Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/956b6b61-3804-37bd-98c8-3d28df08e0f7.roa
File:                     956b6b61-3804-37bd-98c8-3d28df08e0f7.roa (raw, json)
Hash identifier:          aW2OEry9oG7RhMd012rH7fH8AAoKuRxXq8VXxRqnocU=
Subject key identifier:   86:82:B4:DE:48:58:4E:39:23:B9:31:9B:16:C9:27:C8:C8:5B:7F:16
Certificate issuer:       /CN=f65b306f-fd69-46ba-a15d-0b2fd28d6138
Certificate serial:       010D0C9F43285847600B9B7253476E5324F63C80
Authority key identifier: D3:CA:A8:8B:D6:AF:6C:55:1F:AC:BD:5F:A3:20:7B:4D:C4:D9:FB:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/956b6b61-3804-37bd-98c8-3d28df08e0f7.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     400032
IP address blocks:        165.140.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/f65b306f-fd69-46ba-a15d-0b2fd28d6138.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/f65b306f-fd69-46ba-a15d-0b2fd28d6138.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:9b:72:53:47:6e:53:24:f6:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65b306f-fd69-46ba-a15d-0b2fd28d6138
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=d605892e-68d8-4ef7-8d53-eed53fc132b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:19:78:41:99:60:22:82:0b:86:63:7f:0c:
                    ee:c8:e2:a4:02:c1:0c:a9:4d:94:58:5f:a4:ca:a2:
                    0e:8f:49:e3:06:bf:0f:3e:2d:6e:a8:63:c8:a6:eb:
                    50:9a:4f:0c:69:d0:13:e8:e5:69:c4:ce:f7:99:fc:
                    63:fa:dc:ca:ee:68:5e:4e:ae:26:6e:37:28:b6:3c:
                    08:34:72:b4:71:45:d0:bf:70:a4:ee:05:70:1a:ff:
                    ac:12:ac:10:91:47:c7:d8:64:1c:a2:e5:ef:06:b9:
                    7e:e8:8a:02:9e:1a:69:19:8a:f6:d7:7f:48:9c:e9:
                    28:9e:aa:2e:8a:e2:ee:45:10:08:43:4f:06:95:18:
                    d3:ae:6d:b4:f8:30:40:c0:fb:c0:68:dd:22:21:bd:
                    1d:f7:49:b9:bb:7f:3c:f7:a3:83:6b:dc:9e:21:1c:
                    8c:37:23:32:78:b3:2d:ab:75:50:f5:c5:6d:e1:ac:
                    ae:1b:65:a8:44:17:59:55:13:aa:79:78:33:ca:29:
                    b5:95:6c:36:22:a3:c0:e2:df:2e:d7:a6:41:21:bb:
                    54:62:e3:a9:80:ad:36:5d:f4:62:ea:52:bd:4e:1c:
                    31:98:7c:d7:f2:b4:e2:17:ed:62:63:39:4c:3a:e5:
                    d8:13:fc:fb:b2:c4:9c:16:e7:d8:11:5c:a2:60:1c:
                    d3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:82:B4:DE:48:58:4E:39:23:B9:31:9B:16:C9:27:C8:C8:5B:7F:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/956b6b61-3804-37bd-98c8-3d28df08e0f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/f65b306f-fd69-46ba-a15d-0b2fd28d6138.crl

            X509v3 Authority Key Identifier:
