Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/ca578e82-bf4a-3c60-bc1c-118f73b7a0be.roa
File:                     ca578e82-bf4a-3c60-bc1c-118f73b7a0be.roa (raw, json)
Hash identifier:          PRaR2daSt0uR3Ce1mJ6717dqOoH58DMvYFtK9+ykpqc=
Subject key identifier:   FF:36:23:AF:A6:F0:A9:11:99:78:F2:D9:39:1B:4D:CD:3B:9F:D3:98
Certificate issuer:       /CN=3364015a-cbd4-4063-84a8-a6b77c470bce
Certificate serial:       010D0C9F432858474F4B78A40B38DFC038AA3900
Authority key identifier: 22:CB:26:11:CA:C0:7D:01:DE:58:59:94:FC:53:FF:79:C8:34:48:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/ca578e82-bf4a-3c60-bc1c-118f73b7a0be.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     396073
IP address blocks:        192.30.242.0/23 maxlen: 24
                          198.135.52.0/22 maxlen: 24
                          198.135.56.0/22 maxlen: 24
                          216.250.254.0/23 maxlen: 24
                          2602:fdb7:1::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/3364015a-cbd4-4063-84a8-a6b77c470bce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/3364015a-cbd4-4063-84a8-a6b77c470bce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:78:a4:0b:38:df:c0:38:aa:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3364015a-cbd4-4063-84a8-a6b77c470bce
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=f393b40a-d216-4d20-837d-693648b46bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d5:9d:43:5e:91:ac:4d:74:1c:b7:8f:82:b9:
                    10:6d:9c:ca:d9:f6:f4:26:8d:02:f0:b2:35:36:0d:
                    b8:03:de:b5:11:7c:f5:5c:c6:ae:a8:55:d2:41:41:
                    20:18:3d:92:5f:c9:77:13:c5:6c:30:43:da:f9:dd:
                    b6:93:58:09:31:86:fe:c7:0e:f7:52:4b:6a:53:62:
                    67:6b:88:66:a8:26:de:ab:aa:31:54:ce:83:0d:f9:
                    d1:e9:ce:80:22:c9:f7:0b:a1:8b:b5:75:61:a7:83:
                    c2:5c:85:81:69:d0:3f:a5:1e:56:34:8d:7d:ab:76:
                    6b:44:0a:57:cc:70:d6:73:dd:30:8b:06:5d:44:6d:
                    61:e9:66:b3:6b:91:e1:88:20:16:10:6d:7f:83:5a:
                    a2:a0:16:dc:60:33:e2:ea:11:fc:94:0e:a7:9f:74:
                    01:0d:4b:ea:75:39:c4:8c:5e:f1:c2:1a:4a:ce:e2:
                    a2:71:9b:4a:8d:17:ea:fe:2f:26:66:78:f3:09:ed:
                    3e:7f:ea:ea:d6:10:f4:da:62:72:e0:94:fb:35:d6:
                    9d:4f:f6:22:24:fc:3e:08:bd:dd:b1:e3:5d:1c:f8:
                    b6:83:f1:09:8d:85:80:3d:9b:74:d1:ea:f2:a3:65:
                    cc:fe:6f:f5:30:5d:ef:bd:45:67:e2:b1:e1:70:01:
                    e7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:36:23:AF:A6:F0:A9:11:99:78:F2:D9:39:1B:4D:CD:3B:9F:D3:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/ca578e82-bf4a-3c60-bc1c-118f73b7a0be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/3364015a-cbd4-4063-84a8-a6b77c470bce.crl

            X509v3 Authority Key Identifier:
                keyid:22:CB:26:11:CA:C0:7D:01:DE:58:59:94:FC:53:FF:79:C8:34:48:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.242.0/23
