Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/bd1955f4-ea6c-3961-8865-9c11c3d1ddca.roa
File:                     bd1955f4-ea6c-3961-8865-9c11c3d1ddca.roa (raw, json)
Hash identifier:          /nMF6KHC01/yA/YvdnvRB0hzGtZpM/pLs8w5BKrWIxw=
Subject key identifier:   60:A0:7E:D6:97:8C:95:C7:61:D5:C8:B4:F7:C5:B9:5D:90:6A:C2:AB
Certificate issuer:       /CN=ed14d35e-d16f-4ad5-82c4-5dcd3b569de2
Certificate serial:       010D0C9F43285847B2E5B785D10183FD88D84100
Authority key identifier: 55:42:44:A6:EF:F2:01:59:61:93:69:92:0C:27:51:AE:B5:D2:67:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/bd1955f4-ea6c-3961-8865-9c11c3d1ddca.roa
Signing time:             Tue 29 Oct 2024 05:16:41 +0000
ROA not before:           Tue 29 Oct 2024 05:16:41 +0000
ROA not after:            Mon 27 Jan 2025 06:16:41 +0000
asID:                     8796
IP address blocks:        23.159.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b2:e5:b7:85:d1:01:83:fd:88:d8:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed14d35e-d16f-4ad5-82c4-5dcd3b569de2
        Validity
            Not Before: Oct 29 05:16:41 2024 GMT
            Not After : Jan 27 06:16:41 2025 GMT
        Subject: CN=a7a3db91-61f0-4d24-817a-01de2b9dbe1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d6:4f:f0:20:d0:b7:27:43:45:d9:5d:8e:82:
                    eb:fd:ba:b4:11:e6:18:51:07:e2:93:18:97:c6:1d:
                    ed:65:34:ac:e4:de:e7:29:db:8f:b7:65:b8:b3:26:
                    16:f8:4a:77:bc:33:55:db:d6:8b:98:f7:55:09:43:
                    3d:89:b3:34:2e:9b:31:1b:15:1b:a1:4e:c6:37:aa:
                    1a:35:63:2b:c1:8c:5a:cd:a2:e3:64:32:2e:04:35:
                    84:10:2f:58:2f:04:13:e7:9b:c2:12:0a:19:1e:36:
                    8c:46:60:c1:fe:df:12:38:5c:8c:f4:43:29:da:25:
                    c7:10:57:94:56:b6:a3:ab:3e:6a:21:5c:97:24:9d:
                    2d:32:c9:ed:c1:88:29:eb:c9:a1:d0:39:06:68:9f:
                    e9:f2:c5:ed:90:33:46:4e:f6:60:d0:c0:98:89:2a:
                    90:2f:98:a4:69:2b:44:18:7a:ec:6b:c9:05:4d:79:
                    54:82:a3:1e:1c:b0:3d:ab:83:aa:f6:97:81:22:27:
                    d3:cd:84:cc:25:c7:7a:46:61:e7:bb:5d:b8:08:31:
                    32:cc:2c:08:14:5d:ea:54:45:d8:3a:c2:d4:d1:80:
                    f1:22:bf:fa:b2:6c:81:a9:a7:d4:29:f1:fe:eb:6e:
                    19:dc:dd:ef:bf:b3:e4:de:73:58:22:cf:a7:01:6f:
                    be:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A0:7E:D6:97:8C:95:C7:61:D5:C8:B4:F7:C5:B9:5D:90:6A:C2:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/bd1955f4-ea6c-3961-8865-9c11c3d1ddca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.crl

            X509v3 Authority Key Identifier:
                keyid:55:42:44:A6:EF:F2:01:59:61:93:69:92:0C:27:51:AE:B5:D2:67:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ef:8f:c4:72:f5:55:ed:f9:29:82:7f:0f:31:a8:ee:92:2b:
         6f:d8:76:6b:b5:10:01:a2:61:bc:6c:bd:10:fb:1e:9e:b5:cd:
         04:a1:65:5a:98:05:c1:b1:36:a3:d9:c8:ed:07:51:6e:61:d3:
         78:c3:bc:35:a9:4b:18:d2:f5:00:92:42:7e:0b:99:19:ea:23:
         f6:32:98:47:33:41:af:4b:6c:24:03:47:9d:59:ae:5c:c9:cb:
         3c:8d:6b:51:18:f3:22:74:67:3c:be:d2:1e:25:52:02:60:4b:
         23:d3:2a:a5:5d:7f:68:f7:75:ba:02:b6:8e:93:f3:1c:16:76:
         dc:ce:9f:46:dc:6d:69:ae:d1:4d:4f:03:e0:ca:ec:e7:83:ea:
         f4:4e:ca:db:b0:97:21:42:b8:a0:ff:80:c7:ca:3c:14:d6:5e:
         98:6a:4c:14:ac:2e:74:f0:78:e7:37:65:e7:9a:c1:8c:f8:d4:
         24:14:57:82:73:cc:d0:75:5f:1a:ce:27:7f:da:1a:e1:b7:17:
         a4:a6:1c:63:86:a0:96:ed:44:4e:9e:8a:3b:7d:7d:db:80:0a:
         05:1d:6b:5c:16:84:56:9d:6c:51:10:3c:1d:42:32:b9:49:3f:
         54:fb:f3:36:9c:72:e0:d9:59:94:f6:f9:ae:b2:24:98:f4:64:
         d0:50:31:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEey5beF0QGD/YjYQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQxNGQzNWUtZDE2Zi00YWQ1LTgyYzQtNWRjZDNiNTY5
ZGUyMB4XDTI0MTAyOTA1MTY0MVoXDTI1MDEyNzA2MTY0MVowLzEtMCsGA1UEAxMk
YTdhM2RiOTEtNjFmMC00ZDI0LTgxN2EtMDFkZTJiOWRiZTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dZP8CDQtydDRdldjoLr/bq0EeYYUQfikxiX
xh3tZTSs5N7nKduPt2W4syYW+Ep3vDNV29aLmPdVCUM9ibM0LpsxGxUboU7GN6oa
NWMrwYxazaLjZDIuBDWEEC9YLwQT55vCEgoZHjaMRmDB/t8SOFyM9EMp2iXHEFeU
Vrajqz5qIVyXJJ0tMsntwYgp68mh0DkGaJ/p8sXtkDNGTvZg0MCYiSqQL5ikaStE
GHrsa8kFTXlUgqMeHLA9q4Oq9peBIifTzYTMJcd6RmHnu124CDEyzCwIFF3qVEXY
OsLU0YDxIr/6smyBqafUKfH+624Z3N3vv7Pk3nNYIs+nAW++pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGCgftaXjJXHYdXItPfFuV2QasKrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZDE0
ZDM1ZS1kMTZmLTRhZDUtODJjNC01ZGNkM2I1NjlkZTIvYmQxOTU1ZjQtZWE2Yy0z
OTYxLTg4NjUtOWMxMWMzZDFkZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWQxNGQzNWUtZDE2Zi00YWQ1LTgy
YzQtNWRjZDNiNTY5ZGUyL2VkMTRkMzVlLWQxNmYtNGFkNS04MmM0LTVkY2QzYjU2
OWRlMi5jcmwwHwYDVR0jBBgwFoAUVUJEpu/yAVlhk2mSDCdRrrXSZzAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lZDE0ZDM1ZS1kMTZmLTRhZDUtODJjNC01ZGNk
M2I1NjlkZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5/4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzvj8Ry9VXt+SmCfw8xqO6SK2/Ydmu1EAGiYbxsvRD7Hp61zQShZVqY
BcGxNqPZyO0HUW5h03jDvDWpSxjS9QCSQn4LmRnqI/YymEczQa9LbCQDR51ZrlzJ
yzyNa1EY8yJ0Zzy+0h4lUgJgSyPTKqVdf2j3dboCto6T8xwWdtzOn0bcbWmu0U1P
A+DK7OeD6vROytuwlyFCuKD/gMfKPBTWXphqTBSsLnTweOc3ZeeawYz41CQUV4Jz
zNB1XxrOJ3/aGuG3F6SmHGOGoJbtRE6eijt9fduACgUda1wWhFadbFEQPB1CMrlJ
P1T78zaccuDZWZT2+a6yJJj0ZNBQMUE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:24 2024 by rpki-client on console-fra.rpki-client.org