Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8cb806d6-7611-3785-9497-21625bf59c84.roa
File:                     8cb806d6-7611-3785-9497-21625bf59c84.roa (raw, json)
Hash identifier:          f5bD4niQYZqpAbrsfuPELPt+IZt4YtrBTABRxeJsEE4=
Subject key identifier:   3B:92:A0:D2:29:CD:EF:41:8A:3B:26:A6:46:CF:42:CE:11:F1:94:88
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847EE7D50AD5BE7AF622C7D7780
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8cb806d6-7611-3785-9497-21625bf59c84.roa
Signing time:             Tue 19 Nov 2024 13:34:50 +0000
ROA not before:           Tue 19 Nov 2024 13:34:50 +0000
ROA not after:            Mon 17 Feb 2025 13:34:50 +0000
asID:                     396573
IP address blocks:        216.168.228.53/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:7d:50:ad:5b:e7:af:62:2c:7d:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 19 13:34:50 2024 GMT
            Not After : Feb 17 13:34:50 2025 GMT
        Subject: CN=97c23f04-fa33-4e30-820f-183445823ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:00:51:ee:8d:21:35:c3:f1:49:06:e6:f9:b4:
                    d9:d8:f0:0e:21:cb:92:fe:14:7e:f5:bb:ac:94:0f:
                    ae:81:de:bb:86:c8:6b:16:dc:8d:31:f5:f6:d7:f8:
                    e9:fc:eb:16:dc:f1:85:5a:59:7d:02:2b:17:f9:5c:
                    08:bc:96:cc:e0:07:f3:db:fa:b8:4f:3c:35:fa:60:
                    e4:63:2f:7f:93:98:e4:e0:08:27:5a:13:bc:fc:b2:
                    32:52:cb:82:11:6d:60:9c:1d:1e:ec:71:30:01:8d:
                    3d:ce:f9:ad:90:11:6b:24:c7:7a:b5:7b:a8:41:23:
                    43:62:64:ef:a1:dc:e4:70:89:6c:1f:9a:9c:8a:27:
                    f0:dc:c5:11:f2:c1:be:6d:c9:36:b5:6f:d2:d6:23:
                    09:68:ff:f2:77:65:b9:28:4f:3b:ec:93:fc:ae:ff:
                    06:8b:ee:67:40:f9:d6:e9:10:74:37:6b:ac:df:66:
                    8f:5f:28:aa:bd:f5:e7:a5:49:f9:52:e4:25:f9:7d:
                    ea:44:f8:0d:4e:fa:20:9c:a2:d7:11:7c:aa:e7:61:
                    bf:0d:f6:40:de:79:24:35:62:ed:aa:6c:dd:7c:35:
                    c6:a1:e5:79:1b:d4:59:4c:c7:ea:72:23:5c:3c:1d:
                    7f:0a:e3:43:b1:48:5b:b7:4e:9a:a6:66:82:f9:cd:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:92:A0:D2:29:CD:EF:41:8A:3B:26:A6:46:CF:42:CE:11:F1:94:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8cb806d6-7611-3785-9497-21625bf59c84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f9:bb:9c:7e:81:ef:da:7d:65:9a:16:15:5b:80:1b:11:89:
         a5:ee:8c:7f:c8:a4:d3:59:38:b3:7c:a2:c3:75:05:f5:f2:9d:
         8c:43:18:99:d4:b3:d2:f9:d3:d7:43:05:bd:d5:6d:f1:63:6a:
         f2:db:2b:da:71:6e:d6:40:b3:cc:2e:c2:36:30:42:af:e0:3e:
         51:3c:33:ee:47:56:f1:f5:b5:14:f5:cc:e8:25:b6:23:69:a1:
         13:e6:89:c8:0f:c7:4c:73:14:23:70:6d:1f:4b:ba:81:dc:51:
         2a:9f:f9:d7:70:f3:bd:0b:f9:1f:68:07:84:d7:80:e7:20:15:
         32:a6:b0:6a:c8:6b:87:d4:a8:d8:85:34:91:96:7d:ba:e9:be:
         07:af:15:c0:94:55:b5:75:c9:ce:05:20:d1:fe:58:aa:55:eb:
         6e:d2:eb:5d:a7:be:4e:13:50:a2:48:39:66:03:e1:fd:54:72:
         7d:dc:49:1b:26:d7:10:fd:55:4c:f0:73:00:ca:86:9c:11:d8:
         6a:76:db:f8:d3:43:fe:08:3c:f3:c2:73:31:87:15:d3:ee:56:
         73:17:66:71:f7:52:90:b8:a3:ce:54:9f:7d:f5:0f:50:22:93:
         1e:b5:6a:38:c0:39:55:b2:96:78:8f:54:d8:63:3c:c2:c3:66:
         bb:00:24:59
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfufVCtW+evYix9d4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTExOTEzMzQ1MFoXDTI1MDIxNzEzMzQ1MFowLzEtMCsGA1UEAxMk
OTdjMjNmMDQtZmEzMy00ZTMwLTgyMGYtMTgzNDQ1ODIzZWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArABR7o0hNcPxSQbm+bTZ2PAOIcuS/hR+9bus
lA+ugd67hshrFtyNMfX21/jp/OsW3PGFWll9AisX+VwIvJbM4Afz2/q4Tzw1+mDk
Yy9/k5jk4AgnWhO8/LIyUsuCEW1gnB0e7HEwAY09zvmtkBFrJMd6tXuoQSNDYmTv
odzkcIlsH5qciifw3MUR8sG+bck2tW/S1iMJaP/yd2W5KE877JP8rv8Gi+5nQPnW
6RB0N2us32aPXyiqvfXnpUn5UuQl+X3qRPgNTvognKLXEXyq52G/DfZA3nkkNWLt
qmzdfDXGoeV5G9RZTMfqciNcPB1/CuNDsUhbt06apmaC+c2rewIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDuSoNIpze9BijsmpkbPQs4R8ZSIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGNiODA2ZDYtNzYxMS0z
Nzg1LTk0OTctMjE2MjViZjU5Yzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAD+bucfoHv2n1lmhYVW4AbEYml7ox/yKTTWTizfKLDdQX18p2MQxiZ
1LPS+dPXQwW91W3xY2ry2yvacW7WQLPMLsI2MEKv4D5RPDPuR1bx9bUU9czoJbYj
aaET5onID8dMcxQjcG0fS7qB3FEqn/nXcPO9C/kfaAeE14DnIBUyprBqyGuH1KjY
hTSRln266b4HrxXAlFW1dcnOBSDR/liqVetu0utdp75OE1CiSDlmA+H9VHJ93Ekb
JtcQ/VVM8HMAyoacEdhqdtv400P+CDzzwnMxhxXT7lZzF2Zx91KQuKPOVJ999Q9Q
IpMetWo4wDlVspZ4j1TYYzzCw2a7ACRZ
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:18 2024 by rpki-client on console-ams.rpki-client.org