                keyid:D3:CA:A8:8B:D6:AF:6C:55:1F:AC:BD:5F:A3:20:7B:4D:C4:D9:FB:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:1e:c9:f2:cc:3d:12:45:57:40:93:5d:3a:43:ea:d3:10:70:
         9f:87:9a:99:92:62:69:74:d5:df:d6:89:db:2a:3e:2f:d7:19:
         23:70:f0:33:7c:b2:22:05:7f:a8:27:87:ae:c8:cd:fc:24:95:
         7f:9d:76:3f:1b:7b:b1:6c:d9:6f:81:6e:67:1a:59:f6:b6:fc:
         69:b4:04:fd:96:ac:75:af:22:b5:f4:01:b3:56:ce:25:f2:c6:
         dd:25:06:5e:e0:6f:52:97:11:4c:26:36:f8:5f:ef:e6:da:2e:
         e7:f1:61:3a:3c:e8:4d:c2:33:73:82:6e:ce:11:9a:a0:b7:33:
         77:3c:aa:c0:f5:fb:a7:cd:87:97:c2:64:c4:c4:1c:ee:37:d2:
         e2:ab:10:ea:27:18:c6:be:92:4b:93:31:54:54:17:84:f4:67:
         3b:78:01:95:f8:64:9b:fb:4d:3a:8a:60:ab:b1:08:1a:13:b6:
         6e:c7:01:3b:f2:8e:fe:4f:51:59:07:d5:28:5e:c0:ba:07:fe:
         f6:09:8e:00:e5:60:7d:2d:d2:ef:82:40:69:22:16:e2:70:ed:
         e1:f2:fd:b4:10:52:0e:47:49:f4:8c:26:68:91:bf:6d:00:2e:
         d8:b2:a3:5e:fd:25:bb:48:9c:7f:49:11:d1:65:bd:29:a3:82:
         22:18:a9:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC5tyU0duUyT2PIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjY1YjMwNmYtZmQ2OS00NmJhLWExNWQtMGIyZmQyOGQ2
MTM4MB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
ZDYwNTg5MmUtNjhkOC00ZWY3LThkNTMtZWVkNTNmYzEzMmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDQZeEGZYCKCC4ZjfwzuyOKkAsEMqU2UWF+k
yqIOj0njBr8PPi1uqGPIputQmk8MadAT6OVpxM73mfxj+tzK7mheTq4mbjcotjwI
NHK0cUXQv3Ck7gVwGv+sEqwQkUfH2GQcouXvBrl+6IoCnhppGYr2139InOkonqou
iuLuRRAIQ08GlRjTrm20+DBAwPvAaN0iIb0d90m5u38896ODa9yeIRyMNyMyeLMt
q3VQ9cVt4ayuG2WoRBdZVROqeXgzyim1lWw2IqPA4t8u16ZBIbtUYuOpgK02XfRi
6lK9ThwxmHzX8rTiF+1iYzlMOuXYE/z7ssScFufYEVyiYBzTBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIaCtN5IWE45I7kxmxbJJ8jIW38WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjVi
MzA2Zi1mZDY5LTQ2YmEtYTE1ZC0wYjJmZDI4ZDYxMzgvOTU2YjZiNjEtMzgwNC0z
N2JkLTk4YzgtM2QyOGRmMDhlMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjY1YjMwNmYtZmQ2OS00NmJhLWEx
NWQtMGIyZmQyOGQ2MTM4L2Y2NWIzMDZmLWZkNjktNDZiYS1hMTVkLTBiMmZkMjhk
NjEzOC5jcmwwHwYDVR0jBBgwFoAU08qoi9avbFUfrL1foyB7TcTZ+0QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjViMzA2Zi1mZDY5LTQ2YmEtYTE1ZC0wYjJm
ZDI4ZDYxMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYwYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkeyfLMPRJFV0CTXTpD6tMQcJ+HmpmSYml01d/WidsqPi/XGSNw8DN8
siIFf6gnh67IzfwklX+ddj8be7Fs2W+BbmcaWfa2/Gm0BP2WrHWvIrX0AbNWziXy
xt0lBl7gb1KXEUwmNvhf7+baLufxYTo86E3CM3OCbs4RmqC3M3c8qsD1+6fNh5fC
ZMTEHO430uKrEOonGMa+kkuTMVRUF4T0Zzt4AZX4ZJv7TTqKYKuxCBoTtm7HATvy
jv5PUVkH1ShewLoH/vYJjgDlYH0t0u+CQGkiFuJw7eHy/bQQUg5HSfSMJmiRv20A
Ltiyo179JbtInH9JEdFlvSmjgiIYqU8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:28 2024 by rpki-client on console-ams.rpki-client.org