Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/6f5874e2-dc37-3e97-88b9-a13dc7361fe9.roa
File:                     6f5874e2-dc37-3e97-88b9-a13dc7361fe9.roa (raw, json)
Hash identifier:          h6pQ1+6jUwRjAAsVllEHDTFulrXzsCvSvxYtdCSlOWY=
Subject key identifier:   01:4C:6F:49:09:D4:86:6D:CE:C4:0C:D1:D7:6A:7E:BF:0D:BF:9E:A5
Certificate issuer:       /CN=60200506-e0ba-4a7d-b096-a86957fd76ee
Certificate serial:       010D0C9F43285847924BE4E82545E28BBD541140
Authority key identifier: CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/6f5874e2-dc37-3e97-88b9-a13dc7361fe9.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     32157
IP address blocks:        205.211.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:e4:e8:25:45:e2:8b:bd:54:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60200506-e0ba-4a7d-b096-a86957fd76ee
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=b97e484c-d884-4134-89d5-20e9f5080647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:89:a9:d2:2f:ee:a3:2a:fc:4d:8a:c2:1c:29:
                    47:6b:5c:d9:72:b8:0a:b5:8e:b1:7a:69:9f:c2:a7:
                    5e:4e:c0:df:37:4a:36:92:f9:56:7e:4e:8b:ac:d1:
                    88:43:1b:cf:db:57:32:8e:92:ff:b3:da:bb:c7:14:
                    a7:84:57:30:12:74:28:2c:43:57:f2:45:06:86:e7:
                    70:1f:59:ee:13:d3:d7:79:7b:bf:60:73:93:6a:8e:
                    e7:ea:35:12:98:3d:9c:c5:b4:2e:65:40:1f:55:c5:
                    fb:1c:38:06:55:79:75:1c:5f:27:e4:09:32:69:e9:
                    5e:92:c0:fe:5e:1f:24:be:e9:84:d7:b7:b6:72:33:
                    91:5c:54:7c:0d:6b:77:49:bd:99:87:9b:73:b8:73:
                    ed:1b:61:00:1a:8c:b2:22:3c:35:5b:03:ca:fa:46:
                    33:0c:6b:11:c9:45:fb:f1:ea:ad:21:82:08:17:99:
                    85:d1:cb:86:77:b2:c1:eb:35:db:76:5f:61:88:4a:
                    b8:24:a7:69:fe:72:48:f2:d2:24:f8:cf:8b:ef:33:
                    6b:b3:c0:5b:1d:13:de:c7:72:cd:67:2d:40:81:e3:
                    df:f8:d0:21:b3:89:bf:33:9f:53:dd:2d:e9:57:76:
                    dd:24:93:71:d7:c6:bc:a7:f9:4c:af:b3:f0:53:1f:
                    f3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4C:6F:49:09:D4:86:6D:CE:C4:0C:D1:D7:6A:7E:BF:0D:BF:9E:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/6f5874e2-dc37-3e97-88b9-a13dc7361fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl

            X509v3 Authority Key Identifier:
                keyid:CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:21:d9:f5:68:49:7a:cb:66:ff:be:2f:6a:bc:f1:30:bd:95:
         b1:10:de:f2:e9:07:87:8f:3e:c1:fb:88:6d:aa:e2:9c:f5:2c:
