Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/a3262b96-5624-3bd4-8b93-522967b4a947.roa
File:                     a3262b96-5624-3bd4-8b93-522967b4a947.roa (raw, json)
Hash identifier:          tOZJNUrkbbGctEwzfFMNkZcp2L/XbmMSQT8XhTBKu24=
Subject key identifier:   42:B4:76:C9:58:B3:73:02:02:B7:D4:55:EE:CA:D4:04:96:22:10:B3
Certificate issuer:       /CN=52e61a17-7b88-4574-9ed5-dc56420f7ed2
Certificate serial:       010D0C9F432858479C112A3906696CEDD6E65600
Authority key identifier: 58:B1:F7:35:D6:61:15:EE:55:37:68:BD:BF:61:8D:AF:9F:36:81:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/a3262b96-5624-3bd4-8b93-522967b4a947.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     3477
IP address blocks:        198.51.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/52e61a17-7b88-4574-9ed5-dc56420f7ed2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/52e61a17-7b88-4574-9ed5-dc56420f7ed2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:2a:39:06:69:6c:ed:d6:e6:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e61a17-7b88-4574-9ed5-dc56420f7ed2
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=b377d7f7-ca7d-474e-ada7-3f6dccebeb67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fe:d3:35:fc:08:f9:00:41:ab:03:07:7a:a3:
                    0c:d2:09:ff:2e:be:a0:55:1a:f0:39:54:27:27:7e:
                    f4:b1:17:28:74:1f:de:70:62:b9:64:d1:32:89:34:
                    80:cf:e2:e0:56:de:f4:93:f5:67:d3:06:c7:a3:e6:
                    f8:db:c2:64:1d:b8:cc:f1:4a:6c:eb:33:ea:5a:2b:
                    f5:a0:0f:5e:6e:4d:43:0d:89:27:7b:f4:f5:bc:fa:
                    46:e8:2a:28:8c:54:15:d1:fe:c3:ad:7a:4e:75:c1:
                    42:7f:9b:72:8f:d6:ef:11:17:84:f2:46:58:4c:70:
                    5a:cb:66:b4:0d:de:db:42:77:33:d8:ff:84:a9:68:
                    76:25:d8:f1:91:81:dd:fd:53:2d:de:54:af:3b:ab:
                    ce:04:48:06:b7:dc:47:68:49:b3:b1:c8:90:6a:a9:
                    bd:c7:78:42:bf:ba:0e:ea:99:59:a1:37:b4:e2:e0:
                    b5:de:80:37:23:91:d5:a1:8e:35:f5:74:5b:7b:80:
                    a6:68:7d:30:ed:e3:06:ba:69:81:b7:8f:b2:ec:4f:
                    3d:96:40:38:46:3f:27:92:2f:ad:f0:9d:3a:2f:11:
                    11:17:27:d7:44:32:37:11:2e:af:a6:22:43:cc:3c:
                    82:25:f2:74:81:ae:b6:f0:c3:35:c0:a0:58:85:50:
                    80:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B4:76:C9:58:B3:73:02:02:B7:D4:55:EE:CA:D4:04:96:22:10:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/a3262b96-5624-3bd4-8b93-522967b4a947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/52e61a17-7b88-4574-9ed5-dc56420f7ed2.crl

            X509v3 Authority Key Identifier:
