Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f/b3a343da-d267-3e5a-ad11-e1cd417c2011.roa
File:                     b3a343da-d267-3e5a-ad11-e1cd417c2011.roa (raw, json)
Hash identifier:          kAdhJe4CSuJWcn0Ty0fHEFMEhLD4mUtsWloNT8mCriM=
Subject key identifier:   19:CD:67:26:47:91:90:9B:9B:40:B5:76:76:37:98:95:F1:F2:81:BB
Certificate issuer:       /CN=7997a51b-ca8d-4bb7-a3e4-7db0ea68690f
Certificate serial:       010D0C9F43285847537B58E129376103E24FCC80
Authority key identifier: 53:A6:C1:14:E6:5F:FD:B6:57:2D:DC:BA:8A:87:9B:51:E7:03:67:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f/b3a343da-d267-3e5a-ad11-e1cd417c2011.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     1239
IP address blocks:        167.14.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:58:e1:29:37:61:03:e2:4f:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997a51b-ca8d-4bb7-a3e4-7db0ea68690f
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=7e55ce4f-a85e-44ef-98c7-d1ef65b6f4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a1:c3:4b:0f:fa:20:b1:e8:6d:01:fb:3e:39:
                    d2:98:f7:eb:d8:24:b1:d8:6a:21:2d:b8:5a:6e:62:
                    2a:d7:4d:a2:79:c6:57:bf:17:6f:e0:e8:cf:e6:b2:
                    30:38:c0:3d:cf:bd:e5:fc:1e:4b:88:d3:65:7a:83:
                    03:4a:61:fd:cf:ff:99:f0:67:89:a7:cd:c0:b9:6c:
                    b0:a1:67:af:66:88:33:ed:a7:4a:82:f3:8b:fe:02:
                    7b:4b:ec:20:58:78:00:54:6c:59:ee:64:50:20:61:
                    31:a9:65:92:0a:fc:4d:04:63:36:0b:c9:e0:a5:a1:
                    49:eb:fd:57:e3:4d:69:98:7e:eb:49:6d:3b:56:4c:
                    ad:91:db:63:97:6f:a3:87:fd:2b:b9:42:59:f5:2a:
                    ea:19:b4:74:de:98:17:53:5c:4f:0d:c7:43:a7:b7:
                    d8:85:6e:07:e7:d6:de:71:61:0e:a9:80:e2:29:31:
                    17:ad:f7:30:5e:94:02:35:cf:f1:37:05:20:72:cd:
                    d4:78:6e:5e:22:70:55:59:9c:4d:e6:c4:d8:8b:c6:
                    a6:1b:50:35:9f:58:b8:8b:cc:97:28:a4:e6:98:ee:
                    e7:4d:55:7c:d5:c4:d8:00:93:7e:92:7e:cb:a6:de:
                    a8:ed:69:e1:52:ce:4b:05:cb:52:fb:a5:40:c2:3e:
                    ef:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CD:67:26:47:91:90:9B:9B:40:B5:76:76:37:98:95:F1:F2:81:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f/b3a343da-d267-3e5a-ad11-e1cd417c2011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f.crl

            X509v3 Authority Key Identifier:
                keyid:53:A6:C1:14:E6:5F:FD:B6:57:2D:DC:BA:8A:87:9B:51:E7:03:67:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.14.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:6f:08:92:d4:4f:67:9a:1e:3a:51:b2:4c:6a:9b:41:4a:a2:
