Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14816577-4312-3b6f-9237-b85ed65e5396.roa
File:                     14816577-4312-3b6f-9237-b85ed65e5396.roa (raw, json)
Hash identifier:          6u3Glzbk8qf3vgdWcNuCpsoEllWk8XZJ3qdfzVmv2Vs=
Subject key identifier:   FF:7C:3F:35:EA:57:EB:A8:DA:E3:A4:88:0A:65:0A:15:7A:D1:2D:7D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847BC2C22ABD12983726075AE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14816577-4312-3b6f-9237-b85ed65e5396.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     63949
IP address blocks:        170.187.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:22:ab:d1:29:83:72:60:75:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=dda9a5c8-2752-41fc-a7af-caae048da27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:1f:16:26:41:d4:80:30:47:28:b1:96:b9:
                    4e:d1:0c:2e:9e:e5:f6:46:44:ce:77:f8:49:f2:f6:
                    8b:62:81:2f:64:1a:95:02:50:d1:da:a7:9d:12:1d:
                    01:a0:83:33:6e:36:04:10:36:0e:68:3e:36:cd:62:
                    6f:05:9d:ac:a0:7c:36:67:11:f5:25:ab:cc:3f:4c:
                    0e:bb:ca:b2:de:3d:9b:2a:90:e3:60:9c:41:8e:34:
                    85:11:64:07:25:61:5c:5a:61:1c:aa:bb:ea:3c:77:
                    dc:f9:16:4b:d7:a3:7a:78:1d:c8:88:4e:04:39:b5:
                    f6:77:c9:74:2c:80:df:db:5c:3b:0f:31:c9:4f:d5:
                    de:e1:26:f6:45:6b:49:43:8e:f7:a3:bd:9f:4c:85:
                    69:51:5f:0a:eb:59:e9:83:82:29:cc:d2:9a:f9:c8:
                    bb:95:5f:59:c7:d3:01:39:ad:bc:52:5f:c7:36:51:
                    86:0e:16:03:df:c6:63:51:56:d3:de:00:00:75:03:
                    49:80:44:36:d2:6a:48:eb:21:f0:13:8a:0c:12:b7:
                    54:ae:d2:21:e6:2b:1a:d2:18:a4:76:a4:74:3e:45:
                    92:f3:56:84:0a:80:dc:99:ea:c9:a2:ab:6d:f9:cf:
                    45:3e:8d:dc:ca:0d:77:e9:e8:42:8b:ce:ce:f8:73:
                    11:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7C:3F:35:EA:57:EB:A8:DA:E3:A4:88:0A:65:0A:15:7A:D1:2D:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14816577-4312-3b6f-9237-b85ed65e5396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.187.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:69:ac:dd:02:86:25:5e:9d:fa:e6:85:12:61:f8:13:3c:ad:
         d6:f1:54:61:3b:cf:ed:c9:1c:a9:be:9b:13:7f:96:4c:c3:ba:
         57:11:cd:91:f9:6a:c5:ae:b3:31:9f:1f:db:96:ae:5f:51:cc:
         f1:67:f1:fb:8d:52:bd:37:20:6b:12:05:53:4c:dc:90:e1:85:
         75:96:0e:2f:8f:22:95:19:15:91:4f:fe:37:ab:e9:73:4c:04:
         95:22:01:fc:2e:f9:c5:65:c2:38:f6:a3:db:97:80:ef:83:6a:
         e2:f9:85:a4:f5:3e:fd:30:95:b5:b2:5a:5c:47:d3:00:b0:f9:
         e1:81:68:16:7d:21:d3:28:e8:f0:e9:ec:88:43:26:59:95:2e:
         ba:e1:54:94:b9:25:83:f3:05:d6:a1:2d:0a:62:c0:33:0b:cb:
         43:c3:e1:1b:23:dc:9e:89:a0:e4:af:4d:a7:9b:ce:55:af:0b:
         91:49:69:48:c6:d3:37:2b:74:e3:88:5a:57:9e:ec:76:fb:d8:
         e5:80:36:97:d1:df:02:b3:26:67:13:af:47:a5:7d:07:ac:54:
         e7:e6:04:61:0a:77:66:2d:6a:bc:29:04:fd:40:dc:f1:dd:be:
         df:da:75:df:15:0c:1c:7e:2d:7d:27:1c:a4:a0:8f:dd:5b:46:
         e5:33:eb:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe8LCKr0SmDcmB1rgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEwMTEzMDA0MVoXDTI1MDEzMDE0MDA0MVowLzEtMCsGA1UEAxMk
ZGRhOWE1YzgtMjc1Mi00MWZjLWE3YWYtY2FhZTA0OGRhMjdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti8fFiZB1IAwRyixlrlO0QwunuX2RkTOd/hJ
8vaLYoEvZBqVAlDR2qedEh0BoIMzbjYEEDYOaD42zWJvBZ2soHw2ZxH1JavMP0wO
u8qy3j2bKpDjYJxBjjSFEWQHJWFcWmEcqrvqPHfc+RZL16N6eB3IiE4EObX2d8l0
LIDf21w7DzHJT9Xe4Sb2RWtJQ473o72fTIVpUV8K61npg4IpzNKa+ci7lV9Zx9MB
Oa28Ul/HNlGGDhYD38ZjUVbT3gAAdQNJgEQ20mpI6yHwE4oMErdUrtIh5isa0hik
dqR0PkWS81aECoDcmerJoqtt+c9FPo3cyg136ehCi87O+HMRvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP98PzXqV+uo2uOkiAplChV60S19MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTQ4MTY1NzctNDMxMi0z
YjZmLTkyMzctYjg1ZWQ2NWU1Mzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqruFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRprN0ChiVenfrmhRJh+BM8rdbxVGE7z+3JHKm+mxN/lkzDulcRzZH5
asWuszGfH9uWrl9RzPFn8fuNUr03IGsSBVNM3JDhhXWWDi+PIpUZFZFP/jer6XNM
BJUiAfwu+cVlwjj2o9uXgO+DauL5haT1Pv0wlbWyWlxH0wCw+eGBaBZ9IdMo6PDp
7IhDJlmVLrrhVJS5JYPzBdahLQpiwDMLy0PD4Rsj3J6JoOSvTaebzlWvC5FJaUjG
0zcrdOOIWlee7Hb72OWANpfR3wKzJmcTr0elfQesVOfmBGEKd2YtarwpBP1A3PHd
vt/add8VDBx+LX0nHKSgj91bRuUz6xo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:15 2024 by rpki-client on console-fra.rpki-client.org