Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf4f938a-7cae-3512-b369-300d6d3ea76a.roa
File:                     cf4f938a-7cae-3512-b369-300d6d3ea76a.roa (raw, json)
Hash identifier:          wlGvudsoXiNLMchLDrH+ShwZCwy8C59NkERB76EbY2M=
Subject key identifier:   0A:C6:4C:AE:94:52:49:2C:18:E6:E0:89:CB:1E:39:05:07:B5:93:72
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473096026B7E1A5C8AD77150A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf4f938a-7cae-3512-b369-300d6d3ea76a.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     36183
IP address blocks:        172.224.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:96:02:6b:7e:1a:5c:8a:d7:71:50:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=6424cdae-88a4-4cef-a393-3a9d35d62c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:47:5c:69:c6:f6:78:bd:65:db:c4:86:e2:
                    81:96:cd:fd:7f:72:55:26:a6:0b:91:c7:6a:eb:71:
                    fd:e6:50:06:e8:bc:fc:0e:54:ce:2d:7e:79:d2:9b:
                    0f:b2:3e:21:0d:1a:40:4e:dc:11:4b:d6:ae:00:c7:
                    8c:3d:be:d5:0e:ef:ed:cd:99:28:1f:25:7f:b6:03:
                    16:7d:08:6c:fd:8d:73:45:d4:0b:b6:3f:4f:cc:60:
                    de:7d:a4:f8:0f:ef:59:0b:06:0a:7d:4e:29:30:39:
                    16:3b:b4:18:51:9e:56:ca:fe:e9:12:6a:4a:92:ea:
                    9e:53:a3:07:d2:d0:97:37:5a:ba:11:88:52:76:de:
                    aa:9b:a8:e1:78:31:d6:87:72:b8:cf:53:f6:e5:29:
                    de:ff:32:7b:0a:ca:07:bf:74:71:ce:c6:bc:35:19:
                    24:07:89:6f:41:67:cb:63:2d:e4:03:db:69:b5:63:
                    09:ab:67:04:e9:84:98:c9:be:41:d9:2f:6f:7a:7d:
                    4d:1a:39:81:80:2d:ac:14:b8:eb:cc:61:d9:0d:55:
                    73:b0:2a:8c:d4:34:84:8c:33:df:41:7f:8c:81:bd:
                    33:d3:78:48:8e:b9:22:df:24:7c:5a:9d:b0:33:80:
                    86:fa:da:18:bc:e1:ac:4e:03:6a:82:8d:84:a0:71:
                    e5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C6:4C:AE:94:52:49:2C:18:E6:E0:89:CB:1E:39:05:07:B5:93:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf4f938a-7cae-3512-b369-300d6d3ea76a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6e:35:0e:8f:97:bf:4d:0c:5f:b1:ff:bb:ab:58:a2:3d:00:
         d5:b4:2d:58:a4:72:13:73:9c:32:81:c1:b6:0d:61:87:4f:97:
         4d:c2:d1:40:cd:5d:bb:15:66:80:4b:7c:c0:14:e5:4f:84:b8:
         46:22:d8:a5:7f:fb:be:33:c7:a6:95:48:3d:f7:71:2c:d7:2e:
         cd:59:81:34:fa:5c:72:a0:42:8e:51:cf:06:cb:de:5c:a7:3e:
         53:bc:7a:1f:85:df:8f:ff:77:19:0d:28:c4:12:b0:07:1c:c8:
         fc:c8:ba:a3:92:59:1c:aa:04:4d:96:01:5f:3f:1c:c1:b1:2f:
         ca:74:95:b7:7e:88:95:41:45:dc:85:79:1e:a7:f1:e9:4c:f3:
         50:f8:f0:45:c8:27:71:6b:de:91:0d:b3:8a:76:31:9e:77:86:
         30:6c:9b:27:b6:3f:bc:92:92:c9:42:10:35:97:a0:f6:11:30:
         18:29:39:94:7a:ef:40:a3:ee:98:96:34:5b:93:fd:80:41:b5:
         d6:d2:48:90:38:01:5d:7c:7a:67:3d:96:d9:20:f4:6c:34:9f:
         70:de:3f:19:8c:86:e6:55:fa:2e:55:70:e6:e2:f7:38:0a:bf:
         50:06:95:7a:45:13:05:77:3a:34:e1:fc:26:a1:de:4a:5a:f2:
         f8:99:9a:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwlgJrfhpcitdxUKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk
NjQyNGNkYWUtODhhNC00Y2VmLWEzOTMtM2E5ZDM1ZDYyYzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqBHXGnG9ni9ZdvEhuKBls39f3JVJqYLkcdq
63H95lAG6Lz8DlTOLX550psPsj4hDRpATtwRS9auAMeMPb7VDu/tzZkoHyV/tgMW
fQhs/Y1zRdQLtj9PzGDefaT4D+9ZCwYKfU4pMDkWO7QYUZ5Wyv7pEmpKkuqeU6MH
0tCXN1q6EYhSdt6qm6jheDHWh3K4z1P25Sne/zJ7CsoHv3Rxzsa8NRkkB4lvQWfL
Yy3kA9tptWMJq2cE6YSYyb5B2S9ven1NGjmBgC2sFLjrzGHZDVVzsCqM1DSEjDPf
QX+Mgb0z03hIjrki3yR8Wp2wM4CG+toYvOGsTgNqgo2EoHHlMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFArGTK6UUkksGObgicseOQUHtZNyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2Y0ZjkzOGEtN2NhZS0z
NTEyLWIzNjktMzAwZDZkM2VhNzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOABMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1uNQ6Pl79NDF+x/7urWKI9ANW0LVikchNznDKBwbYNYYdPl03C0UDN
XbsVZoBLfMAU5U+EuEYi2KV/+74zx6aVSD33cSzXLs1ZgTT6XHKgQo5RzwbL3lyn
PlO8eh+F34//dxkNKMQSsAccyPzIuqOSWRyqBE2WAV8/HMGxL8p0lbd+iJVBRdyF
eR6n8elM81D48EXIJ3Fr3pENs4p2MZ53hjBsmye2P7ySkslCEDWXoPYRMBgpOZR6
70Cj7piWNFuT/YBBtdbSSJA4AV18emc9ltkg9Gw0n3DePxmMhuZV+i5VcObi9zgK
v1AGlXpFEwV3OjTh/Cah3kpa8viZmjY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:27:46 2024 by rpki-client on console-fra.rpki-client.org