Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fded56ec-facd-3241-9bde-581ca146d871.roa
File:                     fded56ec-facd-3241-9bde-581ca146d871.roa (raw, json)
Hash identifier:          QCZavxL6nkQM2EMY/vcwVJgfPZ/NGylMWCaC4JGLedw=
Subject key identifier:   AB:D3:D7:5D:6B:C2:5A:B3:6A:53:60:03:E2:0B:80:69:90:12:53:0C
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858471FD5C30545276239637E3F80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fded56ec-facd-3241-9bde-581ca146d871.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     19893
IP address blocks:        140.174.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:c3:05:45:27:62:39:63:7e:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=64913bc2-2127-4938-b04c-f1ab8b1ca7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bd:6a:20:9b:09:e2:58:a3:dc:63:cf:3e:47:
                    29:b9:c2:66:1f:8a:5e:6c:46:af:b8:bb:f0:7f:b7:
                    76:d0:a6:cc:09:1c:0d:a1:72:77:b5:74:08:00:aa:
                    7b:78:a9:dc:4b:7b:41:24:1c:e5:99:ed:cc:bf:82:
                    72:67:27:89:ca:95:5a:3a:82:52:a0:4b:73:a9:dc:
                    78:df:88:2a:12:c9:7e:a1:44:dd:c4:63:5e:3b:92:
                    a7:cf:1a:ed:7c:a3:b6:b0:ab:75:96:34:22:2e:2f:
                    b0:ce:63:7d:79:cf:7d:8a:2c:78:ce:06:2f:48:8f:
                    1c:23:48:00:27:5d:25:6c:6a:fd:a0:08:bf:25:0c:
                    82:41:ca:ba:0d:0f:58:86:32:58:0c:21:f0:7d:e5:
                    6d:7f:51:49:0a:29:9e:e5:5f:b9:71:b3:4c:8c:79:
                    1e:88:2b:0b:bf:9d:08:71:d2:16:66:3a:f9:f0:8f:
                    5d:99:28:20:d8:d9:94:a9:b5:53:c6:69:82:ce:89:
                    fb:03:fe:0f:56:71:59:99:c2:b9:c6:e3:ec:85:7e:
                    cb:5a:2d:ed:15:d1:80:aa:66:d8:94:29:0a:2e:d3:
                    49:b7:0a:bd:8f:92:ae:9a:c0:63:b5:10:fe:1d:83:
                    14:ac:f8:f4:27:b2:e8:f6:09:95:f5:b0:ff:1e:bf:
                    77:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D3:D7:5D:6B:C2:5A:B3:6A:53:60:03:E2:0B:80:69:90:12:53:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fded56ec-facd-3241-9bde-581ca146d871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:fd:87:f5:cb:b6:c2:d4:7a:84:6c:ad:8a:ad:4a:c9:52:be:
         33:73:5e:7c:6e:cf:b8:9a:5f:62:79:13:da:cc:8e:2e:33:00:
         b3:d0:40:91:92:1b:c7:1e:e1:bc:42:80:55:93:a7:d2:ae:28:
         db:61:5f:24:d5:67:8c:22:36:86:c7:59:3b:66:cb:a6:ed:76:
         87:83:70:3f:00:42:ca:1f:42:b6:18:9b:d8:20:a9:c5:39:35:
         57:5c:a5:0c:ee:3b:c5:7c:be:54:43:6c:2b:e9:bf:eb:a1:0a:
         a3:00:4e:53:58:da:05:0b:57:d7:01:f9:4f:9e:4e:89:de:06:
         8f:0f:a9:8e:77:0a:30:6a:57:74:ce:fe:53:0f:3a:a4:58:1d:
         46:6a:27:0e:28:50:2f:0a:bc:f5:c6:a0:66:68:aa:35:71:11:
         33:6e:d5:c4:aa:73:ce:10:e4:38:d6:88:d6:15:6b:5b:a5:b1:
         8d:7a:d6:01:ba:f6:7b:31:28:5b:f6:88:ef:5d:84:74:8b:29:
         f7:ef:d9:40:ed:2c:f7:bc:10:55:2c:4b:e4:15:67:47:e6:0d:
         20:48:4d:5e:19:7d:70:e3:eb:0f:35:15:e2:3e:fe:2d:1d:db:
         f2:4c:d8:a0:73:3b:3b:2b:eb:af:9d:3d:d8:17:34:76:cc:0c:
         18:a8:04:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcf1cMFRSdiOWN+P4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
NjQ5MTNiYzItMjEyNy00OTM4LWIwNGMtZjFhYjhiMWNhN2FkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL1qIJsJ4lij3GPPPkcpucJmH4pebEavuLvw
f7d20KbMCRwNoXJ3tXQIAKp7eKncS3tBJBzlme3Mv4JyZyeJypVaOoJSoEtzqdx4
34gqEsl+oUTdxGNeO5KnzxrtfKO2sKt1ljQiLi+wzmN9ec99iix4zgYvSI8cI0gA
J10lbGr9oAi/JQyCQcq6DQ9YhjJYDCHwfeVtf1FJCime5V+5cbNMjHkeiCsLv50I
cdIWZjr58I9dmSgg2NmUqbVTxmmCzon7A/4PVnFZmcK5xuPshX7LWi3tFdGAqmbY
lCkKLtNJtwq9j5KumsBjtRD+HYMUrPj0J7Lo9gmV9bD/Hr93lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKvT111rwlqzalNgA+ILgGmQElMMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmRlZDU2ZWMtZmFjZC0z
MjQxLTliZGUtNTgxY2ExNDZkODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjK7kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADD9h/XLtsLUeoRsrYqtSslSvjNzXnxuz7iaX2J5E9rMji4zALPQQJGS
G8ce4bxCgFWTp9KuKNthXyTVZ4wiNobHWTtmy6btdoeDcD8AQsofQrYYm9ggqcU5
NVdcpQzuO8V8vlRDbCvpv+uhCqMATlNY2gULV9cB+U+eToneBo8PqY53CjBqV3TO
/lMPOqRYHUZqJw4oUC8KvPXGoGZoqjVxETNu1cSqc84Q5DjWiNYVa1ulsY161gG6
9nsxKFv2iO9dhHSLKffv2UDtLPe8EFUsS+QVZ0fmDSBITV4ZfXDj6w81FeI+/i0d
2/JM2KBzOzsr66+dPdgXNHbMDBioBLk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:10 2024 by rpki-client on console-fra.rpki-client.org