Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c0d5de4a-0562-33cc-b40a-38580e29f6b5.roa
File:                     c0d5de4a-0562-33cc-b40a-38580e29f6b5.roa (raw, json)
Hash identifier:          8yTCnay3anVRcCURy4hJ6J78SV2CofeVramqBybnL7U=
Subject key identifier:   CE:6C:3A:87:B9:68:8D:25:1B:E0:C7:7A:06:D9:27:B6:9D:FF:D6:B3
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F43285847E78F5C9AB397EEC006B7E900
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c0d5de4a-0562-33cc-b40a-38580e29f6b5.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     3356
IP address blocks:        199.0.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:5c:9a:b3:97:ee:c0:06:b7:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=f1eb266c-ed12-4086-9582-9231b1065293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:77:94:05:83:1f:f4:f8:e0:c9:c3:88:58:ea:
                    77:12:05:0f:a0:2e:db:66:39:67:7e:74:ee:a9:2c:
                    ec:21:7d:d4:73:fb:af:cd:d2:9a:32:dd:11:35:ad:
                    06:b6:d7:d9:ae:52:7f:59:ef:2c:0d:ce:bb:10:45:
                    01:a4:c7:1f:96:ab:31:98:c5:87:a8:03:87:a3:52:
                    98:bc:53:7a:6c:4e:e8:57:5a:47:8c:0c:74:72:0e:
                    bc:02:b6:cb:19:2d:fd:5b:98:71:d8:03:94:1b:64:
                    18:2d:f7:76:d8:a3:58:97:b9:aa:6c:cf:06:d3:de:
                    0f:4c:f6:0d:64:bd:39:4e:9e:da:91:6c:ad:ad:3c:
                    1f:00:90:4b:7c:3c:5d:af:8e:5a:90:ba:3c:c5:04:
                    54:d8:d3:e9:fd:e3:30:7b:33:00:f9:a7:a5:4b:06:
                    6f:4c:e6:57:1c:6e:37:db:17:cd:23:c8:90:49:ae:
                    b3:4c:81:b4:78:fe:68:b4:30:9f:e4:2f:d7:da:b7:
                    4b:e0:bd:30:76:14:26:87:e2:a9:d1:4f:50:30:3a:
                    e4:89:b5:28:7c:a9:a4:c6:cf:f5:a4:9e:9a:4b:76:
                    9d:f2:f2:45:d3:f7:47:1f:ef:1f:84:78:6b:20:e5:
                    8f:50:6c:f6:17:3f:de:68:62:0c:9e:ad:75:25:9d:
                    97:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6C:3A:87:B9:68:8D:25:1B:E0:C7:7A:06:D9:27:B6:9D:FF:D6:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c0d5de4a-0562-33cc-b40a-38580e29f6b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.0.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a2:ae:55:1b:05:a2:72:ff:51:ca:82:74:36:93:db:75:54:
         2b:f4:5a:57:b8:ec:7b:7e:42:f8:6f:1c:67:79:cb:ee:3e:b1:
         08:fb:d2:c8:7e:7d:9d:fb:26:c3:97:4f:fe:d6:67:87:93:ed:
         91:fe:5e:ba:e0:fe:7c:53:6c:8c:72:f4:49:32:41:a4:91:c9:
         dc:3e:29:d0:bc:c1:f5:bb:c9:c5:5f:29:9c:ec:47:37:e6:2e:
         89:1e:69:bd:ca:22:9d:21:5a:b0:16:3d:e7:a2:2d:10:4e:93:
         3c:1b:e4:ea:ef:34:d3:73:a7:3d:2d:71:77:a3:d2:26:1f:dc:
         23:2e:36:0f:ab:fe:81:7d:22:5e:a7:9e:b3:97:49:1a:02:85:
         73:0f:dc:78:ec:b1:44:a8:ba:c9:4b:67:38:3c:db:de:08:90:
         fb:2c:67:7a:35:e7:5e:03:76:00:5c:4c:d5:8e:7e:29:f6:b7:
         42:07:ef:69:9e:7e:71:cb:e1:42:c8:8a:e7:cf:09:6a:f5:89:
         d8:02:9c:5d:84:e5:c7:40:f3:1f:a0:50:d3:ba:19:ff:d6:da:
         ec:b0:5b:9c:80:5e:9b:fc:64:b6:27:a4:a5:45:fe:9b:0c:ab:
         12:22:49:70:7a:30:17:eb:da:be:2d:19:49:14:37:cd:b7:e3:
         ad:2b:09:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfnj1yas5fuwAa36QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy
Y2MyMB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk
ZjFlYjI2NmMtZWQxMi00MDg2LTk1ODItOTIzMWIxMDY1MjkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHeUBYMf9PjgycOIWOp3EgUPoC7bZjlnfnTu
qSzsIX3Uc/uvzdKaMt0RNa0GttfZrlJ/We8sDc67EEUBpMcflqsxmMWHqAOHo1KY
vFN6bE7oV1pHjAx0cg68ArbLGS39W5hx2AOUG2QYLfd22KNYl7mqbM8G094PTPYN
ZL05Tp7akWytrTwfAJBLfDxdr45akLo8xQRU2NPp/eMwezMA+aelSwZvTOZXHG43
2xfNI8iQSa6zTIG0eP5otDCf5C/X2rdL4L0wdhQmh+Kp0U9QMDrkibUofKmkxs/1
pJ6aS3ad8vJF0/dHH+8fhHhrIOWPUGz2Fz/eaGIMnq11JZ2XywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM5sOoe5aI0lG+DHegbZJ7ad/9azMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw
YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYzBkNWRlNGEtMDU2Mi0z
M2NjLWI0MGEtMzg1ODBlMjlmNmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz
MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1
MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0
NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwC5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+irlUbBaJy/1HKgnQ2k9t1VCv0Wle47Ht+QvhvHGd5y+4+sQj70sh+
fZ37JsOXT/7WZ4eT7ZH+Xrrg/nxTbIxy9EkyQaSRydw+KdC8wfW7ycVfKZzsRzfm
Lokeab3KIp0hWrAWPeeiLRBOkzwb5OrvNNNzpz0tcXej0iYf3CMuNg+r/oF9Il6n
nrOXSRoChXMP3HjssUSouslLZzg8294IkPssZ3o1514DdgBcTNWOfin2t0IH72me
fnHL4ULIiufPCWr1idgCnF2E5cdA8x+gUNO6Gf/W2uywW5yAXpv8ZLYnpKVF/psM
qxIiSXB6MBfr2r4tGUkUN823460rCTQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:03 2024 by rpki-client on console-fra.rpki-client.org