Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/7dd97fb8-913f-3e95-9aee-9d39c5819a6c.roa
File:                     7dd97fb8-913f-3e95-9aee-9d39c5819a6c.roa (raw, json)
Hash identifier:          uHoinKje7c3QuQDZtk8+ljxakYI3asm6pfm0JPj21Fk=
Subject key identifier:   17:61:10:96:9F:FB:CC:B0:CA:3E:78:F4:32:E3:36:73:DB:24:D7:4F
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F432858474203DC1EADBAC7704F792080
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/7dd97fb8-913f-3e95-9aee-9d39c5819a6c.roa
Signing time:             Wed 18 Sep 2024 18:51:05 +0000
ROA not before:           Wed 18 Sep 2024 18:51:05 +0000
ROA not after:            Tue 17 Dec 2024 19:51:05 +0000
asID:                     396982
IP address blocks:        23.227.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:03:dc:1e:ad:ba:c7:70:4f:79:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Sep 18 18:51:05 2024 GMT
            Not After : Dec 17 19:51:05 2024 GMT
        Subject: CN=be0d4334-e254-4efb-956b-2dfcff71caf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:98:d7:ff:46:49:71:36:bc:7d:ad:ef:49:2e:
                    f8:50:a9:5b:45:40:f4:85:86:be:69:d3:2d:58:ed:
                    18:8a:d4:9b:8a:94:a0:70:c4:45:f1:97:72:54:e0:
                    56:c9:61:d3:71:d1:75:f9:18:5c:4b:bc:1f:24:ff:
                    d8:38:e7:97:2a:88:7c:89:08:b3:ca:da:a0:65:97:
                    7f:2c:7c:28:b2:92:10:7a:f7:03:1a:93:95:8e:81:
                    34:00:95:68:18:ba:c7:6c:b2:62:b9:1b:3f:99:9b:
                    a4:98:08:b5:e2:ef:4a:ef:0d:15:e6:dd:5b:54:48:
                    cf:5e:1b:52:2d:4b:47:b1:5d:47:b9:d2:47:be:2d:
                    29:99:2b:fe:b6:f3:f9:97:20:d0:48:53:e5:d9:da:
                    90:10:f3:01:54:ce:08:71:79:f2:9a:53:cd:58:b5:
                    ca:85:50:7d:f3:0f:f6:3f:0f:23:2f:66:8a:8a:93:
                    4d:7f:0c:15:7e:1e:9a:cc:80:ff:96:fc:f4:71:e6:
                    d3:08:a7:21:eb:75:e7:d5:d1:b4:6e:ed:d8:54:8e:
                    85:1a:54:e2:10:c9:55:f0:1c:4e:30:d1:0e:f4:17:
                    bf:3b:53:c7:44:ca:1f:1c:86:42:5a:ff:a4:49:b1:
                    3e:06:6d:0c:3e:43:32:28:be:cf:4a:57:a3:eb:61:
                    b2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:61:10:96:9F:FB:CC:B0:CA:3E:78:F4:32:E3:36:73:DB:24:D7:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/7dd97fb8-913f-3e95-9aee-9d39c5819a6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:48:a8:88:03:a9:39:2d:63:cd:bb:9e:d0:1d:16:bf:db:dc:
         1c:18:9e:5b:5c:0c:20:a4:e1:e1:91:57:c6:8b:9a:e4:f7:32:
         4a:5c:d6:f0:01:21:7a:30:d1:f2:91:37:48:c9:54:97:30:91:
         e4:62:59:87:5f:4e:7d:06:e2:42:65:b6:aa:23:d0:0b:da:70:
         7d:c2:5a:c3:cc:2e:c3:c5:7b:7b:3a:ef:3e:a5:9d:4a:1b:dc:
         67:36:23:2c:7b:d9:4d:8f:ac:cd:64:bf:13:65:32:29:e4:a6:
         a3:a8:ab:dd:b3:eb:f0:08:94:d5:53:2f:5e:f0:f5:91:bf:0d:
         0c:f0:7b:68:c2:68:00:97:2b:1a:f0:c2:4a:ee:cd:5d:bb:22:
         3e:0e:b8:3b:27:83:e0:f7:f0:05:82:3f:34:06:bb:f4:ab:00:
         e5:6b:bc:31:ec:5b:7e:9c:55:01:ae:05:63:b1:8c:f3:72:e2:
         48:1b:72:97:c4:cf:c8:cb:42:5d:c1:2e:c5:89:44:49:e6:72:
         69:20:0f:80:f4:0b:28:db:c7:82:2b:97:0b:7b:a7:a7:94:ad:
         91:4c:d7:7c:b8:76:cc:95:84:58:bc:57:3e:97:e9:92:46:34:
         f8:e9:ea:24:68:50:00:c1:99:da:5a:e7:42:29:44:60:ea:13:
         21:55:9e:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdCA9werbrHcE95IIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ1NGIzNmEtYzcyNS00YzE4LTkzZTEtODI1YWZjNjQ1
ZTJjMB4XDTI0MDkxODE4NTEwNVoXDTI0MTIxNzE5NTEwNVowLzEtMCsGA1UEAxMk
YmUwZDQzMzQtZTI1NC00ZWZiLTk1NmItMmRmY2ZmNzFjYWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5jX/0ZJcTa8fa3vSS74UKlbRUD0hYa+adMt
WO0YitSbipSgcMRF8ZdyVOBWyWHTcdF1+RhcS7wfJP/YOOeXKoh8iQizytqgZZd/
LHwospIQevcDGpOVjoE0AJVoGLrHbLJiuRs/mZukmAi14u9K7w0V5t1bVEjPXhtS
LUtHsV1HudJHvi0pmSv+tvP5lyDQSFPl2dqQEPMBVM4IcXnymlPNWLXKhVB98w/2
Pw8jL2aKipNNfwwVfh6azID/lvz0cebTCKch63Xn1dG0bu3YVI6FGlTiEMlV8BxO
MNEO9Be/O1PHRMofHIZCWv+kSbE+Bm0MPkMyKL7PSlej62GyQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBdhEJaf+8ywyj549DLjNnPbJNdPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0
YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVhZmM2NDVlMmMvN2RkOTdmYjgtOTEzZi0z
ZTk1LTlhZWUtOWQzOWM1ODE5YTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmQ1NGIzNmEtYzcyNS00YzE4LTkz
ZTEtODI1YWZjNjQ1ZTJjLzZkNTRiMzZhLWM3MjUtNGMxOC05M2UxLTgyNWFmYzY0
NWUyYy5jcmwwHwYDVR0jBBgwFoAUOFjVJZUYEHsaUpZxvbiCe8GGfbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVh
ZmM2NDVlMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+MqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1IqIgDqTktY827ntAdFr/b3BwYnltcDCCk4eGRV8aLmuT3Mkpc1vAB
IXow0fKRN0jJVJcwkeRiWYdfTn0G4kJltqoj0AvacH3CWsPMLsPFe3s67z6lnUob
3Gc2Iyx72U2PrM1kvxNlMinkpqOoq92z6/AIlNVTL17w9ZG/DQzwe2jCaACXKxrw
wkruzV27Ij4OuDsng+D38AWCPzQGu/SrAOVrvDHsW36cVQGuBWOxjPNy4kgbcpfE
z8jLQl3BLsWJREnmcmkgD4D0Cyjbx4Irlwt7p6eUrZFM13y4dsyVhFi8Vz6X6ZJG
NPjp6iRoUADBmdpa50IpRGDqEyFVnvM=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:25 2024 by rpki-client on console-ams.rpki-client.org