         be:8f:00:32:3a:1a:c0:35:dc:df:dc:8f:47:96:1b:0d:dd:72:
         95:76:af:30:76:22:12:87:23:a5:7f:17:24:27:86:da:32:55:
         45:33:bd:ed:00:32:9e:c1:20:94:98:a1:f5:31:87:8c:3c:ea:
         3d:ed:10:30:82:5a:e6:75:00:ce:65:ba:48:41:74:4c:d9:c5:
         ee:5f:29:7f:11:36:ea:f6:c6:22:be:23:96:36:63:82:05:d7:
         c7:d0:84:d8:1c:d0:bf:7a:8c:31:fd:86:85:0c:a7:3c:6f:e2:
         eb:3e:ec:88:b5:58:17:0c:33:ba:d6:ef:ad:56:09:b8:f8:10:
         42:01:a7:3d:ee:27:6b:d7:01:74:ff:9b:ee:67:de:06:cb:21:
         8b:32:e2:eb:e0:84:19:f0:9e:b3:7d:f8:33:43:e9:83:fa:b1:
         31:5b:b6:42:8f:d6:22:36:ee:cd:94:7a:0d:fc:cb:d4:d0:9b:
         cf:b5:a4:f8:24:94:43:39:3b:29:40:9e:9a:e4:bc:7a:2b:62:
         91:f1:4c:67:bc:28:1d:3b:07:c1:af:16:1a:12:d6:89:95:cb:
         20:2e:b0:1c:be:8e:d2:4c:b8:ba:d3:38:55:4c:52:65:ab:e4:
         59:dd:46:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdTe1jhKTdhA+JPzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzk5N2E1MWItY2E4ZC00YmI3LWEzZTQtN2RiMGVhNjg2
OTBmMB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk
N2U1NWNlNGYtYTg1ZS00NGVmLTk4YzctZDFlZjY1YjZmNGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqHDSw/6ILHobQH7PjnSmPfr2CSx2GohLbha
bmIq102iecZXvxdv4OjP5rIwOMA9z73l/B5LiNNleoMDSmH9z/+Z8GeJp83AuWyw
oWevZogz7adKgvOL/gJ7S+wgWHgAVGxZ7mRQIGExqWWSCvxNBGM2C8ngpaFJ6/1X
401pmH7rSW07Vkytkdtjl2+jh/0ruUJZ9SrqGbR03pgXU1xPDcdDp7fYhW4H59be
cWEOqYDiKTEXrfcwXpQCNc/xNwUgcs3UeG5eInBVWZxN5sTYi8amG1A1n1i4i8yX
KKTmmO7nTVV81cTYAJN+kn7Lpt6o7WnhUs5LBctS+6VAwj7vwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBnNZyZHkZCbm0C1dnY3mJXx8oG7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83OTk3
YTUxYi1jYThkLTRiYjctYTNlNC03ZGIwZWE2ODY5MGYvYjNhMzQzZGEtZDI2Ny0z
ZTVhLWFkMTEtZTFjZDQxN2MyMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzk5N2E1MWItY2E4ZC00YmI3LWEz
ZTQtN2RiMGVhNjg2OTBmLzc5OTdhNTFiLWNhOGQtNGJiNy1hM2U0LTdkYjBlYTY4
NjkwZi5jcmwwHwYDVR0jBBgwFoAUU6bBFOZf/bZXLdy6ioebUecDZ7kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83OTk3YTUxYi1jYThkLTRiYjctYTNlNC03ZGIw
ZWE2ODY5MGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApw4sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGBvCJLUT2eaHjpRskxqm0FKor6PADI6GsA13N/cj0eWGw3dcpV2rzB2
IhKHI6V/FyQnhtoyVUUzve0AMp7BIJSYofUxh4w86j3tEDCCWuZ1AM5lukhBdEzZ
xe5fKX8RNur2xiK+I5Y2Y4IF18fQhNgc0L96jDH9hoUMpzxv4us+7Ii1WBcMM7rW
761WCbj4EEIBpz3uJ2vXAXT/m+5n3gbLIYsy4uvghBnwnrN9+DND6YP6sTFbtkKP
1iI27s2Ueg38y9TQm8+1pPgklEM5OylAnprkvHorYpHxTGe8KB07B8GvFhoS1omV
yyAusBy+jtJMuLrTOFVMUmWr5FndRug=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:43 2024 by rpki-client on console-fra.rpki-client.org