Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/a805dcee-de5f-32cd-8460-f5c507fc9aac.roa
File:                     a805dcee-de5f-32cd-8460-f5c507fc9aac.roa (raw, json)
Hash identifier:          kYtcqVruKLKPEBnGBmODL7bIzLLhFStXt9gPk7e6ghA=
Subject key identifier:   03:6B:A6:CB:BF:3D:27:46:AC:00:B2:A0:6F:9D:D7:CA:78:32:6E:86
Certificate issuer:       /CN=b8a29c46-e0f1-4edc-988a-9420affbc339
Certificate serial:       010D0C9F4328584787211481EE325979FEFCF2A0
Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/a805dcee-de5f-32cd-8460-f5c507fc9aac.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     205627
IP address blocks:        170.2.122.0/23 maxlen: 24
                          170.2.124.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:14:81:ee:32:59:79:fe:fc:f2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=7a45ad3e-fcc4-4574-ace8-be1058f3f187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:70:c3:d2:c6:ed:c5:f4:bc:0a:14:63:f9:
                    a8:31:11:d0:68:78:9c:1b:6d:68:95:95:5b:c6:29:
                    c2:28:52:44:4b:57:17:98:c0:55:f4:f8:f7:c7:75:
                    20:16:30:3d:80:ad:48:6a:f0:33:83:3a:ea:ef:8d:
                    41:5a:e4:44:c7:0b:0f:f9:95:62:27:9c:f6:33:e1:
                    78:e8:29:cc:89:cc:46:a4:e2:09:e6:39:a7:c5:38:
                    29:90:fb:27:e7:b2:9d:ef:36:19:bc:db:00:ab:16:
                    62:1d:65:61:1b:38:12:c1:df:40:27:40:b5:fb:3d:
                    26:da:56:4e:4d:fd:b2:31:b8:9c:6d:3d:a6:c9:b1:
                    98:48:ae:d3:95:99:b4:ed:92:ae:6d:5f:ea:aa:82:
                    6e:9a:2f:01:7b:3b:ea:24:8e:5e:3c:e7:b0:da:af:
                    30:f3:7d:e0:a5:05:1b:d1:b3:40:56:49:74:76:ba:
                    dd:42:61:e3:fc:e2:97:92:23:77:af:c0:fb:0a:07:
                    8c:54:8a:57:68:46:a2:7c:fd:2e:c2:bd:17:f0:fb:
                    d2:34:25:4f:39:79:a5:5e:a9:42:51:a1:45:a6:46:
                    34:bd:a3:7e:89:f3:b7:41:a9:20:6a:08:ab:ab:2b:
                    89:00:7f:10:91:d1:7a:5c:9a:26:78:4b:56:5b:42:
                    1e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6B:A6:CB:BF:3D:27:46:AC:00:B2:A0:6F:9D:D7:CA:78:32:6E:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/a805dcee-de5f-32cd-8460-f5c507fc9aac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.2.122.0-170.2.125.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:8b:19:ff:82:9d:84:4f:e5:3d:9d:d0:d0:25:7f:a3:48:34:
         9a:f7:a6:24:0a:df:bb:f5:d1:17:2e:ec:49:54:e3:b9:a0:f9:
         a4:36:16:f7:f9:6f:41:e3:44:b8:78:6d:91:bc:82:dc:eb:b5:
         4c:73:8d:9d:30:6b:a1:b7:e5:98:87:34:83:6d:bf:c9:8f:65:
         3a:c6:56:d3:3a:b2:7b:1d:6a:02:b1:33:ce:0e:43:a5:5e:26:
         71:0b:4f:01:03:fa:94:4c:59:47:1c:57:bb:45:8e:ad:be:8a:
         5c:c6:61:7d:cc:59:b8:3b:86:9c:a1:f0:bc:4e:73:d2:1c:ab:
         f4:9b:21:c0:6f:88:fe:66:19:6e:89:59:e8:2d:ae:3c:49:9b:
         3c:7c:1f:17:cf:5c:f1:99:45:4b:31:76:e2:2f:09:f4:b4:8a:
         ab:05:2d:4e:eb:21:e0:81:71:c5:d1:17:ee:36:ed:27:f2:92:
         a7:87:7a:1a:d7:bb:e3:58:ae:bc:1d:1f:2b:09:5c:e5:ee:e7:
         d9:81:4b:b9:82:8b:76:54:01:c1:da:bf:91:b6:cc:c6:96:57:
         68:ba:d5:80:50:e1:23:b9:85:0c:e9:e7:dd:4d:71:55:b1:04:
         cd:34:97:5e:fb:f9:69:4b:8c:b4:11:a8:ad:9a:f6:4d:91:06:
         71:ea:10:92
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEeHIRSB7jJZef788qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj
MzM5MB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk
N2E0NWFkM2UtZmNjNC00NTc0LWFjZTgtYmUxMDU4ZjNmMTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdlww9LG7cX0vAoUY/moMRHQaHicG21olZVb
xinCKFJES1cXmMBV9Pj3x3UgFjA9gK1IavAzgzrq741BWuRExwsP+ZViJ5z2M+F4
6CnMicxGpOIJ5jmnxTgpkPsn57Kd7zYZvNsAqxZiHWVhGzgSwd9AJ0C1+z0m2lZO
Tf2yMbicbT2mybGYSK7TlZm07ZKubV/qqoJumi8BezvqJI5ePOew2q8w833gpQUb
0bNAVkl0drrdQmHj/OKXkiN3r8D7CgeMVIpXaEaifP0uwr0X8PvSNCVPOXmlXqlC
UaFFpkY0vaN+ifO3QakgagirqyuJAH8QkdF6XJomeEtWW0IeXQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFANrpsu/PSdGrACyoG+d18p4Mm6GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy
OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvYTgwNWRjZWUtZGU1Zi0z
MmNkLTg0NjAtZjVjNTA3ZmM5YWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4
OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi
YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw
YWZmYmMzMzkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGqAnoD
BAGqAnwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAfYsZ/4KdhE/lPZ3Q0CV/o0g0mvemJArfu/XRFy7sSVTj
uaD5pDYW9/lvQeNEuHhtkbyC3Ou1THONnTBrobflmIc0g22/yY9lOsZW0zqyex1q
ArEzzg5DpV4mcQtPAQP6lExZRxxXu0WOrb6KXMZhfcxZuDuGnKHwvE5z0hyr9Jsh
wG+I/mYZbolZ6C2uPEmbPHwfF89c8ZlFSzF24i8J9LSKqwUtTush4IFxxdEX7jbt
J/KSp4d6Gte741iuvB0fKwlc5e7n2YFLuYKLdlQBwdq/kbbMxpZXaLrVgFDhI7mF
DOnn3U1xVbEEzTSXXvv5aUuMtBGorZr2TZEGceoQkg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:43:54 2024 by rpki-client on console-ams.rpki-client.org