Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5f8588b-f086-3d1f-80ca-0e49b614104f.roa
File:                     c5f8588b-f086-3d1f-80ca-0e49b614104f.roa (raw, json)
Hash identifier:          3jviMKYA76k9bxiCHQv7P3AXfIQGsOPzxJwofSeX0+g=
Subject key identifier:   E0:06:EC:CF:A6:EB:1B:6F:E0:AB:44:DC:C9:46:FB:42:7F:AB:92:E5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847E0779A9BE5B1460549ADA000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5f8588b-f086-3d1f-80ca-0e49b614104f.roa
Signing time:             Thu 14 Nov 2024 13:02:00 +0000
ROA not before:           Thu 14 Nov 2024 13:02:00 +0000
ROA not after:            Wed 12 Feb 2025 13:02:00 +0000
asID:                     5650
IP address blocks:        142.252.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:77:9a:9b:e5:b1:46:05:49:ad:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 14 13:02:00 2024 GMT
            Not After : Feb 12 13:02:00 2025 GMT
        Subject: CN=39dc28c4-b7e6-482d-a884-67368b6ed79f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a7:6c:98:2b:2a:cd:4e:1c:dc:5b:88:a7:74:
                    72:71:51:1e:63:6e:48:7d:a2:a3:3e:ab:b4:91:9d:
                    4d:3a:95:ad:6b:42:dd:c5:8f:8b:64:e6:27:56:fd:
                    6b:44:59:a5:9d:ae:cd:cf:2a:ee:d4:06:dd:de:38:
                    5e:fd:08:79:a3:6f:c9:71:35:d2:ac:f4:f7:79:6b:
                    e6:09:28:42:b8:c6:04:aa:30:bc:8e:51:b8:1a:8d:
                    b6:39:e4:64:8f:a2:ce:23:00:26:5c:c7:31:62:9b:
                    76:00:a5:8d:be:27:0b:2b:49:18:ce:26:f3:0b:2c:
                    f4:b4:fa:0e:16:7f:ad:d2:ac:1e:4f:11:c5:d2:09:
                    9a:cb:62:fc:62:98:66:74:16:1c:9a:9d:25:76:74:
                    61:d1:35:3f:fc:45:bd:96:96:9e:91:6d:92:7d:90:
                    43:6f:73:bf:e1:cd:51:e4:15:1e:59:19:43:ee:1d:
                    9b:ee:25:65:21:bf:08:8c:bf:d1:07:99:6c:15:a6:
                    11:f1:35:8e:f7:39:a6:64:a1:ee:92:c5:83:5a:db:
                    00:af:66:c5:e4:e8:06:17:c8:77:2c:26:2b:4e:53:
                    35:c6:f7:33:bd:87:f3:84:50:c6:05:dc:ea:49:56:
                    2c:d7:10:05:74:90:db:60:a4:09:f4:35:6c:aa:64:
                    76:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:06:EC:CF:A6:EB:1B:6F:E0:AB:44:DC:C9:46:FB:42:7F:AB:92:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5f8588b-f086-3d1f-80ca-0e49b614104f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:05:96:29:07:14:77:ca:50:f5:e2:ed:1a:20:61:02:df:0a:
         a1:29:e1:f8:09:63:23:dc:e3:03:f3:13:93:c1:32:6c:c9:6b:
         01:b6:20:d6:79:18:69:5e:f5:ae:76:fc:40:44:59:7e:c2:a3:
         da:8c:ca:f4:9e:4f:85:ea:a3:15:16:ca:1c:5a:98:86:4d:30:
         46:68:86:e7:1c:30:6a:49:4d:42:cd:ec:c7:fc:26:60:11:1c:
         34:1e:ce:0e:df:7c:dd:cc:49:35:3b:67:4f:47:e7:45:47:be:
         af:52:11:b2:0e:2e:84:1c:c4:e9:a5:77:de:3c:de:7f:e7:68:
         76:c6:91:e9:72:54:fc:8e:1f:b1:fc:fe:29:7f:b7:7e:03:da:
         3c:2b:72:02:c3:73:84:0b:aa:7c:3e:67:06:96:2e:02:9b:98:
         0e:8a:17:0f:e3:78:da:6e:11:f7:3a:ec:dd:6e:d4:5f:b1:bd:
         db:a9:b9:eb:37:fd:e7:78:8f:75:37:4d:f4:e6:d8:dc:ce:9b:
         5d:07:1e:00:4c:1a:f3:97:35:05:43:b3:3c:5b:08:7d:5c:81:
         d2:10:08:20:da:a1:f8:d9:f0:f7:52:75:67:fe:aa:55:5a:65:
         73:4c:5c:a5:2e:90:aa:fd:47:67:b7:d4:f6:ff:3a:68:ca:7d:
         f0:98:33:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfgd5qb5bFGBUmtoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTExNDEzMDIwMFoXDTI1MDIxMjEzMDIwMFowLzEtMCsGA1UEAxMk
MzlkYzI4YzQtYjdlNi00ODJkLWE4ODQtNjczNjhiNmVkNzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKdsmCsqzU4c3FuIp3RycVEeY25IfaKjPqu0
kZ1NOpWta0LdxY+LZOYnVv1rRFmlna7Nzyru1Abd3jhe/Qh5o2/JcTXSrPT3eWvm
CShCuMYEqjC8jlG4Go22OeRkj6LOIwAmXMcxYpt2AKWNvicLK0kYzibzCyz0tPoO
Fn+t0qweTxHF0gmay2L8YphmdBYcmp0ldnRh0TU//EW9lpaekW2SfZBDb3O/4c1R
5BUeWRlD7h2b7iVlIb8IjL/RB5lsFaYR8TWO9zmmZKHuksWDWtsAr2bF5OgGF8h3
LCYrTlM1xvczvYfzhFDGBdzqSVYs1xAFdJDbYKQJ9DVsqmR2+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOAG7M+m6xtv4KtE3MlG+0J/q5LlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzVmODU4OGItZjA4Ni0z
ZDFmLTgwY2EtMGU0OWI2MTQxMDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvwDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEoFlikHFHfKUPXi7RogYQLfCqEp4fgJYyPc4wPzE5PBMmzJawG2INZ5
GGle9a52/EBEWX7Co9qMyvSeT4XqoxUWyhxamIZNMEZohuccMGpJTULN7Mf8JmAR
HDQezg7ffN3MSTU7Z09H50VHvq9SEbIOLoQcxOmld9483n/naHbGkelyVPyOH7H8
/il/t34D2jwrcgLDc4QLqnw+ZwaWLgKbmA6KFw/jeNpuEfc67N1u1F+xvdupues3
/ed4j3U3TfTm2NzOm10HHgBMGvOXNQVDszxbCH1cgdIQCCDaofjZ8PdSdWf+qlVa
ZXNMXKUukKr9R2e31Pb/OmjKffCYMwU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:54 2024 by rpki-client on console-ams.rpki-client.org