Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/91e8eef0-d468-36f8-b2c0-cb990eb26e14.roa
File:                     91e8eef0-d468-36f8-b2c0-cb990eb26e14.roa (raw, json)
Hash identifier:          XWvFpsmoY4h78de+nCk5Z/p9EKjHAP6d1c0QeewyxJo=
Subject key identifier:   D0:A6:C2:9D:F6:2F:EA:AB:DF:B0:A8:3B:ED:3B:B9:09:1D:08:D0:18
Certificate issuer:       /CN=d2bbf297-079d-4c91-9341-1297e788c325
Certificate serial:       010D0C9F4328584750B0AB23AAD07EF5B8CBAE80
Authority key identifier: 15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/91e8eef0-d468-36f8-b2c0-cb990eb26e14.roa
Signing time:             Tue 24 Sep 2024 01:00:31 +0000
ROA not before:           Tue 24 Sep 2024 01:00:31 +0000
ROA not after:            Mon 23 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        199.15.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:b0:ab:23:aa:d0:7e:f5:b8:cb:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bbf297-079d-4c91-9341-1297e788c325
        Validity
            Not Before: Sep 24 01:00:31 2024 GMT
            Not After : Dec 23 02:00:31 2024 GMT
        Subject: CN=969dad5a-ed34-44aa-ab11-7f9ce130bd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:92:b5:64:2e:f7:e1:6f:ba:64:d7:18:43:5b:
                    71:35:9f:05:b7:01:f6:f1:97:89:d8:71:d7:be:67:
                    4f:73:e1:09:bb:3e:44:91:03:43:8d:5d:ad:ed:27:
                    c2:77:96:35:79:8f:27:ee:a7:00:70:8b:c0:e8:ad:
                    36:ce:08:ef:75:08:63:d8:25:4c:15:ae:8e:1a:2f:
                    f9:53:f2:22:61:b2:b9:b9:11:2f:e1:07:54:26:56:
                    16:cf:0f:e1:ac:b7:d3:0e:d2:99:3f:5c:71:be:3b:
                    df:48:94:eb:04:94:ca:2b:02:d9:ce:9d:86:56:54:
                    41:82:bf:01:35:d9:a3:31:18:c4:d3:b3:e3:29:ce:
                    32:a3:ef:ab:73:90:31:b4:40:4d:93:1c:a9:f4:72:
                    ec:5b:ff:3b:14:03:dd:1d:b9:72:f5:22:c3:c8:06:
                    67:b8:69:e5:b0:74:ed:35:e4:b5:8d:69:f6:d6:27:
                    70:5d:8e:41:34:8d:6a:8a:17:86:85:0f:1f:6c:eb:
                    5e:48:b1:f3:fd:cb:06:b7:c0:d9:23:13:1a:fe:f1:
                    88:e0:ec:d2:90:ce:c8:e3:c7:91:e6:21:8e:06:b0:
                    b8:2f:4d:a2:cc:39:18:be:72:14:53:9e:2d:c7:96:
                    70:9c:28:52:20:eb:ef:2b:cf:99:51:35:33:5d:68:
                    ee:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A6:C2:9D:F6:2F:EA:AB:DF:B0:A8:3B:ED:3B:B9:09:1D:08:D0:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/91e8eef0-d468-36f8-b2c0-cb990eb26e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl

            X509v3 Authority Key Identifier:
                keyid:15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:4a:91:95:7d:e9:e3:9c:50:33:3b:af:a2:95:8f:11:2c:53:
