Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e50ab0c5-67dd-3b41-8836-08ff82da7088.roa
File:                     e50ab0c5-67dd-3b41-8836-08ff82da7088.roa (raw, json)
Hash identifier:          swzv2XlBe7VreYfSrhdXPzzNlogmlGES4p/z5acaW2E=
Subject key identifier:   92:75:B2:98:C8:36:59:C9:B3:E1:B3:5F:A4:A2:84:C7:6D:14:3C:AF
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B1388DCEA794944CC0B040
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e50ab0c5-67dd-3b41-8836-08ff82da7088.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        140.248.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:38:8d:ce:a7:94:94:4c:c0:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=4379e7bc-5b05-4a62-bbd9-89815bdda126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:00:b7:d7:04:8c:cb:f1:8e:a4:da:0f:7e:fe:
                    23:79:bf:e1:c6:e5:b5:c5:d8:0e:cc:21:2e:a8:8f:
                    77:1c:23:87:b3:20:98:cd:b6:9e:a5:dd:34:f0:36:
                    6c:1d:f3:09:9f:c7:ea:25:55:f3:eb:3e:03:c9:29:
                    6e:91:13:a4:31:59:da:c8:0d:11:cb:2b:f6:7c:8f:
                    e3:47:92:85:e9:0a:58:0d:f7:7f:f5:c3:5b:9e:da:
                    6a:c5:4e:a8:fb:01:98:18:b5:22:e1:32:79:49:f9:
                    d4:43:7a:3a:57:cf:75:6d:b2:c7:30:38:17:c1:b5:
                    53:18:52:02:55:7d:46:28:b0:34:db:35:91:91:45:
                    0a:49:44:e8:db:7c:82:f0:41:10:02:f5:5e:7a:9f:
                    7b:e8:7a:f6:75:0a:b9:3f:2e:ab:f3:bc:46:31:cb:
                    18:24:12:0a:2e:f8:9e:cc:b6:b2:1a:06:b4:38:24:
                    9f:ee:c4:5a:b0:45:b7:c6:04:a4:fa:51:69:b3:8d:
                    7e:ab:5b:36:cf:e8:7d:06:42:e0:17:fa:f0:18:66:
                    73:20:0c:8b:89:dd:f5:34:de:fb:dd:73:e8:6b:22:
                    85:9e:59:63:f4:e6:0d:6d:f9:bf:01:0b:be:53:ed:
                    10:c5:72:25:ea:15:48:73:23:b9:6c:c5:15:1f:d7:
                    24:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:75:B2:98:C8:36:59:C9:B3:E1:B3:5F:A4:A2:84:C7:6D:14:3C:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e50ab0c5-67dd-3b41-8836-08ff82da7088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:12:43:d9:a0:fc:8a:be:e7:ab:87:20:0e:52:db:2f:0e:06:
         31:fc:ea:11:71:2d:96:2e:4d:c8:ec:b4:5e:ac:cf:d9:7d:af:
         bd:fd:f1:79:57:89:67:87:69:d0:3d:a2:1f:aa:f5:d4:bd:5b:
         15:e1:fa:79:c8:c4:16:b2:32:ee:44:c6:10:e6:33:3f:36:92:
         d0:a7:30:fb:10:55:8a:d1:dc:9c:77:4a:c9:69:84:17:3e:1c:
         cc:78:04:77:7f:71:3b:18:0f:f0:e4:1e:7c:6e:62:da:6c:e9:
         ec:b0:0b:7b:8f:79:85:24:8e:88:61:71:a1:c1:ac:3a:e3:c6:
         24:e1:d2:ee:f9:9a:57:3d:ca:b3:bc:4c:89:f4:70:a9:e6:f6:
         2c:7f:0c:97:c7:ae:1f:2e:88:6a:b5:2b:b4:8c:4a:8c:78:82:
         25:e4:6e:12:08:7d:5a:78:ca:1f:28:4d:1a:67:ad:a2:dc:b6:
         96:d3:e5:1f:56:16:59:0a:29:82:24:71:0c:b8:95:31:d3:46:
         8a:c4:1c:9d:35:bd:be:2d:c7:6b:13:4b:55:6b:d4:f5:21:9c:
         f9:fc:f2:3d:b3:f3:fe:1a:84:08:c6:9d:96:e8:39:a2:79:6d:
         82:eb:f8:88:f6:06:46:cf:9c:b2:4f:4e:dd:e5:fb:b3:d7:f5:
         06:7c:4e:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsTiNzqeUlEzAsEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk
NDM3OWU3YmMtNWIwNS00YTYyLWJiZDktODk4MTViZGRhMTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwC31wSMy/GOpNoPfv4jeb/hxuW1xdgOzCEu
qI93HCOHsyCYzbaepd008DZsHfMJn8fqJVXz6z4DySlukROkMVnayA0Ryyv2fI/j
R5KF6QpYDfd/9cNbntpqxU6o+wGYGLUi4TJ5SfnUQ3o6V891bbLHMDgXwbVTGFIC
VX1GKLA02zWRkUUKSUTo23yC8EEQAvVeep976Hr2dQq5Py6r87xGMcsYJBIKLvie
zLayGga0OCSf7sRasEW3xgSk+lFps41+q1s2z+h9BkLgF/rwGGZzIAyLid31NN77
3XPoayKFnllj9OYNbfm/AQu+U+0QxXIl6hVIcyO5bMUVH9ck2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJJ1spjINlnJs+GzX6SihMdtFDyvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZTUwYWIwYzUtNjdkZC0z
YjQxLTg4MzYtMDhmZjgyZGE3MDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPgJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKASQ9mg/Iq+56uHIA5S2y8OBjH86hFxLZYuTcjstF6sz9l9r7398XlX
iWeHadA9oh+q9dS9WxXh+nnIxBayMu5ExhDmMz82ktCnMPsQVYrR3Jx3SslphBc+
HMx4BHd/cTsYD/DkHnxuYtps6eywC3uPeYUkjohhcaHBrDrjxiTh0u75mlc9yrO8
TIn0cKnm9ix/DJfHrh8uiGq1K7SMSox4giXkbhIIfVp4yh8oTRpnraLctpbT5R9W
FlkKKYIkcQy4lTHTRorEHJ01vb4tx2sTS1Vr1PUhnPn88j2z8/4ahAjGnZboOaJ5
bYLr+Ij2BkbPnLJPTt3l+7PX9QZ8Tj8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:33 2024 by rpki-client on console-fra.rpki-client.org