Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dbc711d7-9768-3f0c-8f67-70b78bb40eb4.roa
File:                     dbc711d7-9768-3f0c-8f67-70b78bb40eb4.roa (raw, json)
Hash identifier:          1m7sx/4B/pECYTiawq5FZkpXpvBgnivh9lsvjar4oAE=
Subject key identifier:   66:ED:8C:55:8B:3B:1B:30:1C:8A:33:89:FC:71:2B:44:FF:2D:AB:36
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584784567EBFC65F26EB786DF380
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dbc711d7-9768-3f0c-8f67-70b78bb40eb4.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     9009
IP address blocks:        172.94.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:7e:bf:c6:5f:26:eb:78:6d:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=8db48b63-da8b-4ef0-bc06-bd1d52fc157f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d7:db:76:48:17:25:bb:4f:72:73:46:15:03:
                    af:83:57:2a:ae:c2:f1:bd:e1:e5:4b:69:cc:16:57:
                    c7:d3:e0:fd:77:ee:be:d6:6c:f2:53:ed:18:72:51:
                    3f:32:3c:3e:3d:a3:28:bf:94:0f:8b:e5:b7:b4:2e:
                    7f:ec:07:63:a1:b2:ef:00:b0:95:76:09:4a:38:a0:
                    dc:41:b9:ff:04:14:bd:40:41:e6:12:e2:15:18:78:
                    bb:9d:77:5b:d7:f1:42:ba:b9:72:c0:93:5a:a1:78:
                    fa:8c:65:d6:1d:a9:ad:08:da:2f:12:90:54:56:d0:
                    3d:02:a8:8d:e3:cb:45:20:7e:a7:a9:35:e3:50:5d:
                    1d:e2:0f:de:b1:95:87:b4:8f:a3:87:ac:82:eb:3c:
                    e4:6f:13:2c:c1:7f:92:62:bf:ec:7d:72:b9:a9:96:
                    26:21:f3:e6:35:27:fa:22:ed:b6:e6:0b:5c:0a:9d:
                    95:d3:f1:34:1e:7e:d6:69:70:88:3a:96:45:61:d7:
                    91:19:81:22:36:e4:09:59:20:29:4e:e9:7a:b7:90:
                    55:c5:7e:21:75:4e:af:6c:59:bc:5b:3c:59:ed:b5:
                    b1:90:60:06:47:0b:8d:23:94:5d:24:69:00:aa:ee:
                    1e:1d:48:62:ca:d3:e6:5f:5d:a6:98:62:31:5c:34:
                    aa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:ED:8C:55:8B:3B:1B:30:1C:8A:33:89:FC:71:2B:44:FF:2D:AB:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dbc711d7-9768-3f0c-8f67-70b78bb40eb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a0:c0:9c:ae:f2:fc:17:5f:22:f8:52:26:7e:44:72:09:46:
         6b:b9:1c:75:bf:cc:48:88:63:8f:d6:fb:7f:d6:39:bc:22:77:
         08:ea:9d:df:11:94:0f:e6:be:aa:31:28:61:74:a7:55:6d:2e:
         14:45:68:12:76:d7:c7:43:58:1c:aa:bd:28:a7:ab:cb:3c:70:
         b3:2f:6a:33:4e:d1:ba:29:8c:0c:7f:80:b5:74:c3:c3:7a:d3:
         bf:8d:b1:d5:2c:68:88:4e:12:b3:4d:13:c8:09:47:36:70:eb:
         15:b5:92:31:28:a4:4f:08:92:40:27:66:87:13:11:76:0b:95:
         d3:41:fe:44:07:e6:8d:b5:0a:30:63:cd:9f:ae:b6:58:74:38:
         d1:6f:7f:00:e9:3d:94:c9:11:a7:8c:7c:99:36:32:b2:46:30:
         2e:5b:8a:bb:81:d6:91:15:05:ce:d0:0b:0b:f9:b6:87:4e:a9:
         e6:3b:f0:45:8e:7e:41:60:82:ca:d9:6a:24:ef:06:93:93:a7:
         35:fd:43:e0:57:26:09:dd:8d:37:6f:a3:d2:f0:03:d3:93:29:
         6d:dd:89:33:5f:9f:7c:c6:9a:71:91:33:85:93:0c:d7:4e:7c:
         3b:4e:f0:e9:63:f5:1a:2b:9e:c9:a0:b4:96:9c:7a:d3:6f:99:
         dd:fb:b7:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEVn6/xl8m63ht84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk
OGRiNDhiNjMtZGE4Yi00ZWYwLWJjMDYtYmQxZDUyZmMxNTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitfbdkgXJbtPcnNGFQOvg1cqrsLxveHlS2nM
FlfH0+D9d+6+1mzyU+0YclE/Mjw+PaMov5QPi+W3tC5/7AdjobLvALCVdglKOKDc
Qbn/BBS9QEHmEuIVGHi7nXdb1/FCurlywJNaoXj6jGXWHamtCNovEpBUVtA9AqiN
48tFIH6nqTXjUF0d4g/esZWHtI+jh6yC6zzkbxMswX+SYr/sfXK5qZYmIfPmNSf6
Iu225gtcCp2V0/E0Hn7WaXCIOpZFYdeRGYEiNuQJWSApTul6t5BVxX4hdU6vbFm8
WzxZ7bWxkGAGRwuNI5RdJGkAqu4eHUhiytPmX12mmGIxXDSqKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGbtjFWLOxswHIozifxxK0T/Las2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGJjNzExZDctOTc2OC0z
ZjBjLThmNjctNzBiNzhiYjQwZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABCgwJyu8vwXXyL4UiZ+RHIJRmu5HHW/zEiIY4/W+3/WObwidwjqnd8R
lA/mvqoxKGF0p1VtLhRFaBJ218dDWByqvSinq8s8cLMvajNO0bopjAx/gLV0w8N6
07+NsdUsaIhOErNNE8gJRzZw6xW1kjEopE8IkkAnZocTEXYLldNB/kQH5o21CjBj
zZ+utlh0ONFvfwDpPZTJEaeMfJk2MrJGMC5biruB1pEVBc7QCwv5todOqeY78EWO
fkFggsrZaiTvBpOTpzX9Q+BXJgndjTdvo9LwA9OTKW3diTNfn3zGmnGRM4WTDNdO
fDtO8Olj9RornsmgtJacetNvmd37t5o=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:41 2024 by rpki-client on console-ams.rpki-client.org