Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/915c3cb0-e7b8-320e-ae77-7b801a2c85e6.roa
File:                     915c3cb0-e7b8-320e-ae77-7b801a2c85e6.roa (raw, json)
Hash identifier:          lMX+9v5+1UzZz5QFmIJLvSrvJ7ZT7sGQ00wx+btBuO8=
Subject key identifier:   A1:77:F9:9D:59:08:45:93:5B:97:00:E8:13:9A:7F:95:42:B6:9D:87
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285847600B87D3BF9CCAEB5A939E40
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/915c3cb0-e7b8-320e-ae77-7b801a2c85e6.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     19862
IP address blocks:        65.51.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:87:d3:bf:9c:ca:eb:5a:93:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=e691fbd6-d933-4304-9658-f12be07ea40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:90:89:10:01:f0:49:4c:41:58:98:b4:2f:e2:
                    0f:38:74:ee:d9:a5:a6:83:c1:7e:27:68:a0:ac:18:
                    c8:98:6e:89:63:b9:22:37:fa:47:38:c6:c7:c8:60:
                    03:27:fd:6c:08:6d:6b:6f:d9:2c:3d:4a:42:9b:c0:
                    45:c7:cd:09:09:b8:eb:c4:cd:8a:7c:f1:21:95:c1:
                    c7:ae:e7:db:fa:b3:a0:93:87:42:b2:3f:16:af:a6:
                    e1:a9:88:bc:77:00:b3:82:76:0f:c8:36:6c:de:37:
                    88:bc:34:d5:06:09:e5:9b:bc:17:e2:64:87:51:08:
                    a1:43:4a:d7:a5:2c:15:31:9c:58:9c:18:b2:28:0a:
                    76:b2:37:d0:2c:57:4f:ef:6b:6b:7c:89:46:b9:b5:
                    83:a8:83:de:e2:4d:50:df:3b:02:29:d4:a5:3f:8c:
                    f6:6a:92:c1:90:29:5a:63:8e:b8:1c:1d:9e:65:82:
                    a3:5a:d5:30:6c:12:4c:c3:44:66:0e:2c:d9:05:21:
                    b4:e8:31:9b:6e:29:91:09:92:7c:94:ef:ed:5d:ed:
                    ea:87:bf:89:c5:6d:b2:18:77:4f:05:ac:88:8e:7b:
                    b9:67:a5:09:55:aa:41:3f:15:d5:4a:79:fc:10:62:
                    25:98:bb:c0:1d:70:69:a6:30:e4:79:95:84:6b:09:
                    26:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:77:F9:9D:59:08:45:93:5B:97:00:E8:13:9A:7F:95:42:B6:9D:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/915c3cb0-e7b8-320e-ae77-7b801a2c85e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:78:4c:8e:10:b5:82:03:49:38:db:20:8d:19:b5:c7:cd:69:
         03:75:6c:31:73:31:2d:75:03:63:40:f5:0b:63:15:97:22:44:
         a2:fb:46:b3:9f:41:18:d6:82:9d:6a:5d:ba:09:f3:3b:6d:73:
         31:de:a7:c7:bb:8b:e8:16:fd:8c:ae:4c:74:e0:d6:42:05:cb:
         98:2e:49:a3:56:ee:80:f6:ef:2b:61:bd:29:d4:9e:9a:37:d4:
         7a:89:1c:1b:59:cb:02:77:50:ea:90:4b:52:e2:e4:6c:10:29:
         35:f6:6b:c1:c1:1c:de:3b:d6:98:7c:e8:f0:2b:b8:78:20:30:
         94:c9:f8:bc:37:2c:99:53:de:e3:af:7d:55:d2:77:01:fc:57:
         72:34:49:83:34:9e:80:81:3b:95:ff:c1:43:28:5e:74:95:e3:
         80:3f:28:8c:5d:4a:4d:cf:25:8a:40:e3:a9:86:b4:78:7c:16:
         9b:11:b8:0d:4a:90:4c:21:e0:64:ea:7c:c6:2d:d7:15:a5:50:
         de:ba:73:30:ea:73:eb:72:b8:85:d6:d7:7e:09:8e:1b:f7:7e:
         bf:11:8c:bd:69:e3:74:cd:89:13:1a:f6:ac:5a:59:72:84:bb:
         98:aa:3e:f2:0e:8e:f3:22:c4:fe:f4:de:1c:aa:fc:a0:4a:d0:
         0e:df:5a:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC4fTv5zK61qTnkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
ZTY5MWZiZDYtZDkzMy00MzA0LTk2NTgtZjEyYmUwN2VhNDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZCJEAHwSUxBWJi0L+IPOHTu2aWmg8F+J2ig
rBjImG6JY7kiN/pHOMbHyGADJ/1sCG1rb9ksPUpCm8BFx80JCbjrxM2KfPEhlcHH
rufb+rOgk4dCsj8Wr6bhqYi8dwCzgnYPyDZs3jeIvDTVBgnlm7wX4mSHUQihQ0rX
pSwVMZxYnBiyKAp2sjfQLFdP72trfIlGubWDqIPe4k1Q3zsCKdSlP4z2apLBkCla
Y464HB2eZYKjWtUwbBJMw0RmDizZBSG06DGbbimRCZJ8lO/tXe3qh7+JxW2yGHdP
BayIjnu5Z6UJVapBPxXVSnn8EGIlmLvAHXBppjDkeZWEawkm+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKF3+Z1ZCEWTW5cA6BOaf5VCtp2HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvOTE1YzNjYjAtZTdiOC0z
MjBlLWFlNzctN2I4MDFhMmM4NWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTPyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHp4TI4QtYIDSTjbII0ZtcfNaQN1bDFzMS11A2NA9QtjFZciRKL7RrOf
QRjWgp1qXboJ8zttczHep8e7i+gW/YyuTHTg1kIFy5guSaNW7oD27ythvSnUnpo3
1HqJHBtZywJ3UOqQS1Li5GwQKTX2a8HBHN471ph86PAruHggMJTJ+Lw3LJlT3uOv
fVXSdwH8V3I0SYM0noCBO5X/wUMoXnSV44A/KIxdSk3PJYpA46mGtHh8FpsRuA1K
kEwh4GTqfMYt1xWlUN66czDqc+tyuIXW134Jjhv3fr8RjL1p43TNiRMa9qxaWXKE
u5iqPvIOjvMixP703hyq/KBK0A7fWrU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:31 2024 by rpki-client on console-fra.rpki-client.org