                  198.135.52.0-198.135.59.255
                  216.250.254.0/23
                IPv6:
                  2602:fdb7:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:91:bb:c3:0c:1d:e7:b1:6e:21:41:1e:39:0a:ad:7d:a9:ca:
         49:fe:8f:c2:9b:af:35:48:90:05:af:b3:64:2a:ef:e8:bf:f4:
         26:9d:bc:5a:2a:54:eb:f9:33:02:00:b3:6d:e1:c2:37:30:54:
         c7:d6:82:36:9a:1d:1a:2f:08:f0:44:32:60:1d:7d:36:f0:28:
         2b:73:cd:b2:02:df:6b:9f:eb:6b:9f:a6:58:9b:39:60:94:cb:
         11:df:35:87:61:b9:88:65:56:d7:7a:2b:19:0f:f8:79:ef:86:
         9c:fe:a9:e1:de:37:32:4e:59:78:84:36:35:6f:9d:81:b7:0e:
         3b:5a:0f:ca:21:75:f8:4e:3c:b4:b7:9a:1a:33:04:1b:a4:cd:
         72:be:95:06:f7:63:c4:6b:dd:04:2d:a9:8b:c4:2a:75:bb:65:
         3c:5e:8c:a2:19:1d:1c:f8:49:b8:c0:9a:36:ba:2b:18:57:22:
         24:df:1b:de:b0:af:fe:75:d5:2b:ac:49:97:51:36:79:45:25:
         5b:89:83:c8:ff:a7:91:41:62:15:90:e4:1a:57:45:51:d8:fc:
         be:c0:b4:f0:2f:3c:98:eb:96:65:07:44:ff:cb:54:5e:24:09:
         be:6c:13:c7:a5:ad:7a:d8:e9:94:40:4f:bf:78:6a:38:f2:43:
         be:74:3e:31
-----BEGIN CERTIFICATE-----
MIIGaDCCBVCgAwIBAgIUAQ0Mn0MoWEdPS3ikCzjfwDiqOQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzM2NDAxNWEtY2JkNC00MDYzLTg0YTgtYTZiNzdjNDcw
YmNlMB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk
ZjM5M2I0MGEtZDIxNi00ZDIwLTgzN2QtNjkzNjQ4YjQ2YmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9WdQ16RrE10HLePgrkQbZzK2fb0Jo0C8LI1
Ng24A961EXz1XMauqFXSQUEgGD2SX8l3E8VsMEPa+d22k1gJMYb+xw73UktqU2Jn
a4hmqCbeq6oxVM6DDfnR6c6AIsn3C6GLtXVhp4PCXIWBadA/pR5WNI19q3ZrRApX
zHDWc90wiwZdRG1h6Waza5HhiCAWEG1/g1qioBbcYDPi6hH8lA6nn3QBDUvqdTnE
jF7xwhpKzuKicZtKjRfq/i8mZnjzCe0+f+rq1hD02mJy4JT7NdadT/YiJPw+CL3d
seNdHPi2g/EJjYWAPZt00eryo2XM/m/1MF3vvUVn4rHhcAHnkQIDAQABo4IDejCC
A3YwHQYDVR0OBBYEFP82I6+m8KkRmXjy2TkbTc07n9OYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMzY0
MDE1YS1jYmQ0LTQwNjMtODRhOC1hNmI3N2M0NzBiY2UvY2E1NzhlODItYmY0YS0z
YzYwLWJjMWMtMTE4ZjczYjdhMGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzM2NDAxNWEtY2JkNC00MDYzLTg0
YTgtYTZiNzdjNDcwYmNlLzMzNjQwMTVhLWNiZDQtNDA2My04NGE4LWE2Yjc3YzQ3
MGJjZS5jcmwwHwYDVR0jBBgwFoAUIssmEcrAfQHeWFmU/FP/ecg0SJ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zMzY0MDE1YS1jYmQ0LTQwNjMtODRhOC1hNmI3
N2M0NzBiY2UuY2VyMEQGCCsGAQUFBwEHAQH/BDUwMzAgBAIAATAaAwQBwB7yMAwD
BALGhzQDBALGhzgDBAHY+v4wDwQCAAIwCQMHACYC/bcAATBUBgNVHSABAf8ESjBI
MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0
L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXkbvD
DB3nsW4hQR45Cq19qcpJ/o/Cm681SJAFr7NkKu/ov/QmnbxaKlTr+TMCALNt4cI3
MFTH1oI2mh0aLwjwRDJgHX028Cgrc82yAt9rn+trn6ZYmzlglMsR3zWHYbmIZVbX
eisZD/h574ac/qnh3jcyTll4hDY1b52Btw47Wg/KIXX4Tjy0t5oaMwQbpM1yvpUG
92PEa90ELamLxCp1u2U8XoyiGR0c+Em4wJo2uisYVyIk3xvesK/+ddUrrEmXUTZ5
RSVbiYPI/6eRQWIVkOQaV0VR2Py+wLTwLzyY65ZlB0T/y1ReJAm+bBPHpa162OmU
QE+/eGo48kO+dD4x
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:31:35 2024 by rpki-client on console-fra.rpki-client.org