Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a8710695-1d99-3450-bdaa-73cf6b153a74.roa
File:                     a8710695-1d99-3450-bdaa-73cf6b153a74.roa (raw, json)
Hash identifier:          HlESglnLI0905CCjjZMCAEAR1UerUZLxLQVAbnJdP6Q=
Subject key identifier:   EE:7D:40:2E:74:23:EA:AD:08:BC:35:4C:0F:7F:06:06:69:A1:D5:1A
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584757D4EF51C289CF6C0B149220
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a8710695-1d99-3450-bdaa-73cf6b153a74.roa
Signing time:             Thu 26 Sep 2024 14:24:19 +0000
ROA not before:           Thu 26 Sep 2024 14:24:19 +0000
ROA not after:            Wed 25 Dec 2024 15:24:19 +0000
asID:                     376
IP address blocks:        132.219.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:d4:ef:51:c2:89:cf:6c:0b:14:92:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 26 14:24:19 2024 GMT
            Not After : Dec 25 15:24:19 2024 GMT
        Subject: CN=a3050126-3c97-4dd6-9523-4de0d16ecfb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:ba:8b:6e:dc:10:10:d4:29:32:c1:27:e0:
                    77:84:30:63:e3:57:5d:06:7c:09:46:5d:c4:71:e4:
                    33:8f:13:c3:32:31:20:95:53:6d:ec:ea:64:70:88:
                    1f:84:4f:f3:95:53:c6:bd:38:d6:95:53:68:c9:59:
                    ef:02:f5:b7:56:7d:e8:4e:38:7c:0e:a6:9f:86:bf:
                    8a:e5:f8:33:f9:2d:0f:a0:0c:21:4b:34:a9:bc:9b:
                    14:fc:5a:07:b2:4f:07:19:bc:cb:23:3b:1d:12:e7:
                    bb:e5:2d:88:99:06:eb:d9:ca:94:f5:e5:7f:0c:19:
                    f6:64:5d:5b:6b:ee:b9:98:5f:8b:4b:a9:ed:79:a3:
                    f8:07:1b:2f:e9:d6:62:3f:0a:d9:d1:50:ba:bf:9a:
                    2b:9b:3b:33:e1:83:3f:60:3b:fb:83:df:49:f1:e7:
                    95:36:22:bc:5f:ef:58:5a:30:24:b4:ea:10:2e:00:
                    d6:77:b1:6c:82:e4:9d:ed:ae:ef:cf:07:60:db:db:
                    b3:84:e0:d5:36:a1:87:bf:8c:e3:95:16:03:11:67:
                    44:15:b1:e5:1c:9b:da:6c:6f:d5:9b:da:d7:65:c0:
                    fe:87:35:75:d0:40:15:a1:6f:27:5c:d9:e0:82:85:
                    d4:53:68:fc:43:47:2a:3c:ce:cb:9f:a9:a2:bc:bc:
                    f2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7D:40:2E:74:23:EA:AD:08:BC:35:4C:0F:7F:06:06:69:A1:D5:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a8710695-1d99-3450-bdaa-73cf6b153a74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.219.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:58:58:be:4f:3f:9e:bb:48:eb:b9:0e:aa:0f:e4:50:8b:cd:
         eb:be:4b:fb:96:66:3d:55:89:65:a7:d1:c5:03:6a:d2:62:ac:
         ca:e3:03:e3:67:98:e9:c0:33:62:7b:08:fb:b6:16:6f:cf:48:
         5a:f0:6e:c9:4e:a6:a7:5e:7b:86:c1:25:b0:a0:8a:0f:82:76:
         41:cb:ae:8f:77:46:19:85:74:19:04:8d:37:3e:1c:df:13:fa:
         e6:9d:7b:de:f4:d1:47:fc:07:6a:dd:bb:6a:fb:86:bf:0b:e1:
         07:b0:6e:93:54:67:70:95:1a:ac:03:fb:5b:ef:29:fb:94:b8:
         95:6b:7d:a4:b7:64:d1:6b:1a:d5:b8:56:23:86:4f:a7:b0:6d:
         12:1f:ee:7c:50:5e:a0:6f:ea:6c:22:84:6c:09:c2:43:10:7a:
         5c:3b:be:e2:7d:bb:ed:1a:54:16:01:eb:57:92:ec:2d:b0:85:
         19:fc:8c:4c:7e:07:4d:89:fa:a7:12:b0:30:80:d3:41:12:71:
         c2:98:51:73:79:9e:32:e0:c3:e3:3e:a0:1b:e0:0a:b2:e8:7d:
         ba:ad:4e:3d:c4:ea:37:7a:70:9b:c0:ef:86:5d:de:31:28:88:
         b1:01:08:a7:0e:15:4f:30:af:f2:26:47:cf:cf:72:ba:ec:d9:
         dd:a8:58:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdX1O9RwonPbAsUkiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI0MDkyNjE0MjQxOVoXDTI0MTIyNTE1MjQxOVowLzEtMCsGA1UEAxMk
YTMwNTAxMjYtM2M5Ny00ZGQ2LTk1MjMtNGRlMGQxNmVjZmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9K6i27cEBDUKTLBJ+B3hDBj41ddBnwJRl3E
ceQzjxPDMjEglVNt7OpkcIgfhE/zlVPGvTjWlVNoyVnvAvW3Vn3oTjh8Dqafhr+K
5fgz+S0PoAwhSzSpvJsU/FoHsk8HGbzLIzsdEue75S2ImQbr2cqU9eV/DBn2ZF1b
a+65mF+LS6nteaP4Bxsv6dZiPwrZ0VC6v5ormzsz4YM/YDv7g99J8eeVNiK8X+9Y
WjAktOoQLgDWd7FsguSd7a7vzwdg29uzhODVNqGHv4zjlRYDEWdEFbHlHJvabG/V
m9rXZcD+hzV10EAVoW8nXNnggoXUU2j8Q0cqPM7Ln6mivLzylwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO59QC50I+qtCLw1TA9/BgZpodUaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvYTg3MTA2OTUtMWQ5OS0z
NDUwLWJkYWEtNzNjZjZiMTUzYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhNucMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEtYWL5PP567SOu5DqoP5FCLzeu+S/uWZj1ViWWn0cUDatJirMrjA+Nn
mOnAM2J7CPu2Fm/PSFrwbslOpqdee4bBJbCgig+CdkHLro93RhmFdBkEjTc+HN8T
+uade9700Uf8B2rdu2r7hr8L4QewbpNUZ3CVGqwD+1vvKfuUuJVrfaS3ZNFrGtW4
ViOGT6ewbRIf7nxQXqBv6mwihGwJwkMQelw7vuJ9u+0aVBYB61eS7C2whRn8jEx+
B02J+qcSsDCA00ESccKYUXN5njLgw+M+oBvgCrLofbqtTj3E6jd6cJvA74Zd3jEo
iLEBCKcOFU8wr/ImR8/Pcrrs2d2oWAs=
-----END CERTIFICATE-----
Generated at Sun Nov 24 16:03:29 2024 by rpki-client on console-ams.rpki-client.org