Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fef25e4-4bc8-3b76-8067-20a005fcd391.roa
File:                     5fef25e4-4bc8-3b76-8067-20a005fcd391.roa (raw, json)
Hash identifier:          eL6ATILpXqDeWuDUNX1oCoyK4fZoq9rR2Ajz787zyKQ=
Subject key identifier:   56:1D:F5:28:7F:AA:C6:FB:81:AF:40:61:DF:0F:02:27:00:20:09:D7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC7448ABF1CA486E08F050
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fef25e4-4bc8-3b76-8067-20a005fcd391.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        24.11.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:74:48:ab:f1:ca:48:6e:08:f0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=28919710-e84a-40f6-8464-3520c912ea64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:14:35:b3:d5:80:e6:b6:ac:e5:ab:f0:5d:
                    6f:8c:0f:88:5d:0c:37:ef:82:be:70:ff:dc:cc:51:
                    d9:88:e4:64:69:e4:e6:db:59:3a:09:12:db:19:ac:
                    ca:e5:26:d6:3d:a5:99:46:5e:31:ac:e0:e3:db:d5:
                    cf:e9:ba:1b:c5:8e:c3:c4:fb:a7:f7:f3:97:7a:26:
                    7f:4d:54:e7:45:63:15:0d:35:1a:49:ba:b6:fb:5c:
                    06:25:48:99:bd:69:b0:36:f1:cb:0b:1d:8a:16:5e:
                    3f:ba:41:ff:d3:67:7c:f4:c5:e6:4d:6a:f9:0e:b5:
                    53:41:9b:d4:9c:5e:35:20:52:b3:54:9d:7a:cf:0e:
                    42:4a:00:1c:91:e9:65:57:52:88:7c:79:e9:c2:3b:
                    a8:a4:60:13:f5:b7:69:47:44:34:1e:82:33:36:eb:
                    30:e9:77:28:f4:e3:e2:d1:89:ed:7f:76:f3:2d:30:
                    44:25:0c:1b:e4:58:5f:d4:9c:d3:d1:9d:32:4a:2f:
                    3d:1d:df:e4:60:85:5f:0a:0b:37:51:e0:c4:a5:ec:
                    b4:97:c8:2f:02:f2:81:eb:f4:33:87:77:6a:73:92:
                    e7:cc:51:41:d3:c6:b0:fa:b8:5b:a1:74:91:4a:a3:
                    91:bf:4f:bf:a7:ac:e9:ef:99:b3:b0:8d:7e:a5:d3:
                    f5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1D:F5:28:7F:AA:C6:FB:81:AF:40:61:DF:0F:02:27:00:20:09:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fef25e4-4bc8-3b76-8067-20a005fcd391.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.11.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:25:97:c3:63:4b:fb:f4:f4:07:25:86:06:3d:38:72:06:a8:
         ec:cb:ee:03:b7:c2:99:bf:92:33:0a:50:0e:91:01:f2:ca:4b:
         bf:98:23:28:44:1c:8d:52:ab:00:01:f1:ea:46:86:06:3e:7d:
         a4:3d:53:cd:3f:ba:bf:48:f3:fc:c3:9a:e4:77:b1:b0:b9:72:
         f9:cd:74:74:f8:42:3d:6f:b6:a0:ff:e0:ac:93:24:7b:76:b3:
         a0:1b:05:44:40:44:79:2f:a8:cc:dc:0d:35:3d:c2:fb:c7:34:
         c7:bf:e8:f3:47:85:49:47:85:3d:c7:eb:ba:0e:25:c6:16:ae:
         61:a3:9d:c8:3b:0d:1f:b1:fd:ee:51:60:b9:79:d0:3e:4e:3f:
         8b:ea:f3:48:84:de:4d:1b:4b:90:87:a8:07:f1:e1:1b:db:3a:
         9e:f1:3a:39:bc:74:08:16:1c:52:d3:9f:55:43:49:2b:eb:15:
         e5:fe:7a:46:52:3b:2d:09:89:5c:44:6d:5a:cb:a2:75:17:27:
         22:5c:08:7e:23:6d:45:85:89:e9:65:82:79:92:05:99:67:05:
         c1:b8:45:40:de:8c:e9:24:66:5a:9b:c5:34:e1:cc:0c:9a:72:
         bf:3a:ac:73:69:b5:49:b4:f9:af:ad:dc:0c:16:54:e0:4d:0e:
         c3:5c:c7:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrHRIq/HKSG4I8FAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
Mjg5MTk3MTAtZTg0YS00MGY2LTg0NjQtMzUyMGM5MTJlYTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUkUNbPVgOa2rOWr8F1vjA+IXQw374K+cP/c
zFHZiORkaeTm21k6CRLbGazK5SbWPaWZRl4xrODj29XP6bobxY7DxPun9/OXeiZ/
TVTnRWMVDTUaSbq2+1wGJUiZvWmwNvHLCx2KFl4/ukH/02d89MXmTWr5DrVTQZvU
nF41IFKzVJ16zw5CSgAckellV1KIfHnpwjuopGAT9bdpR0Q0HoIzNusw6Xco9OPi
0Yntf3bzLTBEJQwb5Fhf1JzT0Z0ySi89Hd/kYIVfCgs3UeDEpey0l8gvAvKB6/Qz
h3dqc5LnzFFB08aw+rhboXSRSqORv0+/p6zp75mzsI1+pdP1vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYd9Sh/qsb7ga9AYd8PAicAIAnXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWZlZjI1ZTQtNGJjOC0z
Yjc2LTgwNjctMjBhMDA1ZmNkMzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAvAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABcll8NjS/v09AclhgY9OHIGqOzL7gO3wpm/kjMKUA6RAfLKS7+YIyhE
HI1SqwAB8epGhgY+faQ9U80/ur9I8/zDmuR3sbC5cvnNdHT4Qj1vtqD/4KyTJHt2
s6AbBURARHkvqMzcDTU9wvvHNMe/6PNHhUlHhT3H67oOJcYWrmGjncg7DR+x/e5R
YLl50D5OP4vq80iE3k0bS5CHqAfx4RvbOp7xOjm8dAgWHFLTn1VDSSvrFeX+ekZS
Oy0JiVxEbVrLonUXJyJcCH4jbUWFiellgnmSBZlnBcG4RUDejOkkZlqbxTThzAya
cr86rHNptUm0+a+t3AwWVOBNDsNcx0g=
-----END CERTIFICATE-----
Generated at Sun May 5 02:39:44 2024 by rpki-client on console-fra.rpki-client.org