Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/9e56f5a3-e24b-359e-be4b-ae75c0ce7cbd.roa
File:                     9e56f5a3-e24b-359e-be4b-ae75c0ce7cbd.roa (raw, json)
Hash identifier:          TUR4owiqe8/7Gm1msLIZCd8bfsGgzoyv/qqiq/tKog8=
Subject key identifier:   BF:D3:C9:69:1E:A2:75:E7:E9:70:28:E1:C3:AE:D1:0A:8E:0D:9F:82
Certificate issuer:       /CN=bad79acc-a971-4c08-8e88-3594dae2715a
Certificate serial:       010D0C9F432858451CE0399A5A2EF0A67EECB540
Authority key identifier: 3D:58:09:D6:0C:EB:72:3D:A4:60:C6:A7:3B:FB:E6:F6:81:08:D5:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/9e56f5a3-e24b-359e-be4b-ae75c0ce7cbd.roa
Signing time:             Wed 06 Mar 2024 02:00:25 +0000
ROA not before:           Wed 06 Mar 2024 02:00:25 +0000
ROA not after:            Tue 04 Jun 2024 01:00:25 +0000
asID:                     8075
IP address blocks:        141.193.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/bad79acc-a971-4c08-8e88-3594dae2715a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/bad79acc-a971-4c08-8e88-3594dae2715a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1c:e0:39:9a:5a:2e:f0:a6:7e:ec:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bad79acc-a971-4c08-8e88-3594dae2715a
        Validity
            Not Before: Mar  6 02:00:25 2024 GMT
            Not After : Jun  4 01:00:25 2024 GMT
        Subject: CN=a2deb1d6-2484-414e-94ad-910eafbb10ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d1:20:16:8f:cc:38:6e:92:9d:21:07:2b:1c:
                    1f:9a:4a:b8:cf:48:35:c8:b0:3e:bf:7c:7b:db:45:
                    d2:ab:1b:26:c8:de:f2:e1:3e:b8:76:c4:48:80:e5:
                    a0:23:16:14:14:a8:c7:5a:76:52:dc:f8:80:2a:a9:
                    eb:a5:df:08:e4:ff:5a:2f:74:76:d2:d7:c5:b4:ef:
                    dd:55:d5:a4:f1:f4:8b:ae:63:d0:e9:3e:70:85:de:
                    9d:f9:49:d1:7c:01:69:a2:5c:93:26:e4:cf:40:64:
                    e0:cf:5b:a1:05:96:c3:5a:f0:85:8e:90:65:c4:4e:
                    e0:30:14:55:60:c7:65:e6:a1:93:65:25:f0:76:b1:
                    b0:eb:4e:bb:f6:5b:18:d0:0a:57:e1:39:50:97:53:
                    94:72:d2:30:93:2a:ee:0f:1b:6e:72:93:4c:a8:b9:
                    2d:db:98:c1:d6:bd:03:6c:e2:5d:61:3b:0f:63:2e:
                    a5:28:cb:8f:fc:8f:b4:16:c9:26:bc:a6:7f:e8:0d:
                    95:86:13:0e:a5:12:41:32:7f:14:c6:c9:60:f4:05:
                    4f:f0:2a:c8:2a:29:b9:1b:eb:f4:04:96:56:b7:3a:
                    2c:ec:b2:e5:15:55:c2:ef:bb:e8:93:8b:4f:9f:38:
                    f5:00:71:c6:fe:d5:6b:bc:84:db:4f:8e:38:d7:05:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D3:C9:69:1E:A2:75:E7:E9:70:28:E1:C3:AE:D1:0A:8E:0D:9F:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/9e56f5a3-e24b-359e-be4b-ae75c0ce7cbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/bad79acc-a971-4c08-8e88-3594dae2715a.crl

