Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af97c144-8645-3b3c-8f62-3399470fcb08.roa
File:                     af97c144-8645-3b3c-8f62-3399470fcb08.roa (raw, json)
Hash identifier:          hqV+QSKHmzbSnHv4ZK/JARl12AKQkRHvFpdR4H0LAD0=
Subject key identifier:   ED:51:0C:D3:75:91:E9:C6:9E:F0:3F:A2:43:B0:E2:58:7B:A9:FE:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9B9C5EE99CE765D290D700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af97c144-8645-3b3c-8f62-3399470fcb08.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        24.14.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:9c:5e:e9:9c:e7:65:d2:90:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=613f4a18-7634-4c66-b021-795c47a78b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:34:a2:ba:7f:20:ba:a2:ba:e5:72:00:2c:5d:
                    7d:26:75:8e:6e:2a:78:51:97:51:2c:f7:ce:5f:36:
                    90:f7:b4:65:cb:8d:c6:e6:98:93:44:b8:df:7d:b2:
                    90:09:b8:a4:df:6c:55:9f:e1:c8:7f:d0:0f:76:1d:
                    a7:c0:2e:4f:91:26:65:85:4f:fc:0a:b6:5a:bc:f7:
                    85:1f:b7:7c:54:6c:c0:e4:a7:fe:f5:90:33:11:45:
                    57:e4:9c:27:62:c4:21:3c:3c:29:16:e0:0d:55:c6:
                    70:9b:5f:1d:1d:17:40:99:0d:f2:60:5d:dd:85:5e:
                    95:dd:12:06:f2:be:7e:14:2c:78:bd:72:00:2e:1e:
                    e1:c7:25:c8:9c:6b:2a:6b:62:64:c4:c9:df:83:5b:
                    a0:4d:eb:f2:d9:28:30:39:c6:02:14:fc:65:8a:3e:
                    a0:ca:eb:07:47:a4:3c:9a:de:53:08:58:dd:b4:8c:
                    b7:6a:84:53:7e:96:de:28:c0:77:85:f4:fc:19:b8:
                    6b:84:43:6a:aa:81:5b:59:df:a3:9d:15:01:b6:ff:
                    6f:47:a3:0c:06:92:c4:e4:40:b4:3c:04:ca:15:4f:
                    f0:e4:69:a0:67:2d:20:13:55:f4:b5:9b:b2:ba:a6:
                    8c:f5:66:76:cf:f7:6b:73:29:27:45:ae:39:88:47:
                    21:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:51:0C:D3:75:91:E9:C6:9E:F0:3F:A2:43:B0:E2:58:7B:A9:FE:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af97c144-8645-3b3c-8f62-3399470fcb08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.14.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:2f:da:56:35:9d:67:6e:01:0c:e5:95:66:3f:7a:fc:3b:22:
         b4:c0:ea:b8:0d:d9:6a:6b:a7:a5:f2:6f:fc:f6:fe:c8:2a:e2:
         d9:54:f9:65:c4:95:7f:70:ca:b8:12:57:3e:53:29:c1:01:0e:
         86:24:52:f2:20:e1:be:1e:f6:1a:1b:ad:82:03:6f:a1:29:d4:
         08:0f:16:f9:49:70:ac:6f:43:6a:ca:c6:e6:21:46:7b:76:6d:
         e1:90:ee:d6:d3:52:b9:8f:d7:d5:34:c1:d8:fa:d9:80:3d:8d:
         23:9a:bb:8a:54:df:00:d9:03:05:ae:ab:fa:4e:34:c7:b5:96:
         eb:19:89:72:32:a5:ac:ce:5f:9a:46:34:74:a6:76:8f:22:88:
         77:49:7f:9f:a3:86:b8:2d:90:bb:68:39:7c:c1:7f:25:73:66:
         ad:f8:3d:77:8c:d3:be:ea:81:84:a4:92:aa:32:c7:3f:53:2b:
         ad:f4:18:a8:99:57:ed:64:2f:3c:c8:ba:02:68:08:d0:46:c7:
         e5:49:d2:bd:bc:07:b2:15:6a:a2:27:ed:8d:19:75:36:24:ca:
         2b:3f:30:91:d6:42:39:07:a7:b0:1d:3f:56:85:9e:37:d0:79:
         cb:63:44:00:e3:02:6b:9f:51:e1:f5:df:7a:de:b7:0f:04:bc:
         1a:92:c6:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsm5xe6ZznZdKQ1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
NjEzZjRhMTgtNzYzNC00YzY2LWIwMjEtNzk1YzQ3YTc4YjNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zSiun8guqK65XIALF19JnWObip4UZdRLPfO
XzaQ97Rly43G5piTRLjffbKQCbik32xVn+HIf9APdh2nwC5PkSZlhU/8CrZavPeF
H7d8VGzA5Kf+9ZAzEUVX5JwnYsQhPDwpFuANVcZwm18dHRdAmQ3yYF3dhV6V3RIG
8r5+FCx4vXIALh7hxyXInGsqa2JkxMnfg1ugTevy2SgwOcYCFPxlij6gyusHR6Q8
mt5TCFjdtIy3aoRTfpbeKMB3hfT8GbhrhENqqoFbWd+jnRUBtv9vR6MMBpLE5EC0
PATKFU/w5GmgZy0gE1X0tZuyuqaM9WZ2z/drcyknRa45iEchNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1RDNN1kenGnvA/okOw4lh7qf4hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY5N2MxNDQtODY0NS0z
YjNjLThmNjItMzM5OTQ3MGZjYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGA5QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALEv2lY1nWduAQzllWY/evw7IrTA6rgN2Wprp6Xyb/z2/sgq4tlU+WXE
lX9wyrgSVz5TKcEBDoYkUvIg4b4e9hobrYIDb6Ep1AgPFvlJcKxvQ2rKxuYhRnt2
beGQ7tbTUrmP19U0wdj62YA9jSOau4pU3wDZAwWuq/pONMe1lusZiXIypazOX5pG
NHSmdo8iiHdJf5+jhrgtkLtoOXzBfyVzZq34PXeM077qgYSkkqoyxz9TK630GKiZ
V+1kLzzIugJoCNBGx+VJ0r28B7IVaqIn7Y0ZdTYkyis/MJHWQjkHp7AdP1aFnjfQ
ectjRADjAmufUeH133retw8EvBqSxi0=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:27:15 2024 by rpki-client on console-fra.rpki-client.org