Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/df0ddb94-bc88-3d72-85c2-8c7c340697fe.roa
File:                     df0ddb94-bc88-3d72-85c2-8c7c340697fe.roa (raw, json)
Hash identifier:          Zw7xmzhk30xZbevj5tXUgkVrN+0dBDSAJXwiYUU/IoA=
Subject key identifier:   55:54:F4:45:35:33:D2:D4:AE:1D:E5:71:2D:0B:21:2C:A7:2F:06:04
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858472C65E13EE75806B9295B7500
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/df0ddb94-bc88-3d72-85c2-8c7c340697fe.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     7018
IP address blocks:        208.89.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:e1:3e:e7:58:06:b9:29:5b:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=1abae74d-cc09-4e57-a667-a8de34fad022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a9:36:39:df:e5:20:10:7c:5e:16:f0:7b:8b:
                    e1:65:a5:1f:58:3c:0a:c7:4e:e9:4c:55:7c:29:ca:
                    81:78:fb:8f:30:61:3a:da:a1:d2:14:3d:be:ef:66:
                    70:8e:f0:6b:7e:d2:72:e9:c6:02:ed:3f:78:01:0b:
                    f6:e6:83:b5:95:f4:36:38:77:16:7c:bd:03:6f:d0:
                    db:e0:e8:d8:2c:fa:d7:0e:97:da:2a:d4:02:32:ad:
                    33:8e:bb:7e:19:ab:8d:c8:2a:a2:98:0e:8b:23:4b:
                    7c:1b:66:11:b0:e9:16:74:ce:84:ae:e0:46:bc:0e:
                    f7:ea:fa:b4:cd:2e:16:46:d5:3f:01:c5:09:2a:8e:
                    f9:f8:bd:9d:b4:26:32:8e:79:5f:fd:0f:81:64:7e:
                    66:12:53:b8:8e:af:ce:22:6e:27:37:c2:f0:fa:1f:
                    36:c2:1e:65:e2:ac:2c:c6:9f:f3:bc:c5:ee:6c:df:
                    b0:35:d2:c2:5a:b2:1c:69:89:56:e9:17:de:bd:6f:
                    c8:34:68:29:ef:a2:f3:6f:a3:88:58:14:a3:0a:7a:
                    a1:6b:10:74:f1:09:ee:89:c8:fd:8c:54:c5:a3:02:
                    ab:39:c3:c9:05:44:0e:60:37:4b:9a:0d:9d:7d:c8:
                    bb:4c:31:a6:c9:be:00:92:7e:57:86:db:ad:49:03:
                    0e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:54:F4:45:35:33:D2:D4:AE:1D:E5:71:2D:0B:21:2C:A7:2F:06:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/df0ddb94-bc88-3d72-85c2-8c7c340697fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:8a:f7:1e:16:e4:ce:0b:9a:0f:1e:a7:4f:0c:b0:f4:93:b1:
         81:e8:e2:05:8d:55:8b:78:bf:50:6d:59:fe:57:a2:4d:03:ce:
         c8:42:27:00:21:c5:46:0d:36:c2:83:1f:a2:41:87:dc:9d:65:
         fb:81:3b:7b:e8:0c:95:e6:e7:74:f0:57:e1:24:c5:62:14:8d:
         13:b5:ca:b8:97:0d:1d:45:d3:e4:4b:49:ea:76:33:12:c1:17:
         9a:a7:5a:46:e1:48:45:69:5a:2b:f1:1b:65:b0:22:ab:3f:ec:
         72:da:fb:46:82:58:f6:d3:60:1e:02:f3:b5:4a:8e:43:e4:a7:
         30:7d:cb:4e:ff:11:1f:1d:42:fd:a5:db:af:5c:97:3a:af:a9:
         5f:a8:72:e8:db:d7:63:d7:3d:8c:be:00:36:25:52:b2:fa:c9:
         b6:d9:b5:a9:28:c5:9b:4a:43:48:61:65:c5:b7:6b:11:dc:5f:
         97:56:92:21:3a:61:49:18:3f:22:a0:0b:13:e6:26:d8:da:d8:
         ce:36:4b:c7:6a:61:34:94:ed:48:fb:48:74:4a:05:b2:01:0f:
         75:b9:86:4c:24:bc:c7:bd:e8:16:b4:fa:74:2c:a8:fe:62:bb:
         20:af:6b:6d:d2:d9:7c:7e:87:cd:21:96:b1:10:40:c6:9c:d6:
         29:89:48:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcsZeE+51gGuSlbdQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI0MDkxMTAxMDAzMVoXDTI0MTIxMDAyMDAzMVowLzEtMCsGA1UEAxMk
MWFiYWU3NGQtY2MwOS00ZTU3LWE2NjctYThkZTM0ZmFkMDIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6k2Od/lIBB8Xhbwe4vhZaUfWDwKx07pTFV8
KcqBePuPMGE62qHSFD2+72ZwjvBrftJy6cYC7T94AQv25oO1lfQ2OHcWfL0Db9Db
4OjYLPrXDpfaKtQCMq0zjrt+GauNyCqimA6LI0t8G2YRsOkWdM6EruBGvA736vq0
zS4WRtU/AcUJKo75+L2dtCYyjnlf/Q+BZH5mElO4jq/OIm4nN8Lw+h82wh5l4qws
xp/zvMXubN+wNdLCWrIcaYlW6RfevW/INGgp76Lzb6OIWBSjCnqhaxB08Qnuicj9
jFTFowKrOcPJBUQOYDdLmg2dfci7TDGmyb4Akn5XhtutSQMO9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFVU9EU1M9LUrh3lcS0LISynLwYEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZGYwZGRiOTQtYmM4OC0z
ZDcyLTg1YzItOGM3YzM0MDY5N2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FnyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHyK9x4W5M4Lmg8ep08MsPSTsYHo4gWNVYt4v1BtWf5Xok0DzshCJwAh
xUYNNsKDH6JBh9ydZfuBO3voDJXm53TwV+EkxWIUjRO1yriXDR1F0+RLSep2MxLB
F5qnWkbhSEVpWivxG2WwIqs/7HLa+0aCWPbTYB4C87VKjkPkpzB9y07/ER8dQv2l
269clzqvqV+ocujb12PXPYy+ADYlUrL6ybbZtakoxZtKQ0hhZcW3axHcX5dWkiE6
YUkYPyKgCxPmJtja2M42S8dqYTSU7Uj7SHRKBbIBD3W5hkwkvMe96Ba0+nQsqP5i
uyCva23S2Xx+h80hlrEQQMac1imJSAc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:01 2024 by rpki-client on console-ams.rpki-client.org