Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f236ff4f-109f-3d7f-8354-cf9be7e211f8.roa
File:                     f236ff4f-109f-3d7f-8354-cf9be7e211f8.roa (raw, json)
Hash identifier:          OP8rCQtRPIjjcH+uWLfiyufkfWMffSxF+TrPXSNqJ5Y=
Subject key identifier:   C4:E5:ED:5C:6A:26:00:76:76:90:FE:DA:9F:8F:DD:54:B2:05:8C:12
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C766F15A2BFB651B6FAB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f236ff4f-109f-3d7f-8354-cf9be7e211f8.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        174.174.200.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:66:f1:5a:2b:fb:65:1b:6f:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=6b56fe22-967b-4ba8-a0d5-ef0c91432fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:f8:a3:56:02:af:aa:8f:3b:4b:11:93:ac:
                    f7:88:e2:14:94:17:0f:e1:f9:ea:93:14:b5:33:de:
                    aa:07:d3:d5:a4:01:04:00:56:59:95:ee:35:50:c7:
                    e7:29:14:09:9f:51:c5:fc:ea:62:99:a0:f5:cd:a4:
                    43:48:18:c2:f9:56:80:f2:54:cf:a8:2d:b3:18:2a:
                    e5:8f:71:a4:42:53:58:51:1b:c5:b5:91:db:14:ce:
                    27:ee:a1:58:44:2d:9d:39:1b:a7:3a:70:15:1f:70:
                    76:24:e8:20:e6:9e:9f:a4:65:f8:2c:00:c0:13:bf:
                    0b:05:f1:55:23:39:71:c6:70:87:5a:90:69:94:a1:
                    ae:ff:13:c4:4a:e3:61:b2:9f:05:af:33:0d:e8:03:
                    bc:da:77:e2:59:fc:6d:17:a0:6b:c6:cd:04:dd:e8:
                    e4:dd:33:d2:b2:60:d0:b7:6b:b0:c2:33:3e:d5:0f:
                    1f:99:c9:9c:29:15:62:f6:56:3b:13:2a:0c:b1:b4:
                    63:27:64:2b:12:ac:2e:92:5d:64:5a:b4:ba:43:41:
                    79:14:ba:fd:7d:fc:12:a7:c8:c2:ae:47:7f:ff:1c:
                    89:1d:45:bc:62:ce:e9:ae:fb:5f:c6:ce:fa:38:1c:
                    79:38:59:48:6e:47:b5:b3:fd:1b:36:ec:f9:91:ad:
                    1e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E5:ED:5C:6A:26:00:76:76:90:FE:DA:9F:8F:DD:54:B2:05:8C:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f236ff4f-109f-3d7f-8354-cf9be7e211f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.174.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:34:9e:f7:a0:ef:7c:1a:1d:b1:a4:51:8e:f9:e5:32:c7:1a:
         e2:c8:11:48:bf:64:63:b0:ca:46:06:1e:92:d7:eb:e7:fa:89:
         85:c1:c8:a7:2a:aa:fe:aa:2f:98:8a:7a:e1:c5:18:a0:2d:8b:
         ce:65:b8:6b:54:02:66:e4:8f:ed:44:dc:30:f6:d0:62:dd:28:
         2a:3e:ca:78:33:45:b4:11:a9:4b:5d:e6:f3:f7:44:49:8c:08:
         96:30:a0:1f:7f:b9:dd:9b:4f:35:bb:8d:55:53:ca:40:70:b1:
         0f:8a:13:90:77:4f:fb:93:f5:fa:4f:da:21:44:83:08:db:53:
         6f:84:7c:34:e9:d5:48:97:e5:15:6a:7f:a0:f5:68:72:97:15:
         c8:3a:b5:f7:cc:64:58:ff:dd:f4:3c:63:55:e1:da:37:f9:e2:
         82:4c:ac:cc:97:b2:ec:f3:4e:4a:40:cf:83:fc:ee:5d:48:71:
         f0:5e:71:99:ec:3f:a1:52:74:1d:e7:25:cb:7b:7e:d4:69:cb:
         ea:aa:e8:5a:8f:46:99:a0:5b:9f:a0:98:9f:21:4a:62:50:06:
         76:cd:23:d1:df:ee:a2:6e:5b:8d:24:24:af:d3:fb:57:27:df:
         ce:0d:fc:6a:98:38:bb:d7:bb:74:7b:0d:cb:cd:d8:25:07:35:
         89:85:15:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0x2bxWiv7ZRtvqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
NmI1NmZlMjItOTY3Yi00YmE4LWEwZDUtZWYwYzkxNDMyZmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6X4o1YCr6qPO0sRk6z3iOIUlBcP4fnqkxS1
M96qB9PVpAEEAFZZle41UMfnKRQJn1HF/OpimaD1zaRDSBjC+VaA8lTPqC2zGCrl
j3GkQlNYURvFtZHbFM4n7qFYRC2dORunOnAVH3B2JOgg5p6fpGX4LADAE78LBfFV
IzlxxnCHWpBplKGu/xPESuNhsp8FrzMN6AO82nfiWfxtF6Brxs0E3ejk3TPSsmDQ
t2uwwjM+1Q8fmcmcKRVi9lY7EyoMsbRjJ2QrEqwukl1kWrS6Q0F5FLr9ffwSp8jC
rkd//xyJHUW8Ys7prvtfxs76OBx5OFlIbke1s/0bNuz5ka0eCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMTl7VxqJgB2dpD+2p+P3VSyBYwSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjIzNmZmNGYtMTA5Zi0z
ZDdmLTgzNTQtY2Y5YmU3ZTIxMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrq7IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJg0nveg73waHbGkUY755TLHGuLIEUi/ZGOwykYGHpLX6+f6iYXByKcq
qv6qL5iKeuHFGKAti85luGtUAmbkj+1E3DD20GLdKCo+yngzRbQRqUtd5vP3REmM
CJYwoB9/ud2bTzW7jVVTykBwsQ+KE5B3T/uT9fpP2iFEgwjbU2+EfDTp1UiX5RVq
f6D1aHKXFcg6tffMZFj/3fQ8Y1Xh2jf54oJMrMyXsuzzTkpAz4P87l1IcfBecZns
P6FSdB3nJct7ftRpy+qq6FqPRpmgW5+gmJ8hSmJQBnbNI9Hf7qJuW40kJK/T+1cn
384N/GqYOLvXu3R7DcvN2CUHNYmFFcs=
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:59:33 2024 by rpki-client on console-fra.rpki-client.org