Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/34587be0-801c-3456-af9f-aa43a46c930c.roa
File:                     34587be0-801c-3456-af9f-aa43a46c930c.roa (raw, json)
Hash identifier:          5Jv0WyWq7ECEO0mdSWQX58GLQEkNwQbQfHiI8hkZg2o=
Subject key identifier:   DB:23:FC:AC:55:41:19:38:BB:E3:3F:AF:9A:54:B8:98:B9:CB:4D:26
Certificate issuer:       /CN=55bf3e52-332a-4f98-b430-2ed284592ddb
Certificate serial:       010D0C9F43285847A73BE8655E6A840B75416180
Authority key identifier: 99:52:D0:F3:A7:E2:81:A5:6F:83:82:AE:32:F2:09:0A:7B:65:15:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/34587be0-801c-3456-af9f-aa43a46c930c.roa
Signing time:             Fri 25 Oct 2024 01:00:31 +0000
ROA not before:           Fri 25 Oct 2024 01:00:31 +0000
ROA not after:            Thu 23 Jan 2025 02:00:31 +0000
asID:                     57974
IP address blocks:        192.41.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/55bf3e52-332a-4f98-b430-2ed284592ddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/55bf3e52-332a-4f98-b430-2ed284592ddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:3b:e8:65:5e:6a:84:0b:75:41:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55bf3e52-332a-4f98-b430-2ed284592ddb
        Validity
            Not Before: Oct 25 01:00:31 2024 GMT
            Not After : Jan 23 02:00:31 2025 GMT
        Subject: CN=48d162e6-225d-4a9b-8ca9-701f3d9bb42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ca:89:73:65:45:49:fe:fd:bb:77:94:dc:1f:
                    ec:e5:4f:6a:1b:e3:b6:72:6a:bd:4b:b5:a4:c3:e4:
                    c3:3b:22:a7:f0:64:ba:a9:40:08:c0:d1:ca:f7:17:
                    aa:46:75:d5:68:2f:cc:e3:78:fc:85:7f:68:ff:4c:
                    f0:e5:b3:a8:e4:f1:e9:a9:a0:28:c4:3e:0a:09:57:
                    46:1d:f6:f9:86:9f:00:8e:9c:d0:f5:54:46:ad:3b:
                    7e:ab:a6:f7:17:58:a2:8a:1f:f6:d0:ba:0a:60:d0:
                    ee:ca:2d:cc:70:47:7a:2e:0a:94:53:85:69:f1:0c:
                    63:b7:c8:9f:37:f5:1e:29:74:a1:3e:3f:37:cb:99:
                    54:3f:c7:aa:50:d4:3d:16:0f:2c:81:d7:e3:ab:20:
                    4f:69:44:d7:3d:06:0f:c3:df:7f:cb:69:c9:38:c5:
                    68:b8:9c:65:23:a8:fa:23:13:ac:64:df:56:a2:b6:
                    c7:d6:d1:8c:26:24:2e:d6:3a:d3:4f:10:d3:8a:0e:
                    a1:38:54:0c:77:52:01:69:f0:df:9d:c7:32:4e:e4:
                    56:ab:c7:55:fb:0f:70:a7:f6:ea:21:cd:d1:2d:2b:
                    32:a2:b6:36:35:89:c5:f4:23:2e:44:46:96:ca:f5:
                    b7:91:ec:93:36:5d:3b:e3:c5:5e:cb:d8:0f:c5:4c:
                    4a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:23:FC:AC:55:41:19:38:BB:E3:3F:AF:9A:54:B8:98:B9:CB:4D:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/34587be0-801c-3456-af9f-aa43a46c930c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/55bf3e52-332a-4f98-b430-2ed284592ddb.crl

