Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa
File:                     0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa (raw, json)
Hash identifier:          9CxfkMzozstk0s8PT4xff0UkMeRMchHQDL64SqG8CLM=
Subject key identifier:   73:16:BD:BE:A0:37:BC:C7:78:BE:FC:5D:2D:6F:B9:05:25:DA:6E:20
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F43285847967BC52B38F06E515C436E00
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa
Signing time:             Sat 19 Oct 2024 01:00:33 +0000
ROA not before:           Sat 19 Oct 2024 01:00:33 +0000
ROA not after:            Fri 17 Jan 2025 02:00:33 +0000
asID:                     4540
IP address blocks:        205.236.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:96:7b:c5:2b:38:f0:6e:51:5c:43:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Oct 19 01:00:33 2024 GMT
            Not After : Jan 17 02:00:33 2025 GMT
        Subject: CN=6a31e257-50c1-4a16-8c13-109f85ee2dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4f:f7:95:05:2f:44:31:29:2f:55:a0:a1:94:
                    67:06:8a:7d:c7:5b:de:27:7c:f8:21:57:ea:c5:33:
                    7d:c2:dd:9e:77:59:7c:d2:d3:35:46:6a:8d:ae:39:
                    bb:18:ae:54:60:5a:a8:c5:6d:12:31:cc:6a:35:82:
                    7f:37:fd:a7:86:af:55:10:29:d1:8a:d7:da:9d:82:
                    c3:54:24:9a:cd:4e:c7:12:50:2d:30:e2:5e:fb:a6:
                    fa:77:42:e3:e9:5e:e4:99:83:2c:0b:bf:ba:2e:94:
                    3e:de:6f:d5:c3:3b:0e:06:a5:d0:4d:99:3b:63:4a:
                    3a:63:ca:be:dd:ab:6c:d7:3b:0c:80:0c:5e:bb:20:
                    f1:6c:d9:ee:fe:6c:97:cb:e3:85:9a:af:c7:63:97:
                    9a:f9:59:12:06:44:98:1e:2c:23:10:b1:15:db:31:
                    05:ed:88:9c:84:7b:0e:4e:d2:1f:7e:c3:66:48:a5:
                    52:52:f0:bc:b8:02:9e:a3:c0:8b:f2:04:4f:7b:25:
                    64:b7:e6:e3:97:d8:e5:c1:c4:91:75:cd:a6:81:3e:
                    96:09:f2:61:b2:16:5d:99:7c:44:d0:24:55:8b:86:
                    2f:31:a3:4c:07:f9:55:d1:00:42:0f:ed:06:50:46:
                    45:e5:09:6b:84:fe:b8:b8:e3:f8:13:48:bc:ba:18:
                    45:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:16:BD:BE:A0:37:BC:C7:78:BE:FC:5D:2D:6F:B9:05:25:DA:6E:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:c9:48:e0:db:ec:9a:52:e2:36:11:df:0e:87:39:eb:c4:34:
         4b:28:c6:ec:df:76:46:68:eb:56:fb:ad:c7:3a:06:02:d9:77:
         30:ab:cb:bb:ff:72:6a:b9:79:e6:7d:a2:b1:d0:31:c1:fd:4f:
         7e:d0:c1:90:bb:89:2d:b7:4c:48:72:41:94:bb:a7:56:80:3a:
         6f:6d:7d:35:6f:e9:a2:05:56:0a:e0:ae:b7:8b:e4:3c:84:af:
         76:a0:97:45:75:ae:5c:fb:7c:2e:ab:02:27:46:c3:5d:5e:0c:
         d0:4c:1d:6c:30:24:22:35:8a:08:e9:35:a6:ad:79:f3:fb:b1:
         02:40:03:8e:8b:57:25:95:a8:8b:3d:e1:06:f6:e0:8d:8c:23:
         54:bd:8c:5f:cc:e0:39:b9:78:b6:4c:cf:3f:33:26:cb:21:fe:
         4a:2e:c7:5f:9e:57:2a:ba:bf:c9:69:95:d6:6f:6e:62:b3:3f:
         76:ab:20:04:b0:ec:78:98:9d:f5:ad:10:35:9a:b1:71:e3:49:
         eb:3d:8f:40:6e:5d:cc:1b:d8:aa:1f:35:12:8c:de:ea:82:44:
         1f:3c:c3:a7:42:31:b0:a5:21:09:9c:09:66:be:b4:27:71:05:
         f9:5c:f6:4d:f0:01:50:29:3a:08:3c:4a:53:86:7e:39:58:fc:
         5c:74:44:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeWe8UrOPBuUVxDbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3
ZDkyMB4XDTI0MTAxOTAxMDAzM1oXDTI1MDExNzAyMDAzM1owLzEtMCsGA1UEAxMk
NmEzMWUyNTctNTBjMS00YTE2LThjMTMtMTA5Zjg1ZWUyZGMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0/3lQUvRDEpL1WgoZRnBop9x1veJ3z4IVfq
xTN9wt2ed1l80tM1RmqNrjm7GK5UYFqoxW0SMcxqNYJ/N/2nhq9VECnRitfanYLD
VCSazU7HElAtMOJe+6b6d0Lj6V7kmYMsC7+6LpQ+3m/VwzsOBqXQTZk7Y0o6Y8q+
3ats1zsMgAxeuyDxbNnu/myXy+OFmq/HY5ea+VkSBkSYHiwjELEV2zEF7YichHsO
TtIffsNmSKVSUvC8uAKeo8CL8gRPeyVkt+bjl9jlwcSRdc2mgT6WCfJhshZdmXxE
0CRVi4YvMaNMB/lV0QBCD+0GUEZF5QlrhP64uOP4E0i8uhhFmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHMWvb6gN7zHeL78XS1vuQUl2m4gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx
YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMGVjZDFiMDQtNDU5NC0z
OTM5LThjMmUtNGNlMmZiYTEyMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm
NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3
N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl
NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzeyUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAArJSODb7JpS4jYR3w6HOevENEsoxuzfdkZo61b7rcc6BgLZdzCry7v/
cmq5eeZ9orHQMcH9T37QwZC7iS23TEhyQZS7p1aAOm9tfTVv6aIFVgrgrreL5DyE
r3agl0V1rlz7fC6rAidGw11eDNBMHWwwJCI1igjpNaatefP7sQJAA46LVyWVqIs9
4Qb24I2MI1S9jF/M4Dm5eLZMzz8zJssh/koux1+eVyq6v8lpldZvbmKzP3arIASw
7HiYnfWtEDWasXHjSes9j0BuXcwb2KofNRKM3uqCRB88w6dCMbClIQmcCWa+tCdx
Bflc9k3wAVApOgg8SlOGfjlY/Fx0REU=
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:15 2024 by rpki-client on console-ams.rpki-client.org