Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa
File:                     da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa (raw, json)
Hash identifier:          kzUePNtEIdHco845Y3uOk4RGEcZN0LmZnpvFA8jQke0=
Subject key identifier:   17:DB:70:88:65:33:8B:53:CE:4E:68:FD:E1:90:24:81:37:E6:D6:D6
Certificate issuer:       /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial:       010D0C9F432858471AFDF5D6689941129059CB00
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa
Signing time:             Wed 04 Sep 2024 19:22:40 +0000
ROA not before:           Wed 04 Sep 2024 19:22:40 +0000
ROA not after:            Tue 03 Dec 2024 20:22:40 +0000
asID:                     27446
IP address blocks:        72.250.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:fd:f5:d6:68:99:41:12:90:59:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
        Validity
            Not Before: Sep  4 19:22:40 2024 GMT
            Not After : Dec  3 20:22:40 2024 GMT
        Subject: CN=f8652d36-2648-472b-b22b-519554ff6ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:a4:7d:8f:b8:c8:38:59:6b:f5:06:b3:f0:
                    d2:0a:8d:5f:d3:6f:df:2d:7b:17:1c:1c:d8:be:1c:
                    bc:2d:bd:79:35:27:f4:64:d6:c7:5e:84:d2:9e:8f:
                    39:4c:c0:08:dd:85:a7:7b:9b:32:ff:7a:f4:da:f6:
                    23:58:96:4c:75:71:e3:aa:81:fc:6f:82:c4:10:7e:
                    3a:57:46:c3:f0:af:a6:b4:f6:f9:fa:de:cf:38:d4:
                    35:75:0b:78:06:6c:69:74:6e:fa:6a:e4:39:5f:a8:
                    99:24:cd:c1:14:95:5d:e9:0a:99:e9:aa:b4:77:c6:
                    70:b2:b8:66:ac:86:8e:22:b4:0f:91:c4:3b:12:67:
                    64:d1:cf:a2:50:2c:8f:61:e8:ee:67:86:cb:ed:ce:
                    54:07:aa:9e:08:c1:22:5b:d9:de:f6:14:5f:af:2f:
                    fe:fa:ed:60:22:0b:b2:8d:37:34:a9:dc:65:8a:d0:
                    32:77:4b:4c:89:c2:78:35:eb:15:87:a3:88:d7:2e:
                    9b:f4:f9:c8:c0:62:24:9a:d8:54:24:47:13:68:d0:
                    45:f1:11:6c:28:96:c0:09:9e:0e:bf:72:cc:84:bf:
                    c7:5b:56:85:96:5e:0d:18:1b:d0:25:92:bf:93:bf:
                    e8:5a:54:28:09:c8:59:ba:89:1b:9d:f7:69:8e:ea:
                    98:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DB:70:88:65:33:8B:53:CE:4E:68:FD:E1:90:24:81:37:E6:D6:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl

            X509v3 Authority Key Identifier:
                keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.250.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:44:ef:64:ee:73:71:a7:38:b8:31:de:65:66:28:91:f5:03:
         c8:cc:28:31:6a:dc:bc:db:61:ac:38:bb:c5:6b:5d:54:4d:ba:
         af:b0:74:46:4d:ba:51:dc:cd:14:9a:0c:c2:94:a9:e4:07:ea:
         50:39:67:81:26:04:ba:53:b2:97:e0:3c:1d:cd:a8:29:5c:3a:
         81:53:3e:7e:59:23:89:59:8e:15:fb:40:f6:07:a5:e5:11:0a:
         53:90:f0:63:18:43:14:fd:cc:3d:08:fe:9b:e4:b7:8c:ba:96:
         1e:9d:2f:6e:7d:d8:8f:71:ca:df:34:10:2e:25:2f:85:b1:21:
         c8:30:55:bf:0e:b3:ac:d8:ed:3a:b4:a9:c8:89:21:44:9f:c6:
         6d:3c:20:8a:cf:3a:51:f5:01:72:dd:22:02:fa:95:c5:d2:2c:
         64:02:1d:cc:20:31:98:8c:9e:1c:2d:64:50:48:cb:a8:e3:67:
         bd:5e:08:4f:41:42:7a:c7:da:52:ee:7b:fa:60:44:f5:64:d0:
         6c:d2:a2:24:0e:db:1c:23:e7:af:ce:42:33:33:e1:4e:0b:01:
         26:a1:44:5c:5e:27:a4:e8:fc:5c:b6:90:fd:78:de:49:a4:e0:
         3e:ba:eb:a1:11:a3:83:a8:ce:99:64:c5:4a:e9:8a:24:31:8c:
         61:17:91:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEca/fXWaJlBEpBZywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz
ODdkMB4XDTI0MDkwNDE5MjI0MFoXDTI0MTIwMzIwMjI0MFowLzEtMCsGA1UEAxMk
Zjg2NTJkMzYtMjY0OC00NzJiLWIyMmItNTE5NTU0ZmY2Y2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/mkfY+4yDhZa/UGs/DSCo1f02/fLXsXHBzY
vhy8Lb15NSf0ZNbHXoTSno85TMAI3YWne5sy/3r02vYjWJZMdXHjqoH8b4LEEH46
V0bD8K+mtPb5+t7PONQ1dQt4BmxpdG76auQ5X6iZJM3BFJVd6QqZ6aq0d8Zwsrhm
rIaOIrQPkcQ7Emdk0c+iUCyPYejuZ4bL7c5UB6qeCMEiW9ne9hRfry/++u1gIguy
jTc0qdxlitAyd0tMicJ4NesVh6OI1y6b9PnIwGIkmthUJEcTaNBF8RFsKJbACZ4O
v3LMhL/HW1aFll4NGBvQJZK/k7/oWlQoCchZuokbnfdpjuqY+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBfbcIhlM4tTzk5o/eGQJIE35tbWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw
N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvZGEzOWNmYmEtYjFhMy0z
OWNmLThlN2YtNGJkMWY3MzE1NmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi
MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh
Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4
OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPr0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMBE72Tuc3GnOLgx3mVmKJH1A8jMKDFq3LzbYaw4u8VrXVRNuq+wdEZN
ulHczRSaDMKUqeQH6lA5Z4EmBLpTspfgPB3NqClcOoFTPn5ZI4lZjhX7QPYHpeUR
ClOQ8GMYQxT9zD0I/pvkt4y6lh6dL2592I9xyt80EC4lL4WxIcgwVb8Os6zY7Tq0
qciJIUSfxm08IIrPOlH1AXLdIgL6lcXSLGQCHcwgMZiMnhwtZFBIy6jjZ71eCE9B
QnrH2lLue/pgRPVk0GzSoiQO2xwj56/OQjMz4U4LASahRFxeJ6To/Fy2kP143kmk
4D6666ERo4OozplkxUrpiiQxjGEXke4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:24 2024 by rpki-client on console-fra.rpki-client.org