Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d4979f1-23a5-387b-a154-9e50b5705d9a.roa
File:                     8d4979f1-23a5-387b-a154-9e50b5705d9a.roa (raw, json)
Hash identifier:          YZbkCiQJR9k5osCYr7kieMPOu4ZS21GbPs5Dzn2wXBw=
Subject key identifier:   F4:1E:4D:55:11:5A:B3:C1:BC:87:E0:80:CE:3F:73:94:B8:8F:82:99
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F432858467BAB509E876EAF54ECB55080
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d4979f1-23a5-387b-a154-9e50b5705d9a.roa
Signing time:             Tue 09 Jul 2024 17:42:37 +0000
ROA not before:           Tue 09 Jul 2024 17:42:37 +0000
ROA not after:            Mon 07 Oct 2024 17:42:37 +0000
asID:                     398105
IP address blocks:        208.109.141.0/24 maxlen: 24
                          208.109.142.0/24 maxlen: 24
                          2603:4:1016::/48 maxlen: 48
                          2603:4:1019::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Sep 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7b:ab:50:9e:87:6e:af:54:ec:b5:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jul  9 17:42:37 2024 GMT
            Not After : Oct  7 17:42:37 2024 GMT
        Subject: CN=bc764f31-de46-4a77-9b22-730c5dd50d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:f9:53:b1:70:26:5f:8d:dc:83:3f:8b:03:
                    de:b8:6a:f7:42:17:2b:36:bf:8e:63:cd:18:e2:0b:
                    a5:a4:25:dd:a8:3b:38:a8:df:82:22:c3:90:64:f8:
                    39:7d:71:d3:d5:85:37:5c:be:a5:f5:71:7d:3b:81:
                    0b:7a:d8:ba:5d:fd:96:c8:2e:00:5a:08:de:10:c2:
                    c1:dd:76:02:7a:24:37:ef:d3:40:83:6d:35:4d:f9:
                    fd:20:92:16:26:c0:e0:3d:cb:9b:b0:2c:c6:34:53:
                    5c:eb:3c:a3:d4:a1:8b:40:81:7c:89:c9:fe:45:c9:
                    4c:34:ff:08:3f:12:78:47:db:4e:9b:0e:bc:e6:ff:
                    ca:1f:a3:58:f2:fa:21:2a:73:da:91:45:fd:62:50:
                    ec:ab:38:e4:17:e6:db:8f:07:43:9d:f1:d7:f9:69:
                    23:3c:e6:5c:ae:2e:47:ce:c1:83:6c:cf:be:3e:06:
                    f6:f2:38:2f:f7:33:a0:03:12:52:cf:3d:9e:b0:d8:
                    b7:38:e6:d4:ff:34:8d:6a:3e:47:85:22:d5:64:52:
                    63:d9:3d:67:ba:ed:e4:14:88:88:ad:55:e4:3f:06:
                    b8:ff:45:95:93:ad:4d:5a:53:c6:73:2b:32:13:82:
                    af:06:ec:39:8e:63:80:be:16:a0:6b:60:5b:15:f0:
                    77:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1E:4D:55:11:5A:B3:C1:BC:87:E0:80:CE:3F:73:94:B8:8F:82:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d4979f1-23a5-387b-a154-9e50b5705d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.109.141.0-208.109.142.255
                IPv6:
                  2603:4:1016::/48
                  2603:4:1019::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b0:47:27:1e:26:74:34:21:d8:5a:c0:01:c9:06:8e:91:1f:
         93:eb:77:a4:e9:86:26:de:d6:26:11:1d:da:17:c6:44:81:a9:
         ba:b6:31:b1:1a:2d:55:dd:cd:38:2d:e0:39:e3:0b:aa:ce:82:
         2f:70:8e:92:98:34:fb:2b:7d:15:ac:c1:5f:ea:77:d5:ef:f6:
         41:7c:e2:87:48:0f:cc:98:83:be:b2:d8:0d:f3:65:06:d3:37:
         54:e3:e7:11:f6:2e:ad:b5:c4:88:46:9d:28:0e:79:16:7c:b6:
         4c:4f:09:39:25:b6:75:31:2d:d1:27:4b:34:86:9b:a5:a7:a5:
         67:15:d7:5e:90:e1:3c:6b:87:1e:f7:7f:95:d0:20:77:5d:d8:
         da:e1:02:12:1e:ce:3b:c8:53:e6:ef:6d:5b:26:af:55:d5:b7:
         09:a1:18:71:02:86:26:5c:64:5e:5e:c3:f1:8f:b4:ff:42:2f:
         cb:76:38:36:24:e3:fe:7f:91:79:b2:c8:05:1f:7b:82:b8:2e:
         99:54:6e:fa:49:6e:7b:14:1a:9a:07:c1:a9:27:39:84:96:9e:
         38:41:8c:bc:63:b8:c4:16:37:b2:a5:08:3c:a2:1e:36:a4:9d:
         e7:89:6d:24:f1:d4:d3:b4:31:75:26:d8:43:cd:44:6c:4f:4d:
         ef:51:e8:85
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEZ7q1Ceh26vVOy1UIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI0MDcwOTE3NDIzN1oXDTI0MTAwNzE3NDIzN1owLzEtMCsGA1UEAxMk
YmM3NjRmMzEtZGU0Ni00YTc3LTliMjItNzMwYzVkZDUwZDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+j5U7FwJl+N3IM/iwPeuGr3QhcrNr+OY80Y
4gulpCXdqDs4qN+CIsOQZPg5fXHT1YU3XL6l9XF9O4ELeti6Xf2WyC4AWgjeEMLB
3XYCeiQ379NAg201Tfn9IJIWJsDgPcubsCzGNFNc6zyj1KGLQIF8icn+RclMNP8I
PxJ4R9tOmw685v/KH6NY8vohKnPakUX9YlDsqzjkF+bbjwdDnfHX+WkjPOZcri5H
zsGDbM++Pgb28jgv9zOgAxJSzz2esNi3OObU/zSNaj5HhSLVZFJj2T1nuu3kFIiI
rVXkPwa4/0WVk61NWlPGcysyE4KvBuw5jmOAvhaga2BbFfB3cQIDAQABo4IDdzCC
A3MwHQYDVR0OBBYEFPQeTVURWrPBvIfggM4/c5S4j4KZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvOGQ0OTc5ZjEtMjNhNS0z
ODdiLWExNTQtOWU1MGI1NzA1ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAUBAIAATAOMAwDBADQbY0D
BADQbY4wGAQCAAIwEgMHACYDAAQQFgMHACYDAAQQGTBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxsEcnHiZ0
NCHYWsAByQaOkR+T63ek6YYm3tYmER3aF8ZEgam6tjGxGi1V3c04LeA54wuqzoIv
cI6SmDT7K30VrMFf6nfV7/ZBfOKHSA/MmIO+stgN82UG0zdU4+cR9i6ttcSIRp0o
DnkWfLZMTwk5JbZ1MS3RJ0s0hpulp6VnFddekOE8a4ce93+V0CB3Xdja4QISHs47
yFPm721bJq9V1bcJoRhxAoYmXGReXsPxj7T/Qi/Ldjg2JOP+f5F5ssgFH3uCuC6Z
VG76SW57FBqaB8GpJzmElp44QYy8Y7jEFjeypQg8oh42pJ3niW0k8dTTtDF1JthD
zURsT03vUeiF
-----END CERTIFICATE-----
Generated at Sat Sep 7 15:04:25 2024 by rpki-client on console-ams.rpki-client.org