Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/444c7ed5-5de6-3d29-9a31-1dee1d2edcea.roa
File:                     444c7ed5-5de6-3d29-9a31-1dee1d2edcea.roa (raw, json)
Hash identifier:          rdl4GtGATNqIIrbns0qUyMTUWp2wjnZvi5lGk5fcGJg=
Subject key identifier:   3E:EB:6C:E6:CC:1E:28:D4:53:0F:38:EB:23:44:83:AF:71:A4:3C:E0
Certificate issuer:       /CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
Certificate serial:       010D0C9F432858473095FD907EECB12426404D80
Authority key identifier: D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/444c7ed5-5de6-3d29-9a31-1dee1d2edcea.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     32402
IP address blocks:        199.7.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:fd:90:7e:ec:b1:24:26:40:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=43245022-a07e-446a-9857-c1384c0ff830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:52:be:a2:c2:ad:f3:25:f3:8b:0a:3a:9c:
                    db:e4:40:5d:37:72:87:60:ed:62:90:69:b1:22:d4:
                    e4:b2:b6:86:a2:02:fe:bc:bf:05:8c:79:fe:26:eb:
                    77:f2:e4:6a:52:8b:b6:57:95:c0:79:3f:0b:ad:79:
                    8e:d9:42:2c:70:bc:06:fc:e7:96:56:57:ae:13:02:
                    66:31:fb:d6:0c:95:8e:39:b7:53:96:4f:1b:14:ba:
                    5a:c2:84:de:f6:2c:fe:23:ca:e1:90:19:e0:cf:d2:
                    0c:cd:96:12:41:84:18:df:58:3f:a5:b9:2d:be:fd:
                    62:d3:9b:d4:61:88:ff:c4:6f:60:c7:2d:04:d4:f0:
                    bb:12:0b:2a:10:89:17:b9:a4:9d:ed:ab:f5:a2:22:
                    84:62:e1:a0:7a:6e:c6:56:71:0f:4e:94:0b:2f:78:
                    94:8b:3d:7c:f1:92:b2:64:59:6c:ba:fb:a1:1c:93:
                    5b:a5:d7:7f:8e:6f:4e:91:c1:2e:af:e8:86:7c:97:
                    96:cd:82:15:d2:bf:02:27:f6:2b:8c:09:05:b4:91:
                    7e:a4:12:a4:a3:3e:a8:ca:60:d1:3f:bd:ba:01:ea:
                    02:73:ad:4e:aa:73:75:47:29:1c:24:98:02:da:f1:
                    64:b5:82:1a:ba:da:73:56:df:92:77:94:81:e0:f6:
                    b4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EB:6C:E6:CC:1E:28:D4:53:0F:38:EB:23:44:83:AF:71:A4:3C:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/444c7ed5-5de6-3d29-9a31-1dee1d2edcea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:31:61:81:20:ff:c8:e5:80:28:37:81:56:50:f4:5a:8f:
         de:b4:2a:82:48:32:6d:2f:bd:8b:42:7f:c6:2b:4a:3d:06:94:
         00:67:40:73:11:09:6c:d9:6d:b9:cd:b4:f7:f8:59:d1:fb:c5:
         ae:d6:8d:30:7e:a1:45:f4:0c:a7:d8:9a:62:18:22:46:3a:09:
         c2:de:d6:19:a4:e2:6b:3b:7c:60:4c:bf:ec:96:af:37:51:c4:
         d6:10:5a:27:83:e7:9d:46:09:5f:8d:5f:15:69:3e:cc:74:8c:
         25:5d:13:ac:3a:96:bf:55:33:8e:84:3e:46:e1:25:8d:41:20:
         cd:4b:29:d2:06:5d:4e:5a:2e:3e:bf:b0:36:67:87:bd:80:f1:
         6b:5e:59:1b:af:26:bb:cb:c8:1a:f0:92:a8:7a:2a:d9:59:7f:
         3e:e8:24:b3:a5:5c:d0:d0:0b:00:f3:7a:21:13:e8:63:e4:25:
         95:61:b2:b0:73:cf:d6:38:1e:27:09:0d:23:f8:1f:4a:2f:7a:
         58:c9:d8:95:2c:5c:f3:24:ba:ad:5b:de:dc:41:3b:61:5b:a8:
         1c:ac:a2:f5:b3:ac:65:e9:63:57:e0:81:67:bd:52:18:b8:ec:
         7e:10:48:14:a6:14:65:8f:c4:0a:9b:6b:0e:a1:b8:a7:ee:ff:
         2d:c9:0b:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwlf2QfuyxJCZATYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4ZTRkZmEtZTkwZS00ZTNkLWE1MTUtOTAxNzA4YzNm
N2Y4MB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk
NDMyNDUwMjItYTA3ZS00NDZhLTk4NTctYzEzODRjMGZmODMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTVSvqLCrfMl84sKOpzb5EBdN3KHYO1ikGmx
ItTksraGogL+vL8FjHn+Jut38uRqUou2V5XAeT8LrXmO2UIscLwG/OeWVleuEwJm
MfvWDJWOObdTlk8bFLpawoTe9iz+I8rhkBngz9IMzZYSQYQY31g/pbktvv1i05vU
YYj/xG9gxy0E1PC7EgsqEIkXuaSd7av1oiKEYuGgem7GVnEPTpQLL3iUiz188ZKy
ZFlsuvuhHJNbpdd/jm9OkcEur+iGfJeWzYIV0r8CJ/YrjAkFtJF+pBKkoz6oymDR
P726AeoCc61OqnN1RykcJJgC2vFktYIautpzVt+Sd5SB4Pa0pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD7rbObMHijUUw846yNEg69xpDzgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZDhl
NGRmYS1lOTBlLTRlM2QtYTUxNS05MDE3MDhjM2Y3ZjgvNDQ0YzdlZDUtNWRlNi0z
ZDI5LTlhMzEtMWRlZTFkMmVkY2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWQ4ZTRkZmEtZTkwZS00ZTNkLWE1
MTUtOTAxNzA4YzNmN2Y4L2VkOGU0ZGZhLWU5MGUtNGUzZC1hNTE1LTkwMTcwOGMz
ZjdmOC5jcmwwHwYDVR0jBBgwFoAU2R0Zrz+TBG1NWTZN1xzphxtdhOswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lZDhlNGRmYS1lOTBlLTRlM2QtYTUxNS05MDE3
MDhjM2Y3ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwe5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFf1MWGBIP/I5YAoN4FWUPRaj960KoJIMm0vvYtCf8YrSj0GlABnQHMR
CWzZbbnNtPf4WdH7xa7WjTB+oUX0DKfYmmIYIkY6CcLe1hmk4ms7fGBMv+yWrzdR
xNYQWieD551GCV+NXxVpPsx0jCVdE6w6lr9VM46EPkbhJY1BIM1LKdIGXU5aLj6/
sDZnh72A8WteWRuvJrvLyBrwkqh6KtlZfz7oJLOlXNDQCwDzeiET6GPkJZVhsrBz
z9Y4HicJDSP4H0oveljJ2JUsXPMkuq1b3txBO2FbqBysovWzrGXpY1fggWe9Uhi4
7H4QSBSmFGWPxAqbaw6huKfu/y3JC3I=
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:05:03 2024 by rpki-client on console-fra.rpki-client.org