Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/4c482e31-7964-358b-816f-6025ba55fb2d.roa
File:                     4c482e31-7964-358b-816f-6025ba55fb2d.roa (raw, json)
Hash identifier:          lV82hVt1ZYoCXBpVQ2bVEeqwozLvSTHrnpzkkROiC4g=
Subject key identifier:   F6:EA:48:94:B3:20:EE:B8:92:11:00:4D:74:49:DD:11:7E:7A:1B:E0
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F43285847FDE4DABBD70FDC30CA118480
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/4c482e31-7964-358b-816f-6025ba55fb2d.roa
Signing time:             Mon 25 Nov 2024 02:00:28 +0000
ROA not before:           Mon 25 Nov 2024 02:00:28 +0000
ROA not after:            Sun 23 Feb 2025 02:00:28 +0000
asID:                     19901
IP address blocks:        143.103.144.0/20 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:e4:da:bb:d7:0f:dc:30:ca:11:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Nov 25 02:00:28 2024 GMT
            Not After : Feb 23 02:00:28 2025 GMT
        Subject: CN=36cd92cb-58b9-4f98-bd49-012b4951f4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:76:05:8a:b7:23:d1:49:ae:20:0a:14:56:2a:
                    d4:7c:62:f2:92:92:bb:11:ee:03:e2:89:20:1e:f7:
                    79:32:54:a9:b6:71:87:47:53:3a:36:67:76:4c:4a:
                    0e:b7:61:a9:1e:31:a1:52:59:0a:f9:71:3d:7d:4c:
                    fa:1a:0c:b9:50:e3:1d:3c:46:b0:2f:d7:50:73:f8:
                    08:67:65:ca:a7:40:e9:23:33:50:3b:5f:7e:73:67:
                    fc:42:ec:41:71:58:f9:d0:75:dc:7b:6d:ed:47:a3:
                    28:3a:53:2b:e3:24:82:c1:fa:7d:21:39:16:84:de:
                    2c:0d:46:04:19:c4:89:bf:5d:41:61:f0:2f:61:f1:
                    51:79:f5:cf:d7:01:0a:19:5b:7c:6c:4f:b9:05:c7:
                    f9:1a:0b:a8:37:f3:bc:65:b5:97:04:08:b8:a7:f9:
                    92:e5:41:e5:ba:e5:d5:71:3f:50:d3:e3:de:ad:d8:
                    30:3a:85:6a:33:e0:d1:e9:17:4d:0d:b9:5c:1f:ba:
                    a6:df:ef:75:54:f4:a9:93:de:c2:8a:d7:97:f8:ce:
                    45:95:af:3e:5f:00:64:e8:9f:4f:9d:64:d1:09:b9:
                    e8:95:32:3f:1b:09:90:3d:60:a0:89:48:44:db:c8:
                    91:fd:4e:77:b5:bf:7f:a2:a7:1e:e5:fb:07:3a:1d:
                    29:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EA:48:94:B3:20:EE:B8:92:11:00:4D:74:49:DD:11:7E:7A:1B:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/4c482e31-7964-358b-816f-6025ba55fb2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.103.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:5a:97:34:b1:1b:6f:12:c1:7d:42:fb:83:80:a3:0a:7e:33:
         fd:c4:cc:11:73:3b:c0:7a:0a:a0:35:27:08:bf:11:b2:c5:0d:
         1e:2e:eb:6d:40:75:88:b1:e1:40:0c:fe:a2:19:62:04:fa:15:
         fb:b1:a9:ec:2d:17:5c:2b:8e:ec:06:73:97:5e:37:6d:ef:49:
         91:25:54:47:0b:3d:c1:e4:69:fc:c0:7d:93:c8:e1:c0:ac:f2:
         01:e7:d1:e2:5e:c4:63:67:11:de:62:ae:f4:51:8e:fe:f6:a5:
         fb:03:7a:88:b9:37:da:a5:7a:aa:80:83:34:6e:fe:4e:de:55:
         1b:71:61:78:8c:46:b8:44:45:58:b3:3d:e2:2d:a8:a5:b2:da:
         15:05:e6:44:25:ee:79:3a:95:c0:b9:b1:9f:b3:09:b1:92:d0:
         7c:d2:61:71:92:e5:85:77:24:4f:0d:b2:80:e0:11:87:e8:15:
         ad:f9:17:9c:ac:13:a2:d5:f3:21:16:87:7d:ef:da:21:4c:4c:
         39:d9:37:a2:dd:77:7e:b9:4c:45:07:9b:7d:36:e5:57:9e:2b:
         63:40:78:e4:05:20:ca:08:a4:78:57:cc:09:df:d1:22:f3:24:
         6d:6c:f0:be:42:22:22:05:10:8a:f2:b6:f5:d7:3d:2c:9e:64:
         86:c2:87:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf95Nq71w/cMMoRhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk
YmNlMB4XDTI0MTEyNTAyMDAyOFoXDTI1MDIyMzAyMDAyOFowLzEtMCsGA1UEAxMk
MzZjZDkyY2ItNThiOS00Zjk4LWJkNDktMDEyYjQ5NTFmNGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3YFircj0UmuIAoUVirUfGLykpK7Ee4D4okg
Hvd5MlSptnGHR1M6Nmd2TEoOt2GpHjGhUlkK+XE9fUz6Ggy5UOMdPEawL9dQc/gI
Z2XKp0DpIzNQO19+c2f8QuxBcVj50HXce23tR6MoOlMr4ySCwfp9ITkWhN4sDUYE
GcSJv11BYfAvYfFRefXP1wEKGVt8bE+5Bcf5GguoN/O8ZbWXBAi4p/mS5UHluuXV
cT9Q0+PerdgwOoVqM+DR6RdNDblcH7qm3+91VPSpk97CiteX+M5Fla8+XwBk6J9P
nWTRCbnolTI/GwmQPWCgiUhE28iR/U53tb9/oqce5fsHOh0pQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPbqSJSzIO64khEATXRJ3RF+ehvgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0
MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvNGM0ODJlMzEtNzk2NC0z
NThiLTgxNmYtNjAyNWJhNTVmYjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3
MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi
ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3
ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEj2eQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABFalzSxG28SwX1C+4OAowp+M/3EzBFzO8B6CqA1Jwi/EbLFDR4u621A
dYix4UAM/qIZYgT6FfuxqewtF1wrjuwGc5deN23vSZElVEcLPcHkafzAfZPI4cCs
8gHn0eJexGNnEd5irvRRjv72pfsDeoi5N9qleqqAgzRu/k7eVRtxYXiMRrhERViz
PeItqKWy2hUF5kQl7nk6lcC5sZ+zCbGS0HzSYXGS5YV3JE8NsoDgEYfoFa35F5ys
E6LV8yEWh33v2iFMTDnZN6Ldd365TEUHm3025VeeK2NAeOQFIMoIpHhXzAnf0SLz
JG1s8L5CIiIFEIrytvXXPSyeZIbCh1s=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:09 2024 by rpki-client on console-ams.rpki-client.org