Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ed98aa57-d32e-3a51-850b-fcb85c818c67.roa
File:                     ed98aa57-d32e-3a51-850b-fcb85c818c67.roa (raw, json)
Hash identifier:          2DSmSv2QToITmS4lzAxDQ3HDRAfeRMcGt3scAU0/k0E=
Subject key identifier:   FF:63:E2:4E:E0:08:14:5D:98:E0:F2:92:0B:03:37:2C:52:25:42:E1
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F432858471E709B820E63A98E5564D780
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ed98aa57-d32e-3a51-850b-fcb85c818c67.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     21928
IP address blocks:        72.250.0.0/17 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:9b:82:0e:63:a9:8e:55:64:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=7981181a-0918-4935-8542-c08fd3da30c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:e0:45:d5:db:d7:6a:c4:70:ec:46:21:7d:
                    2c:fc:d6:90:b0:46:c9:b2:04:29:93:bf:bf:64:28:
                    6e:db:66:d8:9b:43:7c:a4:2d:26:6e:1f:4a:ff:a0:
                    57:41:fb:94:f3:6d:8b:33:ca:f7:d7:9f:5a:6f:d0:
                    0b:a8:76:64:8c:5e:3b:e9:84:bb:fe:45:d3:58:80:
                    84:b2:2f:59:9b:4f:a2:72:bc:c5:f0:7a:64:13:d4:
                    75:36:c5:df:df:dd:a9:e2:c3:ad:7f:59:be:cd:98:
                    7b:04:17:3b:82:7f:00:1a:5c:ac:45:44:72:7d:7c:
                    93:84:9a:80:23:26:6c:26:54:c7:b2:26:3a:93:96:
                    51:b3:31:60:6c:db:d1:23:6e:49:33:01:5f:34:24:
                    12:3f:9d:3e:c7:ba:20:f5:36:98:22:0d:80:be:e8:
                    05:2e:53:0f:2b:53:26:9a:0d:ac:69:ff:d0:0c:fb:
                    9d:85:f3:04:43:f1:ca:2c:9e:e2:24:cc:63:b7:7f:
                    da:92:94:57:b6:81:46:68:7f:f6:14:1e:7f:a7:8a:
                    a4:86:a4:43:34:ba:20:b7:9a:ce:75:33:ce:f1:49:
                    52:d1:c7:c6:fb:39:db:54:bb:db:52:9c:32:30:88:
                    9b:fe:32:76:c6:ce:96:f1:da:1a:56:c9:08:7d:1c:
                    d3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:63:E2:4E:E0:08:14:5D:98:E0:F2:92:0B:03:37:2C:52:25:42:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ed98aa57-d32e-3a51-850b-fcb85c818c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.250.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:f6:96:e9:57:d7:35:b5:8e:45:fe:2c:31:96:79:ed:3e:2b:
         dc:cb:6c:96:8b:e9:c6:2a:57:26:b8:c6:cc:82:48:24:6f:e5:
         94:4d:7f:11:99:af:c1:e5:a2:fb:b7:36:52:60:f6:77:68:2d:
         6d:f3:37:b1:17:48:3e:63:fc:88:8b:30:e3:d7:1a:f4:d2:06:
         ca:17:e7:af:91:6a:46:30:b0:e3:c4:86:2c:c1:bc:27:41:8f:
         98:1f:ee:98:e7:61:da:5e:e1:6b:33:18:cd:74:8f:ea:b6:98:
         5a:7c:59:de:e7:ab:7a:aa:e6:dd:c6:90:d0:a6:10:9b:c3:c7:
         44:f7:eb:2b:3e:4f:22:82:19:24:70:7d:db:44:63:5f:b3:a1:
         5f:3f:49:ad:f3:e7:34:d3:2b:05:02:b8:ce:49:ab:f8:d8:1f:
         cb:15:db:79:1f:72:97:07:9b:4b:49:d5:0b:57:f5:7f:91:5c:
         61:47:1f:33:6d:56:b4:e0:5b:d9:c9:4e:6b:62:2d:06:f6:26:
         91:99:e1:02:f9:3c:84:1e:c3:3d:2b:e7:e0:6f:c3:27:7d:33:
         3d:d3:10:e8:05:14:bc:a5:6c:b4:db:8a:a7:f0:2f:63:78:a0:
         80:fb:90:02:74:63:05:92:b6:c1:32:5f:ce:a4:28:d3:36:24:
         8f:62:76:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecJuCDmOpjlVk14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm
MGMzMB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk
Nzk4MTE4MWEtMDkxOC00OTM1LTg1NDItYzA4ZmQzZGEzMGMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8LgRdXb12rEcOxGIX0s/NaQsEbJsgQpk7+/
ZChu22bYm0N8pC0mbh9K/6BXQfuU822LM8r3159ab9ALqHZkjF476YS7/kXTWICE
si9Zm0+icrzF8HpkE9R1NsXf392p4sOtf1m+zZh7BBc7gn8AGlysRURyfXyThJqA
IyZsJlTHsiY6k5ZRszFgbNvRI25JMwFfNCQSP50+x7og9TaYIg2AvugFLlMPK1Mm
mg2saf/QDPudhfMEQ/HKLJ7iJMxjt3/akpRXtoFGaH/2FB5/p4qkhqRDNLogt5rO
dTPO8UlS0cfG+znbVLvbUpwyMIib/jJ2xs6W8doaVskIfRzTaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP9j4k7gCBRdmODykgsDNyxSJULhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm
MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvZWQ5OGFhNTctZDMyZS0z
YTUxLTg1MGItZmNiODVjODE4YzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk
OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl
ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi
ZjVjZWYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSPoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF32lulX1zW1jkX+LDGWee0+K9zLbJaL6cYqVya4xsyCSCRv5ZRNfxGZ
r8Hlovu3NlJg9ndoLW3zN7EXSD5j/IiLMOPXGvTSBsoX56+RakYwsOPEhizBvCdB
j5gf7pjnYdpe4WszGM10j+q2mFp8Wd7nq3qq5t3GkNCmEJvDx0T36ys+TyKCGSRw
fdtEY1+zoV8/Sa3z5zTTKwUCuM5Jq/jYH8sV23kfcpcHm0tJ1QtX9X+RXGFHHzNt
VrTgW9nJTmtiLQb2JpGZ4QL5PIQewz0r5+Bvwyd9Mz3TEOgFFLylbLTbiqfwL2N4
oID7kAJ0YwWStsEyX86kKNM2JI9idrc=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:56:25 2024 by rpki-client on console-ams.rpki-client.org