Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/de29af7f-46fb-3ec7-bae8-0a83e62f6cb4.roa
File:                     de29af7f-46fb-3ec7-bae8-0a83e62f6cb4.roa (raw, json)
Hash identifier:          f1OKhEOmfE/60dP7wrJyfDH919nhUPmeKAFkwCOxmhg=
Subject key identifier:   57:8D:5A:54:13:A7:86:0C:E8:27:BA:61:78:F8:92:DB:56:A2:FE:94
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584738F5FCF509213C34483C1300
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/de29af7f-46fb-3ec7-bae8-0a83e62f6cb4.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     4997
IP address blocks:        208.39.232.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f5:fc:f5:09:21:3c:34:48:3c:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=099dfd57-940d-4f54-8b46-9b2d73af78aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:38:9c:65:89:69:7b:e4:4f:c5:f6:b2:11:df:
                    e1:64:9e:8c:4a:1f:77:4d:db:ce:9c:e0:6a:f6:92:
                    f1:da:b8:dc:48:f7:7d:4c:32:09:b8:8f:89:92:a5:
                    b6:7b:1d:88:13:f7:fb:31:7f:98:05:77:61:67:08:
                    8e:50:eb:7e:26:8a:47:74:23:71:9c:0f:08:fa:79:
                    f6:c9:d5:8c:5c:10:5f:ed:1a:46:36:2f:fe:ee:4c:
                    2e:da:65:0e:be:65:86:87:24:a5:3e:2a:ca:06:4b:
                    de:dd:59:90:ce:c3:97:86:51:39:13:80:91:e1:01:
                    e2:63:3a:9a:1c:c5:e2:e0:4b:5f:f1:fd:86:67:a5:
                    08:06:56:a4:69:76:d3:92:f8:c7:54:db:0e:4a:15:
                    49:a1:3f:e1:ff:1d:a7:fe:ab:d0:48:1f:f3:39:55:
                    c6:c9:32:b8:7e:d0:af:ea:8d:bd:0f:f6:8e:ed:ef:
                    3c:a7:ed:50:fb:88:0b:28:e7:03:13:7c:49:83:23:
                    01:20:db:26:b1:e0:ee:cd:63:4d:19:13:5d:b9:b2:
                    ba:05:f9:f6:1d:ab:36:42:94:b2:37:1f:cd:1f:7a:
                    e5:e2:23:7d:00:b5:4c:aa:7e:7a:78:06:d6:9b:55:
                    09:53:90:bd:93:c1:b9:22:6f:4b:69:e9:66:31:eb:
                    2a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8D:5A:54:13:A7:86:0C:E8:27:BA:61:78:F8:92:DB:56:A2:FE:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/de29af7f-46fb-3ec7-bae8-0a83e62f6cb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.39.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c0:f5:1a:b6:54:2a:57:ee:17:ca:a5:db:83:c9:e1:74:0b:
         43:bd:a5:48:be:ad:56:5d:32:60:96:c7:17:ac:9a:ef:75:a6:
         bc:6f:a9:aa:1d:ad:94:55:ae:f7:5a:6f:94:e3:25:11:9c:c8:
         d2:4e:ba:5f:f9:c2:d5:8d:44:39:9d:09:4e:eb:bc:be:64:8e:
         92:3f:f8:03:b7:fe:40:e7:93:87:5d:e7:a2:ff:e1:9d:8c:c5:
         bc:1c:e0:d2:c9:e2:f5:ec:bf:8f:7a:ac:0d:e6:6b:84:14:6e:
         ef:0e:d2:a8:0d:27:3f:c1:9a:56:de:bf:93:73:ed:fe:1e:d0:
         fd:28:2a:18:4b:db:da:e2:6d:27:96:06:51:5c:68:8d:89:da:
         79:85:98:b7:4a:6c:40:d2:35:2f:12:76:6f:03:b4:1d:5d:b2:
         8a:84:4f:db:79:d7:48:b7:40:72:27:ac:22:ff:ac:90:29:9a:
         4c:d3:05:ba:2d:9e:a2:94:3a:0c:8f:e5:06:1a:25:85:70:62:
         9d:d0:30:88:6e:53:19:60:8d:d4:35:1f:6a:bc:ab:37:7b:33:
         aa:d5:c4:69:de:0a:50:e7:70:05:05:ed:0a:29:ca:54:b2:63:
         ee:31:f1:2c:9d:5f:91:fd:33:e2:80:d8:a6:f2:64:a0:78:76:
         11:b7:8a:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc49fz1CSE8NEg8EwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDkxNTEzMDA0MloXDTI0MTIxNDE0MDA0MlowLzEtMCsGA1UEAxMk
MDk5ZGZkNTctOTQwZC00ZjU0LThiNDYtOWIyZDczYWY3OGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizicZYlpe+RPxfayEd/hZJ6MSh93TdvOnOBq
9pLx2rjcSPd9TDIJuI+JkqW2ex2IE/f7MX+YBXdhZwiOUOt+JopHdCNxnA8I+nn2
ydWMXBBf7RpGNi/+7kwu2mUOvmWGhySlPirKBkve3VmQzsOXhlE5E4CR4QHiYzqa
HMXi4Etf8f2GZ6UIBlakaXbTkvjHVNsOShVJoT/h/x2n/qvQSB/zOVXGyTK4ftCv
6o29D/aO7e88p+1Q+4gLKOcDE3xJgyMBINsmseDuzWNNGRNdubK6Bfn2Has2QpSy
Nx/NH3rl4iN9ALVMqn56eAbWm1UJU5C9k8G5Im9LaelmMesq2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFeNWlQTp4YM6Ce6YXj4kttWov6UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvZGUyOWFmN2YtNDZmYi0z
ZWM3LWJhZTgtMGE4M2U2MmY2Y2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0CfoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrA9Rq2VCpX7hfKpduDyeF0C0O9pUi+rVZdMmCWxxesmu91prxvqaod
rZRVrvdab5TjJRGcyNJOul/5wtWNRDmdCU7rvL5kjpI/+AO3/kDnk4dd56L/4Z2M
xbwc4NLJ4vXsv496rA3ma4QUbu8O0qgNJz/Bmlbev5Nz7f4e0P0oKhhL29ribSeW
BlFcaI2J2nmFmLdKbEDSNS8Sdm8DtB1dsoqET9t510i3QHInrCL/rJApmkzTBbot
nqKUOgyP5QYaJYVwYp3QMIhuUxlgjdQ1H2q8qzd7M6rVxGneClDncAUF7QopylSy
Y+4x8SydX5H9M+KA2KbyZKB4dhG3ilE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:59 2024 by rpki-client on console-fra.rpki-client.org