Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cae37a9e-6e3c-32b9-a55f-874ad65c36b3.roa
File:                     cae37a9e-6e3c-32b9-a55f-874ad65c36b3.roa (raw, json)
Hash identifier:          B2p0umIODEwPKJnPZXc5z6aqUgLao9M2eQvGwToBZQ0=
Subject key identifier:   6E:05:B4:6E:54:6A:5A:E6:E9:63:3A:7C:E4:0A:FA:2F:48:D6:9F:45
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BFBEC24812DB77DE92C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cae37a9e-6e3c-32b9-a55f-874ad65c36b3.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        71.239.0.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:fb:ec:24:81:2d:b7:7d:e9:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=d00c1c79-0d03-4557-82e1-c29756242d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e3:cb:29:e0:cd:6d:98:51:ef:f0:7c:b5:65:
                    d0:8b:11:44:7b:65:1b:f3:d5:1c:9a:47:ef:8b:9a:
                    05:14:4a:c0:c6:47:d4:3d:f9:c6:00:01:94:a8:62:
                    21:c2:98:93:ad:58:58:74:e3:63:c0:6e:b5:b8:7f:
                    ed:b0:f9:29:2c:a6:88:08:5e:dd:ef:d3:dd:fd:19:
                    e6:4d:93:21:60:d9:81:0d:c3:52:d8:6b:91:19:1b:
                    65:73:92:9d:9b:aa:ed:39:11:eb:8c:54:ec:83:34:
                    32:41:ca:e6:95:92:71:55:77:76:12:3c:60:87:8c:
                    d4:f3:6f:e6:58:4e:2a:bf:ab:af:37:36:10:60:1c:
                    04:06:e4:0e:4e:90:ae:8b:0e:57:10:a2:28:c3:d0:
                    25:b7:0c:55:db:1a:f5:ff:c4:36:8b:d9:d3:d9:d3:
                    7c:19:61:c6:3c:f6:72:d8:7b:26:56:e6:9d:04:48:
                    15:3a:2c:3a:65:4c:94:7c:35:21:a4:cd:21:f9:42:
                    45:6d:b7:5d:fb:0d:13:cb:65:05:87:8b:e9:f7:6b:
                    4b:9e:75:76:c0:18:83:71:dd:e5:8e:80:cd:45:74:
                    1d:49:e0:c4:a1:81:82:69:cc:a2:e7:45:f3:ae:ef:
                    a9:2f:77:c9:5c:8a:ac:ed:df:b8:c3:b5:9c:8d:9e:
                    18:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:05:B4:6E:54:6A:5A:E6:E9:63:3A:7C:E4:0A:FA:2F:48:D6:9F:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cae37a9e-6e3c-32b9-a55f-874ad65c36b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.239.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:49:86:9d:1d:6c:b2:c7:2e:88:78:d3:a9:a5:fc:8d:4d:35:
         b4:6d:36:c3:cf:78:ea:55:9f:0d:d4:b5:53:1d:fe:21:59:9f:
         a9:c5:24:dd:06:5f:f6:b0:6e:3a:26:72:b2:77:fd:3f:d6:53:
         3b:05:f0:7e:d4:b9:28:3d:bf:be:b6:1f:59:13:52:ad:1d:0b:
         f7:b2:14:6c:e1:9f:75:0a:69:1d:f6:23:ce:41:77:2d:fe:b8:
         d5:1f:17:d5:2e:b1:b4:25:7b:63:01:dc:f3:4b:43:4b:0e:39:
         3c:2a:75:d6:e4:1a:7c:f5:04:1a:c6:d5:dd:97:8f:ec:21:11:
         e8:48:e5:4c:5e:d0:1e:93:7f:fd:08:26:16:b7:6a:90:86:3d:
         71:21:31:e5:ee:9f:8d:33:a2:1d:e8:bf:88:30:8d:c0:2e:33:
         99:b7:c3:f6:14:ac:44:f6:16:e4:6f:e7:dd:1a:b3:da:8a:3e:
         0f:99:06:a6:ae:2f:44:e8:2a:bb:83:08:1a:f4:c1:5e:6a:a7:
         b3:d5:e8:e9:06:4e:10:87:95:cd:89:ae:b0:33:70:11:d6:f0:
         50:bc:8c:a1:3a:c7:b7:f3:2c:08:14:e3:80:15:c9:e3:e3:3d:
         c9:2e:5c:e4:7e:8c:81:5b:c0:1e:87:e8:a6:51:ec:c1:c2:16:
         bf:d8:1b:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsm/vsJIEtt33pLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
ZDAwYzFjNzktMGQwMy00NTU3LTgyZTEtYzI5NzU2MjQyZDkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiePLKeDNbZhR7/B8tWXQixFEe2Ub89Ucmkfv
i5oFFErAxkfUPfnGAAGUqGIhwpiTrVhYdONjwG61uH/tsPkpLKaICF7d79Pd/Rnm
TZMhYNmBDcNS2GuRGRtlc5Kdm6rtORHrjFTsgzQyQcrmlZJxVXd2Ejxgh4zU82/m
WE4qv6uvNzYQYBwEBuQOTpCuiw5XEKIow9AltwxV2xr1/8Q2i9nT2dN8GWHGPPZy
2HsmVuadBEgVOiw6ZUyUfDUhpM0h+UJFbbdd+w0Ty2UFh4vp92tLnnV2wBiDcd3l
joDNRXQdSeDEoYGCacyi50Xzru+pL3fJXIqs7d+4w7WcjZ4YzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG4FtG5Ualrm6WM6fOQK+i9I1p9FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2FlMzdhOWUtNmUzYy0z
MmI5LWE1NWYtODc0YWQ2NWMzNmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ9Jhp0dbLLHLoh406ml/I1NNbRtNsPPeOpVnw3UtVMd/iFZn6nFJN0G
X/awbjomcrJ3/T/WUzsF8H7UuSg9v762H1kTUq0dC/eyFGzhn3UKaR32I85Bdy3+
uNUfF9UusbQle2MB3PNLQ0sOOTwqddbkGnz1BBrG1d2Xj+whEehI5Uxe0B6Tf/0I
Jha3apCGPXEhMeXun40zoh3ov4gwjcAuM5m3w/YUrET2FuRv590as9qKPg+ZBqau
L0ToKruDCBr0wV5qp7PV6OkGThCHlc2JrrAzcBHW8FC8jKE6x7fzLAgU44AVyePj
PckuXOR+jIFbwB6H6KZR7MHCFr/YG4g=
-----END CERTIFICATE-----
Generated at Sun Dec 22 13:18:45 2024 by rpki-client on console-ams.rpki-client.org