Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/61a5e2c5-ca79-3663-ac62-83e1cdd78c02.roa
File:                     61a5e2c5-ca79-3663-ac62-83e1cdd78c02.roa (raw, json)
Hash identifier:          CuH9TUbLcSERi/ZgsCFvZJfLMvIEtqDRZD8ztzgtIg4=
Subject key identifier:   1D:5F:D5:4B:BE:7B:A8:0F:A9:48:F7:3B:DC:88:81:90:64:11:26:17
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584782F103322BE06308B8F46078
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/61a5e2c5-ca79-3663-ac62-83e1cdd78c02.roa
Signing time:             Sat 12 Oct 2024 01:00:32 +0000
ROA not before:           Sat 12 Oct 2024 01:00:32 +0000
ROA not after:            Fri 10 Jan 2025 02:00:32 +0000
asID:                     2495
IP address blocks:        198.248.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:f1:03:32:2b:e0:63:08:b8:f4:60:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Oct 12 01:00:32 2024 GMT
            Not After : Jan 10 02:00:32 2025 GMT
        Subject: CN=61ea331b-6425-4782-a582-83be473a8f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:76:80:8f:31:75:90:b8:4d:84:80:32:bf:1b:
                    c3:bb:87:9c:f3:4e:c1:3f:af:21:2a:51:77:c5:d5:
                    67:67:9d:e4:cb:dd:4c:8f:da:79:b1:12:04:3d:2d:
                    95:0e:f0:cc:eb:31:35:ef:37:06:93:b9:84:f3:eb:
                    47:dd:c1:20:56:ce:71:68:06:60:98:56:3e:2d:8c:
                    b7:0b:db:2e:18:2d:67:22:1f:b9:6d:34:88:42:82:
                    87:3c:03:1a:a6:87:ef:7d:6a:e7:69:6a:42:b5:4a:
                    6a:ce:b7:9a:d3:0a:87:a3:e2:87:82:a6:86:bb:2a:
                    6b:7e:fb:8e:29:37:06:e3:4e:c6:af:ce:e2:07:fd:
                    91:b7:0b:5f:6c:3f:7c:00:76:36:45:8d:aa:d5:b6:
                    e2:89:0c:31:0d:57:61:c0:2a:fa:4e:e5:1f:93:59:
                    89:25:f8:96:bb:34:5a:10:4d:00:ed:3a:3a:24:c6:
                    b6:86:1e:9c:1a:41:d2:32:2e:fd:57:2c:2d:07:79:
                    c5:53:db:fc:42:0d:e6:ab:76:13:87:38:8b:62:54:
                    bb:1a:30:a8:0f:a1:b4:ce:63:2c:49:67:91:ad:25:
                    eb:3a:0a:18:9e:ce:9a:f4:76:b2:48:86:a5:65:06:
                    a1:ea:22:79:9f:64:fe:da:40:9a:8a:a1:11:3e:f8:
                    45:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5F:D5:4B:BE:7B:A8:0F:A9:48:F7:3B:DC:88:81:90:64:11:26:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/61a5e2c5-ca79-3663-ac62-83e1cdd78c02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:36:0c:53:44:67:6f:4e:73:44:72:77:d3:51:bb:9a:9e:d8:
         fc:06:8c:8f:ed:52:d7:18:ab:f3:c3:41:26:b1:22:52:9b:88:
         26:cc:3b:57:1e:2a:18:00:94:f0:35:7e:1c:4b:f1:00:aa:7f:
         23:39:2c:c4:39:24:32:67:6a:28:fc:2e:ac:ca:f4:ef:2c:8f:
         45:5f:76:d4:93:a4:5a:00:a5:5e:5d:d8:60:62:c7:c7:31:7f:
         ad:42:d7:4b:80:c1:6b:26:3f:4b:07:be:5f:38:ad:7e:1b:15:
         2c:b7:9b:15:7f:3a:32:aa:1b:a1:6a:11:12:57:14:9f:66:bd:
         4d:2c:74:08:2c:6a:68:0b:08:fb:09:14:25:ee:a2:7b:bc:da:
         9e:fe:be:a4:6a:e6:c1:51:cb:72:e9:51:28:a6:be:c0:ff:bd:
         3c:0e:d6:e8:ec:93:3c:12:70:79:7a:95:dc:41:1d:92:2c:d8:
         c2:25:21:ef:41:6e:6b:f7:2d:c2:b5:b6:2c:96:0e:6f:d5:55:
         e8:52:c5:1c:50:25:9c:40:10:16:74:ea:8c:9a:ff:ca:6a:54:
         0a:24:3d:14:e9:fd:37:aa:f2:7f:6e:b2:0a:db:d3:23:bc:00:
         d8:8c:54:78:b7:db:9c:4f:a7:38:76:56:ae:4f:2d:f3:ff:49:
         e2:cb:b1:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeC8QMyK+BjCLj0YHgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi
ODNkMB4XDTI0MTAxMjAxMDAzMloXDTI1MDExMDAyMDAzMlowLzEtMCsGA1UEAxMk
NjFlYTMzMWItNjQyNS00NzgyLWE1ODItODNiZTQ3M2E4ZjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnaAjzF1kLhNhIAyvxvDu4ec807BP68hKlF3
xdVnZ53ky91Mj9p5sRIEPS2VDvDM6zE17zcGk7mE8+tH3cEgVs5xaAZgmFY+LYy3
C9suGC1nIh+5bTSIQoKHPAMapofvfWrnaWpCtUpqzrea0wqHo+KHgqaGuyprfvuO
KTcG407Gr87iB/2RtwtfbD98AHY2RY2q1bbiiQwxDVdhwCr6TuUfk1mJJfiWuzRa
EE0A7To6JMa2hh6cGkHSMi79VywtB3nFU9v8Qg3mq3YThziLYlS7GjCoD6G0zmMs
SWeRrSXrOgoYns6a9HaySIalZQah6iJ5n2T+2kCaiqERPvhFnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB1f1Uu+e6gPqUj3O9yIgZBkESYXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0
Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvNjFhNWUyYzUtY2E3OS0z
NjYzLWFjNjItODNlMWNkZDc4YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy
MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk
YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl
YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxvgiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHo2DFNEZ29Oc0Ryd9NRu5qe2PwGjI/tUtcYq/PDQSaxIlKbiCbMO1ce
KhgAlPA1fhxL8QCqfyM5LMQ5JDJnaij8LqzK9O8sj0VfdtSTpFoApV5d2GBix8cx
f61C10uAwWsmP0sHvl84rX4bFSy3mxV/OjKqG6FqERJXFJ9mvU0sdAgsamgLCPsJ
FCXuonu82p7+vqRq5sFRy3LpUSimvsD/vTwO1ujskzwScHl6ldxBHZIs2MIlIe9B
bmv3LcK1tiyWDm/VVehSxRxQJZxAEBZ06oya/8pqVAokPRTp/Teq8n9usgrb0yO8
ANiMVHi325xPpzh2Vq5PLfP/SeLLsQw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:35 2024 by rpki-client on console-ams.rpki-client.org