Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d00446b6-07f3-3d3f-8b72-45df725f2ee8.roa
File:                     d00446b6-07f3-3d3f-8b72-45df725f2ee8.roa (raw, json)
Hash identifier:          1WMEPGRsHacyOFd0WHHMeD7vVjSLygEXbb2QR/QgjO4=
Subject key identifier:   A4:63:51:B4:E0:BF:D9:0B:1F:E5:18:1A:54:98:53:8A:2E:0E:1F:3A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847ED24C188881FAB144DDFC080
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d00446b6-07f3-3d3f-8b72-45df725f2ee8.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     7018
IP address blocks:        147.53.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c1:88:88:1f:ab:14:4d:df:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=c0b7983f-d1ed-4eb0-9c1d-0132d2bce2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:40:78:ff:f6:99:3f:0b:bd:70:4a:f6:9b:7a:
                    f8:9b:49:50:3c:8d:b2:9d:72:db:b0:b1:fb:bf:08:
                    7e:5d:ee:c8:b2:e9:ff:ae:e2:db:4a:54:2b:68:e0:
                    7b:78:f3:5c:ad:0d:6c:c9:33:57:65:9d:a2:9c:38:
                    79:e1:16:21:15:28:75:78:76:8d:db:0b:25:94:d5:
                    ce:f8:b0:53:83:42:1f:2e:34:ee:90:6e:97:b6:57:
                    a7:d7:3a:2e:34:1c:ae:e8:22:7c:d7:e1:ee:80:77:
                    71:99:aa:a1:a7:05:68:67:65:15:aa:e7:ea:2f:44:
                    ae:45:25:a5:17:f7:4c:a7:c0:0e:34:24:dd:2e:62:
                    51:3a:38:c9:79:d6:bd:0b:ef:05:9b:54:31:87:25:
                    91:5e:1d:44:09:5f:39:80:3c:48:e5:53:bc:bd:c9:
                    03:56:e2:af:cf:e5:4f:10:4d:67:6e:82:88:83:db:
                    41:4f:a9:53:cf:4d:82:47:23:30:9f:1e:99:e1:48:
                    c7:2c:c3:b7:8a:27:8c:8f:e4:37:48:47:01:2a:83:
                    fe:73:08:30:99:c0:e0:f7:82:d9:9e:36:92:9d:78:
                    d8:14:48:ba:11:06:21:ac:49:cc:55:7c:e5:a0:21:
                    23:ca:d8:53:fe:cf:7e:9e:07:5f:ee:84:8a:e4:61:
                    6a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:63:51:B4:E0:BF:D9:0B:1F:E5:18:1A:54:98:53:8A:2E:0E:1F:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d00446b6-07f3-3d3f-8b72-45df725f2ee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:68:5c:7b:5a:8d:90:6d:24:da:9c:9a:e1:5a:e4:16:c6:80:
         30:8d:14:83:67:f0:61:4b:cd:f8:2c:97:5d:56:58:61:76:9f:
         1f:19:c2:dd:6c:0c:a1:7b:51:fa:9e:ce:40:ea:73:bd:af:dc:
         54:ec:18:22:99:ed:a3:70:4b:40:c2:e5:b3:7c:14:f5:78:c2:
         90:21:fd:ca:28:e9:1c:df:a7:00:28:6e:02:eb:1b:64:c7:28:
         2a:da:39:a5:0a:65:3c:fe:62:e7:c6:ba:56:a8:93:5d:aa:27:
         ae:c6:75:51:2d:e3:d6:25:b3:a2:e3:b4:9f:19:ef:1e:e7:2b:
         95:c3:bf:f3:8a:d7:88:5a:a0:d1:f9:9c:e1:f5:92:80:84:cd:
         15:5c:3f:d9:9e:2f:c0:88:02:55:b9:50:f1:8c:12:93:76:3f:
         8e:7c:a9:66:96:4e:09:0f:6b:30:9c:3f:c2:55:cb:c8:05:7f:
         ca:05:4e:0e:a6:85:34:a3:1b:31:49:98:91:a3:72:84:4b:bf:
         bc:dd:f7:41:21:d6:7e:1f:f7:9c:8f:18:16:03:23:bc:76:7c:
         96:3e:2a:dc:42:1b:ad:a2:b6:22:df:0a:03:07:90:d6:85:a2:
         55:26:88:cc:61:cc:72:0f:cd:4e:76:a4:28:ba:05:66:81:d2:
         cd:9d:a9:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJMGIiB+rFE3fwIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk
YzBiNzk4M2YtZDFlZC00ZWIwLTljMWQtMDEzMmQyYmNlMmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUB4//aZPwu9cEr2m3r4m0lQPI2ynXLbsLH7
vwh+Xe7Isun/ruLbSlQraOB7ePNcrQ1syTNXZZ2inDh54RYhFSh1eHaN2wsllNXO
+LBTg0IfLjTukG6Xtlen1zouNByu6CJ81+HugHdxmaqhpwVoZ2UVqufqL0SuRSWl
F/dMp8AONCTdLmJROjjJeda9C+8Fm1QxhyWRXh1ECV85gDxI5VO8vckDVuKvz+VP
EE1nboKIg9tBT6lTz02CRyMwnx6Z4UjHLMO3iieMj+Q3SEcBKoP+cwgwmcDg94LZ
njaSnXjYFEi6EQYhrEnMVXzloCEjythT/s9+ngdf7oSK5GFq5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKRjUbTgv9kLH+UYGlSYU4ouDh86MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZDAwNDQ2YjYtMDdmMy0z
ZDNmLThiNzItNDVkZjcyNWYyZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzVxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANpoXHtajZBtJNqcmuFa5BbGgDCNFINn8GFLzfgsl11WWGF2nx8Zwt1s
DKF7UfqezkDqc72v3FTsGCKZ7aNwS0DC5bN8FPV4wpAh/coo6RzfpwAobgLrG2TH
KCraOaUKZTz+YufGulaok12qJ67GdVEt49Yls6LjtJ8Z7x7nK5XDv/OK14haoNH5
nOH1koCEzRVcP9meL8CIAlW5UPGMEpN2P458qWaWTgkPazCcP8JVy8gFf8oFTg6m
hTSjGzFJmJGjcoRLv7zd90Eh1n4f95yPGBYDI7x2fJY+KtxCG62itiLfCgMHkNaF
olUmiMxhzHIPzU52pCi6BWaB0s2dqeY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:01 2024 by rpki-client on console-ams.rpki-client.org