Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/a2591d88-59eb-3578-b8a3-527795687b41.roa
File:                     a2591d88-59eb-3578-b8a3-527795687b41.roa (raw, json)
Hash identifier:          n6HCt4heQ6Fm1UvOFjvvhC3YMqKzOLrSnNyslmnZrNQ=
Subject key identifier:   DE:36:FD:3D:B4:CC:77:79:72:2F:D6:B9:92:94:64:58:25:EE:D5:EA
Certificate issuer:       /CN=d4d337ac-64ad-496d-856c-8c2412a7cb34
Certificate serial:       010D0C9F432858475BDB79C1F98FB53686E2A380
Authority key identifier: 81:6B:03:A6:F5:63:B4:5E:A8:F9:F2:85:57:30:10:96:3B:65:08:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/a2591d88-59eb-3578-b8a3-527795687b41.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        162.245.54.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/d4d337ac-64ad-496d-856c-8c2412a7cb34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/d4d337ac-64ad-496d-856c-8c2412a7cb34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:79:c1:f9:8f:b5:36:86:e2:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4d337ac-64ad-496d-856c-8c2412a7cb34
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=3e1eac8a-b15a-4e9a-bd5f-7471b949b0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:e6:cb:e1:e8:dc:a7:db:e2:7a:b0:ae:f9:
                    2c:3b:0e:d0:18:39:4e:7e:70:0e:ca:16:5b:93:78:
                    73:f2:9d:51:31:b7:55:1a:ac:fc:af:b3:84:30:c6:
                    53:98:20:ac:85:e1:72:ce:89:2e:d6:b6:b3:97:5e:
                    81:93:dd:e9:1a:00:c2:b3:74:88:72:78:eb:42:a2:
                    d3:82:80:4c:3e:88:83:19:7a:d6:c2:f8:c8:8b:a3:
                    b1:5e:36:43:47:88:72:b8:10:25:11:df:d9:8e:04:
                    9d:f9:5d:6b:e2:70:bb:cb:82:55:88:bd:d4:6d:77:
                    1c:e1:ea:b8:08:a0:51:a8:19:0c:e0:65:0e:86:20:
                    80:22:88:de:13:74:ae:51:04:bb:55:27:79:04:8c:
                    4a:9d:e8:4f:83:09:ae:7b:dc:0e:d9:2c:7b:14:71:
                    21:d3:b2:28:71:74:ea:10:53:2f:af:26:f3:fe:bd:
                    58:f7:08:19:94:1d:65:d5:54:7b:e3:93:61:52:8d:
                    b5:8c:f0:35:e4:1e:a8:51:14:96:79:e1:41:8c:87:
                    69:66:35:5f:8a:5b:11:dc:5f:64:e0:e6:b0:61:79:
                    de:00:15:7e:f0:01:02:3b:82:9b:22:02:1d:8e:74:
                    ac:d7:f8:2b:67:e3:32:67:43:91:62:ea:d5:39:b2:
                    5e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:36:FD:3D:B4:CC:77:79:72:2F:D6:B9:92:94:64:58:25:EE:D5:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/a2591d88-59eb-3578-b8a3-527795687b41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/d4d337ac-64ad-496d-856c-8c2412a7cb34.crl

            X509v3 Authority Key Identifier:
