Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/7d8ce7e1-da5c-3963-9511-12ae3a5a8724.roa
File:                     7d8ce7e1-da5c-3963-9511-12ae3a5a8724.roa (raw, json)
Hash identifier:          2HUYeH053Ub0+OU8JQokZ2l31/JCzNaaH9VxtiVXKWg=
Subject key identifier:   74:E2:C1:4C:F8:DD:5B:D1:D2:89:32:72:D9:3B:90:06:D3:A1:74:DA
Certificate issuer:       /CN=700690a7-1957-45e2-8744-ee9735b07319
Certificate serial:       010D0C9F4328584789EBF343F79754544F2331D0
Authority key identifier: 21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/7d8ce7e1-da5c-3963-9511-12ae3a5a8724.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     1025
IP address blocks:        209.209.24.0/24 maxlen: 24
                          2602:fcb8::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:f3:43:f7:97:54:54:4f:23:31:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700690a7-1957-45e2-8744-ee9735b07319
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=c533a81d-6fd0-4e31-97b9-e7800943d083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:47:98:a0:7e:eb:46:06:8c:5c:57:17:2d:be:
                    98:d8:2a:dd:6c:78:4b:98:28:29:05:a9:cf:5c:a5:
                    57:9d:33:66:62:5f:14:08:6d:90:a4:c1:90:32:d0:
                    58:d6:26:b9:73:6f:31:c1:33:36:2d:05:22:c5:03:
                    47:bf:15:e8:e6:64:e6:75:0f:f8:94:09:8b:62:cf:
                    44:ff:60:15:ee:92:52:b4:79:92:23:7a:9f:0a:5f:
                    77:97:d5:7d:0f:ba:31:cc:1d:8a:02:bf:b8:05:0b:
                    cf:3d:3e:e6:56:bc:76:29:e1:c9:97:ad:f1:26:28:
                    40:92:c7:74:df:da:62:07:48:12:eb:26:30:46:fa:
                    c7:66:69:83:63:81:4c:05:7e:52:36:d9:0d:f4:4b:
                    5a:04:60:1e:41:a0:bc:9b:68:d3:f7:4f:ce:cc:34:
                    fa:fb:d2:9e:ba:19:dd:35:79:ac:db:43:06:63:3b:
                    b2:03:51:9c:61:19:81:a0:4b:ed:07:f7:44:ae:27:
                    a2:4a:32:37:a9:45:08:ad:3b:7b:60:81:a7:89:b9:
                    63:05:82:86:5d:ef:ab:59:07:ed:76:f1:23:32:89:
                    1d:24:43:12:31:02:62:20:69:84:3b:4e:50:06:8a:
                    eb:94:55:22:ae:ef:9a:ad:d3:6e:81:05:49:23:5b:
                    66:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E2:C1:4C:F8:DD:5B:D1:D2:89:32:72:D9:3B:90:06:D3:A1:74:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/7d8ce7e1-da5c-3963-9511-12ae3a5a8724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl

            X509v3 Authority Key Identifier:
                keyid:21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.24.0/24
                IPv6:
                  2602:fcb8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:55:d2:91:a5:af:c7:65:61:72:a4:44:7d:89:7f:df:df:9f:
