Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/512c05e3-397c-38ba-bc00-1d872cb257c7.roa
File:                     512c05e3-397c-38ba-bc00-1d872cb257c7.roa (raw, json)
Hash identifier:          bpquPIcQbAc5g/IK/9Jqk82yzszKlRkaL7SnOO3aCIA=
Subject key identifier:   7D:DF:C5:5B:37:E1:92:49:CD:37:98:5E:E3:54:94:8F:9A:01:3B:BB
Certificate issuer:       /CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
Certificate serial:       010D0C9F432858473FF0A7FC28B1EA1932341240
Authority key identifier: 28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/512c05e3-397c-38ba-bc00-1d872cb257c7.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     5719
IP address blocks:        192.12.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:a7:fc:28:b1:ea:19:32:34:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=c437e25e-d29b-46b0-ac30-0eaf528b0c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:70:95:a5:27:57:24:46:e3:27:e9:28:7d:92:
                    79:bd:9a:ce:12:b0:b3:66:54:64:ea:98:6a:52:e5:
                    2c:e2:76:b8:41:6b:f3:5e:e8:f6:1c:a3:83:e8:da:
                    46:7a:04:08:c6:ae:ea:c1:c9:04:18:e7:e0:90:08:
                    a4:ba:e8:cd:6a:eb:78:cf:8c:71:43:c9:9b:f9:54:
                    d6:ab:b0:de:83:7a:40:7a:5a:52:8b:f4:2e:90:b7:
                    f8:39:4d:c4:92:aa:2c:ae:ec:48:95:b4:d2:57:40:
                    90:58:9d:25:d2:ab:9e:30:6d:e1:e4:e7:1b:1a:5c:
                    b4:1e:ca:28:73:67:01:60:31:f6:8a:b8:94:36:18:
                    00:fa:6e:f2:ea:f2:49:c5:76:ed:41:11:f4:bb:b3:
                    bc:31:9e:b1:84:0a:b2:eb:b3:85:a2:03:ab:06:20:
                    fb:09:80:cc:ab:06:7d:5b:84:fa:68:5a:35:36:b7:
                    63:bb:f0:61:b1:75:ce:c5:0a:41:9f:97:4d:d2:c1:
                    95:9c:f9:5d:4c:0f:2b:29:aa:7e:ce:3b:b9:f4:78:
                    03:09:ea:f7:d1:03:37:d0:33:05:37:db:ef:6e:e8:
                    3a:08:43:d7:76:69:34:f7:54:cb:b1:72:12:e3:48:
                    77:02:ae:87:07:a8:af:60:c1:2f:8d:e2:da:38:29:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DF:C5:5B:37:E1:92:49:CD:37:98:5E:E3:54:94:8F:9A:01:3B:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/512c05e3-397c-38ba-bc00-1d872cb257c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl

            X509v3 Authority Key Identifier:
                keyid:28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:ed:d1:85:9c:15:27:49:f9:12:d7:96:6c:9c:35:8f:0a:8e:
         15:38:47:1f:3d:0c:8f:40:09:5c:f8:ac:d6:0a:d6:16:ec:9a:
         bf:be:c6:e3:15:f9:18:b6:65:f1:a1:b3:03:55:fc:27:90:6e:
         36:24:7a:90:ec:84:14:c8:24:90:ac:96:b2:66:42:fa:ff:56:
         21:d8:bd:cc:7b:b6:f0:87:10:5d:5c:97:b8:e6:4d:38:5c:36:
         0c:b3:08:47:79:21:5e:36:92:41:4f:b4:17:c9:c7:87:62:31:
         d9:53:a1:e2:9d:da:db:9c:71:d7:59:81:32:c7:8c:bc:71:ed:
         3e:df:de:dc:e0:b5:17:78:05:24:d9:6e:06:f3:f4:72:7c:47:
         12:84:9d:9f:c9:08:f3:99:6d:c1:ff:6f:22:a7:5e:26:6f:47:
         83:cc:04:38:c8:51:7d:ae:6b:45:ec:f8:9a:88:a8:aa:d6:bc:
         b2:6a:72:c4:ee:53:fb:8a:2b:c4:31:27:b0:f2:e0:6f:1d:69:
         8e:e6:44:ad:cc:7f:01:65:22:89:ac:e0:17:7e:be:fa:ae:7c:
         7b:87:03:64:b7:23:97:c2:37:7d:fe:db:98:34:ce:2c:cf:79:
         78:a9:60:34:8b:35:0c:c6:bf:2d:5e:5d:dd:66:7d:24:52:a3:
         09:c3:cd:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc/8Kf8KLHqGTI0EkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjc5NjBhNDEtMzU5Ny00YjlhLThlNzktODBhZTYzNWNl
OGZmMB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk
YzQzN2UyNWUtZDI5Yi00NmIwLWFjMzAtMGVhZjUyOGIwYzUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3CVpSdXJEbjJ+kofZJ5vZrOErCzZlRk6phq
UuUs4na4QWvzXuj2HKOD6NpGegQIxq7qwckEGOfgkAikuujNaut4z4xxQ8mb+VTW
q7Deg3pAelpSi/QukLf4OU3EkqosruxIlbTSV0CQWJ0l0queMG3h5OcbGly0Hsoo
c2cBYDH2iriUNhgA+m7y6vJJxXbtQRH0u7O8MZ6xhAqy67OFogOrBiD7CYDMqwZ9
W4T6aFo1Nrdju/BhsXXOxQpBn5dN0sGVnPldTA8rKap+zju59HgDCer30QM30DMF
N9vvbug6CEPXdmk091TLsXIS40h3Aq6HB6ivYMEvjeLaOCn4owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH3fxVs34ZJJzTeYXuNUlI+aATu7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yNzk2
MGE0MS0zNTk3LTRiOWEtOGU3OS04MGFlNjM1Y2U4ZmYvNTEyYzA1ZTMtMzk3Yy0z
OGJhLWJjMDAtMWQ4NzJjYjI1N2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjc5NjBhNDEtMzU5Ny00YjlhLThl
NzktODBhZTYzNWNlOGZmLzI3OTYwYTQxLTM1OTctNGI5YS04ZTc5LTgwYWU2MzVj
ZThmZi5jcmwwHwYDVR0jBBgwFoAUKAx+lTalpqo5qdUE5Y0qI6zJIXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yNzk2MGE0MS0zNTk3LTRiOWEtOGU3OS04MGFl
NjM1Y2U4ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKDt0YWcFSdJ+RLXlmycNY8KjhU4Rx89DI9ACVz4rNYK1hbsmr++xuMV
+Ri2ZfGhswNV/CeQbjYkepDshBTIJJCslrJmQvr/ViHYvcx7tvCHEF1cl7jmTThc
NgyzCEd5IV42kkFPtBfJx4diMdlToeKd2tuccddZgTLHjLxx7T7f3tzgtRd4BSTZ
bgbz9HJ8RxKEnZ/JCPOZbcH/byKnXiZvR4PMBDjIUX2ua0Xs+JqIqKrWvLJqcsTu
U/uKK8QxJ7Dy4G8daY7mRK3MfwFlIoms4Bd+vvqufHuHA2S3I5fCN33+25g0zizP
eXipYDSLNQzGvy1eXd1mfSRSownDzQE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:40 2024 by rpki-client on console-fra.rpki-client.org