            X509v3 Authority Key Identifier:
                keyid:3D:58:09:D6:0C:EB:72:3D:A4:60:C6:A7:3B:FB:E6:F6:81:08:D5:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b8:21:c6:a5:ac:0b:bd:5e:9c:33:c1:45:e8:39:7f:1e:99:
         98:b6:cc:ff:aa:ef:dc:9c:45:4d:6b:8c:22:20:88:9b:3e:e6:
         78:35:7c:5d:fb:b3:76:b4:0a:7e:60:d6:b2:88:15:29:49:03:
         c4:8c:d6:8f:d4:2c:17:43:07:ec:8f:90:af:e7:c3:68:54:b8:
         19:a6:ac:18:97:6b:d8:1f:6a:0f:a0:c5:43:6a:b4:75:9c:f2:
         ae:9f:5b:f1:d0:14:bb:35:e0:38:fb:b9:81:f4:3e:8b:63:7f:
         06:30:d3:2f:a8:ae:1b:f3:04:4b:e2:93:9b:54:14:78:6f:11:
         4a:f5:85:2c:41:d1:80:5a:cf:0c:b0:5e:e4:c8:ca:22:15:d1:
         2c:09:ae:55:e3:e7:18:a3:54:4e:c8:9f:ce:26:a8:93:95:7b:
         4d:c9:fe:ab:ef:89:2c:9e:6c:05:5c:78:d9:e7:d1:3e:99:8b:
         1d:66:f9:4c:94:97:ef:11:b7:1a:5f:cc:8a:1c:7b:ad:69:ae:
         90:6a:71:0f:da:e1:35:ab:b4:9c:df:73:0d:15:72:a9:17:a4:
         08:5e:3c:25:d4:c4:ac:f2:53:f2:b5:0d:35:fc:88:d4:4f:b9:
         51:df:1e:b2:68:57:78:4c:da:13:fc:70:39:1a:37:86:83:0b:
         c5:8e:65:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUc4DmaWi7wpn7stUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmFkNzlhY2MtYTk3MS00YzA4LThlODgtMzU5NGRhZTI3
MTVhMB4XDTI0MDMwNjAyMDAyNVoXDTI0MDYwNDAxMDAyNVowLzEtMCsGA1UEAxMk
YTJkZWIxZDYtMjQ4NC00MTRlLTk0YWQtOTEwZWFmYmIxMGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dEgFo/MOG6SnSEHKxwfmkq4z0g1yLA+v3x7
20XSqxsmyN7y4T64dsRIgOWgIxYUFKjHWnZS3PiAKqnrpd8I5P9aL3R20tfFtO/d
VdWk8fSLrmPQ6T5whd6d+UnRfAFpolyTJuTPQGTgz1uhBZbDWvCFjpBlxE7gMBRV
YMdl5qGTZSXwdrGw60679lsY0ApX4TlQl1OUctIwkyruDxtucpNMqLkt25jB1r0D
bOJdYTsPYy6lKMuP/I+0FskmvKZ/6A2VhhMOpRJBMn8Uxslg9AVP8CrIKim5G+v0
BJZWtzos7LLlFVXC77vok4tPnzj1AHHG/tVrvITbT4441wUdJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/TyWkeonXn6XAo4cOu0QqODZ+CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYWQ3
OWFjYy1hOTcxLTRjMDgtOGU4OC0zNTk0ZGFlMjcxNWEvOWU1NmY1YTMtZTI0Yi0z
NTllLWJlNGItYWU3NWMwY2U3Y2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmFkNzlhY2MtYTk3MS00YzA4LThl
ODgtMzU5NGRhZTI3MTVhL2JhZDc5YWNjLWE5NzEtNGMwOC04ZTg4LTM1OTRkYWUy
NzE1YS5jcmwwHwYDVR0jBBgwFoAUPVgJ1gzrcj2kYManO/vm9oEI1dcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iYWQ3OWFjYy1hOTcxLTRjMDgtOGU4OC0zNTk0
ZGFlMjcxNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcH4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFW4IcalrAu9XpwzwUXoOX8emZi2zP+q79ycRU1rjCIgiJs+5ng1fF37
s3a0Cn5g1rKIFSlJA8SM1o/ULBdDB+yPkK/nw2hUuBmmrBiXa9gfag+gxUNqtHWc
8q6fW/HQFLs14Dj7uYH0PotjfwYw0y+orhvzBEvik5tUFHhvEUr1hSxB0YBazwyw
XuTIyiIV0SwJrlXj5xijVE7In84mqJOVe03J/qvviSyebAVceNnn0T6Zix1m+UyU
l+8RtxpfzIoce61prpBqcQ/a4TWrtJzfcw0VcqkXpAhePCXUxKzyU/K1DTX8iNRP
uVHfHrJoV3hM2hP8cDkaN4aDC8WOZS4=
-----END CERTIFICATE-----
Generated at Mon May 20 14:58:29 2024 by rpki-client on console-ams.rpki-client.org