Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41d6c4b2-405b-4755-a8cd-19bdcef56730/a619eb30-3ff2-3b5f-b632-eea6f4553d50.roa
File:                     a619eb30-3ff2-3b5f-b632-eea6f4553d50.roa (raw, json)
Hash identifier:          BjU0xowTBCyvKHM66fK90QFXY3Npwl20OJO/y/6+E0U=
Subject key identifier:   7E:56:EA:26:D4:A8:0D:B6:83:16:5D:3E:54:39:D6:5C:D7:C9:0D:D8
Certificate issuer:       /CN=41d6c4b2-405b-4755-a8cd-19bdcef56730
Certificate serial:       010D0C9F43285847C3448CA329F0DF948A7B42E0
Authority key identifier: 3C:99:62:9F:41:7F:52:B7:0E:1B:3A:D4:6E:87:0A:F8:E1:4B:36:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41d6c4b2-405b-4755-a8cd-19bdcef56730.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41d6c4b2-405b-4755-a8cd-19bdcef56730/a619eb30-3ff2-3b5f-b632-eea6f4553d50.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     16509
IP address blocks:        209.127.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41d6c4b2-405b-4755-a8cd-19bdcef56730/41d6c4b2-405b-4755-a8cd-19bdcef56730.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41d6c4b2-405b-4755-a8cd-19bdcef56730/41d6c4b2-405b-4755-a8cd-19bdcef56730.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41d6c4b2-405b-4755-a8cd-19bdcef56730.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:8c:a3:29:f0:df:94:8a:7b:42:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d6c4b2-405b-4755-a8cd-19bdcef56730
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=40a1702b-4aca-42dc-85ea-561fa56b5bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:db:35:ca:15:b3:e0:ce:70:ac:d7:9a:f4:
                    9e:48:68:2b:bf:26:56:5a:a1:15:b0:85:21:df:7b:
                    0c:ca:08:d9:fd:24:57:a0:41:c7:e6:37:05:bc:df:
                    e6:f7:d0:e2:6c:56:1a:24:14:59:7f:b0:ab:70:39:
                    ee:bd:42:21:f8:48:d1:03:7e:aa:9c:25:0a:02:26:
                    12:54:ad:0b:2f:9e:5e:63:e1:60:05:90:e9:32:d7:
                    03:7b:99:72:74:77:a7:42:8f:f5:f6:1d:c2:4c:ed:
                    31:95:d6:64:4e:47:27:8b:4c:40:a6:c1:30:37:47:
                    b0:36:3e:7a:08:28:6c:ba:4d:d7:fc:0b:47:2a:ee:
                    c5:32:e0:57:88:c1:09:bb:23:aa:53:fa:1c:93:0f:
                    25:47:0e:17:c5:e0:b2:97:b7:d7:8a:75:7e:72:6b:
                    f4:99:ac:2c:f2:91:a5:4c:55:be:17:87:fe:f5:44:
                    11:da:a1:81:ee:11:21:27:87:b9:6b:3a:e9:e8:8b:
                    dc:a6:c3:c1:d1:d1:ae:5d:7f:53:c3:10:a0:ef:49:
                    60:f8:e2:92:00:5d:47:56:2b:f9:2f:dd:63:36:81:
                    e4:ec:db:f4:94:05:4b:23:80:e3:ee:bb:e8:df:95:
                    22:2f:ee:2d:5c:38:83:8a:ff:db:98:e5:41:94:f1:
                    3a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:56:EA:26:D4:A8:0D:B6:83:16:5D:3E:54:39:D6:5C:D7:C9:0D:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41d6c4b2-405b-4755-a8cd-19bdcef56730/a619eb30-3ff2-3b5f-b632-eea6f4553d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41d6c4b2-405b-4755-a8cd-19bdcef56730/41d6c4b2-405b-4755-a8cd-19bdcef56730.crl

