Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9/7a79000b-74b2-326f-820e-6ef810bf34b4.roa
File:                     7a79000b-74b2-326f-820e-6ef810bf34b4.roa (raw, json)
Hash identifier:          lUi930Yjx4oCBhLtPQ9U6EeZgri9QSVv6H+02FV2wl4=
Subject key identifier:   0A:49:32:A9:EB:C6:60:3C:2B:05:F5:E3:84:A8:DD:19:FA:F7:0B:1C
Certificate issuer:       /CN=ac88c330-35f2-4a7d-92e2-3323dabae9f9
Certificate serial:       010D0C9F43285845DD63A40DE667502331FDE780
Authority key identifier: 8D:24:9D:0C:C6:00:63:93:99:8F:03:DA:AA:3E:F4:36:4B:D4:6C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9/7a79000b-74b2-326f-820e-6ef810bf34b4.roa
Signing time:             Tue 14 May 2024 01:00:24 +0000
ROA not before:           Tue 14 May 2024 01:00:24 +0000
ROA not after:            Mon 12 Aug 2024 01:00:24 +0000
asID:                     26427
IP address blocks:        108.161.108.0/23 maxlen: 23
                          108.161.97.0/24 maxlen: 24
                          108.161.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9/ac88c330-35f2-4a7d-92e2-3323dabae9f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9/ac88c330-35f2-4a7d-92e2-3323dabae9f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dd:63:a4:0d:e6:67:50:23:31:fd:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac88c330-35f2-4a7d-92e2-3323dabae9f9
        Validity
            Not Before: May 14 01:00:24 2024 GMT
            Not After : Aug 12 01:00:24 2024 GMT
        Subject: CN=4919355f-f763-4f81-9381-465595b3708a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:64:99:54:9e:9c:2c:47:57:71:4f:ef:9c:7d:
                    67:15:58:69:02:08:92:32:6d:b7:5a:38:48:26:8f:
                    a1:a0:f5:89:4c:7c:92:5f:f4:65:8b:25:d5:30:21:
                    62:2c:36:66:c2:7a:6c:89:62:e1:7c:03:cd:b0:90:
                    1a:21:c7:1c:4b:8e:01:15:f6:73:e1:df:d6:fa:b9:
                    ab:6b:48:e0:65:f4:8f:74:77:9d:56:92:05:08:a1:
                    8c:8e:0e:51:d8:ab:4c:1f:55:35:0b:50:68:05:00:
                    d6:04:38:9f:a6:94:11:7f:6b:17:26:ec:87:95:fd:
                    92:35:63:18:c2:6b:46:fb:ca:14:63:6c:03:31:5a:
                    29:f8:22:54:0d:fb:bd:14:7c:f8:e7:ba:c8:28:ac:
                    ad:66:36:ef:81:53:eb:1a:79:24:29:0e:a4:36:05:
                    87:85:d4:a3:c0:0c:e0:9b:aa:bc:8a:07:55:05:69:
                    7a:78:ef:7c:c8:27:8e:b5:b6:62:74:a3:ce:46:f7:
                    0e:91:73:ed:ce:17:84:81:34:e8:85:e2:cd:43:08:
                    55:f3:56:a9:56:9d:a9:90:7b:66:12:d8:25:cf:f4:
                    c3:55:de:ca:f4:fd:70:01:78:b0:75:dc:bb:72:4c:
                    41:75:43:04:b0:d6:dd:12:88:d1:92:34:7b:88:d6:
                    3a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:49:32:A9:EB:C6:60:3C:2B:05:F5:E3:84:A8:DD:19:FA:F7:0B:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9/7a79000b-74b2-326f-820e-6ef810bf34b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9/ac88c330-35f2-4a7d-92e2-3323dabae9f9.crl

