Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/d17eba83-4637-30d8-a17c-efa5eadc2b67.roa
File:                     d17eba83-4637-30d8-a17c-efa5eadc2b67.roa (raw, json)
Hash identifier:          poUnKjSHzcSHAO5AL8MpCEHJO5I8gA6Mu4wCLv1F2bo=
Subject key identifier:   33:04:41:D9:C6:53:F9:53:55:58:0C:25:8E:BA:64:AD:43:68:2F:EA
Certificate issuer:       /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial:       010D0C9F4328584793B124835AB4C53D584B2740
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/d17eba83-4637-30d8-a17c-efa5eadc2b67.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     8075
IP address blocks:        170.110.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:24:83:5a:b4:c5:3d:58:4b:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=42ca87cc-7955-4df6-9a3d-16b67c99eff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:ae:4d:83:d9:ca:c2:7a:46:9c:3f:fe:35:
                    6b:58:2b:a6:43:6a:ac:ad:1c:77:7c:fe:92:1b:25:
                    a0:74:dc:42:be:23:38:4e:27:56:04:37:2b:05:af:
                    e2:77:de:6d:7c:4e:74:91:7a:93:af:80:a3:50:4c:
                    9e:5d:83:9b:b6:43:2e:f3:40:dc:2d:24:13:67:a0:
                    6d:4c:88:fc:06:eb:c3:a2:fd:fb:a0:e8:6e:6d:14:
                    5c:0f:4d:20:34:18:4b:c4:aa:c4:ad:37:14:93:1c:
                    0f:65:d3:e9:60:c7:d0:c1:90:88:25:cb:0d:22:49:
                    75:18:f7:e2:be:c2:34:a6:be:e4:a9:22:05:e5:b6:
                    84:1b:4b:63:23:2e:67:35:b4:29:99:88:24:01:f7:
                    be:af:1b:6c:27:89:82:a7:ed:eb:5f:eb:61:a0:90:
                    69:3b:27:56:f9:4e:62:fd:7c:40:2c:66:74:9b:e7:
                    42:fc:a7:99:87:bc:06:d1:91:82:4c:99:84:91:9b:
                    ed:de:f5:39:09:27:c8:74:6a:b5:5e:10:a7:c7:67:
                    28:2c:49:65:87:2d:76:06:78:bd:6a:a1:26:7e:63:
                    45:66:b7:2b:d0:36:a7:c1:65:88:aa:76:52:ee:c9:
                    9a:d7:01:80:7e:ff:10:87:b1:0a:88:d7:29:6d:05:
                    86:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:04:41:D9:C6:53:F9:53:55:58:0C:25:8E:BA:64:AD:43:68:2F:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/d17eba83-4637-30d8-a17c-efa5eadc2b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.110.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:47:85:4f:97:71:df:b6:15:5e:10:d4:c0:ab:cf:d7:22:f7:
         6e:a6:3a:1a:90:65:14:e3:7e:8a:22:6d:f4:0b:a6:83:d8:9f:
         bb:49:61:d5:03:94:80:db:6a:e2:05:fd:55:fc:ee:7b:f3:f0:
         fb:8e:94:1e:84:44:81:b8:90:6d:ac:a1:dc:d6:11:06:33:20:
         03:34:dd:e4:d1:02:b5:95:db:17:71:25:75:8c:bf:5a:cd:1b:
         47:96:3e:14:c3:b9:5b:22:ea:55:9e:3b:14:2d:17:97:16:1a:
         1c:99:9d:e9:a6:f2:81:06:36:43:ee:18:c6:07:8b:0a:40:af:
         df:7f:7a:61:cc:31:b5:c0:bd:4b:7f:e5:79:36:b1:e9:d6:d8:
         0d:be:6a:2d:b4:19:e0:7a:08:76:61:86:58:79:fe:c2:94:44:
         2f:20:09:ae:04:7f:c4:10:af:6c:0e:e6:88:ec:37:fe:46:12:
         54:b4:a6:1f:c2:6e:05:10:74:7e:9c:97:85:20:d4:c5:ad:7a:
         51:04:d5:56:fd:64:e0:9f:47:71:82:32:68:88:35:2b:98:e6:
         fd:49:c3:69:73:c0:d4:af:c0:8a:21:4e:c1:43:09:3a:95:30:
         d8:47:76:53:be:e6:a5:63:ac:56:8e:5d:eb:f9:77:ea:3c:bf:
         89:26:28:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsSSDWrTFPVhLJ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGJlMGQxYTQtMmM4OC00NTk2LTgxZDctM2I2Njg1ZTA0
YTJkMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk
NDJjYTg3Y2MtNzk1NS00ZGY2LTlhM2QtMTZiNjdjOTllZmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLWuTYPZysJ6Rpw//jVrWCumQ2qsrRx3fP6S
GyWgdNxCviM4TidWBDcrBa/id95tfE50kXqTr4CjUEyeXYObtkMu80DcLSQTZ6Bt
TIj8BuvDov37oOhubRRcD00gNBhLxKrErTcUkxwPZdPpYMfQwZCIJcsNIkl1GPfi
vsI0pr7kqSIF5baEG0tjIy5nNbQpmYgkAfe+rxtsJ4mCp+3rX+thoJBpOydW+U5i
/XxALGZ0m+dC/KeZh7wG0ZGCTJmEkZvt3vU5CSfIdGq1XhCnx2coLEllhy12Bni9
aqEmfmNFZrcr0DanwWWIqnZS7sma1wGAfv8Qh7EKiNcpbQWGwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMEQdnGU/lTVVgMJY66ZK1DaC/qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wYmUw
ZDFhNC0yYzg4LTQ1OTYtODFkNy0zYjY2ODVlMDRhMmQvZDE3ZWJhODMtNDYzNy0z
MGQ4LWExN2MtZWZhNWVhZGMyYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGJlMGQxYTQtMmM4OC00NTk2LTgx
ZDctM2I2Njg1ZTA0YTJkLzBiZTBkMWE0LTJjODgtNDU5Ni04MWQ3LTNiNjY4NWUw
NGEyZC5jcmwwHwYDVR0jBBgwFoAUv5vktT4TlR8HU9jpDI5FWg61DIIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wYmUwZDFhNC0yYzg4LTQ1OTYtODFkNy0zYjY2
ODVlMDRhMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqm76MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHpHhU+Xcd+2FV4Q1MCrz9ci926mOhqQZRTjfooibfQLpoPYn7tJYdUD
lIDbauIF/VX87nvz8PuOlB6ERIG4kG2sodzWEQYzIAM03eTRArWV2xdxJXWMv1rN
G0eWPhTDuVsi6lWeOxQtF5cWGhyZnemm8oEGNkPuGMYHiwpAr99/emHMMbXAvUt/
5Xk2senW2A2+ai20GeB6CHZhhlh5/sKURC8gCa4Ef8QQr2wO5ojsN/5GElS0ph/C
bgUQdH6cl4Ug1MWtelEE1Vb9ZOCfR3GCMmiINSuY5v1Jw2lzwNSvwIohTsFDCTqV
MNhHdlO+5qVjrFaOXev5d+o8v4kmKGw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:29 2024 by rpki-client on console-ams.rpki-client.org