Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ad030b44-d8fd-38cd-83cf-1051a9762467.roa
File:                     ad030b44-d8fd-38cd-83cf-1051a9762467.roa (raw, json)
Hash identifier:          oiBLGe2HG/4daRv8JDiH2iJfG2nMaUXt2po3knkxbEo=
Subject key identifier:   96:BA:63:96:D3:F1:C9:F8:EC:6B:51:F1:B7:7C:5F:9B:10:FE:8A:16
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F43285847924BDDBAF7E5B7E8C3E9BA00
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ad030b44-d8fd-38cd-83cf-1051a9762467.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     21559
IP address blocks:        204.77.10.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:dd:ba:f7:e5:b7:e8:c3:e9:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=40c107e3-66b2-4ea4-918c-3ca1b8fc64f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b0:6b:91:71:ef:b3:c3:8c:f0:27:9a:8c:00:
                    8c:18:5e:6a:61:a0:7d:23:dd:fb:1a:b7:11:ab:a7:
                    06:53:34:a2:d3:b0:af:fd:5b:e1:8a:65:4d:bb:83:
                    0b:4d:f0:5a:79:fe:43:dd:5e:b0:cf:5f:30:43:de:
                    ff:79:4b:b0:af:0f:6d:0c:c2:de:49:de:f3:1d:a7:
                    a3:23:24:b5:f7:e0:cb:72:f5:5b:80:ac:aa:ae:57:
                    c7:24:51:89:e3:63:ae:5e:34:88:67:49:25:35:7f:
                    ef:93:23:6e:48:48:4c:ad:0a:51:3c:65:5b:45:19:
                    38:41:b9:61:d2:4c:7d:52:17:8c:ea:1f:3d:e7:1b:
                    e6:7b:c0:ae:3d:b5:61:d7:84:7f:f9:4e:67:91:10:
                    41:a7:f3:91:af:71:a3:91:26:6c:ea:00:80:20:cf:
                    4f:7d:0e:13:7f:18:46:f9:4b:0b:a5:54:f9:66:68:
                    cf:7d:c3:b3:fd:f9:e3:b3:c2:44:fb:b7:aa:6c:93:
                    c0:d1:e9:1a:ee:44:10:6d:40:58:12:07:40:f0:e9:
                    3d:04:db:ca:e7:7d:3b:c3:aa:82:db:c4:fb:bf:d1:
                    a4:01:1d:5a:d7:dc:10:9b:3d:30:80:f3:96:04:83:
                    88:72:62:60:05:31:32:05:a9:00:e9:fb:fd:6e:6c:
                    bb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BA:63:96:D3:F1:C9:F8:EC:6B:51:F1:B7:7C:5F:9B:10:FE:8A:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ad030b44-d8fd-38cd-83cf-1051a9762467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.77.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:2b:e2:45:ab:33:15:92:63:e8:9d:f6:27:ae:85:cb:a0:26:
         4a:df:e7:43:34:ae:1b:3f:60:ee:a7:9e:23:83:1a:d8:8d:29:
         c7:c8:92:ce:60:36:78:55:3d:4d:c6:c4:12:41:4f:4c:f9:c7:
         17:4e:0a:22:50:12:a9:11:31:40:db:d7:9b:a7:69:a1:e7:63:
         aa:7d:ef:0f:24:af:e0:86:fc:c9:d7:d5:33:a4:29:27:98:fb:
         1e:e7:ca:fc:85:30:e0:d9:96:bf:e9:f3:2a:ab:35:c3:65:62:
         14:84:f5:74:d2:58:78:cc:82:0b:af:f5:a0:b2:d0:b0:81:97:
         be:f3:37:f4:b2:52:44:db:66:86:68:42:27:55:cd:be:e4:d5:
         39:f9:33:c9:85:c2:76:f0:45:50:41:cf:94:2b:01:55:ed:5a:
         e3:06:c5:6d:a7:44:d1:41:bb:00:7f:17:91:b1:f9:f1:6e:59:
         78:18:e4:d6:18:33:c2:6d:46:30:46:4a:c2:51:5d:86:13:88:
         76:aa:e0:ea:99:06:41:64:a0:49:c2:ed:a4:e8:97:a6:ce:f9:
         cd:ec:27:80:f6:43:03:40:81:ab:e2:50:5b:bc:dd:80:3c:5e:
         19:80:eb:81:80:6a:ae:12:92:72:88:92:f6:0d:1b:bd:fa:0d:
         8e:a6:6a:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeSS9269+W36MPpugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh
YTNjMB4XDTI0MTAxNzEzMDA0MloXDTI1MDExNTE0MDA0MlowLzEtMCsGA1UEAxMk
NDBjMTA3ZTMtNjZiMi00ZWE0LTkxOGMtM2NhMWI4ZmM2NGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7BrkXHvs8OM8CeajACMGF5qYaB9I937GrcR
q6cGUzSi07Cv/VvhimVNu4MLTfBaef5D3V6wz18wQ97/eUuwrw9tDMLeSd7zHaej
IyS19+DLcvVbgKyqrlfHJFGJ42OuXjSIZ0klNX/vkyNuSEhMrQpRPGVbRRk4Qblh
0kx9UheM6h895xvme8CuPbVh14R/+U5nkRBBp/ORr3GjkSZs6gCAIM9PfQ4TfxhG
+UsLpVT5ZmjPfcOz/fnjs8JE+7eqbJPA0eka7kQQbUBYEgdA8Ok9BNvK5307w6qC
28T7v9GkAR1a19wQmz0wgPOWBIOIcmJgBTEyBakA6fv9bmy7owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJa6Y5bT8cn47GtR8bd8X5sQ/ooWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx
YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvYWQwMzBiNDQtZDhmZC0z
OGNkLTgzY2YtMTA1MWE5NzYyNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh
ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw
YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2
YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzE0KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF4r4kWrMxWSY+id9ieuhcugJkrf50M0rhs/YO6nniODGtiNKcfIks5g
NnhVPU3GxBJBT0z5xxdOCiJQEqkRMUDb15unaaHnY6p97w8kr+CG/MnX1TOkKSeY
+x7nyvyFMODZlr/p8yqrNcNlYhSE9XTSWHjMgguv9aCy0LCBl77zN/SyUkTbZoZo
QidVzb7k1Tn5M8mFwnbwRVBBz5QrAVXtWuMGxW2nRNFBuwB/F5Gx+fFuWXgY5NYY
M8JtRjBGSsJRXYYTiHaq4OqZBkFkoEnC7aTol6bO+c3sJ4D2QwNAgaviUFu83YA8
XhmA64GAaq4SknKIkvYNG736DY6matM=
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:36:43 2024 by rpki-client on console-ams.rpki-client.org