Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/6ba2d275-c3e0-355a-be86-35c5b61f4072.roa
File:                     6ba2d275-c3e0-355a-be86-35c5b61f4072.roa (raw, json)
Hash identifier:          7p2iYgimVfxwxW++2W5DRfWWVjYf2/tGNAGzTH/oPYc=
Subject key identifier:   E3:CE:33:2E:65:2F:CB:2E:44:E1:AF:20:E9:00:2F:BE:F3:72:8F:C4
Certificate issuer:       /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
Certificate serial:       010D0C9F432858473095ECFC5C28FCCA28ABB080
Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/6ba2d275-c3e0-355a-be86-35c5b61f4072.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     16509
IP address blocks:        152.129.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:ec:fc:5c:28:fc:ca:28:ab:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=f78c2ef4-0814-4d9f-8759-5724b0c3405a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2e:d0:76:f1:3c:e4:e8:d1:76:39:38:65:ba:
                    f7:15:0b:99:70:e4:f0:da:69:a3:e6:72:21:ce:93:
                    82:9e:53:04:f6:97:cf:26:c7:35:d1:3a:9e:88:11:
                    30:a6:66:eb:41:4c:f9:e6:93:88:3a:f2:6e:17:79:
                    63:df:4b:5d:4f:2a:de:8a:68:bf:02:c9:bc:40:45:
                    1a:fd:96:33:75:59:b0:82:46:e5:43:6c:c9:13:a9:
                    c0:7e:e5:86:df:62:f5:5a:6b:bf:e3:03:33:c9:1a:
                    3f:cb:6f:bf:b1:94:06:30:b1:86:75:c1:3f:d0:61:
                    1d:86:5b:51:06:d4:f4:7f:5b:27:3f:8a:dd:64:79:
                    82:fc:59:37:f8:03:a9:c7:f4:fe:70:39:6f:b7:23:
                    58:40:d7:b8:73:44:cc:df:2c:0c:11:e9:92:49:62:
                    58:69:5e:56:b2:c3:17:0b:7a:f5:1d:a4:7d:ff:c3:
                    b6:de:4c:e8:68:93:34:d7:0f:fd:cd:6c:47:7e:58:
                    6e:67:da:2d:43:bc:fe:9b:bb:8a:b9:e0:c2:86:aa:
                    5a:c6:be:fd:32:08:33:12:30:b1:00:98:17:61:29:
                    53:a8:9a:a2:d0:76:a2:3d:94:c9:f1:b7:83:1f:d1:
                    6d:9d:e5:97:dd:f3:3e:a8:98:0a:6f:5d:48:12:08:
                    fa:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CE:33:2E:65:2F:CB:2E:44:E1:AF:20:E9:00:2F:BE:F3:72:8F:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/6ba2d275-c3e0-355a-be86-35c5b61f4072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl

            X509v3 Authority Key Identifier:
                keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.129.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:90:80:c4:cc:67:df:78:4a:51:df:60:aa:d9:17:c0:67:c4:
         72:c2:e7:eb:24:04:b2:35:97:74:04:b8:dc:09:a0:99:42:18:
         72:8b:9c:c1:cb:9f:47:f0:23:87:9d:bb:d9:59:03:94:a1:27:
         25:ec:49:e7:a8:10:71:65:a8:e6:b1:14:51:7a:0d:6b:30:6c:
         95:17:42:c8:55:31:93:d9:d8:c5:68:db:43:37:6e:f9:6c:f6:
         a5:56:be:77:6b:ac:2e:9a:1c:0a:b3:7b:a7:14:7a:e0:f8:ae:
         46:28:8f:c1:5c:45:5e:d3:68:b9:03:55:7d:bb:76:b1:32:4f:
         ae:90:3b:90:1d:1d:b7:c1:b2:63:30:a7:11:70:6f:1f:9a:d1:
         7f:06:39:f2:4d:ac:0b:b3:d4:f8:61:3a:b5:5d:19:21:fc:08:
         41:2b:49:8b:22:9e:6b:cc:ab:b8:62:fb:92:db:51:d0:df:4e:
         eb:ef:2b:a8:f7:d1:2e:78:b2:ab:e0:6a:29:c9:81:fd:3d:08:
         35:cf:90:58:5d:ea:26:bf:dc:f3:66:c7:4f:fb:c9:f1:1b:ed:
         a7:94:0a:2f:df:c9:9d:77:be:28:33:4e:5a:e7:e7:d3:44:de:
         3f:98:38:be:b7:54:c1:5f:89:c7:e2:57:7d:57:55:3d:03:1d:
         6a:63:cf:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwlez8XCj8yiirsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGY0ZmFmMmEtMTdmZi00ODI3LTliZWMtYzZmZmNiMmFk
MDkyMB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk
Zjc4YzJlZjQtMDgxNC00ZDlmLTg3NTktNTcyNGIwYzM0MDVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC7QdvE85OjRdjk4Zbr3FQuZcOTw2mmj5nIh
zpOCnlME9pfPJsc10TqeiBEwpmbrQUz55pOIOvJuF3lj30tdTyreimi/Asm8QEUa
/ZYzdVmwgkblQ2zJE6nAfuWG32L1Wmu/4wMzyRo/y2+/sZQGMLGGdcE/0GEdhltR
BtT0f1snP4rdZHmC/Fk3+AOpx/T+cDlvtyNYQNe4c0TM3ywMEemSSWJYaV5WssMX
C3r1HaR9/8O23kzoaJM01w/9zWxHflhuZ9otQ7z+m7uKueDChqpaxr79MggzEjCx
AJgXYSlTqJqi0HaiPZTJ8beDH9FtneWX3fM+qJgKb11IEgj6OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOPOMy5lL8suROGvIOkAL77zco/EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjRm
YWYyYS0xN2ZmLTQ4MjctOWJlYy1jNmZmY2IyYWQwOTIvNmJhMmQyNzUtYzNlMC0z
NTVhLWJlODYtMzVjNWI2MWY0MDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGY0ZmFmMmEtMTdmZi00ODI3LTli
ZWMtYzZmZmNiMmFkMDkyLzRmNGZhZjJhLTE3ZmYtNDgyNy05YmVjLWM2ZmZjYjJh
ZDA5Mi5jcmwwHwYDVR0jBBgwFoAU4BNewN3Gcqc4VJWHF5QWjm2ZcC8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjRmYWYyYS0xN2ZmLTQ4MjctOWJlYy1jNmZm
Y2IyYWQwOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmIH4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACGQgMTMZ994SlHfYKrZF8BnxHLC5+skBLI1l3QEuNwJoJlCGHKLnMHL
n0fwI4edu9lZA5ShJyXsSeeoEHFlqOaxFFF6DWswbJUXQshVMZPZ2MVo20M3bvls
9qVWvndrrC6aHAqze6cUeuD4rkYoj8FcRV7TaLkDVX27drEyT66QO5AdHbfBsmMw
pxFwbx+a0X8GOfJNrAuz1PhhOrVdGSH8CEErSYsinmvMq7hi+5LbUdDfTuvvK6j3
0S54sqvgainJgf09CDXPkFhd6ia/3PNmx0/7yfEb7aeUCi/fyZ13vigzTlrn59NE
3j+YOL63VMFficfiV31XVT0DHWpjz40=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:14 2024 by rpki-client on console-ams.rpki-client.org