         ea:35:96:68:5a:60:9e:de:73:4d:93:73:09:ef:65:12:a5:94:
         ef:ac:4c:1d:3a:e1:38:cc:99:5b:97:79:8a:a9:7f:fe:09:bb:
         97:a1:1d:07:da:4c:46:43:40:27:54:f4:dc:f3:77:e3:79:26:
         55:1d:ab:a2:64:d1:72:fd:56:b6:c8:48:47:ae:1b:1b:d9:45:
         77:e8:d0:c0:7c:9e:66:23:fb:f3:72:80:8d:6d:5c:76:1a:b4:
         2f:3f:09:1d:e6:2d:6f:b1:53:a0:cc:b8:26:b9:70:6e:90:70:
         f7:94:3a:0a:76:57:3e:b0:35:ad:07:a9:52:7a:89:c1:84:71:
         e9:05:97:7c:65:88:0f:f8:22:e9:1e:9d:13:90:e0:e2:49:8f:
         25:83:ab:22:f5:b9:17:34:29:84:a3:dd:eb:77:1b:d9:b2:57:
         e0:f2:c8:fa:c5:06:d5:f5:90:1c:f3:8b:50:bf:0a:a8:ec:c7:
         80:c3:97:c2:61:65:1c:62:51:a9:12:4f:fb:08:09:d8:72:0e:
         cb:0c:62:38:36:1c:41:7c:b5:2b:b1:d3:94:a1:82:b0:91:47:
         70:01:73:aa:ea:12:40:f7:df:46:9a:29:33:20:a7:91:4c:13:
         b6:19:38:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdQsKsjqtB+9bjLroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDJiYmYyOTctMDc5ZC00YzkxLTkzNDEtMTI5N2U3ODhj
MzI1MB4XDTI0MDkyNDAxMDAzMVoXDTI0MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk
OTY5ZGFkNWEtZWQzNC00NGFhLWFiMTEtN2Y5Y2UxMzBiZDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5K1ZC734W+6ZNcYQ1txNZ8FtwH28ZeJ2HHX
vmdPc+EJuz5EkQNDjV2t7SfCd5Y1eY8n7qcAcIvA6K02zgjvdQhj2CVMFa6OGi/5
U/IiYbK5uREv4QdUJlYWzw/hrLfTDtKZP1xxvjvfSJTrBJTKKwLZzp2GVlRBgr8B
NdmjMRjE07PjKc4yo++rc5AxtEBNkxyp9HLsW/87FAPdHbly9SLDyAZnuGnlsHTt
NeS1jWn21idwXY5BNI1qiheGhQ8fbOteSLHz/csGt8DZIxMa/vGI4OzSkM7I48eR
5iGOBrC4L02izDkYvnIUU54tx5ZwnChSIOvvK8+ZUTUzXWjunQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNCmwp32L+qr37CoO+07uQkdCNAYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMmJi
ZjI5Ny0wNzlkLTRjOTEtOTM0MS0xMjk3ZTc4OGMzMjUvOTFlOGVlZjAtZDQ2OC0z
NmY4LWIyYzAtY2I5OTBlYjI2ZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDJiYmYyOTctMDc5ZC00YzkxLTkz
NDEtMTI5N2U3ODhjMzI1L2QyYmJmMjk3LTA3OWQtNGM5MS05MzQxLTEyOTdlNzg4
YzMyNS5jcmwwHwYDVR0jBBgwFoAUFYvl0Qfxf8fPbbFdLUnwwCx4NMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMmJiZjI5Ny0wNzlkLTRjOTEtOTM0MS0xMjk3
ZTc4OGMzMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxw9UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK5KkZV96eOcUDM7r6KVjxEsU+o1lmhaYJ7ec02TcwnvZRKllO+sTB06
4TjMmVuXeYqpf/4Ju5ehHQfaTEZDQCdU9Nzzd+N5JlUdq6Jk0XL9VrbISEeuGxvZ
RXfo0MB8nmYj+/NygI1tXHYatC8/CR3mLW+xU6DMuCa5cG6QcPeUOgp2Vz6wNa0H
qVJ6icGEcekFl3xliA/4IukenROQ4OJJjyWDqyL1uRc0KYSj3et3G9myV+DyyPrF
BtX1kBzzi1C/Cqjsx4DDl8JhZRxiUakST/sICdhyDssMYjg2HEF8tSux05ShgrCR
R3ABc6rqEkD330aaKTMgp5FME7YZOPw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:00 2024 by rpki-client on console-ams.rpki-client.org