            X509v3 Authority Key Identifier:
                keyid:3C:99:62:9F:41:7F:52:B7:0E:1B:3A:D4:6E:87:0A:F8:E1:4B:36:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41d6c4b2-405b-4755-a8cd-19bdcef56730.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:71:89:70:47:fb:1b:b3:a8:3d:f6:99:b2:41:9a:28:5b:91:
         30:fb:4c:51:eb:0a:b3:88:7b:7f:0d:16:37:08:1c:00:23:e2:
         7b:1e:2f:4a:69:7e:7a:d1:bb:27:9c:01:6d:23:e7:92:fe:de:
         c7:63:9e:de:59:00:ee:dd:f9:f9:37:73:12:fa:0b:8a:d1:b3:
         31:98:c4:2f:b5:6b:55:23:d5:d4:88:dd:c5:b4:73:02:c5:e1:
         a7:63:aa:8b:eb:be:9d:6f:5f:63:23:09:36:9b:93:7f:44:9e:
         44:d4:61:c1:b0:ac:8b:1e:9c:04:c1:fe:67:ef:05:9f:bd:94:
         3f:72:32:21:25:b9:cf:dc:32:e5:af:05:72:08:f8:84:32:09:
         64:0a:81:ad:8e:4e:43:b7:6b:38:fb:f5:3e:5d:30:c5:8a:0b:
         58:ae:13:d3:59:fa:cd:fe:90:05:33:7c:72:4c:f5:83:4c:d4:
         ea:78:11:d6:30:55:6d:ae:5f:d2:92:11:8c:f7:c4:37:a3:d7:
         7b:1e:8f:64:86:67:63:47:be:45:06:ac:9f:44:2d:7c:de:3f:
         83:02:a1:0e:4a:07:b5:cd:15:6b:1a:13:18:1d:16:bd:a8:be:
         27:77:96:76:7b:61:64:2a:cb:cd:74:7c:ac:76:05:ad:9b:90:
         22:6e:4d:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfDRIyjKfDflIp7QuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkNmM0YjItNDA1Yi00NzU1LWE4Y2QtMTliZGNlZjU2
NzMwMB4XDTI0MTEwNDAyMDAzNloXDTI1MDIwMjAyMDAzNlowLzEtMCsGA1UEAxMk
NDBhMTcwMmItNGFjYS00MmRjLTg1ZWEtNTYxZmE1NmI1YmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt33bNcoVs+DOcKzXmvSeSGgrvyZWWqEVsIUh
33sMygjZ/SRXoEHH5jcFvN/m99DibFYaJBRZf7CrcDnuvUIh+EjRA36qnCUKAiYS
VK0LL55eY+FgBZDpMtcDe5lydHenQo/19h3CTO0xldZkTkcni0xApsEwN0ewNj56
CChsuk3X/AtHKu7FMuBXiMEJuyOqU/ockw8lRw4XxeCyl7fXinV+cmv0maws8pGl
TFW+F4f+9UQR2qGB7hEhJ4e5azrp6IvcpsPB0dGuXX9TwxCg70lg+OKSAF1HViv5
L91jNoHk7Nv0lAVLI4Dj7rvo35UiL+4tXDiDiv/bmOVBlPE6twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH5W6ibUqA22gxZdPlQ51lzXyQ3YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MWQ2
YzRiMi00MDViLTQ3NTUtYThjZC0xOWJkY2VmNTY3MzAvYTYxOWViMzAtM2ZmMi0z
YjVmLWI2MzItZWVhNmY0NTUzZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDFkNmM0YjItNDA1Yi00NzU1LWE4
Y2QtMTliZGNlZjU2NzMwLzQxZDZjNGIyLTQwNWItNDc1NS1hOGNkLTE5YmRjZWY1
NjczMC5jcmwwHwYDVR0jBBgwFoAUPJlin0F/UrcOGzrUbocK+OFLNsowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MWQ2YzRiMi00MDViLTQ3NTUtYThjZC0xOWJk
Y2VmNTY3MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNxiXBH+xuzqD32mbJBmihbkTD7TFHrCrOIe38NFjcIHAAj4nseL0pp
fnrRuyecAW0j55L+3sdjnt5ZAO7d+fk3cxL6C4rRszGYxC+1a1Uj1dSI3cW0cwLF
4adjqovrvp1vX2MjCTabk39EnkTUYcGwrIsenATB/mfvBZ+9lD9yMiEluc/cMuWv
BXII+IQyCWQKga2OTkO3azj79T5dMMWKC1iuE9NZ+s3+kAUzfHJM9YNM1Op4EdYw
VW2uX9KSEYz3xDej13sej2SGZ2NHvkUGrJ9ELXzeP4MCoQ5KB7XNFWsaExgdFr2o
vid3lnZ7YWQqy810fKx2Ba2bkCJuTcQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:19 2024 by rpki-client on console-fra.rpki-client.org