Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa
File:                     7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa (raw, json)
Hash identifier:          Y3GgNPhUWkyYfiVc9ufN/uSfXNqWfG+ToM12JpUS8wA=
Subject key identifier:   DE:D4:89:07:1A:86:D8:BB:05:09:A2:09:87:2E:F8:5A:0F:33:33:F6
Certificate issuer:       /CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
Certificate serial:       010D0C9F43285848292A9E48769957EA74CD2B70
Authority key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa
Signing time:             Tue 10 Dec 2024 14:00:52 +0000
ROA not before:           Tue 10 Dec 2024 14:00:52 +0000
ROA not after:            Mon 10 Mar 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        141.195.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:29:2a:9e:48:76:99:57:ea:74:cd:2b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
        Validity
            Not Before: Dec 10 14:00:52 2024 GMT
            Not After : Mar 10 13:00:52 2025 GMT
        Subject: CN=371c5acc-27fd-471a-a351-dfc04d0bbc0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:30:81:99:b7:f6:65:1a:87:6c:46:61:bf:30:
                    78:04:77:a6:90:fa:94:aa:88:1e:64:20:78:3c:75:
                    07:9d:ce:50:52:c3:04:7d:44:ec:cc:f5:a9:6f:56:
                    ae:10:fa:ee:f3:c4:01:41:45:18:0a:b9:b5:93:47:
                    f9:43:91:34:7b:28:9d:81:c3:99:26:a0:aa:ec:eb:
                    84:eb:64:37:dc:0c:34:cd:65:72:7d:ef:bd:51:f6:
                    3c:5b:dc:d6:bf:d5:92:f2:38:d5:20:cb:cb:83:b4:
                    31:84:f6:b9:b3:1c:d0:1f:ec:29:06:de:d5:05:4c:
                    27:f5:cb:36:42:6a:08:d9:97:0f:f0:bb:42:fa:6a:
                    34:da:28:7c:34:b1:c5:d9:9a:0f:10:96:96:b5:ab:
                    78:45:04:a7:ad:ba:4f:82:0d:a2:4a:9e:0f:66:96:
                    77:24:3c:43:25:56:87:59:b6:94:d8:39:33:ab:50:
                    f5:6c:0c:67:fe:70:af:ae:82:3f:05:ad:b7:73:bc:
                    1c:a9:96:b4:94:89:19:78:75:24:29:ae:85:27:58:
                    bc:da:aa:55:65:c0:d6:d6:7f:e1:07:aa:01:99:2a:
                    a3:4a:b1:76:e2:d2:e2:09:39:94:c6:3c:1b:07:0e:
                    63:98:0f:9d:e4:6a:d7:23:bc:ab:73:bb:10:64:14:
                    82:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D4:89:07:1A:86:D8:BB:05:09:A2:09:87:2E:F8:5A:0F:33:33:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl

            X509v3 Authority Key Identifier:
                keyid:D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:cb:f1:50:c1:ae:46:f6:0b:d8:c7:24:c6:3f:c9:48:f6:e6:
         30:51:44:3f:00:b2:2b:45:72:02:ab:03:5b:6a:e8:7f:4f:65:
         83:e4:f9:a2:76:d0:c5:53:03:e5:0e:cb:69:17:9c:23:98:84:
         da:2d:ed:b7:7c:7c:25:5a:48:ec:b6:bd:ba:20:e0:ea:cd:fb:
         b1:e7:e3:7c:3c:99:48:82:99:3a:4c:e8:0a:e9:db:49:77:48:
         46:bb:12:a5:3e:52:e2:0c:99:72:76:83:b5:ac:93:5a:d9:f5:
         70:96:a0:3c:a4:88:a8:77:8e:75:ed:c9:9b:c5:56:01:3b:ac:
         1c:58:a1:8c:1b:31:a6:5b:fb:e2:b6:9a:aa:59:12:dc:c4:a3:
         58:c3:75:84:55:30:09:b3:93:37:5f:5b:21:90:58:c5:db:b9:
         70:04:5b:3c:d4:cb:f2:5b:c7:93:82:e5:dc:7e:8a:7d:89:49:
         e1:7c:7f:0a:1e:44:17:11:a2:4c:e2:dc:73:51:33:72:b0:6f:
         37:63:a9:df:ab:6e:18:e3:b6:b4:7b:b0:d0:2c:0f:fd:46:8a:
         4f:c8:7b:e9:2b:11:04:b8:3c:ce:f2:26:a4:52:6a:7f:43:b0:
         6d:70:ad:62:79:e7:20:9f:21:1d:26:70:9f:a0:c5:33:7d:b5:
         3b:4d:da:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgpKp5IdplX6nTNK3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFlOTE5MjgtMzVjZi00NmVkLWJmODctOTJkOWJmZDYy
OWVjMB4XDTI0MTIxMDE0MDA1MloXDTI1MDMxMDEzMDA1MlowLzEtMCsGA1UEAxMk
MzcxYzVhY2MtMjdmZC00NzFhLWEzNTEtZGZjMDRkMGJiYzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTCBmbf2ZRqHbEZhvzB4BHemkPqUqogeZCB4
PHUHnc5QUsMEfUTszPWpb1auEPru88QBQUUYCrm1k0f5Q5E0eyidgcOZJqCq7OuE
62Q33Aw0zWVyfe+9UfY8W9zWv9WS8jjVIMvLg7QxhPa5sxzQH+wpBt7VBUwn9cs2
QmoI2ZcP8LtC+mo02ih8NLHF2ZoPEJaWtat4RQSnrbpPgg2iSp4PZpZ3JDxDJVaH
WbaU2Dkzq1D1bAxn/nCvroI/Ba23c7wcqZa0lIkZeHUkKa6FJ1i82qpVZcDW1n/h
B6oBmSqjSrF24tLiCTmUxjwbBw5jmA+d5GrXI7yrc7sQZBSCgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN7UiQcahti7BQmiCYcu+FoPMzP2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWU5
MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5YmZkNjI5ZWMvN2M2OGYxZWUtNzlmZi0z
MGFhLWIwZTgtZTkwZmIwYWYzZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFlOTE5MjgtMzVjZi00NmVkLWJm
ODctOTJkOWJmZDYyOWVjLzhhZTkxOTI4LTM1Y2YtNDZlZC1iZjg3LTkyZDliZmQ2
MjllYy5jcmwwHwYDVR0jBBgwFoAU2TQRwLPFpEBlZAHjBJjcizLXl+UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YWU5MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5
YmZkNjI5ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcNyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABXL8VDBrkb2C9jHJMY/yUj25jBRRD8AsitFcgKrA1tq6H9PZYPk+aJ2
0MVTA+UOy2kXnCOYhNot7bd8fCVaSOy2vbog4OrN+7Hn43w8mUiCmTpM6Arp20l3
SEa7EqU+UuIMmXJ2g7Wsk1rZ9XCWoDykiKh3jnXtyZvFVgE7rBxYoYwbMaZb++K2
mqpZEtzEo1jDdYRVMAmzkzdfWyGQWMXbuXAEWzzUy/Jbx5OC5dx+in2JSeF8fwoe
RBcRokzi3HNRM3Kwbzdjqd+rbhjjtrR7sNAsD/1Gik/Ie+krEQS4PM7yJqRSan9D
sG1wrWJ55yCfIR0mcJ+gxTN9tTtN2i0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:26 2025 by rpki-client