Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/3f0a8335-44a0-3364-b5a5-e0724387369f.roa
File:                     3f0a8335-44a0-3364-b5a5-e0724387369f.roa (raw, json)
Hash identifier:          BS9+VvRNx8oaJToT43UAREOloJbFRRjqSP2WanvVBxo=
Subject key identifier:   1E:04:4D:1C:FA:69:C0:94:72:9D:2B:10:24:79:8E:B3:A8:38:C3:4C
Certificate issuer:       /CN=42a6a92d-cd75-4125-b537-c87919ad3f73
Certificate serial:       010D0C9F43285847C4AA1734C505180EA2C48F80
Authority key identifier: 8C:94:14:C3:3F:03:44:25:C8:60:7A:5E:08:AC:01:C6:4C:FE:C7:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/3f0a8335-44a0-3364-b5a5-e0724387369f.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     397280
IP address blocks:        72.19.12.0/24 maxlen: 24
                          72.19.13.0/24 maxlen: 24
                          72.19.14.0/24 maxlen: 24
                          72.19.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/42a6a92d-cd75-4125-b537-c87919ad3f73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/42a6a92d-cd75-4125-b537-c87919ad3f73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:17:34:c5:05:18:0e:a2:c4:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42a6a92d-cd75-4125-b537-c87919ad3f73
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=503dc990-51ba-4885-bc9a-7a072d499c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:c0:c2:b6:2d:cf:4b:0c:bc:2b:b0:7d:5a:
                    60:77:b9:7e:80:46:41:e7:d6:93:eb:50:d3:05:2c:
                    e8:b8:0c:ab:c1:2f:53:e4:2f:e1:56:4b:d5:09:ab:
                    ab:4e:2e:f7:2e:4e:0d:90:0e:24:40:c6:b9:44:3b:
                    88:87:49:3a:1f:09:67:02:a7:7a:c5:d5:ab:65:16:
                    ff:93:ee:b3:0e:51:6e:84:60:eb:b0:8e:51:b4:cb:
                    53:f7:2c:0b:49:3d:a3:fe:c6:d8:b3:b2:26:53:c6:
                    18:77:6c:a9:be:aa:7b:eb:8f:37:ed:89:05:46:32:
                    f7:71:62:de:b6:7a:1f:61:8c:31:04:0f:31:d5:a4:
                    dc:18:41:4d:5f:dd:09:aa:c9:e0:6b:b4:b3:ca:6f:
                    bf:2e:9d:e6:28:a3:c0:5d:58:25:f7:a4:2b:d2:3d:
                    fd:62:47:38:2c:42:b1:c3:2e:e1:dc:91:6c:f1:0f:
                    c1:84:95:5a:ae:da:e4:0c:47:33:7c:0f:fb:ec:c4:
                    93:22:58:4d:75:c8:67:c0:14:25:8e:7c:5c:81:e4:
                    19:8e:e8:50:67:3d:c4:38:8b:18:57:26:d9:35:0d:
                    ae:57:9e:5c:dc:db:c7:1c:2d:a4:e9:0c:37:39:e8:
                    fb:30:3f:20:3f:12:c1:53:ba:aa:f8:fe:5c:cc:1d:
                    be:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:04:4D:1C:FA:69:C0:94:72:9D:2B:10:24:79:8E:B3:A8:38:C3:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/3f0a8335-44a0-3364-b5a5-e0724387369f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/42a6a92d-cd75-4125-b537-c87919ad3f73.crl

            X509v3 Authority Key Identifier:
