Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c57fdda5-13c0-37ac-bc3c-06dbfff4c360.roa
File:                     c57fdda5-13c0-37ac-bc3c-06dbfff4c360.roa (raw, json)
Hash identifier:          ANfJFsE1KJX3p3AWcGBIhKTKbR+rVpvgOd2wM542POA=
Subject key identifier:   EC:0D:BA:7E:34:30:3D:F7:C6:E0:A9:3F:BE:9D:AA:33:F7:DC:FE:7D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847CFD4DE0D8C81AE1FD4E4A200
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c57fdda5-13c0-37ac-bc3c-06dbfff4c360.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     18779
IP address blocks:        142.111.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:de:0d:8c:81:ae:1f:d4:e4:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=1e979c79-e154-4e11-b011-a3be875965a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:78:cb:0c:1a:68:bb:55:b5:e5:0a:9b:0a:90:
                    15:96:61:67:f3:4e:3c:87:5a:b3:c3:df:e9:06:a9:
                    9b:08:a6:2c:3c:d1:a3:6c:92:ef:9b:18:4c:c9:f1:
                    24:96:ef:8d:0d:87:2a:d6:43:7a:01:e9:2f:28:d8:
                    2a:91:e3:07:89:87:3e:ac:85:8b:77:75:e7:28:de:
                    73:48:c3:bb:75:a6:14:63:a9:13:14:99:e1:41:87:
                    a0:66:68:43:00:2e:33:c1:9c:26:20:01:42:2c:c6:
                    15:05:8c:cc:f9:08:77:b9:a1:ea:b9:fe:0d:01:bb:
                    c9:b3:32:b9:8a:8c:3b:ee:0d:27:9a:66:87:16:83:
                    8e:4c:0e:a3:ad:ea:f0:94:52:74:3f:07:fc:4f:d3:
                    bf:67:31:5b:1d:29:59:dd:f2:75:8f:d7:62:1c:66:
                    8c:f2:86:77:29:d7:2e:01:f0:74:6b:bd:5c:0e:e8:
                    75:5e:ca:3b:99:f6:cf:76:5d:fd:a2:4e:4e:1c:45:
                    a8:0a:7e:0c:0f:26:71:29:5f:3e:16:fe:72:3f:a5:
                    b6:1a:e6:f2:f1:66:22:b4:ae:29:69:fd:63:3f:92:
                    1a:5e:c3:51:cf:bb:00:0b:83:fb:22:ec:91:70:f4:
                    58:f8:4c:59:a7:7b:43:33:36:b9:5b:95:af:4a:b8:
                    00:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0D:BA:7E:34:30:3D:F7:C6:E0:A9:3F:BE:9D:AA:33:F7:DC:FE:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c57fdda5-13c0-37ac-bc3c-06dbfff4c360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0a:9c:71:4a:47:13:ae:09:28:ec:f5:21:65:64:e9:28:86:
         11:e0:0e:95:ce:d7:1e:2e:e7:f9:34:f4:37:b8:59:4d:2a:71:
         68:dd:a4:6b:a1:ab:3d:24:85:6c:38:fe:33:8f:8c:40:35:88:
         1d:8c:61:1e:cb:30:75:62:93:00:d1:29:f8:84:62:83:2c:bb:
         55:9b:1f:dc:bb:2a:3f:33:60:e6:6d:9f:f5:6b:da:38:85:0e:
         db:64:89:77:b7:c4:a5:74:cb:33:a7:11:0a:aa:af:7a:36:42:
         a8:45:64:ed:bc:3e:33:b8:44:dd:fd:ec:db:c7:e5:4a:2e:d8:
         67:2f:dc:53:5a:38:e3:57:48:c8:40:76:77:84:21:e0:c0:67:
         df:70:0d:51:d6:85:ec:01:ef:22:d8:9e:91:e0:ba:77:1d:40:
         1b:a5:bc:ec:96:18:1c:ec:6f:5c:3c:89:a5:e0:bf:c3:ea:f6:
         c5:41:46:6d:a2:eb:be:64:14:39:f1:0f:4e:45:b6:c3:c2:fa:
         b7:7a:c0:76:41:2d:d1:c1:d5:c3:52:87:9d:27:f6:62:a5:c3:
         9b:b5:ce:d7:51:6e:2b:43:13:89:81:b3:d3:52:cd:b0:0e:5a:
         12:2d:4b:cd:8c:06:6e:c5:68:22:d6:5f:e0:2c:b5:4d:95:4e:
         e1:24:1e:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP1N4NjIGuH9TkogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MTEwODE0MDAzOVoXDTI1MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk
MWU5NzljNzktZTE1NC00ZTExLWIwMTEtYTNiZTg3NTk2NWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3jLDBpou1W15QqbCpAVlmFn8048h1qzw9/p
BqmbCKYsPNGjbJLvmxhMyfEklu+NDYcq1kN6AekvKNgqkeMHiYc+rIWLd3XnKN5z
SMO7daYUY6kTFJnhQYegZmhDAC4zwZwmIAFCLMYVBYzM+Qh3uaHquf4NAbvJszK5
iow77g0nmmaHFoOOTA6jrerwlFJ0Pwf8T9O/ZzFbHSlZ3fJ1j9diHGaM8oZ3Kdcu
AfB0a71cDuh1Xso7mfbPdl39ok5OHEWoCn4MDyZxKV8+Fv5yP6W2Guby8WYitK4p
af1jP5IaXsNRz7sAC4P7IuyRcPRY+ExZp3tDMza5W5WvSrgA3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOwNun40MD33xuCpP76dqjP33P59MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzU3ZmRkYTUtMTNjMC0z
N2FjLWJjM2MtMDZkYmZmZjRjMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABwKnHFKRxOuCSjs9SFlZOkohhHgDpXO1x4u5/k09De4WU0qcWjdpGuh
qz0khWw4/jOPjEA1iB2MYR7LMHVikwDRKfiEYoMsu1WbH9y7Kj8zYOZtn/Vr2jiF
DttkiXe3xKV0yzOnEQqqr3o2QqhFZO28PjO4RN397NvH5Uou2Gcv3FNaOONXSMhA
dneEIeDAZ99wDVHWhewB7yLYnpHguncdQBulvOyWGBzsb1w8iaXgv8Pq9sVBRm2i
675kFDnxD05FtsPC+rd6wHZBLdHB1cNSh50n9mKlw5u1ztdRbitDE4mBs9NSzbAO
WhItS82MBm7FaCLWX+AstU2VTuEkHro=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:57 2024 by rpki-client on console-fra.rpki-client.org