Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/e74295e1-3fea-318a-91c9-1152af362bcd.roa
File:                     e74295e1-3fea-318a-91c9-1152af362bcd.roa (raw, json)
Hash identifier:          HTvAnDN1bJXu4AVuGPSN5QDOjpdA1yLD9Xt5LOdC3zE=
Subject key identifier:   53:4F:F7:32:15:CF:25:D9:92:EB:90:8A:CA:CE:44:9B:53:CB:04:ED
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F43285847E35F72E3B58D342913396080
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/e74295e1-3fea-318a-91c9-1152af362bcd.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     10397
IP address blocks:        209.209.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:72:e3:b5:8d:34:29:13:39:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=6fb44612-aa89-4021-ad30-8daf2072687a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:09:81:f9:a2:ae:2f:37:ed:80:86:5b:52:54:
                    f6:c1:d9:fc:e2:d6:a8:39:be:b4:d4:9e:b2:87:79:
                    e4:48:98:8f:49:61:e4:90:98:a2:30:68:5f:3b:c6:
                    6a:cc:28:bf:10:42:d8:c4:89:e3:6c:9f:72:2f:f8:
                    6c:4b:d9:0c:d7:f7:97:5f:dc:0a:69:bf:97:5e:b5:
                    a7:d7:07:b5:2f:0f:83:1c:62:a7:dd:55:4b:e8:1b:
                    06:15:6b:82:ea:8f:09:71:46:b0:6c:97:b2:2e:b0:
                    83:2c:b7:6e:41:4f:ef:0f:2f:07:35:34:c9:a0:e9:
                    ef:f1:eb:8e:63:93:f0:00:05:0f:eb:7b:a9:30:39:
                    3d:27:f8:3a:32:76:c9:2a:ae:80:70:87:bf:4e:16:
                    84:b1:cf:62:28:70:6a:b2:80:ba:fe:6f:b4:54:68:
                    7b:78:4a:01:16:c2:b1:d6:35:89:69:92:82:63:b9:
                    f4:df:0d:a7:35:0e:d3:54:3d:3d:c2:9c:f4:c6:db:
                    72:ac:e8:f8:97:dd:5f:d3:43:30:af:eb:82:d5:cb:
                    96:43:76:2e:21:cc:85:f0:52:65:d7:5d:56:26:f2:
                    bd:2f:25:6a:44:b7:d1:68:1b:de:76:4e:75:a1:4f:
                    c5:6b:4b:39:97:75:f3:3b:22:e9:ef:27:fd:25:61:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4F:F7:32:15:CF:25:D9:92:EB:90:8A:CA:CE:44:9B:53:CB:04:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/e74295e1-3fea-318a-91c9-1152af362bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:31:49:b2:58:41:42:94:e3:ac:17:62:a9:26:57:94:c0:1c:
         43:6c:c3:11:41:ff:3f:7e:20:0c:18:a5:53:4b:0f:f8:7d:05:
         a1:aa:dc:e4:39:e5:cc:a9:b2:10:9d:4c:df:85:8f:8f:7d:05:
         0b:aa:3f:91:0c:ca:9b:8d:c6:08:4e:70:b2:4e:00:e0:35:8d:
         02:ea:a7:22:8e:0d:a6:41:c9:39:85:4e:41:c1:54:92:56:1e:
         53:c7:47:ef:78:bf:87:6b:8b:86:62:40:b0:af:18:23:a9:af:
         92:33:67:49:d2:94:50:8d:bf:27:2b:a0:4f:3a:07:85:a6:e1:
         a3:ba:a8:74:2f:5a:17:55:3f:b8:74:b0:f7:f9:66:9a:9e:5f:
         f0:d6:df:06:05:e2:33:db:58:b0:ec:c2:e3:6e:40:31:16:5f:
         43:5e:c2:24:ee:a1:b5:0b:94:1f:40:91:3b:47:1c:dc:8e:ed:
         11:5c:5c:52:ff:d8:90:21:ff:3b:01:f3:88:68:aa:97:bd:d8:
         5f:59:5f:59:8f:f4:6b:da:00:1a:96:a0:f2:f8:93:92:e8:75:
         27:45:c7:23:3b:c0:36:10:87:8b:ce:fa:54:46:b0:48:25:e4:
         69:0b:45:38:47:08:c7:e9:09:3a:36:64:9f:a3:27:bb:9c:eb:
         d6:04:c4:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfjX3LjtY00KRM5YIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4
MzcwMB4XDTI0MTExNTE0MDAzOVoXDTI1MDIxMzE0MDAzOVowLzEtMCsGA1UEAxMk
NmZiNDQ2MTItYWE4OS00MDIxLWFkMzAtOGRhZjIwNzI2ODdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigmB+aKuLzftgIZbUlT2wdn84taoOb601J6y
h3nkSJiPSWHkkJiiMGhfO8ZqzCi/EELYxInjbJ9yL/hsS9kM1/eXX9wKab+XXrWn
1we1Lw+DHGKn3VVL6BsGFWuC6o8JcUawbJeyLrCDLLduQU/vDy8HNTTJoOnv8euO
Y5PwAAUP63upMDk9J/g6MnbJKq6AcIe/ThaEsc9iKHBqsoC6/m+0VGh7eEoBFsKx
1jWJaZKCY7n03w2nNQ7TVD09wpz0xttyrOj4l91f00Mwr+uC1cuWQ3YuIcyF8FJl
111WJvK9LyVqRLfRaBvedk51oU/Fa0s5l3XzOyLp7yf9JWHOuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFNP9zIVzyXZkuuQisrORJtTywTtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj
NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZTc0Mjk1ZTEtM2ZlYS0z
MThhLTkxYzktMTE1MmFmMzYyYmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm
MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2
ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx
YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQxSbJYQUKU46wXYqkmV5TAHENswxFB/z9+IAwYpVNLD/h9BaGq3OQ5
5cypshCdTN+Fj499BQuqP5EMypuNxghOcLJOAOA1jQLqpyKODaZByTmFTkHBVJJW
HlPHR+94v4dri4ZiQLCvGCOpr5IzZ0nSlFCNvycroE86B4Wm4aO6qHQvWhdVP7h0
sPf5ZpqeX/DW3wYF4jPbWLDswuNuQDEWX0NewiTuobULlB9AkTtHHNyO7RFcXFL/
2JAh/zsB84hoqpe92F9ZX1mP9GvaABqWoPL4k5LodSdFxyM7wDYQh4vO+lRGsEgl
5GkLRThHCMfpCTo2ZJ+jJ7uc69YExCM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:02 2024 by rpki-client on console-ams.rpki-client.org