            X509v3 Authority Key Identifier:
                keyid:8D:24:9D:0C:C6:00:63:93:99:8F:03:DA:AA:3E:F4:36:4B:D4:6C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.97.0/24
                  108.161.99.0/24
                  108.161.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:31:2e:26:8c:29:a9:59:71:0f:f6:54:2f:a9:1d:2a:9d:5a:
         3f:89:13:33:9a:c3:85:dc:2f:78:2a:e3:a2:1b:99:ca:cd:72:
         35:05:de:29:8c:04:6a:d5:84:b1:9e:cf:fd:36:16:4a:ef:51:
         c2:be:f1:d6:4f:26:81:5a:d6:30:0b:86:bc:db:5c:3a:c1:78:
         e9:ec:31:f2:bf:d8:07:8d:11:8a:f1:67:24:9e:76:19:a0:38:
         b0:04:60:54:a9:fe:21:75:09:37:52:7e:48:a9:b5:c6:15:2b:
         a0:53:5a:c6:5f:12:37:05:cb:ce:43:d6:3c:5a:b3:21:01:eb:
         c0:93:e1:f2:02:87:08:6d:e5:f9:a3:91:76:d3:65:74:7f:e7:
         9a:40:27:bb:e2:48:3b:af:a8:7c:6d:e8:3e:cc:e6:1a:8a:57:
         38:e7:ad:a9:ef:19:fc:7a:ea:ce:f3:62:de:46:ba:06:bc:4f:
         47:2d:7f:0a:3e:d9:fb:12:30:f3:a0:02:82:fd:7a:79:b6:83:
         f1:a5:76:f2:ad:c4:ca:62:88:d0:3a:4d:76:96:7c:85:77:1f:
         85:48:4d:81:4e:72:ce:4f:bf:7e:f3:5f:88:14:f1:e3:d8:e5:
         a6:18:35:f4:e3:93:c4:bf:31:37:65:b6:60:76:33:67:9c:97:
         cf:b9:ce:1a
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEXdY6QN5mdQIzH954AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM4OGMzMzAtMzVmMi00YTdkLTkyZTItMzMyM2RhYmFl
OWY5MB4XDTI0MDUxNDAxMDAyNFoXDTI0MDgxMjAxMDAyNFowLzEtMCsGA1UEAxMk
NDkxOTM1NWYtZjc2My00ZjgxLTkzODEtNDY1NTk1YjM3MDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWSZVJ6cLEdXcU/vnH1nFVhpAgiSMm23WjhI
Jo+hoPWJTHySX/RliyXVMCFiLDZmwnpsiWLhfAPNsJAaIcccS44BFfZz4d/W+rmr
a0jgZfSPdHedVpIFCKGMjg5R2KtMH1U1C1BoBQDWBDifppQRf2sXJuyHlf2SNWMY
wmtG+8oUY2wDMVop+CJUDfu9FHz457rIKKytZjbvgVPrGnkkKQ6kNgWHhdSjwAzg
m6q8igdVBWl6eO98yCeOtbZidKPORvcOkXPtzheEgTToheLNQwhV81apVp2pkHtm
Etglz/TDVd7K9P1wAXiwddy7ckxBdUMEsNbdEojRkjR7iNY6ewIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFApJMqnrxmA8KwX144So3Rn69wscMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzg4
YzMzMC0zNWYyLTRhN2QtOTJlMi0zMzIzZGFiYWU5ZjkvN2E3OTAwMGItNzRiMi0z
MjZmLTgyMGUtNmVmODEwYmYzNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWM4OGMzMzAtMzVmMi00YTdkLTky
ZTItMzMyM2RhYmFlOWY5L2FjODhjMzMwLTM1ZjItNGE3ZC05MmUyLTMzMjNkYWJh
ZTlmOS5jcmwwHwYDVR0jBBgwFoAUjSSdDMYAY5OZjwPaqj70NkvUbHQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzg4YzMzMC0zNWYyLTRhN2QtOTJlMi0zMzIz
ZGFiYWU5ZjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbKFhAwQA
bKFjAwQBbKFsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAEYxLiaMKalZcQ/2VC+pHSqdWj+JEzOaw4XcL3gq
46IbmcrNcjUF3imMBGrVhLGez/02FkrvUcK+8dZPJoFa1jALhrzbXDrBeOnsMfK/
2AeNEYrxZySedhmgOLAEYFSp/iF1CTdSfkiptcYVK6BTWsZfEjcFy85D1jxasyEB
68CT4fIChwht5fmjkXbTZXR/55pAJ7viSDuvqHxt6D7M5hqKVzjnranvGfx66s7z
Yt5Guga8T0ctfwo+2fsSMPOgAoL9enm2g/GldvKtxMpiiNA6TXaWfIV3H4VITYFO
cs5Pv37zX4gU8ePY5aYYNfTjk8S/MTdltmB2M2ecl8+5zho=
-----END CERTIFICATE-----
Generated at Wed May 22 20:44:41 2024 by rpki-client on console-fra.rpki-client.org