Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/4039d964-03a7-3331-869e-901999556e05.roa
File:                     4039d964-03a7-3331-869e-901999556e05.roa (raw, json)
Hash identifier:          /KxOHxKLQLA4/XCdZ6Wljke1UUdhPiJnXUDX1cRsOSg=
Subject key identifier:   C6:FA:DD:DE:8A:B3:F3:E2:DE:B9:DB:E9:24:1E:73:CE:74:29:F5:63
Certificate issuer:       /CN=ee6bee5d-23d5-44e1-9615-76f9de86f2dd
Certificate serial:       010D0C9F43285847BAC6AA10D62B4C547E52B670
Authority key identifier: 52:51:B6:B9:53:49:BF:16:DC:4B:79:FB:8C:F9:F8:46:0E:8D:5A:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/4039d964-03a7-3331-869e-901999556e05.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     54641
IP address blocks:        216.87.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:aa:10:d6:2b:4c:54:7e:52:b6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee6bee5d-23d5-44e1-9615-76f9de86f2dd
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=b464fa52-e781-4460-b6d1-36133eaf34a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:35:c6:f2:f3:bf:f6:f8:a0:a1:d8:91:94:18:
                    aa:e2:37:d3:07:b5:12:5c:89:88:28:f7:29:00:9b:
                    8a:c8:ee:76:ab:2c:b4:db:3b:2f:a3:7c:fb:8f:e3:
                    9f:40:fe:29:44:06:39:5a:01:70:c8:06:fe:b0:0e:
                    72:45:80:32:88:ab:15:66:8e:93:d5:96:d1:33:7b:
                    dc:19:f0:f1:50:a0:c7:1e:6b:92:22:00:b9:79:f0:
                    81:e8:c4:75:24:fa:e9:2e:9d:66:7f:48:bd:b9:e3:
                    20:00:6c:52:99:33:7a:e3:98:d9:23:cb:b3:23:4b:
                    0d:8d:6d:58:39:6d:b6:60:95:2f:62:88:1f:cc:34:
                    9f:19:6c:fe:f6:65:37:b5:0c:5e:b7:47:eb:c2:cb:
                    e7:65:de:08:23:bb:f1:73:8c:bd:e5:db:b9:8d:62:
                    a1:e3:0d:8c:a4:e0:a7:b2:6b:58:04:3d:b6:46:9a:
                    ef:de:97:63:e0:d7:14:7c:ae:4f:d3:d0:6f:89:cf:
                    ae:8e:9c:21:bf:b2:7c:71:08:ed:9f:60:a6:14:e4:
                    2c:99:c4:64:59:d0:07:70:a7:67:65:5e:ac:0b:3d:
                    aa:ba:85:26:36:8b:11:b8:d9:29:d6:08:e8:9a:91:
                    e8:dc:dc:3e:c8:70:92:d0:39:5e:0c:93:8e:81:05:
                    e4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FA:DD:DE:8A:B3:F3:E2:DE:B9:DB:E9:24:1E:73:CE:74:29:F5:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/4039d964-03a7-3331-869e-901999556e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.crl

            X509v3 Authority Key Identifier:
                keyid:52:51:B6:B9:53:49:BF:16:DC:4B:79:FB:8C:F9:F8:46:0E:8D:5A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:8e:63:3d:ac:98:d3:8f:f4:35:aa:f7:08:5c:2a:20:ce:59:
