Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5379be8b-8f4d-31fb-8ea0-ef3ddf37946b.roa
File:                     5379be8b-8f4d-31fb-8ea0-ef3ddf37946b.roa (raw, json)
Hash identifier:          d508uTsQwBpwft9gNDcyuI2X99BIyGx8YCkIq0qGJLA=
Subject key identifier:   F9:45:FC:02:72:FB:5C:2E:69:F0:64:C4:26:45:E2:E9:D2:F1:1B:B9
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F43285847A5D6B0619821338038E45800
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5379be8b-8f4d-31fb-8ea0-ef3ddf37946b.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     14477
IP address blocks:        162.223.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:b0:61:98:21:33:80:38:e4:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=490827bd-c902-498d-abbf-939f54039229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2e:9b:75:d4:09:25:c3:ba:17:f6:2b:6d:12:
                    bf:01:21:00:f8:3d:df:a9:5e:9e:6c:c5:90:98:d7:
                    dc:d6:ea:49:3c:ba:9a:91:8e:26:c0:ac:7e:82:06:
                    99:31:85:52:c6:b7:2c:1d:bb:3e:a3:96:1f:b5:e1:
                    e7:5a:2c:13:7b:9b:0c:02:74:33:de:0f:2a:66:eb:
                    36:fd:69:f2:29:2c:ac:52:1d:62:56:08:39:94:39:
                    7e:a1:9e:aa:b0:45:a2:92:e2:98:fb:f1:6f:63:0d:
                    15:ca:e4:22:b4:eb:fc:e5:92:33:e7:61:13:23:bd:
                    e7:28:bc:d8:42:01:07:1a:ef:9f:28:31:62:d5:19:
                    5b:c1:da:fe:c2:1f:d3:0c:20:65:01:4a:89:a1:42:
                    a4:91:b4:dc:3b:ad:66:52:1d:0d:6c:b2:0b:58:36:
                    d7:1e:5c:61:ce:3f:fb:1d:be:75:67:f1:5c:09:f7:
                    28:1c:bd:67:fe:94:97:a6:27:ab:43:94:72:75:30:
                    b1:6c:4a:84:93:65:1b:66:03:3a:1c:04:b0:99:db:
                    c3:f0:35:8b:40:b2:d4:93:cb:b4:f8:6c:d7:64:3c:
                    72:80:50:59:67:3e:b4:bd:08:bd:66:59:0e:05:f7:
                    ac:db:7f:07:de:f8:91:4b:cd:d3:51:bd:4d:3e:86:
                    d0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:45:FC:02:72:FB:5C:2E:69:F0:64:C4:26:45:E2:E9:D2:F1:1B:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5379be8b-8f4d-31fb-8ea0-ef3ddf37946b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:72:20:6b:46:36:58:85:18:2b:d2:34:2e:ac:56:e6:07:90:
         d5:7a:d7:bc:6a:f6:c0:7d:9c:5b:97:18:04:e7:a9:9b:74:b0:
         f5:f5:18:51:1e:56:4d:30:a2:6a:7c:ed:b1:4c:4c:79:3a:19:
         7a:04:84:94:58:b3:c9:ae:bd:9b:39:b7:a9:03:56:5e:9a:92:
         1b:c8:30:f3:17:66:cd:c4:a7:dc:c5:47:25:0e:40:fa:4a:a3:
         da:24:41:6a:37:57:98:0c:7f:ae:90:78:b3:7f:aa:6a:91:f0:
         d9:d3:bf:3b:99:be:d7:95:28:e5:43:4e:49:c4:20:74:8f:fa:
         bc:4e:dd:90:bc:e4:45:31:e9:1c:4e:24:c3:4a:c5:56:88:9c:
         83:bc:26:78:1b:01:f3:44:e4:30:9e:0b:66:ff:ce:51:2d:30:
         0f:bf:71:d2:55:c7:67:56:0a:4c:b0:e2:6d:38:1d:b2:ac:f0:
         1a:77:4f:1c:e7:89:e3:a5:d9:c0:a4:28:db:99:8e:00:c6:7c:
         ce:2b:c3:23:00:7d:37:10:e8:99:b8:61:66:a7:33:80:29:fb:
         7d:e4:5b:fa:f5:ec:be:a8:4b:82:a6:c1:b8:aa:43:7a:74:30:
         ae:60:8d:ed:7d:d5:91:26:52:02:de:f4:20:42:6b:2e:d1:17:
         74:5d:b7:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1rBhmCEzgDjkWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz
OTdkMB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk
NDkwODI3YmQtYzkwMi00OThkLWFiYmYtOTM5ZjU0MDM5MjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC6bddQJJcO6F/YrbRK/ASEA+D3fqV6ebMWQ
mNfc1upJPLqakY4mwKx+ggaZMYVSxrcsHbs+o5YfteHnWiwTe5sMAnQz3g8qZus2
/WnyKSysUh1iVgg5lDl+oZ6qsEWikuKY+/FvYw0VyuQitOv85ZIz52ETI73nKLzY
QgEHGu+fKDFi1Rlbwdr+wh/TDCBlAUqJoUKkkbTcO61mUh0NbLILWDbXHlxhzj/7
Hb51Z/FcCfcoHL1n/pSXpierQ5RydTCxbEqEk2UbZgM6HASwmdvD8DWLQLLUk8u0
+GzXZDxygFBZZz60vQi9ZlkOBfes238H3viRS83TUb1NPobQjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPlF/AJy+1wuafBkxCZF4unS8Ru5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh
NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNTM3OWJlOGItOGY0ZC0z
MWZiLThlYTAtZWYzZGRmMzc5NDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4
NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi
Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz
MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot/MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAlyIGtGNliFGCvSNC6sVuYHkNV617xq9sB9nFuXGATnqZt0sPX1GFEe
Vk0womp87bFMTHk6GXoEhJRYs8muvZs5t6kDVl6akhvIMPMXZs3Ep9zFRyUOQPpK
o9okQWo3V5gMf66QeLN/qmqR8NnTvzuZvteVKOVDTknEIHSP+rxO3ZC85EUx6RxO
JMNKxVaInIO8JngbAfNE5DCeC2b/zlEtMA+/cdJVx2dWCkyw4m04HbKs8Bp3Txzn
ieOl2cCkKNuZjgDGfM4rwyMAfTcQ6Jm4YWanM4Ap+33kW/r17L6oS4KmwbiqQ3p0
MK5gje191ZEmUgLe9CBCay7RF3RdtwY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:22 2024 by rpki-client on console-fra.rpki-client.org