Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/08b21afd-c79d-35c4-91d3-323622a79ddc.roa
File:                     08b21afd-c79d-35c4-91d3-323622a79ddc.roa (raw, json)
Hash identifier:          LRrJZa3Y5mx2DhXUxvgFtwhbgkaxoWOZJqmJhOFVkfw=
Subject key identifier:   C6:16:E6:84:F5:2D:54:77:0B:97:73:2F:CC:3C:4A:EA:8D:DB:C6:D0
Certificate issuer:       /CN=3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7
Certificate serial:       010D0C9F4328584757AB6F433CA7DD6EDA8B9100
Authority key identifier: 3E:98:7B:0D:CE:66:B6:86:13:8A:2A:FB:21:30:82:87:5B:74:B0:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/08b21afd-c79d-35c4-91d3-323622a79ddc.roa
Signing time:             Thu 26 Sep 2024 13:00:41 +0000
ROA not before:           Thu 26 Sep 2024 13:00:41 +0000
ROA not after:            Wed 25 Dec 2024 14:00:41 +0000
asID:                     21930
IP address blocks:        207.207.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ab:6f:43:3c:a7:dd:6e:da:8b:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7
        Validity
            Not Before: Sep 26 13:00:41 2024 GMT
            Not After : Dec 25 14:00:41 2024 GMT
        Subject: CN=8a008325-b1ac-4832-b140-72fc2787e190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0a:29:92:fe:08:3a:00:8c:26:ee:95:97:58:
                    df:e5:31:82:93:ff:1f:2e:b0:e1:68:70:65:35:0e:
                    d8:8c:9a:72:b9:23:c3:70:e9:28:22:52:9c:7b:71:
                    5c:cd:4c:2f:72:18:4a:ba:37:8e:c3:2f:be:1e:7d:
                    57:9f:f7:0d:0d:8e:74:b9:14:ac:b5:0b:a0:1c:c3:
                    e5:53:f8:8e:28:ab:bd:4e:41:ed:fa:b1:00:26:27:
                    97:5b:2e:d4:04:61:97:ae:77:9a:b1:24:f8:2d:50:
                    18:09:dc:6c:09:d2:f5:2e:ae:62:5b:61:75:a6:b3:
                    4d:0c:3b:c0:f9:9b:e1:74:d1:4f:9e:ca:dd:b0:9d:
                    c5:18:75:34:3d:ee:2d:a5:93:fb:5d:8d:42:e0:33:
                    e8:75:2f:c5:81:1d:85:15:63:5d:3e:a4:51:c1:cb:
                    45:9e:9e:72:b3:34:8a:b5:a5:ad:43:b6:d4:f0:65:
                    af:dc:cc:4a:12:cc:c1:5b:58:d2:77:9a:e2:6e:fc:
                    55:0e:67:12:1c:55:c9:4c:a0:c3:57:db:09:5f:1a:
                    21:87:31:df:14:da:75:59:38:98:5e:89:46:e2:40:
                    32:00:66:40:2a:8f:a5:4d:8b:b1:8d:b4:4c:21:a3:
                    07:db:46:d9:6d:30:08:b7:a1:f6:64:cf:1e:25:7c:
                    73:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:16:E6:84:F5:2D:54:77:0B:97:73:2F:CC:3C:4A:EA:8D:DB:C6:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/08b21afd-c79d-35c4-91d3-323622a79ddc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.crl

            X509v3 Authority Key Identifier:
                keyid:3E:98:7B:0D:CE:66:B6:86:13:8A:2A:FB:21:30:82:87:5B:74:B0:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.207.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:79:e7:d9:5d:ee:70:7b:d6:fc:19:9d:4a:3c:dd:91:46:1d:
         3d:f9:be:0a:3d:d6:16:9a:36:30:1c:77:76:c1:8e:09:3a:c6:
         82:a3:d1:47:e5:31:43:b7:c1:cd:ba:81:fd:b7:4f:9f:74:c5:
         49:bf:95:b8:1f:a4:c9:25:38:01:c3:f3:ee:d3:f4:3b:aa:7f:
         2e:6a:d3:4d:0f:05:b6:b4:49:01:68:11:05:d7:1a:32:90:2a:
         bf:2c:85:f3:36:aa:f7:2a:02:e3:70:ea:bd:15:d4:58:c7:01:
         88:97:0a:f8:e3:69:22:dd:a9:0c:54:7e:61:03:08:bc:25:8c:
         33:c3:cb:93:77:99:75:f2:15:14:11:fb:92:6e:66:2b:eb:a4:
         e6:bd:9e:77:c9:99:9e:54:70:ef:e0:f5:a7:30:51:00:80:9a:
         57:35:f7:cf:71:62:34:b2:0a:74:4d:c8:16:d3:a4:1a:cc:af:
         e1:3b:50:b3:22:ee:9c:df:14:bf:61:9b:26:11:88:9e:92:04:
         71:85:61:7c:d5:a2:3f:e0:9c:52:24:0b:ef:80:98:be:b7:19:
         98:f5:39:ac:6c:53:30:1c:7b:71:3b:3b:17:8b:ff:4a:17:ad:
         ec:4c:b7:96:0f:7a:a3:6c:03:57:0c:5a:94:b7:4f:1a:8b:b8:
         fc:d6:6b:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdXq29DPKfdbtqLkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FlN2VjZmYtZTNhYi00NzJkLWE0ZWMtMGZjZDNmZTk0
YWE3MB4XDTI0MDkyNjEzMDA0MVoXDTI0MTIyNTE0MDA0MVowLzEtMCsGA1UEAxMk
OGEwMDgzMjUtYjFhYy00ODMyLWIxNDAtNzJmYzI3ODdlMTkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Qopkv4IOgCMJu6Vl1jf5TGCk/8fLrDhaHBl
NQ7YjJpyuSPDcOkoIlKce3FczUwvchhKujeOwy++Hn1Xn/cNDY50uRSstQugHMPl
U/iOKKu9TkHt+rEAJieXWy7UBGGXrneasST4LVAYCdxsCdL1Lq5iW2F1prNNDDvA
+ZvhdNFPnsrdsJ3FGHU0Pe4tpZP7XY1C4DPodS/FgR2FFWNdPqRRwctFnp5yszSK
taWtQ7bU8GWv3MxKEszBW1jSd5ribvxVDmcSHFXJTKDDV9sJXxohhzHfFNp1WTiY
XolG4kAyAGZAKo+lTYuxjbRMIaMH20bZbTAIt6H2ZM8eJXxzywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMYW5oT1LVR3C5dzL8w8SuqN28bQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYWU3
ZWNmZi1lM2FiLTQ3MmQtYTRlYy0wZmNkM2ZlOTRhYTcvMDhiMjFhZmQtYzc5ZC0z
NWM0LTkxZDMtMzIzNjIyYTc5ZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2FlN2VjZmYtZTNhYi00NzJkLWE0
ZWMtMGZjZDNmZTk0YWE3LzNhZTdlY2ZmLWUzYWItNDcyZC1hNGVjLTBmY2QzZmU5
NGFhNy5jcmwwHwYDVR0jBBgwFoAUPph7Dc5mtoYTiir7ITCCh1t0sEkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zYWU3ZWNmZi1lM2FiLTQ3MmQtYTRlYy0wZmNk
M2ZlOTRhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz88MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI9559ld7nB71vwZnUo83ZFGHT35vgo91haaNjAcd3bBjgk6xoKj0Ufl
MUO3wc26gf23T590xUm/lbgfpMklOAHD8+7T9Duqfy5q000PBba0SQFoEQXXGjKQ
Kr8shfM2qvcqAuNw6r0V1FjHAYiXCvjjaSLdqQxUfmEDCLwljDPDy5N3mXXyFRQR
+5JuZivrpOa9nnfJmZ5UcO/g9acwUQCAmlc1989xYjSyCnRNyBbTpBrMr+E7ULMi
7pzfFL9hmyYRiJ6SBHGFYXzVoj/gnFIkC++AmL63GZj1OaxsUzAce3E7OxeL/0oX
rexMt5YPeqNsA1cMWpS3TxqLuPzWaws=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:41 2024 by rpki-client on console-fra.rpki-client.org