                keyid:58:B1:F7:35:D6:61:15:EE:55:37:68:BD:BF:61:8D:AF:9F:36:81:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.51.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:4d:4f:69:c1:47:79:0a:9b:b2:e1:67:1b:e2:7f:cb:e2:f6:
         c5:20:f4:b0:27:9c:61:c6:02:17:71:06:76:99:17:fc:9c:25:
         89:02:71:4b:62:a7:73:1e:50:92:99:53:fe:03:46:df:2b:14:
         cc:91:f4:63:d2:3a:32:97:91:83:09:04:e9:63:b5:4a:ce:e6:
         15:dc:f0:dc:7a:2b:5c:95:9e:a7:1e:fe:c7:5d:a7:1a:9b:79:
         73:61:6f:76:d5:97:28:6e:a4:22:2b:ae:41:c1:b8:ca:85:0e:
         23:c9:38:a6:65:ee:6f:f0:f2:c4:ea:e1:28:e5:b6:20:6e:fc:
         37:54:bf:e0:d3:3b:e8:e4:f7:1d:c7:35:8b:1b:44:86:39:9d:
         ca:6b:58:b8:53:49:2b:6a:81:9d:62:c1:59:76:12:34:56:c4:
         ee:b1:61:45:b4:b9:87:4e:ff:25:42:15:85:77:de:dc:df:65:
         16:54:6f:16:ec:35:eb:45:98:8e:d2:10:7c:b9:7e:2d:c3:30:
         00:ee:89:a8:95:73:c7:9c:bf:b8:ba:76:20:38:a9:5a:18:3d:
         12:13:37:fd:62:c9:ef:53:e7:f3:d1:07:8e:f3:88:23:48:1c:
         b5:dd:71:47:cd:f3:a2:81:30:8a:dd:f8:78:bd:15:d4:67:5d:
         5e:4f:a4:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEecESo5Bmls7dbmVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJlNjFhMTctN2I4OC00NTc0LTllZDUtZGM1NjQyMGY3
ZWQyMB4XDTI0MTAyMTAxMDAzMVoXDTI1MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk
YjM3N2Q3ZjctY2E3ZC00NzRlLWFkYTctM2Y2ZGNjZWJlYjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P7TNfwI+QBBqwMHeqMM0gn/Lr6gVRrwOVQn
J370sRcodB/ecGK5ZNEyiTSAz+LgVt70k/Vn0wbHo+b428JkHbjM8Ups6zPqWiv1
oA9ebk1DDYkne/T1vPpG6CoojFQV0f7DrXpOdcFCf5tyj9bvEReE8kZYTHBay2a0
Dd7bQncz2P+EqWh2JdjxkYHd/VMt3lSvO6vOBEgGt9xHaEmzsciQaqm9x3hCv7oO
6plZoTe04uC13oA3I5HVoY419XRbe4CmaH0w7eMGummBt4+y7E89lkA4Rj8nki+t
8J06LxERFyfXRDI3ES6vpiJDzDyCJfJ0ga628MM1wKBYhVCAXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEK0dslYs3MCArfUVe7K1ASWIhCzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MmU2
MWExNy03Yjg4LTQ1NzQtOWVkNS1kYzU2NDIwZjdlZDIvYTMyNjJiOTYtNTYyNC0z
YmQ0LThiOTMtNTIyOTY3YjRhOTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTJlNjFhMTctN2I4OC00NTc0LTll
ZDUtZGM1NjQyMGY3ZWQyLzUyZTYxYTE3LTdiODgtNDU3NC05ZWQ1LWRjNTY0MjBm
N2VkMi5jcmwwHwYDVR0jBBgwFoAUWLH3NdZhFe5VN2i9v2GNr582gVEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81MmU2MWExNy03Yjg4LTQ1NzQtOWVkNS1kYzU2
NDIwZjdlZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjMLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACdNT2nBR3kKm7LhZxvif8vi9sUg9LAnnGHGAhdxBnaZF/ycJYkCcUti
p3MeUJKZU/4DRt8rFMyR9GPSOjKXkYMJBOljtUrO5hXc8Nx6K1yVnqce/sddpxqb
eXNhb3bVlyhupCIrrkHBuMqFDiPJOKZl7m/w8sTq4SjltiBu/DdUv+DTO+jk9x3H
NYsbRIY5ncprWLhTSStqgZ1iwVl2EjRWxO6xYUW0uYdO/yVCFYV33tzfZRZUbxbs
NetFmI7SEHy5fi3DMADuiaiVc8ecv7i6diA4qVoYPRITN/1iye9T5/PRB47ziCNI
HLXdcUfN86KBMIrd+Hi9FdRnXV5PpLI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:37 2024 by rpki-client on console-fra.rpki-client.org