                keyid:81:6B:03:A6:F5:63:B4:5E:A8:F9:F2:85:57:30:10:96:3B:65:08:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.245.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:92:b0:c1:b4:20:c1:35:e2:72:2a:26:ab:48:f2:ef:b6:d5:
         05:02:ae:ce:8c:98:ea:c5:ac:a6:9d:be:a7:49:5f:ba:b2:47:
         e8:f8:19:6f:a7:dd:ad:a6:a4:fd:76:3b:73:a8:d3:19:ee:f2:
         e5:33:9c:41:38:5e:d8:ab:e4:53:ee:94:2d:0e:a1:57:fa:3b:
         7f:1c:4e:d6:7c:9c:3d:ae:53:8c:a8:65:42:80:ae:41:5d:f0:
         32:74:d7:ed:d6:76:d4:ae:57:86:2a:f3:51:bd:db:7c:1a:23:
         13:8d:f1:7a:f5:ed:08:18:dc:41:c4:31:80:69:c3:c7:15:ad:
         58:6e:ae:d8:d3:05:b1:a1:98:3a:ab:51:c7:9d:9c:bc:4b:ed:
         26:d2:da:ce:af:c3:98:3d:12:00:9d:67:9c:84:d7:6c:9b:7e:
         b4:5d:ee:08:dd:b9:fa:3b:18:7d:6a:32:69:6d:97:dc:cc:6a:
         71:f0:4a:45:55:ed:ac:2e:c8:55:5b:c7:75:09:cd:cc:54:28:
         88:57:4b:d4:16:46:fc:8c:f4:33:3a:cc:0c:39:61:7d:e6:91:
         0a:cd:bc:41:c4:c4:a6:f0:4b:6f:ff:e0:96:a5:34:13:84:cd:
         e7:11:60:93:1f:b4:43:bd:ee:bc:af:18:66:ea:29:39:a4:d9:
         25:f4:05:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdb23nB+Y+1Nobio4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDRkMzM3YWMtNjRhZC00OTZkLTg1NmMtOGMyNDEyYTdj
YjM0MB4XDTI0MDkyODAxMDAzMVoXDTI0MTIyNzAyMDAzMVowLzEtMCsGA1UEAxMk
M2UxZWFjOGEtYjE1YS00ZTlhLWJkNWYtNzQ3MWI5NDliMGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt3my+Ho3Kfb4nqwrvksOw7QGDlOfnAOyhZb
k3hz8p1RMbdVGqz8r7OEMMZTmCCsheFyzoku1razl16Bk93pGgDCs3SIcnjrQqLT
goBMPoiDGXrWwvjIi6OxXjZDR4hyuBAlEd/ZjgSd+V1r4nC7y4JViL3UbXcc4eq4
CKBRqBkM4GUOhiCAIojeE3SuUQS7VSd5BIxKnehPgwmue9wO2Sx7FHEh07IocXTq
EFMvrybz/r1Y9wgZlB1l1VR745NhUo21jPA15B6oURSWeeFBjIdpZjVfilsR3F9k
4OawYXneABV+8AECO4KbIgIdjnSs1/grZ+MyZ0ORYurVObJexQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN42/T20zHd5ci/WuZKUZFgl7tXqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kNGQz
MzdhYy02NGFkLTQ5NmQtODU2Yy04YzI0MTJhN2NiMzQvYTI1OTFkODgtNTllYi0z
NTc4LWI4YTMtNTI3Nzk1Njg3YjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDRkMzM3YWMtNjRhZC00OTZkLTg1
NmMtOGMyNDEyYTdjYjM0L2Q0ZDMzN2FjLTY0YWQtNDk2ZC04NTZjLThjMjQxMmE3
Y2IzNC5jcmwwHwYDVR0jBBgwFoAUgWsDpvVjtF6o+fKFVzAQljtlCH8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9kNGQzMzdhYy02NGFkLTQ5NmQtODU2Yy04YzI0
MTJhN2NiMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBovU2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuSsMG0IME14nIqJqtI8u+21QUCrs6MmOrFrKadvqdJX7qyR+j4GW+n
3a2mpP12O3Oo0xnu8uUznEE4Xtir5FPulC0OoVf6O38cTtZ8nD2uU4yoZUKArkFd
8DJ01+3WdtSuV4Yq81G923waIxON8Xr17QgY3EHEMYBpw8cVrVhurtjTBbGhmDqr
UcednLxL7SbS2s6vw5g9EgCdZ5yE12ybfrRd7gjdufo7GH1qMmltl9zManHwSkVV
7awuyFVbx3UJzcxUKIhXS9QWRvyM9DM6zAw5YX3mkQrNvEHExKbwS2//4JalNBOE
zecRYJMftEO97ryvGGbqKTmk2SX0Bew=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:58 2024 by rpki-client on console-fra.rpki-client.org