Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/4168211f-81ee-3a06-a39d-59f42a3495b8.roa
File:                     4168211f-81ee-3a06-a39d-59f42a3495b8.roa (raw, json)
Hash identifier:          4LQU55WIrhy9qTh0+t3dLZ97fZiYFAn5TgKHXxloctM=
Subject key identifier:   07:5D:5B:4A:DE:B4:63:49:27:5A:64:28:42:71:67:02:F9:8D:13:C0
Certificate issuer:       /CN=84052649-3401-4ba6-ad82-6f310741b104
Certificate serial:       010D0C9F432858472C65DA33DF4A643249220200
Authority key identifier: C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/4168211f-81ee-3a06-a39d-59f42a3495b8.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     395129
IP address blocks:        108.59.204.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:da:33:df:4a:64:32:49:22:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84052649-3401-4ba6-ad82-6f310741b104
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=6ace16bd-4e92-4176-8731-92cbbdf94beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7f:6d:89:97:c2:94:98:93:b7:a6:7d:21:26:
                    e9:d1:cf:7d:e7:0c:50:ef:0f:09:68:85:42:3a:8c:
                    9f:a3:4f:09:78:fe:b5:be:f4:8f:06:6b:ec:db:62:
                    de:99:da:b5:05:de:43:46:43:e9:80:c4:49:b8:a4:
                    09:83:45:ce:1b:e7:04:b3:22:0c:85:cb:53:22:f5:
                    9f:4b:8d:4b:ec:b5:31:aa:cc:0d:24:23:af:d9:8c:
                    78:fc:02:20:4c:fa:4a:1a:9f:f9:2a:5e:09:5d:89:
                    ba:90:b2:82:c5:fd:66:36:48:02:1d:dd:59:96:28:
                    8b:df:cb:64:64:64:a3:2c:68:a3:c7:6f:82:8b:49:
                    20:2e:a6:00:e4:b8:b7:6b:37:0a:82:67:6c:66:6d:
                    8e:3e:8e:c3:dd:36:c0:c1:e5:bd:78:73:cc:8b:7b:
                    3c:91:b3:da:50:b0:f9:a9:94:bf:5f:47:e0:7d:ac:
                    56:1e:88:4b:a3:2c:8e:96:40:f9:cd:dd:56:8c:56:
                    ca:e4:e1:4a:c5:94:a0:4c:ba:eb:80:db:72:e1:0a:
                    25:a7:59:04:72:32:ad:e9:52:df:0b:99:c1:e3:23:
                    22:82:bc:5e:98:d1:ce:eb:78:35:75:4d:7d:83:d8:
                    35:6a:14:2b:be:65:85:3f:68:6d:6a:3b:d2:7f:4c:
                    3a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5D:5B:4A:DE:B4:63:49:27:5A:64:28:42:71:67:02:F9:8D:13:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/4168211f-81ee-3a06-a39d-59f42a3495b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl

            X509v3 Authority Key Identifier:
                keyid:C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.59.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:44:65:31:72:53:ad:c2:6b:34:85:03:67:17:53:3d:2f:d8:
         81:e3:54:31:be:58:31:2d:60:7c:fc:68:d4:8f:3e:0b:b3:b5:
         9a:14:a9:bd:c1:12:b9:9c:45:33:e2:c1:ea:71:5c:59:ce:28:
         cc:1a:ed:54:66:08:62:5b:e7:f4:99:66:5d:ab:4f:44:1e:e4:
         41:06:30:6d:ad:3f:29:9e:f5:30:0a:2e:13:9b:a2:0e:53:96:
         f5:0f:77:29:95:2c:87:47:c3:b7:87:3e:9c:ec:8e:c6:e1:37:
         17:cc:ce:30:db:c9:3a:b7:67:bd:62:81:83:9e:55:b4:56:c0:
         5a:de:9e:0f:42:6b:4f:05:63:87:11:ce:58:48:41:72:6b:95:
         5c:eb:00:17:71:b9:7a:58:7c:0b:3f:1d:0b:75:ad:7e:20:03:
         b1:1d:28:3b:7f:fd:44:a0:1b:4f:f2:16:1e:c4:51:28:ea:20:
         1c:1d:e6:87:c1:f5:63:f1:47:0f:e8:22:e7:0b:08:3f:e6:be:
         8f:2c:c1:01:c0:65:da:fe:e8:14:b2:56:06:9e:0d:f2:da:5c:
         4d:6b:41:ce:3e:d1:5b:f8:45:d0:4f:2f:c9:59:e2:49:c0:47:
         0e:ea:82:66:b3:48:18:03:d8:a3:95:a4:1a:90:9e:05:77:be:
         da:d7:69:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcsZdoz30pkMkkiAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQwNTI2NDktMzQwMS00YmE2LWFkODItNmYzMTA3NDFi
MTA0MB4XDTI0MDkxMTAxMDAzMVoXDTI0MTIxMDAyMDAzMVowLzEtMCsGA1UEAxMk
NmFjZTE2YmQtNGU5Mi00MTc2LTg3MzEtOTJjYmJkZjk0YmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn9tiZfClJiTt6Z9ISbp0c995wxQ7w8JaIVC
Ooyfo08JeP61vvSPBmvs22Lemdq1Bd5DRkPpgMRJuKQJg0XOG+cEsyIMhctTIvWf
S41L7LUxqswNJCOv2Yx4/AIgTPpKGp/5Kl4JXYm6kLKCxf1mNkgCHd1ZliiL38tk
ZGSjLGijx2+Ci0kgLqYA5Li3azcKgmdsZm2OPo7D3TbAweW9eHPMi3s8kbPaULD5
qZS/X0fgfaxWHohLoyyOlkD5zd1WjFbK5OFKxZSgTLrrgNty4Qolp1kEcjKt6VLf
C5nB4yMigrxemNHO63g1dU19g9g1ahQrvmWFP2htajvSf0w6fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAddW0retGNJJ1pkKEJxZwL5jRPAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NDA1
MjY0OS0zNDAxLTRiYTYtYWQ4Mi02ZjMxMDc0MWIxMDQvNDE2ODIxMWYtODFlZS0z
YTA2LWEzOWQtNTlmNDJhMzQ5NWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODQwNTI2NDktMzQwMS00YmE2LWFk
ODItNmYzMTA3NDFiMTA0Lzg0MDUyNjQ5LTM0MDEtNGJhNi1hZDgyLTZmMzEwNzQx
YjEwNC5jcmwwHwYDVR0jBBgwFoAUxX6Uv/iI2K38KlbO/GLK91AHs6owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84NDA1MjY0OS0zNDAxLTRiYTYtYWQ4Mi02ZjMx
MDc0MWIxMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbDvMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNEZTFyU63CazSFA2cXUz0v2IHjVDG+WDEtYHz8aNSPPguztZoUqb3B
ErmcRTPiwepxXFnOKMwa7VRmCGJb5/SZZl2rT0Qe5EEGMG2tPyme9TAKLhObog5T
lvUPdymVLIdHw7eHPpzsjsbhNxfMzjDbyTq3Z71igYOeVbRWwFreng9Ca08FY4cR
zlhIQXJrlVzrABdxuXpYfAs/HQt1rX4gA7EdKDt//USgG0/yFh7EUSjqIBwd5ofB
9WPxRw/oIucLCD/mvo8swQHAZdr+6BSyVgaeDfLaXE1rQc4+0Vv4RdBPL8lZ4knA
Rw7qgmazSBgD2KOVpBqQngV3vtrXafY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:33 2024 by rpki-client on console-fra.rpki-client.org