Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a075cf56-91c2-31b8-b898-a292ab30c8eb.roa
File:                     a075cf56-91c2-31b8-b898-a292ab30c8eb.roa (raw, json)
Hash identifier:          s8T6SBiHivqjU7wPE+adgdnbCvotvfARDLGwmXZsqr4=
Subject key identifier:   BB:86:1F:33:F9:10:E1:E4:AE:40:6E:99:DE:D9:29:75:E9:FF:E2:9D
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F432858479C11240EF99886F159F9AF00
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a075cf56-91c2-31b8-b898-a292ab30c8eb.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     28944
IP address blocks:        207.38.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:24:0e:f9:98:86:f1:59:f9:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=5c27226d-83f9-4934-b206-2cf5edb5a33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:88:1d:83:d1:27:42:a6:a3:98:97:b7:0f:34:
                    62:3f:24:f2:cb:07:17:5f:7e:2d:33:0a:d4:54:4e:
                    07:f0:1d:45:6d:8f:07:2f:25:eb:e8:51:f5:d2:44:
                    cf:b4:91:06:61:02:f4:bd:f5:e1:fe:62:43:06:fe:
                    2c:5a:26:a7:b9:1d:78:52:2f:81:46:78:5c:db:4e:
                    57:0f:dc:1b:1b:2f:a6:df:ce:84:ed:b2:45:a2:fc:
                    a4:5b:63:11:d7:af:5c:68:b3:3e:bd:1e:10:fd:20:
                    cb:04:71:cf:67:0a:c7:f7:6f:2a:9d:7b:55:fd:a9:
                    c7:76:2b:2a:ca:20:cf:01:eb:c7:e1:62:37:c3:f2:
                    b2:4a:f1:51:cd:a8:78:7f:87:70:a7:74:3a:2c:9e:
                    f9:72:7b:20:72:b9:48:ed:bb:c1:51:09:67:21:09:
                    ed:af:46:f1:f7:02:80:a0:89:04:1c:af:2e:7e:21:
                    e9:2f:54:6b:28:81:b5:7f:f4:69:d6:7d:45:99:52:
                    c4:04:9f:b1:33:a6:79:47:c8:7b:f0:08:c5:0f:23:
                    e9:99:27:7e:2f:fa:63:39:c6:3d:c8:8a:00:90:ff:
                    71:78:0c:bf:38:8f:f5:9a:bd:2f:d4:ee:23:df:f0:
                    ba:5a:ec:44:a6:45:12:c0:c7:22:a8:06:bf:23:1e:
                    ff:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:86:1F:33:F9:10:E1:E4:AE:40:6E:99:DE:D9:29:75:E9:FF:E2:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a075cf56-91c2-31b8-b898-a292ab30c8eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.38.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:cf:33:0b:34:b8:2a:65:66:50:99:af:f6:e6:a4:d9:de:bd:
         1e:e0:95:2f:86:a7:29:98:2f:27:b0:82:bf:60:e6:a5:53:2c:
         72:b7:74:f5:3b:76:2e:a7:82:93:af:d4:67:84:e5:c1:62:b4:
         42:81:a8:2a:80:f4:5f:9a:ae:80:e0:7a:32:ff:69:ca:07:fc:
         54:5f:b4:54:86:2e:32:cb:71:b8:70:d2:6e:c1:8b:e7:06:d9:
         cd:9d:f3:c3:c1:7e:6d:fb:7c:43:e9:e9:35:6f:ce:f5:d7:87:
         f6:47:45:e7:9a:e7:5c:91:28:a0:bd:78:74:b9:b3:6a:d0:3d:
         aa:e3:8b:36:ff:4e:43:27:45:c4:4b:6f:24:f3:55:ee:e6:f3:
         0f:c5:80:38:6a:56:a2:83:e7:4b:f4:b7:ff:5d:87:7e:20:a3:
         8c:5f:bb:55:19:ee:f1:0d:27:e3:5a:00:0a:09:fc:66:49:af:
         f8:ba:40:03:0a:0f:21:1d:2c:a4:17:0f:8d:b7:09:2f:ff:12:
         1a:77:9a:a1:22:27:19:4b:97:44:c8:7e:95:38:b3:ff:90:8f:
         54:ff:3c:f0:c4:6f:33:49:39:92:21:64:18:44:1b:d1:6b:6f:
         4c:1e:20:85:26:cd:fe:ec:2f:99:ee:0c:2f:4d:5f:55:04:d9:
         11:34:07:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEecESQO+ZiG8Vn5rwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2
ODczMB4XDTI0MTAyMTAxMDAzMVoXDTI1MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk
NWMyNzIyNmQtODNmOS00OTM0LWIyMDYtMmNmNWVkYjVhMzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4gdg9EnQqajmJe3DzRiPyTyywcXX34tMwrU
VE4H8B1FbY8HLyXr6FH10kTPtJEGYQL0vfXh/mJDBv4sWianuR14Ui+BRnhc205X
D9wbGy+m386E7bJFovykW2MR169caLM+vR4Q/SDLBHHPZwrH928qnXtV/anHdisq
yiDPAevH4WI3w/KySvFRzah4f4dwp3Q6LJ75cnsgcrlI7bvBUQlnIQntr0bx9wKA
oIkEHK8ufiHpL1RrKIG1f/Rp1n1FmVLEBJ+xM6Z5R8h78AjFDyPpmSd+L/pjOcY9
yIoAkP9xeAy/OI/1mr0v1O4j3/C6WuxEpkUSwMciqAa/Ix7/awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLuGHzP5EOHkrkBumd7ZKXXp/+KdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0
NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvYTA3NWNmNTYtOTFjMi0z
MWI4LWI4OTgtYTI5MmFiMzBjOGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli
MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk
Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw
MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzybUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL7PMws0uCplZlCZr/bmpNnevR7glS+GpymYLyewgr9g5qVTLHK3dPU7
di6ngpOv1GeE5cFitEKBqCqA9F+aroDgejL/acoH/FRftFSGLjLLcbhw0m7Bi+cG
2c2d88PBfm37fEPp6TVvzvXXh/ZHReea51yRKKC9eHS5s2rQParjizb/TkMnRcRL
byTzVe7m8w/FgDhqVqKD50v0t/9dh34go4xfu1UZ7vENJ+NaAAoJ/GZJr/i6QAMK
DyEdLKQXD423CS//Ehp3mqEiJxlLl0TIfpU4s/+Qj1T/PPDEbzNJOZIhZBhEG9Fr
b0weIIUmzf7sL5nuDC9NX1UE2RE0B1s=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:06 2024 by rpki-client on console-fra.rpki-client.org