Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/1b236b97-78a6-3f2e-8cbf-8eae11a60d48.roa
File:                     1b236b97-78a6-3f2e-8cbf-8eae11a60d48.roa (raw, json)
Hash identifier:          Re9YE2VpavxJpF7kH5A16J1nTmkZs3CXZiVKB1KctnA=
Subject key identifier:   87:42:24:5C:9B:54:76:A7:08:93:0D:18:AE:D5:16:92:E2:12:70:DD
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F43285847299B2630A790DD957E7F9C00
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/1b236b97-78a6-3f2e-8cbf-8eae11a60d48.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     12956
IP address blocks:        74.112.232.0/21 maxlen: 21
                          74.116.95.0/24 maxlen: 24
                          199.19.28.0/22 maxlen: 22
                          208.78.48.0/21 maxlen: 21
                          208.91.192.0/22 maxlen: 22
                          2604:25c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:26:30:a7:90:dd:95:7e:7f:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=9272eaa5-88e0-4809-803f-8c56aab225c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:87:a8:d8:41:be:43:1b:45:83:a8:62:f2:94:
                    78:11:ef:33:02:c3:27:87:98:29:70:ac:2f:f7:84:
                    35:4a:78:92:e5:24:5f:ae:3c:03:37:82:76:70:30:
                    00:97:9d:65:70:9d:6e:02:a6:0c:71:fd:61:77:9a:
                    34:3e:14:ef:b8:0f:4a:d1:95:de:85:0c:08:36:86:
                    09:59:92:ea:35:d3:e0:5c:fe:fa:e0:67:2b:60:4e:
                    a5:6f:be:94:64:91:cf:e2:ee:1f:9e:32:5e:b2:a2:
                    1e:ca:df:ad:a4:bb:3a:1b:c4:f6:31:c3:45:42:d8:
                    85:90:88:9f:37:82:38:d6:74:d6:56:15:70:d9:64:
                    10:92:02:ed:88:93:f4:bc:11:44:d1:a4:a7:c0:b5:
                    b9:01:b8:b4:15:77:38:3b:56:86:20:eb:68:6d:b0:
                    f9:6b:a5:41:6a:fd:8f:7c:ae:37:b6:1a:75:03:2b:
                    f6:7c:18:cd:db:d5:28:c2:0f:a8:aa:cb:df:2f:aa:
                    17:d2:ae:a7:bb:31:f3:67:26:01:4e:6d:29:fc:f0:
                    bb:dd:4a:34:91:1d:78:d8:1b:9f:4e:5b:47:a7:86:
                    ac:43:dc:1b:db:33:38:56:0a:af:60:40:dc:65:c5:
                    49:b0:28:21:1e:ec:e4:8f:f7:2e:4b:e1:d9:13:00:
                    55:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:42:24:5C:9B:54:76:A7:08:93:0D:18:AE:D5:16:92:E2:12:70:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/1b236b97-78a6-3f2e-8cbf-8eae11a60d48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.232.0/21
                  74.116.95.0/24
                  199.19.28.0/22
                  208.78.48.0/21
                  208.91.192.0/22
                IPv6:
                  2604:25c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e2:23:33:ac:b8:1f:9d:b3:6d:8f:b0:f4:4f:c0:50:e6:b4:
