Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/92a069bb-f18f-391a-bbd2-a8250b74ddfc.roa
File:                     92a069bb-f18f-391a-bbd2-a8250b74ddfc.roa (raw, json)
Hash identifier:          MrhQBM7NwGVIVLWGCdFnf7b7FiRBH2Oz6ucx6ocKv60=
Subject key identifier:   24:10:A5:7F:EE:3B:92:87:0A:D7:4B:1E:13:50:7E:06:1C:EF:61:0B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473A5B99C673EAC7CC2B8A7C60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/92a069bb-f18f-391a-bbd2-a8250b74ddfc.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     36183
IP address blocks:        172.224.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:99:c6:73:ea:c7:cc:2b:8a:7c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=e6bc0335-af58-464c-b52e-7a9ef40c819b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:47:a7:c8:1e:a4:aa:85:7f:02:e2:75:ec:14:
                    38:c5:62:b5:86:e3:eb:c8:97:8b:cb:31:d8:60:d8:
                    85:8d:72:1d:cd:b0:18:fe:36:42:8b:28:08:f6:f9:
                    5d:1b:e2:72:53:87:86:95:66:58:39:ad:b7:d2:ea:
                    31:75:80:c9:a7:84:42:49:30:42:e4:bf:b5:c4:51:
                    ce:95:97:16:4e:e9:81:68:5f:94:97:df:87:09:27:
                    75:7c:43:07:a3:bd:b0:7e:2b:86:9c:0e:42:4f:6c:
                    85:ef:8a:ce:01:68:4d:24:52:29:96:49:83:c8:8e:
                    d5:3b:ba:f5:34:fc:8c:9e:7b:72:5a:36:91:52:3c:
                    ec:a4:5f:80:ec:f9:e2:20:f2:48:18:d0:d4:5e:95:
                    10:0e:1e:82:03:07:c2:c0:c6:a2:2a:15:be:be:7a:
                    ff:2e:d0:92:f3:28:bd:49:fc:6f:91:c1:15:91:db:
                    b2:d1:80:88:e6:57:46:d3:fc:ac:c9:77:a6:5d:96:
                    57:a0:0a:97:17:6e:ba:92:dd:e9:13:c0:84:85:35:
                    08:ad:d7:1b:3b:11:9e:43:fe:e6:4b:19:64:63:63:
                    9e:41:20:30:39:2e:de:43:15:70:6b:d8:ba:e1:4c:
                    dc:e2:44:54:51:7c:58:33:81:27:9e:a2:f6:63:5b:
                    23:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:10:A5:7F:EE:3B:92:87:0A:D7:4B:1E:13:50:7E:06:1C:EF:61:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/92a069bb-f18f-391a-bbd2-a8250b74ddfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3d:22:6e:e1:ca:8d:5a:01:e6:f4:4c:e9:a3:89:7c:4d:db:
         a2:b3:9d:61:8b:63:65:a4:23:26:f9:1b:78:45:16:6e:b5:e3:
         33:20:68:10:f3:c8:31:4b:cc:c9:07:9c:ff:6b:03:e5:d9:42:
         b5:d8:b1:bb:c4:71:a0:c2:e7:90:94:52:de:ea:99:45:52:a0:
         3c:7e:dc:be:11:5e:fb:e8:b0:9e:1d:f0:5f:d7:54:fe:e3:6d:
         84:29:da:7a:1d:44:9e:b0:19:bd:7c:17:ba:87:83:99:bf:0e:
         7f:ad:d1:67:48:d3:e0:22:bd:d0:02:58:91:7e:ad:ea:d0:d6:
         92:a1:62:02:d3:a3:0d:9b:dc:9d:3b:6d:d1:d1:71:92:16:10:
         6d:a3:13:b2:56:fe:2c:cd:61:bf:41:83:58:19:ba:68:43:7f:
         bd:08:4e:44:4e:4d:30:1b:75:9d:d8:df:af:9c:e0:f7:04:75:
         60:04:e9:e5:90:4e:80:32:7d:40:d3:73:9f:92:d9:8c:9b:1f:
         e8:80:cf:8f:e3:99:21:52:62:b8:e8:35:a6:57:cf:15:e1:c0:
         e0:83:78:5f:07:12:b1:f4:97:91:2f:b4:cb:db:d1:2d:e2:92:
         9b:fa:47:0b:98:95:5a:0f:23:7b:81:48:08:1a:ca:f0:04:bf:
         86:c0:78:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6W5nGc+rHzCuKfGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
ZTZiYzAzMzUtYWY1OC00NjRjLWI1MmUtN2E5ZWY0MGM4MTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEenyB6kqoV/AuJ17BQ4xWK1huPryJeLyzHY
YNiFjXIdzbAY/jZCiygI9vldG+JyU4eGlWZYOa230uoxdYDJp4RCSTBC5L+1xFHO
lZcWTumBaF+Ul9+HCSd1fEMHo72wfiuGnA5CT2yF74rOAWhNJFIplkmDyI7VO7r1
NPyMnntyWjaRUjzspF+A7PniIPJIGNDUXpUQDh6CAwfCwMaiKhW+vnr/LtCS8yi9
SfxvkcEVkduy0YCI5ldG0/ysyXemXZZXoAqXF266kt3pE8CEhTUIrdcbOxGeQ/7m
SxlkY2OeQSAwOS7eQxVwa9i64Uzc4kRUUXxYM4EnnqL2Y1sjEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCQQpX/uO5KHCtdLHhNQfgYc72ELMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTJhMDY5YmItZjE4Zi0z
OTFhLWJiZDItYTgyNTBiNzRkZGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABQ9Im7hyo1aAeb0TOmjiXxN26KznWGLY2WkIyb5G3hFFm614zMgaBDz
yDFLzMkHnP9rA+XZQrXYsbvEcaDC55CUUt7qmUVSoDx+3L4RXvvosJ4d8F/XVP7j
bYQp2nodRJ6wGb18F7qHg5m/Dn+t0WdI0+AivdACWJF+rerQ1pKhYgLTow2b3J07
bdHRcZIWEG2jE7JW/izNYb9Bg1gZumhDf70ITkROTTAbdZ3Y36+c4PcEdWAE6eWQ
ToAyfUDTc5+S2YybH+iAz4/jmSFSYrjoNaZXzxXhwOCDeF8HErH0l5EvtMvb0S3i
kpv6RwuYlVoPI3uBSAgayvAEv4bAeLw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:27:25 2024 by rpki-client on console-fra.rpki-client.org