Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d3f55b78-b0db-358b-92ae-a01f4943931a.roa
File:                     d3f55b78-b0db-358b-92ae-a01f4943931a.roa (raw, json)
Hash identifier:          kKXautoc/f1vAVWTJFT49J5nZ+gXya52V1SeeOZiw1U=
Subject key identifier:   BD:CE:74:64:13:87:0A:96:1D:B4:63:78:A0:89:F9:F7:60:F7:C5:A5
Certificate issuer:       /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
Certificate serial:       010D0C9F4328584769D0DDAA10CA15943018E92C
Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d3f55b78-b0db-358b-92ae-a01f4943931a.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     18705
IP address blocks:        173.247.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:dd:aa:10:ca:15:94:30:18:e9:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=b84a8624-4b0f-444a-8561-5f09ce4e0753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3c:2e:3f:bb:38:e1:c5:8e:ae:f9:38:77:7f:
                    c6:a9:31:f6:6e:9b:b9:b6:c5:cc:f9:38:2f:20:80:
                    a2:9b:06:fb:a3:60:c3:ea:54:f6:c8:49:6f:ae:29:
                    55:47:62:b5:49:6a:67:f4:7c:86:de:56:79:e1:61:
                    6a:e5:90:7f:5a:13:4a:d5:a7:00:59:d3:5e:41:f0:
                    69:29:c1:16:74:1d:66:67:95:1b:19:d8:77:d0:83:
                    49:ed:28:5e:dd:6b:c9:7a:04:79:99:57:b9:8d:b0:
                    28:53:61:b9:61:89:b2:d2:fd:0d:15:f9:f9:b5:5e:
                    9c:05:bb:14:85:3f:54:5c:45:fb:63:86:dc:75:db:
                    03:cd:cb:22:45:69:a4:66:c5:0d:ea:3c:2b:82:10:
                    b1:0b:89:1f:21:ee:fd:5f:8e:c3:a7:0f:e8:77:1a:
                    51:1d:56:25:f1:63:7f:fe:2d:77:af:f5:c7:80:1f:
                    30:7b:91:24:1b:da:94:a0:85:a6:a4:d5:b3:03:66:
                    40:b0:a5:c2:ab:c8:d9:2b:fd:94:71:bd:41:47:f8:
                    0b:9d:35:08:97:a4:61:85:c4:8c:58:9c:c6:23:de:
                    db:4e:9b:49:b5:51:af:cb:7f:f9:22:8d:1b:89:92:
                    52:10:b1:51:6a:b7:da:a8:4d:5a:37:e8:8e:05:b9:
                    12:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CE:74:64:13:87:0A:96:1D:B4:63:78:A0:89:F9:F7:60:F7:C5:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d3f55b78-b0db-358b-92ae-a01f4943931a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl

            X509v3 Authority Key Identifier:
                keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:d1:b1:ab:b1:a8:37:d1:95:4d:29:59:3f:5f:1b:e3:0a:3f:
         d7:8a:82:69:72:05:f8:19:b4:b7:d3:18:c0:68:e2:3e:b2:e7:
         ba:ca:b3:c3:de:98:5c:a6:d6:bc:ef:ac:b0:98:5f:54:02:4a:
         0d:72:04:82:b9:92:03:14:41:9a:88:e4:71:8f:b9:61:94:8f:
         05:0c:f7:28:db:c0:e8:fc:1a:9f:ec:a8:f8:b8:7c:03:6c:91:
         15:ce:88:37:af:0c:ce:a3:4f:a4:4d:68:d4:df:0f:ef:7f:f1:
         cf:3f:6e:30:25:00:81:f4:f9:a3:cf:c0:7e:38:40:bd:ed:3f:
         32:2d:1d:02:b5:71:b1:eb:90:bd:7e:73:09:d2:d2:95:0d:9c:
         27:23:38:a6:2d:96:c2:68:07:4c:ee:28:b3:b2:6d:56:04:d5:
         9a:bf:ca:c2:58:06:6b:71:90:21:96:87:07:ff:69:c1:8f:ba:
         78:06:e5:3d:52:1e:7c:77:c9:03:04:ba:af:f9:c1:95:e1:4c:
         43:2c:3f:60:d9:9e:fb:8c:c1:2a:6f:c1:36:57:a2:ad:47:26:
         35:2c:f5:90:28:d8:f0:b5:28:36:3b:f6:3b:9d:a1:14:b9:5d:
         98:49:8d:d6:19:a1:9c:3b:de:c6:f3:88:20:33:6e:b0:15:ca:
         7f:05:35:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdp0N2qEMoVlDAY6SwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFiZDlkNDMtYzEyNy00YTllLWIwMzgtMGM0MzZjNWQ5
MDVkMB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk
Yjg0YTg2MjQtNGIwZi00NDRhLTg1NjEtNWYwOWNlNGUwNzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDwuP7s44cWOrvk4d3/GqTH2bpu5tsXM+Tgv
IICimwb7o2DD6lT2yElvrilVR2K1SWpn9HyG3lZ54WFq5ZB/WhNK1acAWdNeQfBp
KcEWdB1mZ5UbGdh30INJ7She3WvJegR5mVe5jbAoU2G5YYmy0v0NFfn5tV6cBbsU
hT9UXEX7Y4bcddsDzcsiRWmkZsUN6jwrghCxC4kfIe79X47Dpw/odxpRHVYl8WN/
/i13r/XHgB8we5EkG9qUoIWmpNWzA2ZAsKXCq8jZK/2Ucb1BR/gLnTUIl6RhhcSM
WJzGI97bTptJtVGvy3/5Io0biZJSELFRarfaqE1aN+iOBbkSGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL3OdGQThwqWHbRjeKCJ+fdg98WlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJk
OWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQzNmM1ZDkwNWQvZDNmNTViNzgtYjBkYi0z
NThiLTkyYWUtYTAxZjQ5NDM5MzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFiZDlkNDMtYzEyNy00YTllLWIw
MzgtMGM0MzZjNWQ5MDVkL2ExYmQ5ZDQzLWMxMjctNGE5ZS1iMDM4LTBjNDM2YzVk
OTA1ZC5jcmwwHwYDVR0jBBgwFoAURFawDMNvboLVigocKndFeOYzoPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJkOWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQz
NmM1ZDkwNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrfcgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACrRsauxqDfRlU0pWT9fG+MKP9eKgmlyBfgZtLfTGMBo4j6y57rKs8Pe
mFym1rzvrLCYX1QCSg1yBIK5kgMUQZqI5HGPuWGUjwUM9yjbwOj8Gp/sqPi4fANs
kRXOiDevDM6jT6RNaNTfD+9/8c8/bjAlAIH0+aPPwH44QL3tPzItHQK1cbHrkL1+
cwnS0pUNnCcjOKYtlsJoB0zuKLOybVYE1Zq/ysJYBmtxkCGWhwf/acGPungG5T1S
Hnx3yQMEuq/5wZXhTEMsP2DZnvuMwSpvwTZXoq1HJjUs9ZAo2PC1KDY79judoRS5
XZhJjdYZoZw73sbziCAzbrAVyn8FNds=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org