Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/f4907413-bbac-3c03-a81b-652c4135a403.roa
File:                     f4907413-bbac-3c03-a81b-652c4135a403.roa (raw, json)
Hash identifier:          jTMfSsOqS+tUvc3yW/njEb1iao/57DnOTlgTZ3B0dh8=
Subject key identifier:   5F:98:7D:FF:B5:75:1F:CD:8C:D2:A0:F3:0E:A2:B3:D4:69:65:B1:DD
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F432858473FF0A0C996D5DED121D2B900
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/f4907413-bbac-3c03-a81b-652c4135a403.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     54484
IP address blocks:        138.229.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:a0:c9:96:d5:de:d1:21:d2:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=cfc5bebb-e13d-447a-8155-14e0ed1eae56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:b3:83:b1:c3:c4:2e:93:2f:53:b5:2d:4e:
                    31:64:8d:2a:9b:69:b6:86:d8:9f:47:b0:e2:7c:fa:
                    70:ee:aa:74:eb:27:54:f1:ea:75:b1:42:a5:36:58:
                    23:18:75:7a:c6:3a:14:e3:46:4f:c5:4e:4d:78:36:
                    7a:ac:fa:28:70:1b:d8:b5:40:56:9c:7b:b9:5b:e2:
                    35:58:03:7a:9e:ed:d9:61:05:26:e1:55:7e:77:3b:
                    72:67:e6:ba:b5:d6:4b:da:4d:0f:9b:1f:5c:ab:d9:
                    c1:93:f5:c5:62:78:19:06:62:73:f4:db:99:1d:16:
                    8c:a5:49:2a:bb:00:ad:de:ec:28:9d:fe:c6:2a:d1:
                    31:97:21:a4:64:37:22:a6:9d:4d:11:73:8d:68:82:
                    6b:32:d7:73:11:c2:e9:f1:89:1a:9a:d8:f2:3a:3b:
                    e2:47:23:02:4a:35:0b:b6:19:4f:ba:02:3a:ef:c4:
                    46:d2:48:32:19:67:2b:22:b9:38:a3:0d:1c:7f:dc:
                    53:90:55:15:c9:a1:81:40:d8:0b:b0:f2:da:be:2c:
                    47:5d:31:48:b8:18:07:54:04:33:58:60:94:42:c4:
                    57:cb:bf:77:6f:c6:28:79:01:b2:17:09:64:a8:9c:
                    6c:27:e2:2d:f8:e7:ba:53:e8:e4:27:20:f6:cb:4c:
                    78:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:98:7D:FF:B5:75:1F:CD:8C:D2:A0:F3:0E:A2:B3:D4:69:65:B1:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/f4907413-bbac-3c03-a81b-652c4135a403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:7a:c4:e7:67:23:f6:63:8b:e6:98:d4:82:6c:d8:d8:1e:90:
         d1:3e:b8:15:c7:b3:4b:2b:c5:38:5e:83:e9:7d:8c:64:5d:ef:
         74:03:fb:a7:d2:f7:fb:d9:fd:8f:e1:c6:00:46:6c:07:37:a1:
         4d:28:69:f4:a6:e9:69:68:29:54:10:b7:e0:4e:aa:2e:ec:c5:
         44:4c:47:06:75:e7:61:e0:ec:15:0c:17:76:a4:21:ad:e3:5a:
         6d:19:7a:73:1d:3f:c0:2c:42:06:dc:ab:a1:61:2a:a2:a7:2b:
         6c:6d:dd:b0:3a:90:a9:a9:ee:96:cb:21:a3:be:8d:19:d3:3f:
         ff:0f:2a:5d:d5:d3:b0:68:1d:d5:e0:99:b4:67:5c:86:88:a3:
         58:df:c7:25:ea:54:15:0f:0c:49:4e:69:dd:f2:b7:ba:1b:bf:
         12:0d:a8:d9:85:e6:48:55:40:62:e6:54:71:7c:75:98:5f:95:
         23:1a:2d:cf:c4:7a:82:9d:e3:e0:fc:ef:2c:c9:c8:a8:40:77:
         6e:3c:0e:e4:6c:28:05:52:f7:9f:4b:37:65:c7:14:e0:20:c8:
         98:99:cf:43:75:7d:a6:04:05:30:1a:0c:fe:33:d9:e1:21:b6:
         be:fe:cd:5e:f1:42:0a:3c:ad:16:c6:b7:fa:bd:ae:4b:4b:13:
         85:32:2c:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc/8KDJltXe0SHSuQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0
MjhhMB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk
Y2ZjNWJlYmItZTEzZC00NDdhLTgxNTUtMTRlMGVkMWVhZTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra+zg7HDxC6TL1O1LU4xZI0qm2m2htifR7Di
fPpw7qp06ydU8ep1sUKlNlgjGHV6xjoU40ZPxU5NeDZ6rPoocBvYtUBWnHu5W+I1
WAN6nu3ZYQUm4VV+dztyZ+a6tdZL2k0Pmx9cq9nBk/XFYngZBmJz9NuZHRaMpUkq
uwCt3uwonf7GKtExlyGkZDcipp1NEXONaIJrMtdzEcLp8YkamtjyOjviRyMCSjUL
thlPugI678RG0kgyGWcrIrk4ow0cf9xTkFUVyaGBQNgLsPLavixHXTFIuBgHVAQz
WGCUQsRXy793b8YoeQGyFwlkqJxsJ+It+Oe6U+jkJyD2y0x4nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF+Yff+1dR/NjNKg8w6is9RpZbHdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1
YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvZjQ5MDc0MTMtYmJhYy0z
YzAzLWE4MWItNjUyYzQxMzVhNDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj
ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw
NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5
ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABh6xOdnI/Zji+aY1IJs2NgekNE+uBXHs0srxTheg+l9jGRd73QD+6fS
9/vZ/Y/hxgBGbAc3oU0oafSm6WloKVQQt+BOqi7sxURMRwZ152Hg7BUMF3akIa3j
Wm0ZenMdP8AsQgbcq6FhKqKnK2xt3bA6kKmp7pbLIaO+jRnTP/8PKl3V07BoHdXg
mbRnXIaIo1jfxyXqVBUPDElOad3yt7obvxINqNmF5khVQGLmVHF8dZhflSMaLc/E
eoKd4+D87yzJyKhAd248DuRsKAVS959LN2XHFOAgyJiZz0N1faYEBTAaDP4z2eEh
tr7+zV7xQgo8rRbGt/q9rktLE4UyLKQ=
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:36:43 2024 by rpki-client on console-ams.rpki-client.org