Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5e637b51-80c2-35fa-ad18-b5f148be60c5.roa
File:                     5e637b51-80c2-35fa-ad18-b5f148be60c5.roa (raw, json)
Hash identifier:          DDz9rUBuEft0LBMLmbJD1YM0UKr+xlvVYFeESvllTKU=
Subject key identifier:   A4:8D:E6:D5:B0:A0:64:02:08:59:61:BF:CA:C8:9C:E3:68:EB:4F:56
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584793438EAC8E16A94A21925200
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5e637b51-80c2-35fa-ad18-b5f148be60c5.roa
Signing time:             Thu 17 Oct 2024 21:19:54 +0000
ROA not before:           Thu 17 Oct 2024 21:19:54 +0000
ROA not after:            Wed 15 Jan 2025 22:19:54 +0000
asID:                     2152
IP address blocks:        137.164.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:43:8e:ac:8e:16:a9:4a:21:92:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Oct 17 21:19:54 2024 GMT
            Not After : Jan 15 22:19:54 2025 GMT
        Subject: CN=e483f522-58cf-4455-a5a0-15239d89e19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:37:c5:27:a2:9e:ca:fe:d9:86:b9:c4:dd:2c:
                    a7:32:19:12:9b:72:34:35:ff:e9:c4:d2:e2:d7:ea:
                    31:4c:fb:8f:5e:72:00:fd:2c:f0:1f:54:4c:09:e4:
                    63:5f:99:da:6a:db:87:4a:e0:d1:48:4c:45:4a:18:
                    a2:82:93:ec:a7:41:5d:48:81:ea:26:1c:87:4d:d5:
                    3c:57:63:5d:78:7e:0b:db:86:08:ee:79:e3:81:37:
                    6f:5d:18:f4:b9:27:7a:9e:c7:bd:15:b8:24:bf:be:
                    0d:cb:2e:79:d8:8c:c4:71:f5:f1:2c:47:0c:ca:79:
                    e1:60:03:cc:96:2c:17:6c:d7:a3:9a:b2:4e:b1:34:
                    22:b3:2d:94:86:39:30:54:05:b3:2b:57:3d:60:08:
                    20:2a:6e:bd:fd:17:1c:ef:3d:c4:ff:95:93:9b:a8:
                    af:7c:01:b7:c1:d1:d0:59:df:c9:dd:e3:21:52:94:
                    a7:e4:cf:b9:99:59:b0:d0:5e:74:89:12:83:b7:56:
                    95:ea:1c:1d:b8:a4:54:7a:17:73:bb:ad:cf:a1:e6:
                    be:97:35:e9:59:20:76:22:ca:f9:7a:4d:69:69:b9:
                    a4:ef:2f:e7:9e:b8:45:b5:23:0a:66:9c:ab:39:a4:
                    5d:b9:09:39:d1:f3:6d:70:24:c4:fc:8c:a4:21:bc:
                    27:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8D:E6:D5:B0:A0:64:02:08:59:61:BF:CA:C8:9C:E3:68:EB:4F:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5e637b51-80c2-35fa-ad18-b5f148be60c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.164.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:0b:47:f3:ff:67:6f:67:57:8a:2f:c8:c6:65:53:df:2f:30:
         c8:a7:ad:b3:d4:2f:b8:cb:78:8a:29:b2:00:ca:db:de:11:fe:
         1f:3b:bc:07:4a:5d:76:a6:2f:0a:e9:f7:7c:e6:c8:71:9f:6c:
         27:60:e4:26:45:e0:af:46:c0:96:89:66:71:31:49:af:3c:ad:
         d5:fc:9c:03:e0:ab:c6:85:48:34:86:28:82:d3:a4:ca:a0:87:
         cd:c0:f9:57:e0:31:0f:e1:4c:d6:0c:36:fd:6e:8a:9c:0e:73:
         f4:f5:cf:03:78:f9:0f:9b:7a:23:c9:7d:2e:33:ac:b9:1a:b2:
         20:37:2c:04:4c:f7:6a:2d:ae:20:1a:ff:ff:1e:16:73:41:7c:
         4c:bf:4c:d0:e4:df:a2:8c:08:d3:be:50:1e:01:01:1a:d2:59:
         25:ac:6f:b6:b1:3e:3b:02:51:6d:c4:f3:35:53:05:c3:e9:fc:
         16:c1:52:70:8c:4d:be:24:c9:3a:20:8d:8f:51:bf:e9:3a:77:
         27:28:8a:e7:83:5e:80:af:3c:4f:85:71:a6:37:16:39:fd:ac:
         35:cb:03:6a:24:ee:d0:39:c5:99:f2:a9:ab:4b:91:43:3f:bf:
         31:35:b7:28:2a:b9:5a:04:1a:fd:5e:31:9a:c4:fd:2b:0a:8a:
         ab:89:57:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTQ46sjhapSiGSUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4
NTQ4MB4XDTI0MTAxNzIxMTk1NFoXDTI1MDExNTIyMTk1NFowLzEtMCsGA1UEAxMk
ZTQ4M2Y1MjItNThjZi00NDU1LWE1YTAtMTUyMzlkODllMTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjfFJ6Keyv7ZhrnE3SynMhkSm3I0Nf/pxNLi
1+oxTPuPXnIA/SzwH1RMCeRjX5naatuHSuDRSExFShiigpPsp0FdSIHqJhyHTdU8
V2NdeH4L24YI7nnjgTdvXRj0uSd6nse9Fbgkv74Nyy552IzEcfXxLEcMynnhYAPM
liwXbNejmrJOsTQisy2UhjkwVAWzK1c9YAggKm69/Rcc7z3E/5WTm6ivfAG3wdHQ
Wd/J3eMhUpSn5M+5mVmw0F50iRKDt1aV6hwduKRUehdzu63Poea+lzXpWSB2Isr5
ek1pabmk7y/nnrhFtSMKZpyrOaRduQk50fNtcCTE/IykIbwnnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKSN5tWwoGQCCFlhv8rInONo609WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj
YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvNWU2MzdiNTEtODBjMi0z
NWZhLWFkMTgtYjVmMTQ4YmU2MGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4
MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2
ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi
MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaT+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8LR/P/Z29nV4ovyMZlU98vMMinrbPUL7jLeIopsgDK294R/h87vAdK
XXamLwrp93zmyHGfbCdg5CZF4K9GwJaJZnExSa88rdX8nAPgq8aFSDSGKILTpMqg
h83A+VfgMQ/hTNYMNv1uipwOc/T1zwN4+Q+beiPJfS4zrLkasiA3LARM92otriAa
//8eFnNBfEy/TNDk36KMCNO+UB4BARrSWSWsb7axPjsCUW3E8zVTBcPp/BbBUnCM
Tb4kyTogjY9Rv+k6dycoiueDXoCvPE+FcaY3Fjn9rDXLA2ok7tA5xZnyqatLkUM/
vzE1tygquVoEGv1eMZrE/SsKiquJV5Y=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:34 2024 by rpki-client on console-fra.rpki-client.org