Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3583eddd-8def-39c7-9c62-6cb5cd0cabcd.roa
File:                     3583eddd-8def-39c7-9c62-6cb5cd0cabcd.roa (raw, json)
Hash identifier:          k2A27h6OPjUcuyzD7OMz8CAeqc4yJUf3gmdi2BSA9qo=
Subject key identifier:   4C:FF:A8:C7:2F:C7:F3:10:EC:FA:EC:32:E3:41:1E:A8:0F:01:D3:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858471775C984477D5F1C8C708B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3583eddd-8def-39c7-9c62-6cb5cd0cabcd.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     7342
IP address blocks:        209.131.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:c9:84:47:7d:5f:1c:8c:70:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=59269669-4d24-402b-b41b-d17adf9850fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:9d:c8:4b:c1:3b:5b:bf:3e:d7:3d:d9:08:
                    ba:cb:05:48:e4:a0:fd:c8:75:d4:49:2b:b1:12:14:
                    63:fd:86:db:42:73:4b:95:2c:9f:45:fd:c5:3a:6d:
                    99:8b:35:bf:32:71:94:88:92:5a:9f:3d:96:0c:68:
                    12:82:1f:91:13:c4:31:b3:ef:8d:67:68:fd:fe:03:
                    e9:54:0f:be:93:f4:fa:d4:cf:46:51:48:48:48:3e:
                    d5:9b:d3:5e:85:c7:fa:be:38:0d:8c:a0:14:9f:c9:
                    e6:47:7c:9a:cc:38:83:17:c2:86:20:fe:6b:aa:a2:
                    7e:9b:92:e6:5a:b6:26:79:e5:9d:78:47:fb:d9:c1:
                    31:96:38:e5:ab:0a:f1:e6:09:89:a9:d7:7b:be:95:
                    06:35:ad:eb:83:ef:42:99:27:4c:74:49:17:71:30:
                    98:71:08:3c:e2:d7:33:f5:6f:89:53:e5:43:cc:8e:
                    ec:b0:92:ca:4d:7a:4a:8f:62:e0:94:7a:cc:0b:0c:
                    21:e7:ed:41:9f:93:db:9a:a6:06:fd:68:00:b1:62:
                    40:20:db:87:5a:1c:ad:32:a2:aa:15:15:93:2d:01:
                    d5:63:c0:5b:21:72:26:c8:05:bb:86:9e:4d:a5:42:
                    85:a3:c9:98:d9:99:5a:7d:13:f5:4a:8a:10:89:4f:
                    64:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FF:A8:C7:2F:C7:F3:10:EC:FA:EC:32:E3:41:1E:A8:0F:01:D3:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3583eddd-8def-39c7-9c62-6cb5cd0cabcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e6:1d:67:59:18:3f:de:13:e4:dc:36:5c:7a:1e:c1:30:51:
         1f:28:bf:e6:3f:e8:c9:bd:0d:d4:24:d9:f6:4d:e2:2a:34:b3:
         bd:0f:b8:0c:65:ce:12:65:87:79:46:aa:f6:17:91:a3:32:f5:
         0a:ef:e4:13:51:d9:5e:44:bf:2a:59:e6:75:87:2c:de:77:d6:
         93:97:eb:c5:8e:7b:47:5f:33:e6:37:7c:c4:cd:a4:bf:a2:ba:
         21:94:26:db:b9:49:cb:12:0f:a4:a9:d9:06:72:e6:fd:dd:70:
         46:12:64:58:73:41:48:13:de:86:da:36:5c:07:61:88:ed:aa:
         4b:ce:2b:f2:86:00:fb:3c:8d:62:46:f4:30:e0:38:d4:a5:74:
         d6:29:dd:74:dd:45:0c:35:b8:fb:8a:d6:9d:6c:ae:72:bd:52:
         2f:d8:42:3a:43:8c:dd:58:9e:87:dc:31:39:88:f0:67:7e:d7:
         5f:7e:d6:cc:82:cd:45:61:73:77:36:8f:6c:38:40:7d:f4:9f:
         10:ab:fd:7f:4c:d3:69:68:79:ce:a0:0c:8a:af:22:0b:df:91:
         9e:5e:13:46:85:f5:51:63:3c:b8:38:08:17:55:62:73:cb:77:
         ce:51:11:9f:f3:76:f3:8f:4a:73:70:35:16:f5:22:0b:03:ee:
         d9:f3:3d:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcXdcmER31fHIxwi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MDkwMzEzMDA0MloXDTI0MTIwMjE0MDA0MlowLzEtMCsGA1UEAxMk
NTkyNjk2NjktNGQyNC00MDJiLWI0MWItZDE3YWRmOTg1MGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqSdyEvBO1u/Ptc92Qi6ywVI5KD9yHXUSSux
EhRj/YbbQnNLlSyfRf3FOm2ZizW/MnGUiJJanz2WDGgSgh+RE8Qxs++NZ2j9/gPp
VA++k/T61M9GUUhISD7Vm9Nehcf6vjgNjKAUn8nmR3yazDiDF8KGIP5rqqJ+m5Lm
WrYmeeWdeEf72cExljjlqwrx5gmJqdd7vpUGNa3rg+9CmSdMdEkXcTCYcQg84tcz
9W+JU+VDzI7ssJLKTXpKj2LglHrMCwwh5+1Bn5PbmqYG/WgAsWJAINuHWhytMqKq
FRWTLQHVY8BbIXImyAW7hp5NpUKFo8mY2ZlafRP1SooQiU9kHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEz/qMcvx/MQ7PrsMuNBHqgPAdOMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzU4M2VkZGQtOGRlZi0z
OWM3LTljNjItNmNiNWNkMGNhYmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YO+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXmHWdZGD/eE+TcNlx6HsEwUR8ov+Y/6Mm9DdQk2fZN4io0s70PuAxl
zhJlh3lGqvYXkaMy9Qrv5BNR2V5EvypZ5nWHLN531pOX68WOe0dfM+Y3fMTNpL+i
uiGUJtu5ScsSD6Sp2QZy5v3dcEYSZFhzQUgT3obaNlwHYYjtqkvOK/KGAPs8jWJG
9DDgONSldNYp3XTdRQw1uPuK1p1srnK9Ui/YQjpDjN1YnofcMTmI8Gd+119+1syC
zUVhc3c2j2w4QH30nxCr/X9M02loec6gDIqvIgvfkZ5eE0aF9VFjPLg4CBdVYnPL
d85REZ/zdvOPSnNwNRb1IgsD7tnzPR8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:00 2024 by rpki-client on console-ams.rpki-client.org