         9c:05:09:a0:8d:e4:e2:76:79:76:96:cf:70:13:7f:7a:13:ff:
         34:cc:e5:97:4b:2b:47:35:9c:c7:2d:41:49:31:98:46:85:64:
         d3:f3:fb:18:c8:78:49:be:9c:0e:64:03:f7:2c:72:fe:b8:82:
         b4:23:1f:1c:6a:66:0a:03:32:49:63:0d:c6:e0:7a:20:3c:0c:
         c3:29:80:d4:cc:c9:9a:6c:5b:a2:a6:7e:6c:5e:72:46:8a:19:
         6e:1b:04:34:ba:73:1c:92:94:c8:6f:6d:30:bc:f7:53:ee:ab:
         af:09:93:6e:bb:4b:c3:10:01:73:15:1f:11:50:40:cf:0e:2a:
         e5:83:a2:98:d9:61:06:3a:d8:21:16:38:fe:bd:d9:ec:90:7c:
         1b:2d:e1:9a:ae:ee:6e:fe:e4:46:1e:50:80:1a:71:f1:6b:68:
         5c:ca:a0:8d:f9:cf:27:c8:4a:11:25:ee:a7:25:94:c3:9d:25:
         53:73:eb:17:71:f8:33:90:b5:2f:8b:c8:60:9f:ad:6d:fb:85:
         10:06:26:52:13:f2:d8:e7:c1:b4:10:c5:c6:b5:9f:6e:78:a8:
         5e:fe:ec:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeSS+ToJUXii71UEUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAyMDA1MDYtZTBiYS00YTdkLWIwOTYtYTg2OTU3ZmQ3
NmVlMB4XDTI0MTAxNzEzMDA0MloXDTI1MDExNTE0MDA0MlowLzEtMCsGA1UEAxMk
Yjk3ZTQ4NGMtZDg4NC00MTM0LTg5ZDUtMjBlOWY1MDgwNjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYmp0i/uoyr8TYrCHClHa1zZcrgKtY6xemmf
wqdeTsDfN0o2kvlWfk6LrNGIQxvP21cyjpL/s9q7xxSnhFcwEnQoLENX8kUGhudw
H1nuE9PXeXu/YHOTao7n6jUSmD2cxbQuZUAfVcX7HDgGVXl1HF8n5AkyaeleksD+
Xh8kvumE17e2cjORXFR8DWt3Sb2Zh5tzuHPtG2EAGoyyIjw1WwPK+kYzDGsRyUX7
8eqtIYIIF5mF0cuGd7LB6zXbdl9hiEq4JKdp/nJI8tIk+M+L7zNrs8BbHRPex3LN
Zy1AgePf+NAhs4m/M59T3S3pV3bdJJNx18a8p/lMr7PwUx/zdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAFMb0kJ1IZtzsQM0ddqfr8Nv56lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82MDIw
MDUwNi1lMGJhLTRhN2QtYjA5Ni1hODY5NTdmZDc2ZWUvNmY1ODc0ZTItZGMzNy0z
ZTk3LTg4YjktYTEzZGM3MzYxZmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjAyMDA1MDYtZTBiYS00YTdkLWIw
OTYtYTg2OTU3ZmQ3NmVlLzYwMjAwNTA2LWUwYmEtNGE3ZC1iMDk2LWE4Njk1N2Zk
NzZlZS5jcmwwHwYDVR0jBBgwFoAUzkPt/aKXrQBq5Zwm4d+sl4zfpTkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82MDIwMDUwNi1lMGJhLTRhN2QtYjA5Ni1hODY5
NTdmZDc2ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzdOcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIIh2fVoSXrLZv++L2q88TC9lbEQ3vLpB4ePPsH7iG2q4pz1LJwFCaCN
5OJ2eXaWz3ATf3oT/zTM5ZdLK0c1nMctQUkxmEaFZNPz+xjIeEm+nA5kA/cscv64
grQjHxxqZgoDMkljDcbgeiA8DMMpgNTMyZpsW6KmfmxeckaKGW4bBDS6cxySlMhv
bTC891Puq68Jk267S8MQAXMVHxFQQM8OKuWDopjZYQY62CEWOP692eyQfBst4Zqu
7m7+5EYeUIAacfFraFzKoI35zyfIShEl7qcllMOdJVNz6xdx+DOQtS+LyGCfrW37
hRAGJlIT8tjnwbQQxca1n254qF7+7OI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:40 2024 by rpki-client on console-fra.rpki-client.org