e9:b3:b0:
                    ac:23:ff:a9:f7:36:1d:44:51:26:bb:9c:6c:25:33:
                    5a:e3:ee:fb:b3:92:16:33:12:b2:e5:fd:9b:b4:2a:
                    89:fb:14:69:6c:6a:d5:3d:6e:f3:0f:51:91:84:3b:
                    f9:73:75:c7:de:4a:a5:12:9b:af:9b:f8:76:15:c4:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3D:89:BD:AD:1C:5E:D3:23:C3:A3:30:C5:81:B7:A2:20:9E:0B:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ea0226b-f463-3913-be8d-e4708ccaeaa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.99.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:65:7c:a9:8c:0c:dd:4a:15:de:4b:28:da:48:cb:c3:4d:92:
         44:a3:e7:14:ed:84:f1:05:ca:f8:90:eb:4c:99:d3:b8:d5:d2:
         6b:73:61:a2:a9:fc:2d:d5:0d:3e:1e:da:cf:68:d0:31:24:31:
         14:bb:e8:99:51:0d:8b:11:50:a8:de:ef:ad:c1:3f:61:22:b6:
         70:c0:ac:65:16:de:6f:a8:24:d3:cb:aa:88:5a:ff:f2:90:e3:
         d3:c7:20:a2:1b:66:8f:d7:b5:57:31:29:6e:64:c7:31:64:ad:
         d6:dc:f0:ed:23:5d:6e:c6:97:9b:f9:b6:82:4e:81:e9:84:84:
         c3:6f:36:64:05:10:61:4c:30:b1:f0:b4:87:f1:cb:6e:e2:ec:
         dd:31:8b:10:30:d7:19:0c:bd:16:91:ea:cc:a5:13:b0:71:89:
         b7:0a:b9:5f:86:ba:78:14:9b:78:8e:88:aa:da:65:40:22:12:
         dc:95:5c:67:99:ce:4e:8b:88:ab:4d:8c:01:de:8a:55:1c:b7:
         8e:e7:4f:b6:13:d9:6b:46:77:24:34:2f:d9:66:22:8e:21:75:
         b5:26:be:78:87:31:ee:11:95:0d:1b:cf:44:5e:29:1f:e2:1a:
         fa:58:f8:2e:f7:52:ad:34:96:b6:dd:fd:f7:39:8f:92:c1:51:
         cc:65:6c:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5W5xoo1D447SauAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
NmQzYWFjZmMtMzcyYi00YTMzLWE0YTMtZTRmMjA1YWU2MTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK514AB606uo7bElbHP92EpVp0P5fFd5R3KO
kU/OIqn1EetI4yk8ZYMQNqeA1ptz6u0T3lLqsisrE5KFfOyahLoBTqeomgtguh6H
9+tEvlOul/aSYbLKVIZeKTWKviXOvuwmJyaMommdvcvz8yj+YPQBAYFiki3Zogqt
d/zuvVIlDprb92rFsc7JrvriS0Osno4Lo8nFaQzG7dtL3md8XdvmKxB2cJnFV9Ud
RnNboYdDbC2ox00/slWbw61Xzt/ps7CsI/+p9zYdRFEmu5xsJTNa4+77s5IWMxKy
5f2btCqJ+xRpbGrVPW7zD1GRhDv5c3XH3kqlEpuvm/h2FcTMiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCI9ib2tHF7TI8OjMMWBt6IgngtmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWVhMDIyNmItZjQ2My0z
OTEzLWJlOGQtZTQ3MDhjY2FlYWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGGMnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANVlfKmMDN1KFd5LKNpIy8NNkkSj5xTthPEFyviQ60yZ07jV0mtzYaKp
/C3VDT4e2s9o0DEkMRS76JlRDYsRUKje763BP2EitnDArGUW3m+oJNPLqoha//KQ
49PHIKIbZo/XtVcxKW5kxzFkrdbc8O0jXW7Gl5v5toJOgemEhMNvNmQFEGFMMLHw
tIfxy27i7N0xixAw1xkMvRaR6sylE7BxibcKuV+GungUm3iOiKraZUAiEtyVXGeZ
zk6LiKtNjAHeilUct47nT7YT2WtGdyQ0L9lmIo4hdbUmvniHMe4RlQ0bz0ReKR/i
GvpY+C73Uq00lrbd/fc5j5LBUcxlbKQ=
-----END CERTIFICATE-----
Generated at Sun Dec 22 16:24:22 2024 by rpki-client on console-ams.rpki-client.org