Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/15f733c5-8347-3e3a-a408-a89cc6b1c3db.roa
File:                     15f733c5-8347-3e3a-a408-a89cc6b1c3db.roa (raw, json)
Hash identifier:          slNI3PCAV5SXV+uCS8SmH0eqShBgl2f16Uo+U8Vfwcc=
Subject key identifier:   3C:BD:B2:91:A6:63:2A:12:DD:6D:4F:70:A3:10:43:F8:DB:56:09:0D
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858478CB69BCD8D1240DE1C458F00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/15f733c5-8347-3e3a-a408-a89cc6b1c3db.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     54858
IP address blocks:        198.244.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:9b:cd:8d:12:40:de:1c:45:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=71fef5a1-c038-4631-a81a-c4d66ec595ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:52:7e:ff:c0:c5:4c:b5:7b:2c:66:02:31:67:
                    b3:5a:72:e2:7a:81:ba:2d:2a:d6:78:5b:b0:56:85:
                    a0:66:eb:ee:67:c3:c7:2d:c6:55:41:18:6e:dc:42:
                    a1:6c:31:01:16:29:e6:66:26:79:9e:88:65:2e:8c:
                    2d:a2:9d:79:01:f2:9d:37:7c:32:e2:54:6b:8b:47:
                    ef:fa:a6:9a:f6:71:8a:43:84:fc:a1:dd:96:80:2f:
                    c1:1e:e1:e5:e9:76:53:23:6a:60:4e:26:8e:94:1b:
                    fe:a5:af:1f:c9:13:40:5b:ac:1c:ae:63:ef:9a:f9:
                    dc:5f:ad:15:60:7b:7d:07:41:8c:f5:19:fe:23:0c:
                    5a:a0:e4:6f:f1:77:8c:4b:45:09:b6:81:54:e9:64:
                    d8:ab:41:16:08:a8:be:1e:7f:29:8b:7c:55:1b:0f:
                    b9:b5:92:95:f3:c4:40:b0:32:3b:35:2e:58:ea:bc:
                    b6:5f:b6:b3:90:cc:38:9e:74:a4:1e:5d:55:aa:6c:
                    9e:25:54:0c:3f:1b:29:17:a8:f8:8c:6f:fd:22:3f:
                    e7:df:8d:29:f9:55:cf:7a:3b:de:c1:57:8a:05:7a:
                    e5:e7:e3:88:cf:7d:20:02:0d:1b:84:01:1a:02:43:
                    83:6c:4f:52:7a:fd:4c:a6:b4:85:4c:8d:97:37:c2:
                    0b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BD:B2:91:A6:63:2A:12:DD:6D:4F:70:A3:10:43:F8:DB:56:09:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/15f733c5-8347-3e3a-a408-a89cc6b1c3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.244.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a1:c6:75:59:ae:b6:89:c6:6b:5d:b4:52:ba:ed:bc:aa:b3:
         f5:33:31:0f:e0:46:64:be:95:e6:43:52:98:87:33:ad:00:d2:
         c2:27:f9:33:42:3a:b1:70:20:99:82:23:2e:1e:76:07:cb:36:
         f3:a3:27:5e:0d:24:a3:11:95:4a:66:7a:8a:fe:6e:52:9d:57:
         b4:ae:1e:2f:47:24:4c:48:be:e9:ec:10:df:af:a4:a1:42:e4:
         28:21:d5:1b:55:0f:d9:58:0e:ae:e5:0a:13:f2:1c:ff:cf:cf:
         54:da:96:75:0c:35:90:b2:09:fe:99:45:04:55:39:cb:1f:95:
         de:03:09:8c:ac:de:1a:59:f1:8f:1d:79:9e:d7:43:7d:bf:8e:
         05:14:75:72:df:a1:ff:3c:59:c2:12:4a:65:4f:4e:46:c9:4e:
         d0:40:b0:6e:cb:c4:09:00:20:1f:6a:f2:0e:a7:fe:f8:bc:73:
         26:2a:09:80:59:09:de:7c:e5:33:6c:ee:d3:49:ce:f2:44:14:
         31:89:3f:97:c4:da:8d:7b:72:42:92:14:67:07:3e:39:07:51:
         69:e6:c7:1e:f4:52:a9:00:c0:45:83:10:db:1c:4a:cf:87:b6:
         25:6b:7d:95:87:59:a3:4e:1c:69:70:18:05:ee:36:42:54:f0:
         cc:d5:55:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMtpvNjRJA3hxFjwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk
NzFmZWY1YTEtYzAzOC00NjMxLWE4MWEtYzRkNjZlYzU5NWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklJ+/8DFTLV7LGYCMWezWnLieoG6LSrWeFuw
VoWgZuvuZ8PHLcZVQRhu3EKhbDEBFinmZiZ5nohlLowtop15AfKdN3wy4lRri0fv
+qaa9nGKQ4T8od2WgC/BHuHl6XZTI2pgTiaOlBv+pa8fyRNAW6wcrmPvmvncX60V
YHt9B0GM9Rn+IwxaoORv8XeMS0UJtoFU6WTYq0EWCKi+Hn8pi3xVGw+5tZKV88RA
sDI7NS5Y6ry2X7azkMw4nnSkHl1VqmyeJVQMPxspF6j4jG/9Ij/n340p+VXPejve
wVeKBXrl5+OIz30gAg0bhAEaAkODbE9Sev1MprSFTI2XN8ILGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDy9spGmYyoS3W1PcKMQQ/jbVgkNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMTVmNzMzYzUtODM0Ny0z
ZTNhLWE0MDgtYTg5Y2M2YjFjM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExvRgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWhxnVZrraJxmtdtFK67byqs/UzMQ/gRmS+leZDUpiHM60A0sIn+TNC
OrFwIJmCIy4edgfLNvOjJ14NJKMRlUpmeor+blKdV7SuHi9HJExIvunsEN+vpKFC
5Cgh1RtVD9lYDq7lChPyHP/Pz1TalnUMNZCyCf6ZRQRVOcsfld4DCYys3hpZ8Y8d
eZ7XQ32/jgUUdXLfof88WcISSmVPTkbJTtBAsG7LxAkAIB9q8g6n/vi8cyYqCYBZ
Cd585TNs7tNJzvJEFDGJP5fE2o17ckKSFGcHPjkHUWnmxx70UqkAwEWDENscSs+H
tiVrfZWHWaNOHGlwGAXuNkJU8MzVVas=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:30 2024 by rpki-client on console-fra.rpki-client.org