         37:49:86:8d:b8:40:3e:1e:d8:41:b0:db:92:27:43:dc:84:02:
         68:1c:c9:74:70:8d:ce:39:bd:cb:6b:0c:cd:6b:f8:bf:ad:85:
         98:af:cb:63:3c:aa:d8:c2:19:2d:ec:04:c0:16:a2:59:2c:b6:
         60:8f:48:46:ac:19:49:65:a0:5b:48:e3:d7:0a:1a:3b:42:f3:
         65:44:bf:f6:2e:1a:13:e3:63:7b:c0:82:f4:cb:06:f7:1b:84:
         00:4d:f0:76:02:c4:89:4d:6f:0b:ce:d2:34:ac:43:d9:05:06:
         46:36:c7:39:17:00:30:69:24:65:f2:db:8f:19:27:4a:d0:d5:
         4d:80:f3:18:35:11:a0:41:47:4f:45:4f:24:b4:5d:90:42:60:
         1d:77:7c:f1:37:f7:34:f1:96:dd:76:e8:81:97:f9:dc:b6:2d:
         2e:e4:91:8b:5c:d5:38:ff:d8:1f:f3:eb:d0:59:bc:6b:e0:87:
         17:64:f3:65:15:9b:76:bc:e9:28:2a:b0:0a:4c:f8:52:70:95:
         bb:91:ae:ca:b5:32:0e:c4:a4:48:27:6e:4f:0c:dc:c3:18:58:
         58:8c:9e:59:c2:cf:04:cf:5d:ca:e3:c3:78:94:ff:eb:e6:d4:
         22:3d:a0:5a
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEcpmyYwp5DdlX5/nAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3Yzg2OWEtZmQ5Yy00ZGI5LThkYWItNTRiNzM3MTAz
NTEzMB4XDTI0MDkxMDAxMDAzMFoXDTI0MTIwOTAyMDAzMFowLzEtMCsGA1UEAxMk
OTI3MmVhYTUtODhlMC00ODA5LTgwM2YtOGM1NmFhYjIyNWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioeo2EG+QxtFg6hi8pR4Ee8zAsMnh5gpcKwv
94Q1SniS5SRfrjwDN4J2cDAAl51lcJ1uAqYMcf1hd5o0PhTvuA9K0ZXehQwINoYJ
WZLqNdPgXP764GcrYE6lb76UZJHP4u4fnjJesqIeyt+tpLs6G8T2McNFQtiFkIif
N4I41nTWVhVw2WQQkgLtiJP0vBFE0aSnwLW5Abi0FXc4O1aGIOtobbD5a6VBav2P
fK43thp1Ayv2fBjN29Uowg+oqsvfL6oX0q6nuzHzZyYBTm0p/PC73Uo0kR142Buf
TltHp4asQ9wb2zM4VgqvYEDcZcVJsCghHuzkj/cuS+HZEwBVDwIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFIdCJFybVHanCJMNGK7VFpLiEnDdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ODdj
ODY5YS1mZDljLTRkYjktOGRhYi01NGI3MzcxMDM1MTMvMWIyMzZiOTctNzhhNi0z
ZjJlLThjYmYtOGVhZTExYTYwZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjg3Yzg2OWEtZmQ5Yy00ZGI5LThk
YWItNTRiNzM3MTAzNTEzLzY4N2M4NjlhLWZkOWMtNGRiOS04ZGFiLTU0YjczNzEw
MzUxMy5jcmwwHwYDVR0jBBgwFoAU4uiNCUXNrgKVNNtusLIBOCL3Hl4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ODdjODY5YS1mZDljLTRkYjktOGRhYi01NGI3
MzcxMDM1MTMuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDSnDoAwQA
SnRfAwQCxxMcAwQD0E4wAwQC0FvAMA0EAgACMAcDBQAmBCXAMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG7i
IzOsuB+ds22PsPRPwFDmtDdJho24QD4e2EGw25InQ9yEAmgcyXRwjc45vctrDM1r
+L+thZivy2M8qtjCGS3sBMAWolkstmCPSEasGUlloFtI49cKGjtC82VEv/YuGhPj
Y3vAgvTLBvcbhABN8HYCxIlNbwvO0jSsQ9kFBkY2xzkXADBpJGXy248ZJ0rQ1U2A
8xg1EaBBR09FTyS0XZBCYB13fPE39zTxlt126IGX+dy2LS7kkYtc1Tj/2B/z69BZ
vGvghxdk82UVm3a86SgqsApM+FJwlbuRrsq1Mg7EpEgnbk8M3MMYWFiMnlnCzwTP
Xcrjw3iU/+vm1CI9oFo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:52 2024 by rpki-client on console-fra.rpki-client.org