            X509v3 Authority Key Identifier:
                keyid:99:52:D0:F3:A7:E2:81:A5:6F:83:82:AE:32:F2:09:0A:7B:65:15:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ca:94:6e:7c:08:78:d0:60:71:84:eb:e3:44:d7:20:2e:e8:
         93:68:5d:79:a5:d1:ad:8b:eb:b3:2e:db:8d:b8:97:94:bf:0f:
         55:42:f1:64:b5:ad:38:70:36:7c:8b:1f:29:c0:96:e6:50:41:
         47:ed:37:88:5c:d8:99:c4:a5:ad:8d:d6:cb:41:92:89:8b:6e:
         9e:47:f1:78:8b:f3:09:39:cd:25:55:4e:64:65:6a:5a:62:41:
         9f:d4:e1:b7:5f:38:c1:c4:13:95:0e:3d:97:3c:27:a5:1f:df:
         27:e1:05:5e:c6:9a:a6:0c:09:17:31:20:0f:58:4e:45:73:80:
         2c:06:a7:78:fe:64:fd:62:2a:a4:fc:2e:33:25:e3:25:cc:0a:
         e0:b7:39:20:3f:98:90:51:c8:ad:3d:13:e2:08:ea:58:a3:61:
         9a:10:ca:e2:43:71:52:40:4c:9c:a6:1a:4a:f0:74:02:e4:16:
         29:bd:f3:06:c2:02:e8:da:64:56:c1:53:c2:5e:d9:72:b0:ea:
         14:fb:53:dd:62:24:f2:26:e0:b2:c4:43:4f:fd:2b:5d:1e:06:
         9d:8c:83:b1:f5:96:ff:3d:84:ed:bd:66:bf:b3:90:03:bf:af:
         55:9b:fd:95:91:8d:e5:ea:cd:bf:a3:ea:fd:33:65:2b:32:e2:
         11:a6:51:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEenO+hlXmqEC3VBYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTViZjNlNTItMzMyYS00Zjk4LWI0MzAtMmVkMjg0NTky
ZGRiMB4XDTI0MTAyNTAxMDAzMVoXDTI1MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk
NDhkMTYyZTYtMjI1ZC00YTliLThjYTktNzAxZjNkOWJiNDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8qJc2VFSf79u3eU3B/s5U9qG+O2cmq9S7Wk
w+TDOyKn8GS6qUAIwNHK9xeqRnXVaC/M43j8hX9o/0zw5bOo5PHpqaAoxD4KCVdG
Hfb5hp8AjpzQ9VRGrTt+q6b3F1iiih/20LoKYNDuyi3McEd6LgqUU4Vp8Qxjt8if
N/UeKXShPj83y5lUP8eqUNQ9Fg8sgdfjqyBPaUTXPQYPw99/y2nJOMVouJxlI6j6
IxOsZN9WorbH1tGMJiQu1jrTTxDTig6hOFQMd1IBafDfnccyTuRWq8dV+w9wp/bq
Ic3RLSsyorY2NYnF9CMuREaWyvW3keyTNl0748Vey9gPxUxKswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNsj/KxVQRk4u+M/r5pUuJi5y00mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NWJm
M2U1Mi0zMzJhLTRmOTgtYjQzMC0yZWQyODQ1OTJkZGIvMzQ1ODdiZTAtODAxYy0z
NDU2LWFmOWYtYWE0M2E0NmM5MzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTViZjNlNTItMzMyYS00Zjk4LWI0
MzAtMmVkMjg0NTkyZGRiLzU1YmYzZTUyLTMzMmEtNGY5OC1iNDMwLTJlZDI4NDU5
MmRkYi5jcmwwHwYDVR0jBBgwFoAUmVLQ86figaVvg4KuMvIJCntlFbEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81NWJmM2U1Mi0zMzJhLTRmOTgtYjQzMC0yZWQy
ODQ1OTJkZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwClmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIfKlG58CHjQYHGE6+NE1yAu6JNoXXml0a2L67Mu2424l5S/D1VC8WS1
rThwNnyLHynAluZQQUftN4hc2JnEpa2N1stBkomLbp5H8XiL8wk5zSVVTmRlalpi
QZ/U4bdfOMHEE5UOPZc8J6Uf3yfhBV7GmqYMCRcxIA9YTkVzgCwGp3j+ZP1iKqT8
LjMl4yXMCuC3OSA/mJBRyK09E+II6lijYZoQyuJDcVJATJymGkrwdALkFim98wbC
AujaZFbBU8Je2XKw6hT7U91iJPIm4LLEQ0/9K10eBp2Mg7H1lv89hO29Zr+zkAO/
r1Wb/ZWRjeXqzb+j6v0zZSsy4hGmUUM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:16 2024 by rpki-client on console-fra.rpki-client.org