Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/550a151e-c18d-35ce-90a4-5c8c0337abb6.roa
File:                     550a151e-c18d-35ce-90a4-5c8c0337abb6.roa (raw, json)
Hash identifier:          7hmk+cr49Dy2gc273HuIppGV/YeU5T2fszhTl5RtPPc=
Subject key identifier:   92:00:B8:02:7E:20:0E:C1:F9:29:77:15:12:44:00:4E:77:A6:FC:A9
Certificate issuer:       /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial:       010D0C9F43285847EA5A1332BC523FB99809CE00
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/550a151e-c18d-35ce-90a4-5c8c0337abb6.roa
Signing time:             Mon 18 Nov 2024 02:00:27 +0000
ROA not before:           Mon 18 Nov 2024 02:00:27 +0000
ROA not after:            Sun 16 Feb 2025 02:00:27 +0000
asID:                     398420
IP address blocks:        216.246.216.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ea:5a:13:32:bc:52:3f:b9:98:09:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
        Validity
            Not Before: Nov 18 02:00:27 2024 GMT
            Not After : Feb 16 02:00:27 2025 GMT
        Subject: CN=a3b231d0-efb0-4ffb-8120-7d0214b009c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e0:3a:6a:55:ca:9e:42:ee:79:0d:b1:2c:1e:
                    59:07:87:d1:0c:2f:ef:da:2d:3b:a9:98:fb:d8:30:
                    18:aa:9b:59:5a:32:6d:58:73:38:24:1c:62:4f:5d:
                    0e:ed:dd:1c:03:69:ac:7d:f0:dc:32:ff:14:98:42:
                    e6:a5:a1:bc:0d:84:22:f9:0a:56:3f:55:77:81:71:
                    6c:18:77:59:a3:03:ac:8b:96:61:4f:ea:c8:5f:de:
                    71:8e:1a:b4:7e:43:d5:0c:88:f9:bd:99:66:c9:d4:
                    64:b5:ea:1c:43:c7:c6:09:72:d7:6f:ee:b6:24:c9:
                    52:d9:38:8a:56:87:2d:d8:41:d0:e2:0e:59:c3:6c:
                    5c:ab:39:3c:11:27:b3:3b:f5:2e:15:75:87:e0:05:
                    9c:cd:84:71:c9:8a:08:78:09:eb:e7:c5:db:25:8b:
                    2f:52:b7:47:e8:c4:a1:17:f0:01:65:fd:e0:d6:c3:
                    63:1a:84:d3:d6:9e:ad:b8:d5:5f:44:9c:ae:60:8c:
                    ee:6c:83:f1:d6:27:9b:ed:9c:5c:4d:03:5c:a3:45:
                    2d:b1:81:ac:d2:84:86:8e:57:18:dd:03:f2:9f:bd:
                    1a:51:19:c4:63:8b:cc:68:df:45:56:97:f9:d6:7f:
                    2d:58:17:02:08:79:43:be:2f:8d:7b:81:7f:09:24:
                    ee:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:00:B8:02:7E:20:0E:C1:F9:29:77:15:12:44:00:4E:77:A6:FC:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/550a151e-c18d-35ce-90a4-5c8c0337abb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl

            X509v3 Authority Key Identifier:
                keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:98:9a:ea:dc:4e:93:98:0d:0d:31:c9:d8:26:cd:1c:22:f7:
         fa:88:7d:e9:28:84:36:75:6f:30:a0:2d:a6:7d:08:37:34:f6:
         71:f0:3c:e5:e7:03:42:6e:bd:1e:18:7b:60:a2:34:e5:97:cd:
         a9:39:59:b5:37:08:11:c9:50:e5:a2:10:a6:36:25:b4:c5:ad:
         7f:7a:e3:d3:f9:ce:27:51:d8:10:c8:60:b7:fb:db:17:cb:75:
         2c:b1:a9:e2:da:fb:93:e3:6a:d6:11:fa:e3:31:ca:17:15:63:
         b9:f8:d6:6f:a7:cf:ab:84:95:74:2a:75:b6:e7:78:b1:92:7c:
         9f:b9:7b:af:37:08:8c:43:19:5b:89:11:c4:e1:41:53:76:22:
         93:fa:15:5d:aa:1f:ca:95:34:0c:64:08:cf:ba:b5:b4:43:5e:
         5f:c0:6f:58:43:35:dd:0b:43:43:3c:0e:56:fd:59:e0:c6:d5:
         91:dd:79:c1:bc:be:19:4e:3e:58:59:8b:ef:28:45:1b:03:3f:
         e4:0f:f6:8f:46:25:d4:fd:00:73:18:12:20:9a:6b:c8:32:9f:
         a8:5b:c4:4f:6b:ab:22:7b:40:68:29:f7:1f:09:fc:21:30:f7:
         da:55:84:39:05:03:ea:74:ec:fc:95:bc:fe:c9:9c:a2:52:45:
         c1:5b:be:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfqWhMyvFI/uZgJzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3
OTU5MB4XDTI0MTExODAyMDAyN1oXDTI1MDIxNjAyMDAyN1owLzEtMCsGA1UEAxMk
YTNiMjMxZDAtZWZiMC00ZmZiLTgxMjAtN2QwMjE0YjAwOWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+A6alXKnkLueQ2xLB5ZB4fRDC/v2i07qZj7
2DAYqptZWjJtWHM4JBxiT10O7d0cA2msffDcMv8UmELmpaG8DYQi+QpWP1V3gXFs
GHdZowOsi5ZhT+rIX95xjhq0fkPVDIj5vZlmydRkteocQ8fGCXLXb+62JMlS2TiK
Voct2EHQ4g5Zw2xcqzk8ESezO/UuFXWH4AWczYRxyYoIeAnr58XbJYsvUrdH6MSh
F/ABZf3g1sNjGoTT1p6tuNVfRJyuYIzubIPx1ieb7ZxcTQNco0UtsYGs0oSGjlcY
3QPyn70aURnEY4vMaN9FVpf51n8tWBcCCHlDvi+Ne4F/CSTuHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJIAuAJ+IA7B+Sl3FRJEAE53pvypMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz
ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNTUwYTE1MWUtYzE4ZC0z
NWNlLTkwYTQtNWM4YzAzMzdhYmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0
ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0
Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw
M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2PbYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAmYmurcTpOYDQ0xydgmzRwi9/qIfekohDZ1bzCgLaZ9CDc09nHwPOXn
A0JuvR4Ye2CiNOWXzak5WbU3CBHJUOWiEKY2JbTFrX9649P5zidR2BDIYLf72xfL
dSyxqeLa+5PjatYR+uMxyhcVY7n41m+nz6uElXQqdbbneLGSfJ+5e683CIxDGVuJ
EcThQVN2IpP6FV2qH8qVNAxkCM+6tbRDXl/Ab1hDNd0LQ0M8Dlb9WeDG1ZHdecG8
vhlOPlhZi+8oRRsDP+QP9o9GJdT9AHMYEiCaa8gyn6hbxE9rqyJ7QGgp9x8J/CEw
99pVhDkFA+p07PyVvP7JnKJSRcFbvkk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:03:24 2024 by rpki-client on console-ams.rpki-client.org