Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/7461eb70-aa87-3357-82ad-5c4dd94fb1d0.roa
File:                     7461eb70-aa87-3357-82ad-5c4dd94fb1d0.roa (raw, json)
Hash identifier:          ei26GHcQf/PJgBhap9lKgpGCm/AIduYwTR5iM6EtbNc=
Subject key identifier:   25:92:EF:8B:74:CE:EC:E9:83:51:40:30:2F:A4:C0:2D:CD:6E:C3:EB
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F43285847924BDFED1F170CB1972CB380
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/7461eb70-aa87-3357-82ad-5c4dd94fb1d0.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     399291
IP address blocks:        104.238.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:df:ed:1f:17:0c:b1:97:2c:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=bcf84ef9-d786-40e1-8580-f06591be8d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:83:19:23:f5:bb:69:08:6e:47:84:bb:37:44:
                    16:b0:a7:0b:ec:79:1f:e6:80:1b:0a:14:b2:73:e4:
                    1d:d7:78:5f:cb:42:00:ae:a2:cb:77:13:af:5e:31:
                    a1:03:af:e2:b9:6b:5d:8c:32:bf:66:00:7f:b4:3e:
                    2a:8e:c2:ae:4b:41:c9:45:6b:25:45:26:3c:40:57:
                    af:b0:61:6e:2a:33:88:24:d6:0f:7c:d7:a5:05:59:
                    d9:73:85:2c:88:47:64:e8:3f:d6:da:0a:61:e3:13:
                    bd:f1:37:23:30:6d:c4:3f:51:7d:97:ce:a3:80:18:
                    47:f1:51:d9:e5:e3:0f:1f:9a:cd:c0:48:b2:91:4b:
                    ea:56:79:da:09:8c:cd:64:ca:57:59:08:3d:59:40:
                    ff:a1:77:0f:fd:5f:39:33:49:cc:3e:af:ba:a2:e8:
                    cf:7f:9d:18:b5:e8:88:ab:3a:ef:1e:11:fa:81:2c:
                    e8:8f:be:86:4f:40:18:97:3c:a1:7f:a2:d6:7a:65:
                    c7:e5:03:81:8e:37:ee:d1:1d:66:44:8d:4c:9e:77:
                    00:7b:a5:4e:44:44:57:a4:50:37:41:4c:14:b2:8e:
                    5e:52:54:5a:f9:d9:4f:03:7f:1e:0b:91:ad:07:af:
                    e0:53:dd:a2:48:ec:47:a1:c2:e3:40:66:dd:ee:95:
                    79:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:92:EF:8B:74:CE:EC:E9:83:51:40:30:2F:A4:C0:2D:CD:6E:C3:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/7461eb70-aa87-3357-82ad-5c4dd94fb1d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ba:62:07:cb:41:e2:36:30:da:3c:86:fb:66:5c:ed:aa:06:
         b4:e8:3c:80:8a:1a:5f:a4:96:da:2c:6c:65:4b:16:40:df:38:
         37:69:f6:91:61:d3:3e:22:19:70:48:8e:a9:f2:96:f1:3f:cb:
         16:db:0c:26:87:ac:9e:a2:4f:dc:89:6c:b0:94:66:fe:4e:4c:
         1f:e2:73:a7:1f:ba:19:11:2a:c9:c3:27:29:c0:11:97:1e:ce:
         61:70:02:04:d3:2d:8b:ae:df:dc:ef:9c:49:0b:b9:e7:c1:fc:
         ce:29:93:46:ee:ad:fc:ee:89:5e:3f:c3:44:0d:83:e0:74:51:
         9a:b7:9e:7c:0b:9c:70:a4:89:66:9b:3e:fa:dc:45:de:4b:74:
         ca:41:3f:0e:12:21:93:4f:e7:f1:1c:3c:a4:b9:cb:f4:c1:b4:
         f4:eb:e9:e4:79:b0:33:f0:a9:10:f6:90:be:54:f7:e7:50:a7:
         1e:a5:32:11:89:65:79:0e:a8:47:97:6f:95:de:f1:e2:81:74:
         03:d8:47:04:e9:f6:53:23:dd:a2:ac:b8:71:10:30:fc:cf:aa:
         ce:f8:bb:20:94:67:c7:82:20:0d:d5:2b:6a:48:59:1c:f4:a5:
         4f:a1:26:20:ed:c1:c0:62:86:2e:e9:a9:c1:c7:5b:4e:b6:be:
         85:56:72:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeSS9/tHxcMsZcss4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh
YTNjMB4XDTI0MTAxNzEzMDA0MloXDTI1MDExNTE0MDA0MlowLzEtMCsGA1UEAxMk
YmNmODRlZjktZDc4Ni00MGUxLTg1ODAtZjA2NTkxYmU4ZDlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooMZI/W7aQhuR4S7N0QWsKcL7Hkf5oAbChSy
c+Qd13hfy0IArqLLdxOvXjGhA6/iuWtdjDK/ZgB/tD4qjsKuS0HJRWslRSY8QFev
sGFuKjOIJNYPfNelBVnZc4UsiEdk6D/W2gph4xO98TcjMG3EP1F9l86jgBhH8VHZ
5eMPH5rNwEiykUvqVnnaCYzNZMpXWQg9WUD/oXcP/V85M0nMPq+6oujPf50YteiI
qzrvHhH6gSzoj76GT0AYlzyhf6LWemXH5QOBjjfu0R1mRI1MnncAe6VORERXpFA3
QUwUso5eUlRa+dlPA38eC5GtB6/gU92iSOxHocLjQGbd7pV5SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCWS74t0zuzpg1FAMC+kwC3NbsPrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx
YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvNzQ2MWViNzAtYWE4Ny0z
MzU3LTgyYWQtNWM0ZGQ5NGZiMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh
ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw
YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2
YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO7AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEq6YgfLQeI2MNo8hvtmXO2qBrToPICKGl+kltosbGVLFkDfODdp9pFh
0z4iGXBIjqnylvE/yxbbDCaHrJ6iT9yJbLCUZv5OTB/ic6cfuhkRKsnDJynAEZce
zmFwAgTTLYuu39zvnEkLuefB/M4pk0burfzuiV4/w0QNg+B0UZq3nnwLnHCkiWab
PvrcRd5LdMpBPw4SIZNP5/EcPKS5y/TBtPTr6eR5sDPwqRD2kL5U9+dQpx6lMhGJ
ZXkOqEeXb5Xe8eKBdAPYRwTp9lMj3aKsuHEQMPzPqs74uyCUZ8eCIA3VK2pIWRz0
pU+hJiDtwcBihi7pqcHHW062voVWcg8=
-----END CERTIFICATE-----
Generated at Sat Nov 23 21:54:54 2024 by rpki-client on console-fra.rpki-client.org