Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8431538f-53d7-3595-996e-d936b49b3f82.roa
File:                     8431538f-53d7-3595-996e-d936b49b3f82.roa (raw, json)
Hash identifier:          cgIwv2+W0plAszvzoBQJysnRNGdpK2qu8seX05My5T8=
Subject key identifier:   6E:35:18:AC:93:E5:1A:05:EE:FC:56:4C:9D:5A:C4:2E:DD:AF:BC:FF
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285847872132E515D204C1D254FAC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8431538f-53d7-3595-996e-d936b49b3f82.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     212238
IP address blocks:        104.250.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:32:e5:15:d2:04:c1:d2:54:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=34b7ae85-4e1b-4e44-a2cb-89b3cb44074a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0c:29:2e:22:85:fb:f1:ed:b2:70:9b:04:02:
                    d8:03:f1:d6:db:d3:77:23:61:b3:46:ad:17:da:55:
                    09:63:a2:ec:1d:8f:a4:66:f2:1c:38:87:20:e8:d8:
                    e2:96:63:4b:23:0c:78:f9:e5:a1:3b:85:10:fa:0b:
                    39:2d:39:55:bf:d3:ce:bb:05:c2:a4:8f:d0:b1:cc:
                    16:54:2c:9c:70:91:a4:16:9b:aa:4a:95:92:9e:cd:
                    66:d9:02:0b:90:2a:7e:8c:b5:d2:4b:0f:6e:8a:13:
                    4b:26:ed:f6:f6:82:66:03:f8:b4:b1:d5:43:e0:d8:
                    f8:1e:c5:3d:a5:b1:2a:78:bc:f6:6d:a9:f7:04:c1:
                    b2:6f:90:b8:79:05:81:1d:f7:ec:5e:38:d4:f1:d3:
                    fd:1a:3e:28:74:2f:f5:5e:0f:38:af:b6:77:0f:db:
                    c9:ce:ea:ee:a2:3e:ab:ae:78:de:9a:22:39:70:2a:
                    ab:c9:64:a2:21:d4:58:47:89:73:f6:de:17:e3:ec:
                    b1:bc:8a:b8:63:e8:a2:35:19:cd:cd:7a:eb:9f:c3:
                    83:cf:4f:90:a2:90:02:5d:6c:1f:0c:3f:6a:db:39:
                    10:b5:3c:25:f5:82:ba:3f:03:ec:17:c3:e9:f8:bb:
                    bf:a1:fc:64:62:4d:74:2f:ba:68:1b:63:40:3b:85:
                    93:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:35:18:AC:93:E5:1A:05:EE:FC:56:4C:9D:5A:C4:2E:DD:AF:BC:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8431538f-53d7-3595-996e-d936b49b3f82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a3:89:14:25:bb:bd:d5:3c:7b:fa:54:59:5d:98:d3:bc:9f:
         bc:bb:78:54:49:81:58:22:60:21:14:6c:3a:a6:91:7b:23:9a:
         40:7f:02:d1:8d:ad:39:1c:99:2f:54:ec:11:8d:ff:0c:ff:14:
         4b:97:07:12:28:d7:0b:d7:c0:3b:15:f5:a2:f0:69:ba:ad:8d:
         fa:0c:b9:1b:b6:7a:08:83:86:7d:79:2a:26:fb:d8:d5:30:19:
         86:23:c1:8c:fb:68:5a:e0:25:4f:b5:16:fd:76:74:b3:aa:13:
         e5:ff:7f:e3:0a:7f:28:21:5c:e8:7d:01:e8:88:d4:4a:bc:16:
         6a:a6:c3:c9:e6:4c:a5:1e:f9:8c:e2:21:63:14:30:73:83:12:
         09:bd:84:cd:fb:e5:8a:43:e8:76:85:e0:fb:50:8f:3a:2b:b3:
         07:53:41:5c:97:77:31:a9:72:fa:2f:37:19:57:0f:ce:f7:19:
         4f:9a:ae:8b:12:00:3e:10:ef:b8:02:ca:f0:bc:e8:e2:ee:d6:
         ed:97:5c:fc:1b:62:e3:94:7e:60:8b:38:fc:3d:3a:75:77:98:
         57:b2:52:1e:54:2c:e1:1d:d9:44:2b:24:03:32:f7:93:23:79:
         8b:08:04:16:91:b6:18:68:9b:1c:c6:fe:ab:92:d0:97:5c:da:
         b6:49:44:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeHITLlFdIEwdJU+sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk
MzRiN2FlODUtNGUxYi00ZTQ0LWEyY2ItODliM2NiNDQwNzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwwpLiKF+/HtsnCbBALYA/HW29N3I2GzRq0X
2lUJY6LsHY+kZvIcOIcg6NjilmNLIwx4+eWhO4UQ+gs5LTlVv9POuwXCpI/QscwW
VCyccJGkFpuqSpWSns1m2QILkCp+jLXSSw9uihNLJu329oJmA/i0sdVD4Nj4HsU9
pbEqeLz2ban3BMGyb5C4eQWBHffsXjjU8dP9Gj4odC/1Xg84r7Z3D9vJzuruoj6r
rnjemiI5cCqryWSiIdRYR4lz9t4X4+yxvIq4Y+iiNRnNzXrrn8ODz0+QopACXWwf
DD9q2zkQtTwl9YK6PwPsF8Pp+Lu/ofxkYk10L7poG2NAO4WTjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG41GKyT5RoF7vxWTJ1axC7dr7z/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODQzMTUzOGYtNTNkNy0z
NTk1LTk5NmUtZDkzNmI0OWIzZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPq4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmjiRQlu73VPHv6VFldmNO8n7y7eFRJgVgiYCEUbDqmkXsjmkB/AtGN
rTkcmS9U7BGN/wz/FEuXBxIo1wvXwDsV9aLwabqtjfoMuRu2egiDhn15Kib72NUw
GYYjwYz7aFrgJU+1Fv12dLOqE+X/f+MKfyghXOh9AeiI1Eq8Fmqmw8nmTKUe+Yzi
IWMUMHODEgm9hM375YpD6HaF4PtQjzorswdTQVyXdzGpcvovNxlXD873GU+arosS
AD4Q77gCyvC86OLu1u2XXPwbYuOUfmCLOPw9OnV3mFeyUh5ULOEd2UQrJAMy95Mj
eYsIBBaRthhomxzG/quS0Jdc2rZJROQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:54 2024 by rpki-client on console-fra.rpki-client.org