Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eba44a19-e096-3e04-a7e7-7f66f01c5e79.roa
File:                     eba44a19-e096-3e04-a7e7-7f66f01c5e79.roa (raw, json)
Hash identifier:          Z0pXgPQ321vovgZuwQGeAiO9WMyV7YKE+2KSwgzNmT4=
Subject key identifier:   45:DA:C9:66:BF:36:44:F5:51:99:7C:DD:5A:23:2A:5B:D5:4B:1D:DC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584799466DA8CFF51517EA105560
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eba44a19-e096-3e04-a7e7-7f66f01c5e79.roa
Signing time:             Sun 20 Oct 2024 01:00:30 +0000
ROA not before:           Sun 20 Oct 2024 01:00:30 +0000
ROA not after:            Sat 18 Jan 2025 02:00:30 +0000
asID:                     14618
IP address blocks:        216.107.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:99:46:6d:a8:cf:f5:15:17:ea:10:55:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 20 01:00:30 2024 GMT
            Not After : Jan 18 02:00:30 2025 GMT
        Subject: CN=14345ae7-2d2c-43cb-82c4-660f9833b4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5f:45:60:81:7c:bc:4c:df:5d:ba:7f:81:7c:
                    1d:57:8e:de:74:6c:6d:eb:a6:c8:98:f7:d0:e2:96:
                    d7:42:68:b6:ad:3c:63:99:cb:4c:19:ec:fe:00:c9:
                    21:a7:03:6a:c0:23:3c:0d:2a:24:0a:36:50:6e:47:
                    c5:20:8e:06:ba:97:a6:99:b6:10:e0:bd:22:8f:55:
                    67:63:db:99:2f:50:69:e5:95:c1:f3:ed:a6:29:80:
                    35:ad:f1:3e:80:83:ac:60:85:e6:ac:f5:f6:7f:d8:
                    18:3d:99:3c:6c:3a:a4:d6:a8:a9:fc:4e:8c:a0:1d:
                    b9:69:b7:0e:80:89:26:81:0d:a0:ee:94:9c:10:0d:
                    cb:c4:0a:40:f4:72:a0:23:7f:57:a9:c0:d5:e0:af:
                    90:f4:bd:ba:93:98:47:8e:10:d0:9a:4c:3b:b9:b0:
                    05:ca:bc:19:de:f7:04:44:94:49:f3:ac:18:43:fc:
                    7f:0c:7e:3e:ed:80:d8:e0:4e:d7:72:f0:64:d9:00:
                    09:01:ce:cc:5d:a9:92:93:58:46:20:3a:bf:4b:36:
                    a5:f5:4c:0c:00:bd:59:00:0a:b9:8f:52:37:af:a2:
                    f5:a9:4b:57:e3:6b:ac:96:63:1a:70:9e:35:7b:68:
                    b5:6a:51:bd:57:16:8f:23:3f:41:29:f9:18:8e:a9:
                    2f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DA:C9:66:BF:36:44:F5:51:99:7C:DD:5A:23:2A:5B:D5:4B:1D:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eba44a19-e096-3e04-a7e7-7f66f01c5e79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:fc:35:a9:1d:21:d4:1f:43:7e:b1:52:f7:12:15:0d:ec:8d:
         5c:6e:25:5a:69:3d:17:81:b5:25:ef:c3:2b:8b:67:24:86:38:
         21:1f:62:e6:e9:09:71:87:e5:52:6d:fc:2a:9e:ca:f4:fb:07:
         61:51:d7:66:e7:03:70:e1:18:cb:a4:e2:ef:70:99:54:44:a6:
         6d:ef:c2:b8:bf:15:fd:c4:f0:00:0e:dd:93:a8:fe:e1:bb:9a:
         7c:7f:b6:62:5f:a9:ea:50:59:42:af:d0:da:f2:50:59:44:37:
         5d:1b:ab:72:88:a9:e0:d8:d4:84:da:d5:aa:51:4f:09:cd:10:
         04:1e:30:89:3a:21:83:41:4f:fa:4a:d8:c7:a9:6c:59:af:7b:
         72:8f:fe:5a:c5:87:e5:6b:81:e1:27:1c:3c:b1:f6:f5:c0:85:
         7e:d6:97:49:09:ae:1c:10:ab:ec:e6:66:c5:72:84:b8:ee:89:
         85:eb:e0:c1:32:48:44:76:3c:c4:cf:9c:bd:c1:67:b9:48:3b:
         5f:a2:d9:28:6d:08:40:ce:fd:9c:b7:3a:f5:e0:ad:2c:9a:be:
         4b:04:30:9b:8c:ec:2e:54:5c:c1:3b:d9:d2:34:a1:d9:3c:13:
         fa:17:92:25:f9:e9:ef:c7:18:f6:e2:c9:6e:27:be:81:4d:20:
         f4:2f:21:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeZRm2oz/UVF+oQVWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MTAyMDAxMDAzMFoXDTI1MDExODAyMDAzMFowLzEtMCsGA1UEAxMk
MTQzNDVhZTctMmQyYy00M2NiLTgyYzQtNjYwZjk4MzNiNGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l9FYIF8vEzfXbp/gXwdV47edGxt66bImPfQ
4pbXQmi2rTxjmctMGez+AMkhpwNqwCM8DSokCjZQbkfFII4GupemmbYQ4L0ij1Vn
Y9uZL1Bp5ZXB8+2mKYA1rfE+gIOsYIXmrPX2f9gYPZk8bDqk1qip/E6MoB25abcO
gIkmgQ2g7pScEA3LxApA9HKgI39XqcDV4K+Q9L26k5hHjhDQmkw7ubAFyrwZ3vcE
RJRJ86wYQ/x/DH4+7YDY4E7XcvBk2QAJAc7MXamSk1hGIDq/Szal9UwMAL1ZAAq5
j1I3r6L1qUtX42uslmMacJ41e2i1alG9VxaPIz9BKfkYjqkvGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEXayWa/NkT1UZl83VojKlvVSx3cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZWJhNDRhMTktZTA5Ni0z
ZTA0LWE3ZTctN2Y2NmYwMWM1ZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABX8NakdIdQfQ36xUvcSFQ3sjVxuJVppPReBtSXvwyuLZySGOCEfYubp
CXGH5VJt/CqeyvT7B2FR12bnA3DhGMuk4u9wmVREpm3vwri/Ff3E8AAO3ZOo/uG7
mnx/tmJfqepQWUKv0NryUFlEN10bq3KIqeDY1ITa1apRTwnNEAQeMIk6IYNBT/pK
2MepbFmve3KP/lrFh+VrgeEnHDyx9vXAhX7Wl0kJrhwQq+zmZsVyhLjuiYXr4MEy
SER2PMTPnL3BZ7lIO1+i2ShtCEDO/Zy3OvXgrSyavksEMJuM7C5UXME72dI0odk8
E/oXkiX56e/HGPbiyW4nvoFNIPQvIds=
-----END CERTIFICATE-----
Generated at Tue Oct 22 21:19:01 2024 by rpki-client on console-ams.rpki-client.org