         ff:1b:d7:66:d8:c5:17:f7:f0:8e:1f:d4:b6:25:34:61:74:24:
         5f:94:85:62:81:ce:3b:ae:25:98:aa:f9:a1:13:db:96:49:1b:
         be:19:a1:12:95:39:62:76:c7:1c:c4:77:27:a2:b7:03:c1:cf:
         b4:9e:d6:a3:9a:3d:50:cb:22:c7:dc:a1:30:5a:f7:82:b1:3c:
         cf:07:4e:91:be:46:3c:ef:b4:f4:86:76:3a:4e:53:24:03:d7:
         2a:3f:ef:9b:3a:60:b5:5c:6b:cc:e9:c3:a3:fc:37:95:56:fe:
         e7:59:2e:6f:eb:d2:a3:e9:94:bb:7a:f1:a6:3a:c3:a0:21:a8:
         9e:90:cf:32:8d:a9:23:96:56:1b:31:d3:c4:a1:d8:ba:7f:9b:
         d7:22:98:fd:2c:0e:99:c0:ce:4f:d0:04:8e:d9:2a:06:01:ab:
         0a:4a:46:60:4f:29:02:37:cc:17:d5:52:1c:a0:21:52:64:db:
         a2:ac:fc:1e:22:a4:e8:de:54:d8:90:1d:7f:61:7b:9f:94:b0:
         b5:0e:d9:50:fa:f5:eb:8d:be:9a:14:87:fa:8c:01:79:8c:d1:
         5a:13:cc:ba:0e:8f:45:87:ab:77:ba:bf:8b:a8:d8:22:79:b7:
         b9:71:f0:85
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEeJ6/ND95dUVE8jMdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzAwNjkwYTctMTk1Ny00NWUyLTg3NDQtZWU5NzM1YjA3
MzE5MB4XDTI0MTAxNDEzMDA0N1oXDTI1MDExMjE0MDA0N1owLzEtMCsGA1UEAxMk
YzUzM2E4MWQtNmZkMC00ZTMxLTk3YjktZTc4MDA5NDNkMDgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUeYoH7rRgaMXFcXLb6Y2CrdbHhLmCgpBanP
XKVXnTNmYl8UCG2QpMGQMtBY1ia5c28xwTM2LQUixQNHvxXo5mTmdQ/4lAmLYs9E
/2AV7pJStHmSI3qfCl93l9V9D7oxzB2KAr+4BQvPPT7mVrx2KeHJl63xJihAksd0
39piB0gS6yYwRvrHZmmDY4FMBX5SNtkN9EtaBGAeQaC8m2jT90/OzDT6+9Keuhnd
NXms20MGYzuyA1GcYRmBoEvtB/dErieiSjI3qUUIrTt7YIGnibljBYKGXe+rWQft
dvEjMokdJEMSMQJiIGmEO05QBorrlFUiru+ardNugQVJI1tm7wIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFHTiwUz43VvR0okyctk7kAbToXTaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDA2
OTBhNy0xOTU3LTQ1ZTItODc0NC1lZTk3MzViMDczMTkvN2Q4Y2U3ZTEtZGE1Yy0z
OTYzLTk1MTEtMTJhZTNhNWE4NzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzAwNjkwYTctMTk1Ny00NWUyLTg3
NDQtZWU5NzM1YjA3MzE5LzcwMDY5MGE3LTE5NTctNDVlMi04NzQ0LWVlOTczNWIw
NzMxOS5jcmwwHwYDVR0jBBgwFoAUIamavUUq0vNcIiwf8NmYuXDa2n0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83MDA2OTBhNy0xOTU3LTQ1ZTItODc0NC1lZTk3
MzViMDczMTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA0dEYMA4E
AgACMAgDBgQmAvy4ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtVdKRpa/HZWFypER9iX/f35//G9dm2MUX
9/COH9S2JTRhdCRflIVigc47riWYqvmhE9uWSRu+GaESlTlidsccxHcnorcDwc+0
ntajmj1QyyLH3KEwWveCsTzPB06RvkY877T0hnY6TlMkA9cqP++bOmC1XGvM6cOj
/DeVVv7nWS5v69Kj6ZS7evGmOsOgIaiekM8yjakjllYbMdPEodi6f5vXIpj9LA6Z
wM5P0ASO2SoGAasKSkZgTykCN8wX1VIcoCFSZNuirPweIqTo3lTYkB1/YXuflLC1
DtlQ+vXrjb6aFIf6jAF5jNFaE8y6Do9Fh6t3ur+LqNgiebe5cfCF
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:41 2024 by rpki-client on console-ams.rpki-client.org