Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/828d3702-9200-3171-a758-4dc6a2b37597.roa
File:                     828d3702-9200-3171-a758-4dc6a2b37597.roa (raw, json)
Hash identifier:          byITs/KCEpHU+HvHXtqbT8ael/Md1xtJ82ZTD43MoAY=
Subject key identifier:   63:13:EF:00:D5:2C:00:97:03:86:B1:F5:5C:4C:1D:83:A6:84:7B:11
Certificate issuer:       /CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
Certificate serial:       010D0C9F43285847C4AA137AB492AA74C702BC00
Authority key identifier: 4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/828d3702-9200-3171-a758-4dc6a2b37597.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     395810
IP address blocks:        216.47.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:13:7a:b4:92:aa:74:c7:02:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=722092b3-fda8-4546-af8b-472cafada5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:f9:f3:2e:72:5e:d5:cf:88:ca:dc:16:3d:
                    7f:f8:b1:b7:1c:f9:c0:63:a9:9d:9f:90:91:6c:8d:
                    1e:39:63:98:69:12:d8:1d:3f:5b:12:df:38:90:a9:
                    62:35:17:c3:7d:f7:f0:46:ff:82:9c:13:55:0f:48:
                    75:eb:b3:90:94:08:51:7e:a5:1c:6a:5f:ef:fc:7e:
                    02:7e:02:7c:c9:30:a2:23:2d:09:bc:b9:cc:2d:ce:
                    86:fc:bf:d4:49:1e:e5:6a:62:c2:13:11:5e:6e:cd:
                    ca:fb:12:08:84:60:42:b4:dc:4e:a6:11:5d:df:64:
                    9d:80:7a:5f:6b:24:dc:9a:47:f5:07:1f:ba:8f:93:
                    6d:1f:a4:fa:dc:08:75:88:8a:b8:44:39:3a:07:3f:
                    6f:06:93:9c:c4:ed:ab:4d:f9:23:e2:0e:a5:63:78:
                    ed:31:6f:66:c2:88:60:36:22:6f:2b:8f:60:e9:75:
                    24:13:e9:5f:2b:c6:c7:c9:c9:67:1c:28:5d:26:1c:
                    d4:a4:93:2b:c5:c4:2e:d1:3e:0e:fd:d8:87:07:4e:
                    44:4c:7e:ad:7b:3d:74:03:1c:21:6f:0a:b2:fc:b8:
                    fb:0c:33:63:6b:ab:86:f4:2f:72:1a:22:b5:93:ef:
                    c3:35:81:74:0a:0c:88:72:fb:b5:06:db:57:57:f4:
                    44:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:13:EF:00:D5:2C:00:97:03:86:B1:F5:5C:4C:1D:83:A6:84:7B:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/828d3702-9200-3171-a758-4dc6a2b37597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl

            X509v3 Authority Key Identifier:
                keyid:4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.47.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e0:54:c8:4b:3d:ec:3e:34:23:c3:a3:99:c0:f7:fc:05:90:
         6a:fd:05:ba:7f:ba:01:75:d0:7b:fd:02:51:80:42:f9:04:f6:
         1f:fe:75:ca:1b:b0:a5:f5:fb:8a:ed:d4:c0:1e:37:9d:08:85:
         17:1e:fe:da:8b:55:50:56:70:89:07:86:9d:13:37:16:d1:a8:
         ad:0e:2a:65:9b:93:cc:42:c4:26:37:9f:73:7f:3d:f7:77:06:
         0a:f6:d9:17:c4:5a:04:2b:ee:a2:69:8e:39:b8:62:29:59:d2:
         2a:d6:72:ea:23:3c:0f:88:b6:f0:0f:7b:70:6c:26:4f:8d:2e:
         9d:d2:b4:05:84:f3:8c:cc:1b:65:48:ac:04:37:a8:c9:e8:3c:
         cd:72:72:fc:09:5f:67:c3:48:23:a4:3b:fb:df:82:e5:ce:1b:
         e5:e0:38:e3:73:c3:a4:20:97:d0:e3:68:c4:eb:01:b6:45:0c:
         bf:22:f2:c6:dd:cd:d1:07:d9:fa:8e:0f:16:27:0e:0c:86:af:
         f4:7e:aa:dc:1e:74:60:fb:64:ac:37:0b:ce:70:60:d3:13:9e:
         4e:a2:d2:70:9f:f4:b4:8e:42:41:00:69:66:3d:9a:78:30:f5:
         cb:db:c5:d1:eb:23:de:fa:a1:c5:45:53:d7:c3:46:5c:13:29:
         ef:7d:cf:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfEqhN6tJKqdMcCvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYzM2I0YjEtYzJiMi00NGQ1LWExZWMtM2ZlOGUxZjk3
NzNhMB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk
NzIyMDkyYjMtZmRhOC00NTQ2LWFmOGItNDcyY2FmYWRhNWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7H58y5yXtXPiMrcFj1/+LG3HPnAY6mdn5CR
bI0eOWOYaRLYHT9bEt84kKliNRfDfffwRv+CnBNVD0h167OQlAhRfqUcal/v/H4C
fgJ8yTCiIy0JvLnMLc6G/L/USR7lamLCExFebs3K+xIIhGBCtNxOphFd32SdgHpf
ayTcmkf1Bx+6j5NtH6T63Ah1iIq4RDk6Bz9vBpOcxO2rTfkj4g6lY3jtMW9mwohg
NiJvK49g6XUkE+lfK8bHyclnHChdJhzUpJMrxcQu0T4O/diHB05ETH6tez10Axwh
bwqy/Lj7DDNja6uG9C9yGiK1k+/DNYF0CgyIcvu1BttXV/REFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGMT7wDVLACXA4ax9VxMHYOmhHsRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjMz
YjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4ZTFmOTc3M2EvODI4ZDM3MDItOTIwMC0z
MTcxLWE3NTgtNGRjNmEyYjM3NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYzM2I0YjEtYzJiMi00NGQ1LWEx
ZWMtM2ZlOGUxZjk3NzNhL2U2MzNiNGIxLWMyYjItNDRkNS1hMWVjLTNmZThlMWY5
NzczYS5jcmwwHwYDVR0jBBgwFoAUTmss3gR6nb5tpJI9Yt1lGBgcuKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNjMzYjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4
ZTFmOTc3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2C8oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXgVMhLPew+NCPDo5nA9/wFkGr9Bbp/ugF10Hv9AlGAQvkE9h/+dcob
sKX1+4rt1MAeN50IhRce/tqLVVBWcIkHhp0TNxbRqK0OKmWbk8xCxCY3n3N/Pfd3
Bgr22RfEWgQr7qJpjjm4YilZ0irWcuojPA+ItvAPe3BsJk+NLp3StAWE84zMG2VI
rAQ3qMnoPM1ycvwJX2fDSCOkO/vfguXOG+XgOONzw6Qgl9DjaMTrAbZFDL8i8sbd
zdEH2fqODxYnDgyGr/R+qtwedGD7ZKw3C85wYNMTnk6i0nCf9LSOQkEAaWY9mngw
9cvbxdHrI976ocVFU9fDRlwTKe99zxI=
-----END CERTIFICATE-----
Generated at Sat Nov 23 16:14:35 2024 by rpki-client on console-fra.rpki-client.org