                keyid:8C:94:14:C3:3F:03:44:25:C8:60:7A:5E:08:AC:01:C6:4C:FE:C7:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.19.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:8c:37:c0:80:7d:45:b5:b0:28:58:72:5e:86:cc:4b:34:1b:
         04:2d:f6:ef:dc:22:59:56:42:ff:b1:f2:4b:67:d9:4c:cd:33:
         26:b9:34:f0:d0:56:d6:e8:32:bc:2e:b4:96:11:86:14:73:48:
         a2:7a:87:cc:2e:b3:a2:bb:c8:e5:fc:fb:b8:c5:50:f3:b8:72:
         c5:ea:13:52:cc:8f:74:c1:d7:d6:82:8f:9a:b9:7d:93:a5:3f:
         13:28:e2:bf:37:1f:f8:2b:03:bb:a2:89:96:86:10:d1:52:a9:
         8e:ef:8b:77:fb:f6:b8:95:52:cc:f3:dd:8b:68:0d:53:73:52:
         35:9c:eb:5d:02:41:29:7a:1d:e9:23:85:ab:5e:53:ca:9f:2c:
         6a:63:9e:fc:4f:79:c5:3a:4e:5c:ed:6c:bb:df:35:e2:3a:31:
         1b:16:fe:59:b3:3b:71:c1:f7:d7:67:6b:38:96:f7:c1:c8:84:
         be:7b:e1:9c:60:73:6b:c0:01:8a:63:33:03:d2:51:80:5f:42:
         ed:ab:fa:58:0a:d9:c3:9d:ee:93:86:39:41:b6:b1:2d:07:5a:
         02:60:f1:21:1c:39:c8:c4:7a:ea:4a:09:04:2f:66:23:e9:d8:
         ad:37:9b:a6:1f:e8:28:d1:cf:ce:2d:c5:78:33:0c:77:82:5e:
         50:a4:96:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfEqhc0xQUYDqLEj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDJhNmE5MmQtY2Q3NS00MTI1LWI1MzctYzg3OTE5YWQz
ZjczMB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk
NTAzZGM5OTAtNTFiYS00ODg1LWJjOWEtN2EwNzJkNDk5YzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrTAwrYtz0sMvCuwfVpgd7l+gEZB59aT61DT
BSzouAyrwS9T5C/hVkvVCaurTi73Lk4NkA4kQMa5RDuIh0k6HwlnAqd6xdWrZRb/
k+6zDlFuhGDrsI5RtMtT9ywLST2j/sbYs7ImU8YYd2ypvqp764837YkFRjL3cWLe
tnofYYwxBA8x1aTcGEFNX90Jqsnga7Szym+/Lp3mKKPAXVgl96Qr0j39Ykc4LEKx
wy7h3JFs8Q/BhJVartrkDEczfA/77MSTIlhNdchnwBQljnxcgeQZjuhQZz3EOIsY
VybZNQ2uV55c3NvHHC2k6Qw3Oej7MD8gPxLBU7qq+P5czB2+hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB4ETRz6acCUcp0rECR5jrOoOMNMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80MmE2
YTkyZC1jZDc1LTQxMjUtYjUzNy1jODc5MTlhZDNmNzMvM2YwYTgzMzUtNDRhMC0z
MzY0LWI1YTUtZTA3MjQzODczNjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDJhNmE5MmQtY2Q3NS00MTI1LWI1
MzctYzg3OTE5YWQzZjczLzQyYTZhOTJkLWNkNzUtNDEyNS1iNTM3LWM4NzkxOWFk
M2Y3My5jcmwwHwYDVR0jBBgwFoAUjJQUwz8DRCXIYHpeCKwBxkz+x+4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80MmE2YTkyZC1jZDc1LTQxMjUtYjUzNy1jODc5
MTlhZDNmNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBMMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaMN8CAfUW1sChYcl6GzEs0GwQt9u/cIllWQv+x8ktn2UzNMya5NPDQ
VtboMrwutJYRhhRzSKJ6h8wus6K7yOX8+7jFUPO4csXqE1LMj3TB19aCj5q5fZOl
PxMo4r83H/grA7uiiZaGENFSqY7vi3f79riVUszz3YtoDVNzUjWc610CQSl6Hekj
hateU8qfLGpjnvxPecU6TlztbLvfNeI6MRsW/lmzO3HB99dnaziW98HIhL574Zxg
c2vAAYpjMwPSUYBfQu2r+lgK2cOd7pOGOUG2sS0HWgJg8SEcOcjEeupKCQQvZiPp
2K03m6Yf6CjRz84txXgzDHeCXlCklks=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:10 2024 by rpki-client on console-ams.rpki-client.org