Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa
File:                     4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa (raw, json)
Hash identifier:          Ec8Pg/tKDu4LXMApWD+jbzmvsELdy7n2LMBWSXxQbLE=
Subject key identifier:   C7:05:16:C0:27:1B:A2:9A:70:BC:E7:1A:93:68:E2:57:F5:F4:20:B1
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F432858475BDB6EE723B4D909462B1200
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     25645
IP address blocks:        137.239.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:6e:e7:23:b4:d9:09:46:2b:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=5439d86a-611f-486d-b3e8-5c784888b34e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d1:56:c4:23:de:d8:29:6d:a2:a0:60:a1:c3:
                    03:4e:99:d4:9f:f5:28:19:18:e2:45:63:6c:a4:e5:
                    be:e6:7a:1a:fa:07:ed:c4:2a:16:8c:eb:76:ed:a7:
                    3a:44:c0:2c:c0:c9:74:e5:1f:c8:74:10:b7:a8:63:
                    32:37:06:15:ea:96:28:a0:46:10:eb:ac:02:56:6c:
                    23:fc:a5:f3:13:91:56:84:06:fb:97:84:f5:93:1c:
                    38:8b:d3:59:96:9d:a8:37:d2:b9:77:1d:06:4a:fd:
                    19:29:bb:94:80:3a:7e:8f:d8:05:6b:c9:13:98:dd:
                    e9:e8:af:14:39:69:a3:00:2c:5a:8f:9a:aa:14:14:
                    2e:80:b9:da:05:45:47:e2:56:f1:69:e0:a6:88:5f:
                    1e:da:77:6d:b2:6b:d0:30:6c:db:6b:20:d0:e9:a2:
                    d9:4b:e2:18:9d:7c:0b:fa:7c:38:7e:c0:2e:2b:f0:
                    97:24:15:86:94:20:09:3b:f7:f7:f0:9f:d0:30:0b:
                    70:95:b3:02:20:aa:c0:ea:cc:c8:d0:63:06:93:42:
                    f9:23:6c:11:8c:72:2f:5c:a1:b9:8c:2d:27:83:5d:
                    f3:d2:d3:07:3c:d5:59:5e:d7:72:04:ca:a5:cf:e8:
                    25:17:f0:57:ea:88:7b:c6:c6:83:db:26:40:59:93:
                    2e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:05:16:C0:27:1B:A2:9A:70:BC:E7:1A:93:68:E2:57:F5:F4:20:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.239.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:b1:9a:20:1d:ae:9b:2a:6d:d6:98:c6:ab:46:c1:6c:8e:45:
         b6:01:40:96:76:eb:1e:41:22:9f:97:24:15:ad:68:f2:21:ed:
         0e:12:65:22:08:70:ee:10:12:63:55:20:62:5c:05:9e:1d:2a:
         17:ff:85:ee:c6:48:44:67:d3:70:73:3c:9d:1d:17:ce:c3:ad:
         21:e9:91:cb:a3:98:0a:aa:c5:dc:b8:d6:cf:d7:6d:d0:71:b7:
         43:b3:e7:0e:df:36:c9:b6:06:0b:6e:8b:ce:3b:66:d1:06:d9:
         7a:93:f1:be:9e:97:92:cc:85:77:d1:98:fe:66:62:e4:64:9c:
         9c:ca:74:4c:01:c3:a0:a1:c4:c1:05:12:40:fc:2c:a1:14:f4:
         40:5a:1b:13:bd:17:95:69:40:d6:c5:5b:58:82:6d:cf:43:e0:
         aa:1d:7b:f5:ef:18:a8:d9:d2:4b:ea:e1:34:8e:37:1f:61:c8:
         ee:81:47:f9:96:c0:54:20:32:e6:6a:bd:c4:6a:05:c2:e7:e6:
         ce:2e:5d:52:40:f1:56:d7:d9:eb:6e:15:50:04:50:b4:56:1b:
         8a:bd:86:e5:50:ae:73:99:fe:8c:23:14:55:98:df:6a:38:61:
         18:d6:86:04:c0:e2:c0:ab:d8:18:40:75:27:8e:3f:5e:27:13:
         d5:ec:aa:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdb227nI7TZCUYrEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4
MzcwMB4XDTI0MDkyODAxMDAzMVoXDTI0MTIyNzAyMDAzMVowLzEtMCsGA1UEAxMk
NTQzOWQ4NmEtNjExZi00ODZkLWIzZTgtNWM3ODQ4ODhiMzRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktFWxCPe2CltoqBgocMDTpnUn/UoGRjiRWNs
pOW+5noa+gftxCoWjOt27ac6RMAswMl05R/IdBC3qGMyNwYV6pYooEYQ66wCVmwj
/KXzE5FWhAb7l4T1kxw4i9NZlp2oN9K5dx0GSv0ZKbuUgDp+j9gFa8kTmN3p6K8U
OWmjACxaj5qqFBQugLnaBUVH4lbxaeCmiF8e2ndtsmvQMGzbayDQ6aLZS+IYnXwL
+nw4fsAuK/CXJBWGlCAJO/f38J/QMAtwlbMCIKrA6szI0GMGk0L5I2wRjHIvXKG5
jC0ng13z0tMHPNVZXtdyBMqlz+glF/BX6oh7xsaD2yZAWZMucQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMcFFsAnG6KacLznGpNo4lf19CCxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj
NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNGExYTNkMTEtMjZhZS0z
ZGVmLTgxNDctNmEyMmEzNTFiZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm
MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2
ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx
YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJGxmiAdrpsqbdaYxqtGwWyORbYBQJZ26x5BIp+XJBWtaPIh7Q4SZSII
cO4QEmNVIGJcBZ4dKhf/he7GSERn03BzPJ0dF87DrSHpkcujmAqqxdy41s/XbdBx
t0Oz5w7fNsm2Bgtui847ZtEG2XqT8b6el5LMhXfRmP5mYuRknJzKdEwBw6ChxMEF
EkD8LKEU9EBaGxO9F5VpQNbFW1iCbc9D4Kode/XvGKjZ0kvq4TSONx9hyO6BR/mW
wFQgMuZqvcRqBcLn5s4uXVJA8VbX2etuFVAEULRWG4q9huVQrnOZ/owjFFWY32o4
YRjWhgTA4sCr2BhAdSeOP14nE9XsqrQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:01 2024 by rpki-client on console-ams.rpki-client.org