Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/effe9ee4-06f0-397d-9c77-10106018e4bc.roa
File:                     effe9ee4-06f0-397d-9c77-10106018e4bc.roa (raw, json)
Hash identifier:          GE9sJ/BUGEczZ9SBpvOM5vZPW6oCFd3j0egopcTy59E=
Subject key identifier:   F2:10:A2:5D:4F:84:99:75:73:80:1E:57:2B:57:F3:84:F3:B1:9D:1B
Certificate issuer:       /CN=3ebba851-73dc-4c81-9c85-edb63b33b305
Certificate serial:       010D0C9F432858479AABE07A3A637E8FDBFD8180
Authority key identifier: A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/effe9ee4-06f0-397d-9c77-10106018e4bc.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     393550
IP address blocks:        192.41.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:e0:7a:3a:63:7e:8f:db:fd:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebba851-73dc-4c81-9c85-edb63b33b305
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=0c93ff56-a23f-4a57-9af9-0a2cac3a47b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:61:32:10:fc:02:4a:1d:b5:f8:a8:b9:c6:37:
                    95:cb:34:7b:ca:a6:9a:4e:09:d1:cc:29:62:5f:d2:
                    a2:c1:2d:d9:93:c4:fb:fb:e4:4c:05:82:ea:fd:96:
                    dc:96:bc:1a:b2:0f:73:cc:c3:69:fb:58:7c:46:3b:
                    fb:40:3d:ff:7d:ce:2f:cf:f0:26:64:0c:de:f3:45:
                    4a:04:af:6f:53:31:35:1f:06:cf:c0:05:ef:73:57:
                    2a:bb:4f:5c:5f:0d:05:e8:8e:15:6e:2b:78:71:cb:
                    e8:8d:bc:b7:64:4c:a1:e3:f7:a6:df:65:6b:d6:da:
                    d0:e7:1b:63:46:6a:4c:c4:54:b6:a4:cc:9c:07:75:
                    06:61:ed:bf:eb:8c:9c:57:2b:54:65:64:34:30:7b:
                    5a:4b:25:98:02:ff:06:b1:28:42:e2:3d:fc:63:e1:
                    fc:96:a3:c2:68:64:01:94:e8:16:f4:b8:3e:39:46:
                    e6:ee:b6:76:e7:02:db:bd:5a:0b:67:b7:1b:52:fa:
                    c4:dd:57:35:b4:74:e4:88:63:12:50:6b:0d:3b:af:
                    04:85:68:5b:15:f7:f6:b9:5c:0e:61:e1:c5:e4:ad:
                    9e:44:7a:bb:9b:77:d1:6e:f9:64:04:ea:b5:6a:de:
                    5a:ae:06:51:8a:ea:6a:43:6f:b9:bd:b2:5a:92:f6:
                    47:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:10:A2:5D:4F:84:99:75:73:80:1E:57:2B:57:F3:84:F3:B1:9D:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/effe9ee4-06f0-397d-9c77-10106018e4bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl

            X509v3 Authority Key Identifier:
                keyid:A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:47:f2:cb:b8:86:58:4e:d9:48:e3:90:94:56:df:e0:43:6b:
         20:9d:b8:69:37:b4:f7:ed:82:5c:ae:58:2b:0e:39:56:40:e1:
         6c:62:21:55:11:ba:f4:c9:34:7c:cc:42:61:b1:61:01:ea:21:
         45:90:ba:fe:bf:47:90:ee:4d:7b:00:da:03:38:d9:a4:08:e4:
         fe:5f:9d:4e:fe:54:fc:84:18:1e:43:9e:9b:e9:f5:f7:95:1b:
         7c:25:09:8d:65:b0:17:af:d8:05:19:07:6c:9b:87:d4:46:d3:
         45:4f:2e:3c:a8:d9:77:7e:9c:88:f3:13:7d:d4:86:10:b4:bb:
         64:ce:4d:ba:fd:14:bd:8b:ed:39:44:d9:dd:96:93:27:3c:c7:
         9b:3e:a1:62:89:c2:30:64:0c:02:2f:90:a6:6a:61:ba:43:c0:
         f0:92:1c:e0:c4:41:7e:d4:63:1e:a4:b8:b3:7b:9f:5f:21:94:
         ac:87:71:87:a2:cd:35:d8:6e:3d:d3:ca:bc:aa:d3:62:1a:ce:
         9b:71:1a:9f:07:8a:9e:60:85:3e:be:e7:aa:ef:83:cc:ae:91:
         49:99:a0:99:d8:e6:02:74:5c:8c:4f:70:82:55:18:90:eb:99:
         45:27:e6:00:2e:3f:82:65:3d:33:44:e5:7d:78:f3:e4:00:ef:
         f0:96:62:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq+B6OmN+j9v9gYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ViYmE4NTEtNzNkYy00YzgxLTljODUtZWRiNjNiMzNi
MzA1MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk
MGM5M2ZmNTYtYTIzZi00YTU3LTlhZjktMGEyY2FjM2E0N2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGEyEPwCSh21+Ki5xjeVyzR7yqaaTgnRzCli
X9KiwS3Zk8T7++RMBYLq/Zbclrwasg9zzMNp+1h8Rjv7QD3/fc4vz/AmZAze80VK
BK9vUzE1HwbPwAXvc1cqu09cXw0F6I4Vbit4ccvojby3ZEyh4/em32Vr1trQ5xtj
RmpMxFS2pMycB3UGYe2/64ycVytUZWQ0MHtaSyWYAv8GsShC4j38Y+H8lqPCaGQB
lOgW9Lg+OUbm7rZ25wLbvVoLZ7cbUvrE3Vc1tHTkiGMSUGsNO68EhWhbFff2uVwO
YeHF5K2eRHq7m3fRbvlkBOq1at5argZRiupqQ2+5vbJakvZHwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPIQol1PhJl1c4AeVytX84TzsZ0bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZWJi
YTg1MS03M2RjLTRjODEtOWM4NS1lZGI2M2IzM2IzMDUvZWZmZTllZTQtMDZmMC0z
OTdkLTljNzctMTAxMDYwMThlNGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ViYmE4NTEtNzNkYy00YzgxLTlj
ODUtZWRiNjNiMzNiMzA1LzNlYmJhODUxLTczZGMtNGM4MS05Yzg1LWVkYjYzYjMz
YjMwNS5jcmwwHwYDVR0jBBgwFoAUo0JzHRfgcwo5wkye+fXqjrzFcQEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZWJiYTg1MS03M2RjLTRjODEtOWM4NS1lZGI2
M2IzM2IzMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCmxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRH8su4hlhO2UjjkJRW3+BDayCduGk3tPftglyuWCsOOVZA4WxiIVUR
uvTJNHzMQmGxYQHqIUWQuv6/R5DuTXsA2gM42aQI5P5fnU7+VPyEGB5Dnpvp9feV
G3wlCY1lsBev2AUZB2ybh9RG00VPLjyo2Xd+nIjzE33UhhC0u2TOTbr9FL2L7TlE
2d2Wkyc8x5s+oWKJwjBkDAIvkKZqYbpDwPCSHODEQX7UYx6kuLN7n18hlKyHcYei
zTXYbj3Tyryq02IazptxGp8Hip5ghT6+56rvg8yukUmZoJnY5gJ0XIxPcIJVGJDr
mUUn5gAuP4JlPTNE5X148+QA7/CWYuE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:06 2024 by rpki-client on console-ams.rpki-client.org