         71:bb:5c:28:f9:5f:43:50:8f:9f:b4:a9:60:02:8e:a9:78:0f:
         9a:cd:5b:7e:e6:ab:02:2b:9a:db:4a:52:81:a9:8f:1c:bb:e0:
         47:47:b6:57:f2:d3:f9:dd:cf:7d:7a:f1:b0:70:b3:8d:fa:51:
         87:c0:2a:eb:3d:d3:6b:18:51:c6:1b:26:71:3d:95:24:88:f2:
         22:f8:ec:7b:15:39:d0:4c:eb:78:f2:01:7d:df:ae:3e:ed:55:
         d9:59:01:2a:b8:3f:d5:f1:62:08:41:0c:78:26:8f:e7:96:e1:
         46:33:a0:14:d6:6d:7d:51:46:ac:a4:78:42:48:3d:24:24:ea:
         ab:24:ec:ba:f2:78:22:a1:03:35:eb:81:92:66:ab:e4:d3:86:
         29:af:5b:8f:8e:16:49:de:5d:a2:02:00:8f:34:a6:bd:02:4b:
         fe:6a:d1:66:9a:80:bc:54:c0:f6:9c:f1:4f:7d:8b:ce:8b:25:
         58:e1:b4:d5:86:4e:87:b1:fb:00:4b:6c:8a:17:4e:d8:48:ee:
         57:90:33:00:a0:25:63:c6:6e:3f:43:1a:5e:72:d3:7b:50:13:
         d8:54:32:88:56:0d:d8:f7:61:5e:50:b6:ff:7b:22:de:7e:b8:
         f9:84:16:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xqoQ1itMVH5StnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWU2YmVlNWQtMjNkNS00NGUxLTk2MTUtNzZmOWRlODZm
MmRkMB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk
YjQ2NGZhNTItZTc4MS00NDYwLWI2ZDEtMzYxMzNlYWYzNGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTXG8vO/9vigodiRlBiq4jfTB7USXImIKPcp
AJuKyO52qyy02zsvo3z7j+OfQP4pRAY5WgFwyAb+sA5yRYAyiKsVZo6T1ZbRM3vc
GfDxUKDHHmuSIgC5efCB6MR1JPrpLp1mf0i9ueMgAGxSmTN645jZI8uzI0sNjW1Y
OW22YJUvYogfzDSfGWz+9mU3tQxet0frwsvnZd4II7vxc4y95du5jWKh4w2MpOCn
smtYBD22Rprv3pdj4NcUfK5P09Bvic+ujpwhv7J8cQjtn2CmFOQsmcRkWdAHcKdn
ZV6sCz2quoUmNosRuNkp1gjompHo3Nw+yHCS0DleDJOOgQXk6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMb63d6Ks/Pi3rnb6SQec850KfVjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZTZi
ZWU1ZC0yM2Q1LTQ0ZTEtOTYxNS03NmY5ZGU4NmYyZGQvNDAzOWQ5NjQtMDNhNy0z
MzMxLTg2OWUtOTAxOTk5NTU2ZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWU2YmVlNWQtMjNkNS00NGUxLTk2
MTUtNzZmOWRlODZmMmRkL2VlNmJlZTVkLTIzZDUtNDRlMS05NjE1LTc2ZjlkZTg2
ZjJkZC5jcmwwHwYDVR0jBBgwFoAUUlG2uVNJvxbcS3n7jPn4Rg6NWuUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZTZiZWU1ZC0yM2Q1LTQ0ZTEtOTYxNS03NmY5
ZGU4NmYyZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FcgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJiOYz2smNOP9DWq9whcKiDOWXG7XCj5X0NQj5+0qWACjql4D5rNW37m
qwIrmttKUoGpjxy74EdHtlfy0/ndz3168bBws436UYfAKus902sYUcYbJnE9lSSI
8iL47HsVOdBM63jyAX3frj7tVdlZASq4P9XxYghBDHgmj+eW4UYzoBTWbX1RRqyk
eEJIPSQk6qsk7LryeCKhAzXrgZJmq+TThimvW4+OFkneXaICAI80pr0CS/5q0Waa
gLxUwPac8U99i86LJVjhtNWGToex+wBLbIoXTthI7leQMwCgJWPGbj9DGl5y03tQ
E9hUMohWDdj3YV5Qtv97It5+uPmEFs0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:02 2024 by rpki-client on console-fra.rpki-client.org