Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ee23f996-489c-3d65-8dd8-1add646be1c8.roa
File:                     ee23f996-489c-3d65-8dd8-1add646be1c8.roa (raw, json)
Hash identifier:          jSDVOUhsTTkPpqrso5htBdpbpgtsMAEPU+tZOPDzp4w=
Subject key identifier:   44:EA:27:23:2E:FB:74:1A:60:80:C4:C6:25:DC:BF:48:F7:6F:3F:9F
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF48EF992613904137BD000
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ee23f996-489c-3d65-8dd8-1add646be1c8.roa
Signing time:             Fri 08 Nov 2024 15:05:02 +0000
ROA not before:           Fri 08 Nov 2024 15:05:02 +0000
ROA not after:            Thu 06 Feb 2025 15:05:02 +0000
asID:                     81
IP address blocks:        198.86.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:8e:f9:92:61:39:04:13:7b:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:05:02 2024 GMT
            Not After : Feb  6 15:05:02 2025 GMT
        Subject: CN=b9a5f6bd-49d5-4f99-bf44-1bc1e1b96da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:7f:43:ec:22:62:19:ee:74:f3:6b:2a:3e:
                    e6:b4:03:59:1f:e5:a3:60:45:63:f6:8b:43:53:c7:
                    da:10:cc:7e:28:96:21:17:d2:96:f2:9c:78:56:11:
                    45:48:f8:11:8d:5a:91:3b:85:dd:95:aa:5f:4c:29:
                    4f:14:e0:3b:e6:c5:69:f6:a7:25:d0:40:12:68:67:
                    61:d7:fa:81:26:50:30:2d:99:ae:8d:af:78:b9:6b:
                    7d:50:ad:8c:98:20:8e:ac:e7:45:74:77:93:7a:30:
                    a8:f1:bf:96:8e:15:96:20:20:c2:f2:12:66:69:af:
                    86:3b:5f:91:14:e1:0e:d6:79:10:8f:75:5d:92:c4:
                    3a:92:02:f2:76:c3:c8:b0:de:24:b3:cc:ed:08:6f:
                    27:3d:af:7e:b2:f4:e1:91:35:33:60:f0:98:8c:0e:
                    18:df:61:ca:22:69:2f:21:75:c3:70:0e:49:eb:c6:
                    a4:ff:31:df:02:5e:f2:bf:27:68:0e:33:ec:ed:8c:
                    12:13:4a:ea:4b:9f:ee:09:eb:7e:04:0a:87:a3:f1:
                    9a:e1:c8:35:33:eb:a3:b0:99:53:24:73:71:cf:eb:
                    14:84:b0:6b:09:57:22:b7:e1:4e:2f:dc:5c:e3:69:
                    56:40:7d:84:f2:aa:ea:44:59:77:13:b8:b4:01:0a:
                    70:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EA:27:23:2E:FB:74:1A:60:80:C4:C6:25:DC:BF:48:F7:6F:3F:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ee23f996-489c-3d65-8dd8-1add646be1c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:b9:1c:bc:81:b8:e8:6a:fe:df:b4:a0:55:32:27:d2:f5:a7:
         fe:9a:b2:8a:97:62:35:93:31:eb:d8:05:4b:e0:cf:78:f8:03:
         62:93:4d:3b:66:29:ed:7c:4e:9b:9a:44:9a:a3:f6:a8:c9:0c:
         f9:b7:59:21:69:67:85:ce:28:20:64:9a:a4:e1:a3:c8:40:fb:
         3e:ff:12:af:4c:a6:6a:90:63:94:39:b4:d4:ac:b3:4e:f8:5b:
         5e:27:79:49:4e:8d:33:51:c1:d3:f2:48:b2:e6:33:8b:72:0b:
         d5:5e:65:72:a6:96:ff:01:86:b7:4e:de:ce:52:33:aa:fd:0d:
         93:9c:4a:8c:2d:ea:e9:fc:5e:34:06:f2:69:54:fa:1d:f7:25:
         48:12:34:bc:2b:bb:90:0a:26:2c:b3:bb:69:39:1c:0a:57:d1:
         a5:e4:b9:5d:74:67:77:6a:9c:00:d8:60:bf:2a:b1:a1:86:59:
         4c:83:95:50:77:c9:07:42:9c:fc:02:be:9f:a4:de:1a:96:24:
         eb:e8:2c:b3:29:df:91:f4:9d:ff:20:96:3a:3b:5b:50:21:71:
         be:eb:b4:49:02:b9:d2:9a:70:fc:e1:58:10:53:32:9e:47:1a:
         bb:dd:95:c4:c1:ac:81:0b:59:12:f7:2a:6e:0d:5b:ed:89:2e:
         81:a1:8a:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP9I75kmE5BBN70AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDUwMloXDTI1MDIwNjE1MDUwMlowLzEtMCsGA1UEAxMk
YjlhNWY2YmQtNDlkNS00Zjk5LWJmNDQtMWJjMWUxYjk2ZGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuZ/Q+wiYhnudPNrKj7mtANZH+WjYEVj9otD
U8faEMx+KJYhF9KW8px4VhFFSPgRjVqRO4XdlapfTClPFOA75sVp9qcl0EASaGdh
1/qBJlAwLZmuja94uWt9UK2MmCCOrOdFdHeTejCo8b+WjhWWICDC8hJmaa+GO1+R
FOEO1nkQj3VdksQ6kgLydsPIsN4ks8ztCG8nPa9+svThkTUzYPCYjA4Y32HKImkv
IXXDcA5J68ak/zHfAl7yvydoDjPs7YwSE0rqS5/uCet+BAqHo/Ga4cg1M+ujsJlT
JHNxz+sUhLBrCVcit+FOL9xc42lWQH2E8qrqRFl3E7i0AQpwfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFETqJyMu+3QaYIDExiXcv0j3bz+fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZWUyM2Y5OTYtNDg5Yy0z
ZDY1LThkZDgtMWFkZDY0NmJlMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlYQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEu5HLyBuOhq/t+0oFUyJ9L1p/6asoqXYjWTMevYBUvgz3j4A2KTTTtm
Ke18TpuaRJqj9qjJDPm3WSFpZ4XOKCBkmqTho8hA+z7/Eq9MpmqQY5Q5tNSss074
W14neUlOjTNRwdPySLLmM4tyC9VeZXKmlv8BhrdO3s5SM6r9DZOcSowt6un8XjQG
8mlU+h33JUgSNLwru5AKJiyzu2k5HApX0aXkuV10Z3dqnADYYL8qsaGGWUyDlVB3
yQdCnPwCvp+k3hqWJOvoLLMp35H0nf8gljo7W1Ahcb7rtEkCudKacPzhWBBTMp5H
GrvdlcTBrIELWRL3Km4NW+2JLoGhiuo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:35 2024 by rpki-client on console-fra.rpki-client.org