Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35060332-7e9f-3cbe-964f-8702fe08db28.roa
File:                     35060332-7e9f-3cbe-964f-8702fe08db28.roa (raw, json)
Hash identifier:          DSNUr2h7gdpATw2VT8k7xu1XquGwvta+6Wc4vF7u1FE=
Subject key identifier:   81:0A:B6:6A:BC:36:6E:CF:70:C7:6A:52:31:33:C4:C7:4D:A4:60:25
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858477EC11E3C33BFD17F17B07180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35060332-7e9f-3cbe-964f-8702fe08db28.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.108.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:1e:3c:33:bf:d1:7f:17:b0:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=197e3566-ed6e-481a-b3e4-bcce97fb0e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d8:20:59:4e:e9:70:b2:5f:e2:ea:2e:97:a5:
                    c4:3d:d9:bf:14:cb:99:8c:ba:8b:c3:e7:f5:ea:2b:
                    bb:48:82:e0:05:5d:5e:74:65:f9:21:a3:6b:81:c6:
                    74:e7:a5:13:c2:38:d0:6c:96:12:38:6d:d9:03:f3:
                    3f:94:71:d4:a8:b9:cb:54:87:2a:26:3b:1f:78:b7:
                    ad:fc:05:22:65:b7:71:81:c3:2e:2f:1a:fd:36:60:
                    22:53:e1:29:17:53:cb:0e:96:fa:3f:5e:09:b7:7a:
                    53:8c:6d:13:78:5e:85:1a:33:b8:6a:d1:26:7f:19:
                    5d:ba:0c:a2:36:3c:02:01:84:21:0a:fb:20:30:cb:
                    e0:e0:4f:12:39:99:7c:d9:1b:3f:61:80:e1:49:5c:
                    bb:05:c9:96:ae:a6:82:82:f2:17:c9:5d:15:0a:5d:
                    7c:40:fe:c9:19:e5:d3:58:d2:a8:56:9b:bb:78:97:
                    5e:4b:c3:7e:5d:67:7c:84:47:3e:d4:64:63:03:7c:
                    cb:73:f9:0e:a9:b1:88:ad:d3:cd:b6:72:24:05:30:
                    5e:06:ff:bd:63:b4:f4:c6:25:b7:a0:39:5e:37:cf:
                    41:ac:8d:4a:78:7f:61:d2:82:45:d7:61:17:61:dd:
                    e7:6f:c6:a8:3e:3e:46:af:15:09:89:63:0f:16:6f:
                    5a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0A:B6:6A:BC:36:6E:CF:70:C7:6A:52:31:33:C4:C7:4D:A4:60:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35060332-7e9f-3cbe-964f-8702fe08db28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:15:0d:e4:e5:9b:43:3a:8b:f2:38:ff:21:d7:82:b1:54:26:
         48:4a:8e:13:97:09:38:f9:f3:a3:3b:b4:0d:fc:b8:fa:3f:21:
         50:e7:d3:36:9b:14:55:de:15:43:09:e9:a0:5b:fa:47:d0:b0:
         11:3d:5f:01:08:a7:2b:2e:78:83:92:f6:74:a6:40:3a:14:18:
         fc:57:f7:01:fa:05:60:72:c9:fd:52:69:70:f5:e9:6a:74:96:
         07:a8:78:f7:67:b1:3e:a3:6f:62:5c:20:d2:b9:bb:5f:f1:29:
         f5:36:5d:9b:13:eb:1e:05:a5:b7:28:c9:78:53:ee:7b:7f:60:
         79:95:c1:7a:11:8f:b4:0c:05:f8:3a:76:d7:27:53:23:53:78:
         43:bf:9b:30:0d:78:9e:93:a3:4a:0a:da:b6:2d:35:e9:99:89:
         a7:d6:b8:f8:69:36:be:cd:82:3d:3a:d3:f9:68:d9:d2:56:99:
         84:0a:ca:83:9b:61:98:9a:85:c1:44:29:4f:5f:95:20:60:b7:
         92:87:3b:4b:12:72:60:01:a2:5c:ad:f9:3b:f1:40:f5:92:a3:
         85:84:2b:48:d2:f7:68:77:44:24:0b:33:01:a4:c0:c2:5d:5f:
         4e:2a:10:e9:b5:8d:54:02:fb:6c:5f:f2:b1:7a:19:ba:ed:c6:
         d3:4e:d8:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd+wR48M7/RfxewcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk
MTk3ZTM1NjYtZWQ2ZS00ODFhLWIzZTQtYmNjZTk3ZmIwZTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9ggWU7pcLJf4uoul6XEPdm/FMuZjLqLw+f1
6iu7SILgBV1edGX5IaNrgcZ056UTwjjQbJYSOG3ZA/M/lHHUqLnLVIcqJjsfeLet
/AUiZbdxgcMuLxr9NmAiU+EpF1PLDpb6P14Jt3pTjG0TeF6FGjO4atEmfxldugyi
NjwCAYQhCvsgMMvg4E8SOZl82Rs/YYDhSVy7BcmWrqaCgvIXyV0VCl18QP7JGeXT
WNKoVpu7eJdeS8N+XWd8hEc+1GRjA3zLc/kOqbGIrdPNtnIkBTBeBv+9Y7T0xiW3
oDleN89BrI1KeH9h0oJF12EXYd3nb8aoPj5GrxUJiWMPFm9aAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIEKtmq8Nm7PcMdqUjEzxMdNpGAlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzUwNjAzMzItN2U5Zi0z
Y2JlLTk2NGYtODcwMmZlMDhkYjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGwYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKQVDeTlm0M6i/I4/yHXgrFUJkhKjhOXCTj586M7tA38uPo/IVDn0zab
FFXeFUMJ6aBb+kfQsBE9XwEIpysueIOS9nSmQDoUGPxX9wH6BWByyf1SaXD16Wp0
lgeoePdnsT6jb2JcINK5u1/xKfU2XZsT6x4FpbcoyXhT7nt/YHmVwXoRj7QMBfg6
dtcnUyNTeEO/mzANeJ6To0oK2rYtNemZiafWuPhpNr7Ngj060/lo2dJWmYQKyoOb
YZiahcFEKU9flSBgt5KHO0sScmABolyt+TvxQPWSo4WEK0jS92h3RCQLMwGkwMJd
X04qEOm1jVQC+2xf8rF6GbrtxtNO2Mg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:24 2024 by rpki-client on console-fra.rpki-client.org