Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a16ff806-dccf-3443-a63d-49553fa297b8.roa
File:                     a16ff806-dccf-3443-a63d-49553fa297b8.roa (raw, json)
Hash identifier:          mnNglKbonh7ukL7p6D9iZAsnhpuURh1j5JkGFQYlodQ=
Subject key identifier:   E1:92:D0:46:88:55:FD:A4:85:6E:C4:50:73:3D:EC:C8:07:26:88:14
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B14B37E4655CF9C56764C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a16ff806-dccf-3443-a63d-49553fa297b8.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        199.232.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:4b:37:e4:65:5c:f9:c5:67:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=ea9155bd-f67f-4cc3-a3de-ddffd1a5ceb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:90:82:65:fb:7f:a5:1e:9b:fb:b8:02:78:39:
                    cd:7f:63:11:72:6a:4a:d6:5a:f0:f5:54:d8:20:8e:
                    fb:5a:b1:bb:c3:45:5a:55:c5:6f:ce:e1:b9:4b:38:
                    6f:aa:26:55:5a:b9:6c:9b:62:35:38:61:2d:ef:f0:
                    a3:0a:bd:83:24:cd:d2:cc:fd:39:a4:01:2f:d4:f5:
                    40:a1:ca:bc:95:f9:5c:a6:03:c9:25:19:10:c8:e0:
                    33:8e:89:fa:b5:09:56:4a:ba:fd:35:fe:81:23:8f:
                    00:54:7a:69:98:21:75:e1:bf:35:5c:dd:be:9a:85:
                    46:82:dc:ba:8a:9e:25:84:0e:9f:35:88:87:7f:2c:
                    e8:22:b8:3a:45:c8:03:a7:0a:6d:8a:3f:d2:f2:ae:
                    ff:19:19:7b:69:6c:68:80:6d:d8:55:04:94:74:94:
                    5d:24:be:d9:57:d8:89:28:ad:08:cb:d4:e2:56:44:
                    20:e1:c2:93:d3:56:62:73:5a:76:c9:e2:bd:c0:b5:
                    d1:21:9d:e4:12:ab:ec:9b:22:a3:eb:da:02:83:39:
                    9f:e7:71:77:d0:e6:60:63:80:7a:30:1b:1f:89:7a:
                    b2:62:0b:3c:df:d8:86:70:cc:cc:e3:89:08:ab:6d:
                    06:6a:01:d8:3f:d0:94:7b:cb:5b:f5:6b:32:74:c1:
                    67:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:92:D0:46:88:55:FD:A4:85:6E:C4:50:73:3D:EC:C8:07:26:88:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a16ff806-dccf-3443-a63d-49553fa297b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:88:07:18:a4:aa:a1:8f:8f:19:8b:4d:5b:21:64:78:84:4f:
         b8:90:a7:c9:b6:85:ea:5c:14:35:21:d6:ab:04:00:c6:8e:13:
         e1:39:57:f3:2e:7d:56:57:b4:61:16:bd:35:d3:33:16:29:99:
         78:aa:19:b2:47:c4:d2:e5:9d:cc:48:4e:5d:7b:63:fb:51:49:
         db:b2:2f:a6:58:44:5f:65:20:72:10:d7:d0:8c:2e:d0:85:bf:
         c1:e0:ba:5a:7c:14:6e:5a:38:08:12:12:b5:f3:4e:82:39:18:
         ae:d9:5c:99:be:c1:ce:e2:8f:f3:12:05:10:06:0f:c2:bb:da:
         bb:85:90:88:1c:03:60:5b:78:24:f0:7d:aa:0e:25:b2:9f:9c:
         c8:11:09:27:6e:50:a7:a9:3e:f8:21:b4:b6:14:15:26:eb:63:
         41:a9:34:a9:4d:8c:8b:fe:ce:65:4e:06:78:4a:0d:46:22:a8:
         04:c6:17:70:52:c4:61:93:32:ec:f0:73:cf:f2:26:8a:bc:1a:
         91:9e:66:d0:64:ec:f0:58:3e:8f:e2:4d:9f:b4:40:ba:57:b9:
         a2:30:95:2f:77:b2:50:44:52:4c:ae:d1:eb:16:6b:c9:75:e1:
         bf:41:04:94:f9:9c:26:fa:f9:44:07:1f:93:be:ff:ff:01:b6:
         0b:d4:4d:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsUs35GVc+cVnZMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk
ZWE5MTU1YmQtZjY3Zi00Y2MzLWEzZGUtZGRmZmQxYTVjZWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJCCZft/pR6b+7gCeDnNf2MRcmpK1lrw9VTY
II77WrG7w0VaVcVvzuG5SzhvqiZVWrlsm2I1OGEt7/CjCr2DJM3SzP05pAEv1PVA
ocq8lflcpgPJJRkQyOAzjon6tQlWSrr9Nf6BI48AVHppmCF14b81XN2+moVGgty6
ip4lhA6fNYiHfyzoIrg6RcgDpwptij/S8q7/GRl7aWxogG3YVQSUdJRdJL7ZV9iJ
KK0Iy9TiVkQg4cKT01Zic1p2yeK9wLXRIZ3kEqvsmyKj69oCgzmf53F30OZgY4B6
MBsfiXqyYgs839iGcMzM44kIq20GagHYP9CUe8tb9WsydMFnAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGS0EaIVf2khW7EUHM97MgHJogUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYTE2ZmY4MDYtZGNjZi0z
NDQzLWE2M2QtNDk1NTNmYTI5N2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+hsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAByIBxikqqGPjxmLTVshZHiET7iQp8m2hepcFDUh1qsEAMaOE+E5V/Mu
fVZXtGEWvTXTMxYpmXiqGbJHxNLlncxITl17Y/tRSduyL6ZYRF9lIHIQ19CMLtCF
v8Hgulp8FG5aOAgSErXzToI5GK7ZXJm+wc7ij/MSBRAGD8K72ruFkIgcA2BbeCTw
faoOJbKfnMgRCSduUKepPvghtLYUFSbrY0GpNKlNjIv+zmVOBnhKDUYiqATGF3BS
xGGTMuzwc8/yJoq8GpGeZtBk7PBYPo/iTZ+0QLpXuaIwlS93slBEUkyu0esWa8l1
4b9BBJT5nCb6+UQHH5O+//8BtgvUTWU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:31 2024 by rpki-client on console-ams.rpki-client.org