Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/08ebf489-ce16-3f0e-b69d-7dab1f9a9a03.roa
File:                     08ebf489-ce16-3f0e-b69d-7dab1f9a9a03.roa (raw, json)
Hash identifier:          K8/migddp986npkZBEW/IFEX3WLQTwPb7NSsAhgpmaQ=
Subject key identifier:   2B:78:FC:28:E2:C9:F4:45:C5:D9:26:2A:F5:C9:CB:16:6A:4D:56:5E
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285844F89554E57E35817CEC119800
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/08ebf489-ce16-3f0e-b69d-7dab1f9a9a03.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     62651
IP address blocks:        216.131.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:54:e5:7e:35:81:7c:ec:11:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=92916ebb-4367-4d2a-9281-3363c23b520a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e8:03:57:72:0d:09:64:43:f5:2a:7f:12:98:
                    48:0f:d0:7b:cc:c9:f5:62:7f:16:c8:6c:b3:4b:5c:
                    8d:1c:01:87:bc:94:f8:15:70:f6:67:42:2c:7e:7f:
                    47:a5:d4:42:5f:98:06:dc:c6:fb:82:c3:52:ce:c1:
                    af:7f:9a:6a:1a:18:c8:6a:be:b8:0a:bc:23:79:a8:
                    20:ac:c8:d4:57:c5:85:f1:66:1b:42:27:4c:17:77:
                    f6:e8:bc:bb:55:c1:a6:26:56:86:58:a9:fa:b5:05:
                    ed:a1:52:d2:a0:39:a9:8d:23:a8:7c:0a:e1:90:54:
                    d9:f3:a8:9d:e4:69:b5:d1:67:d0:d9:38:1b:b9:a2:
                    c3:da:83:67:14:db:1e:74:bf:a0:51:31:f7:91:70:
                    7a:c7:e4:17:20:71:fb:32:80:54:af:2a:ad:b7:6b:
                    b8:fe:3c:7f:5b:09:04:07:89:66:51:a2:d9:c8:41:
                    68:ac:fe:e8:e1:2e:5d:0f:e4:52:1c:3b:fc:c5:dd:
                    f9:fd:a3:29:ea:4c:6b:15:14:e4:39:34:20:91:72:
                    1d:af:d6:ff:f5:f5:72:19:b2:78:41:b3:c6:53:0f:
                    e3:ac:dc:23:38:eb:ad:ff:d2:98:d7:84:8a:cb:76:
                    bc:19:e9:3d:22:8a:c7:0a:03:6e:5d:cd:6f:e0:4c:
                    c7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:78:FC:28:E2:C9:F4:45:C5:D9:26:2A:F5:C9:CB:16:6A:4D:56:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/08ebf489-ce16-3f0e-b69d-7dab1f9a9a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:03:65:d4:10:d3:16:a9:6e:ae:66:f1:4f:8a:9f:47:e7:00:
         b0:7e:0a:6a:10:1a:10:da:c4:da:30:f7:60:b5:cb:13:d2:8d:
         b6:5f:63:67:8e:77:1e:76:da:d9:6f:75:d6:90:86:64:27:e7:
         d8:00:a0:b5:d3:10:a2:79:d7:c0:e7:3c:45:11:f0:3d:30:11:
         82:23:31:b4:2e:9b:6a:9d:41:8d:be:1c:9c:fa:57:73:32:00:
         29:28:eb:b5:f2:b0:6b:e9:e4:31:4a:6c:7e:5c:68:49:a1:a4:
         a1:35:2b:5d:fb:71:56:b2:59:ff:e0:1f:1b:21:64:c4:37:9f:
         5c:64:ef:02:66:2c:76:0f:0e:64:a0:fc:0d:06:2e:29:f7:c3:
         ff:da:a8:96:6b:27:7d:ed:93:54:5a:3d:ff:9a:e2:e5:44:e9:
         aa:53:ef:b8:06:d2:e6:38:e4:f3:bf:b1:ca:fa:31:d4:37:4e:
         fc:fd:0b:2a:55:fa:bf:50:8b:22:7d:d9:85:30:6b:65:ed:0d:
         20:c4:6f:8b:a2:8c:bd:0d:56:36:d3:48:f0:c7:2a:33:b1:7d:
         79:24:28:cc:19:87:16:b4:4e:df:9b:86:e2:c9:3d:13:0e:2d:
         98:a8:89:3e:09:f1:82:64:cd:ec:47:85:5b:58:e4:5a:5a:00:
         48:7f:86:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET4lVTlfjWBfOwRmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk
OTI5MTZlYmItNDM2Ny00ZDJhLTkyODEtMzM2M2MyM2I1MjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiegDV3INCWRD9Sp/EphID9B7zMn1Yn8WyGyz
S1yNHAGHvJT4FXD2Z0Isfn9HpdRCX5gG3Mb7gsNSzsGvf5pqGhjIar64Crwjeagg
rMjUV8WF8WYbQidMF3f26Ly7VcGmJlaGWKn6tQXtoVLSoDmpjSOofArhkFTZ86id
5Gm10WfQ2TgbuaLD2oNnFNsedL+gUTH3kXB6x+QXIHH7MoBUryqtt2u4/jx/WwkE
B4lmUaLZyEForP7o4S5dD+RSHDv8xd35/aMp6kxrFRTkOTQgkXIdr9b/9fVyGbJ4
QbPGUw/jrNwjOOut/9KY14SKy3a8Gek9IorHCgNuXc1v4EzHhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCt4/CjiyfRFxdkmKvXJyxZqTVZeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDhlYmY0ODktY2UxNi0z
ZjBlLWI2OWQtN2RhYjFmOWE5YTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEMDZdQQ0xapbq5m8U+Kn0fnALB+CmoQGhDaxNow92C1yxPSjbZfY2eO
dx522tlvddaQhmQn59gAoLXTEKJ518DnPEUR8D0wEYIjMbQum2qdQY2+HJz6V3My
ACko67XysGvp5DFKbH5caEmhpKE1K137cVayWf/gHxshZMQ3n1xk7wJmLHYPDmSg
/A0GLin3w//aqJZrJ33tk1RaPf+a4uVE6apT77gG0uY45PO/scr6MdQ3Tvz9CypV
+r9QiyJ92YUwa2XtDSDEb4uijL0NVjbTSPDHKjOxfXkkKMwZhxa0Tt+bhuLJPRMO
LZioiT4J8YJkzexHhVtY5FpaAEh/hu8=
-----END CERTIFICATE-----
Generated at Fri May 10 11:39:12 2024 by rpki-client on console-fra.rpki-client.org