Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5b1df215-3a15-300d-8c51-08b60db4667a.roa
File:                     5b1df215-3a15-300d-8c51-08b60db4667a.roa (raw, json)
Hash identifier:          k9jkDIjnJcQ5KqQL+iZpj2LQQO3EF181AykCosDF7Yw=
Subject key identifier:   EA:0D:5E:95:78:1A:0E:21:61:02:9C:39:0F:98:03:37:FB:28:5B:66
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584726D08D1704DC1DC66A374E60
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5b1df215-3a15-300d-8c51-08b60db4667a.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     16417
IP address blocks:        207.54.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:8d:17:04:dc:1d:c6:6a:37:4e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=fda52901-a81e-4b35-b992-892f9ee88d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8d:7b:61:f8:3b:73:4d:52:e8:b0:39:8d:50:
                    cf:fc:d3:b5:ed:62:60:66:7e:2c:49:e5:bc:60:24:
                    3d:51:3d:ec:21:71:98:0d:83:a9:bc:77:e0:f6:9c:
                    0e:38:c7:cb:ab:a5:fd:60:0a:f3:2d:c8:5b:7e:51:
                    0c:38:62:47:06:35:89:5b:12:6d:2d:7f:33:7a:06:
                    2d:53:95:fd:e0:19:49:4c:65:ce:40:85:0e:f1:ed:
                    6f:f8:ae:9e:6f:1c:3f:e7:a5:2f:0f:28:0f:26:69:
                    6d:92:87:17:e5:d7:ee:94:6e:2a:07:2d:a2:b3:cb:
                    bf:65:1d:3c:79:1e:ee:f3:90:72:be:0d:92:a4:50:
                    5b:07:79:54:4b:39:df:d8:ef:0d:17:79:c2:63:24:
                    0e:25:26:f2:81:6e:61:61:76:1c:79:6c:d0:78:80:
                    78:65:c0:62:8f:4d:d7:9a:0e:f4:ce:18:e8:5f:61:
                    95:e3:84:08:a0:2c:73:b5:76:6b:54:4a:5a:67:73:
                    50:13:ed:a6:c0:69:15:04:0e:5a:c9:21:6a:34:5b:
                    db:a3:11:b4:8a:30:98:67:7f:4a:a2:de:ad:1a:0b:
                    05:7b:30:b4:76:11:46:a1:55:90:28:17:e4:2e:6b:
                    09:11:9f:52:9a:2b:d9:cd:cb:0b:ae:93:e8:6e:54:
                    7b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0D:5E:95:78:1A:0E:21:61:02:9C:39:0F:98:03:37:FB:28:5B:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5b1df215-3a15-300d-8c51-08b60db4667a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:60:c7:91:22:af:f1:f1:14:2d:e0:1d:79:47:21:95:d4:80:
         af:88:a9:96:df:80:db:e7:85:9b:d4:36:db:4f:3e:81:5d:89:
         a5:a3:28:98:6c:80:4a:9a:a7:d6:02:88:ab:77:dd:94:1f:6b:
         b1:ae:4e:43:b6:1a:8f:e0:f0:55:90:91:ce:36:00:b2:9e:25:
         15:c5:20:3a:12:6c:b6:57:5b:89:35:b1:97:a2:49:9e:9d:2c:
         ec:5b:15:f5:da:e3:d8:c7:8b:38:8b:b4:76:1d:26:5a:97:ac:
         a6:70:8e:81:d3:fe:d9:e0:6b:d0:bf:8a:9b:00:15:34:a5:38:
         9e:94:f6:f4:0f:d4:71:cb:32:71:49:aa:b9:b5:96:7b:5b:d6:
         8e:51:8b:7d:20:03:c9:60:69:0e:8e:39:ef:f9:ba:7f:e5:90:
         2e:40:66:b9:b5:b8:75:f9:25:0b:d8:83:3e:25:84:c7:d9:80:
         d4:8d:4b:da:b9:3d:a1:ca:29:e6:b4:ce:bb:8b:42:19:9d:47:
         2a:99:94:0f:cf:0a:97:dc:8f:6d:57:e0:d4:38:15:a8:e8:db:
         a8:60:8a:7e:5a:b9:08:40:18:16:ae:07:5d:7b:f4:70:a1:8a:
         03:df:d7:c9:e5:c9:c0:3f:00:65:34:30:55:0c:94:34:ff:91:
         f6:09:e7:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcm0I0XBNwdxmo3TmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk
ZmRhNTI5MDEtYTgxZS00YjM1LWI5OTItODkyZjllZTg4ZDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI17Yfg7c01S6LA5jVDP/NO17WJgZn4sSeW8
YCQ9UT3sIXGYDYOpvHfg9pwOOMfLq6X9YArzLchbflEMOGJHBjWJWxJtLX8zegYt
U5X94BlJTGXOQIUO8e1v+K6ebxw/56UvDygPJmltkocX5dfulG4qBy2is8u/ZR08
eR7u85Byvg2SpFBbB3lUSznf2O8NF3nCYyQOJSbygW5hYXYceWzQeIB4ZcBij03X
mg70zhjoX2GV44QIoCxztXZrVEpaZ3NQE+2mwGkVBA5aySFqNFvboxG0ijCYZ39K
ot6tGgsFezC0dhFGoVWQKBfkLmsJEZ9SmivZzcsLrpPoblR7YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOoNXpV4Gg4hYQKcOQ+YAzf7KFtmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNWIxZGYyMTUtM2ExNS0z
MDBkLThjNTEtMDhiNjBkYjQ2NjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACZgx5Eir/HxFC3gHXlHIZXUgK+IqZbfgNvnhZvUNttPPoFdiaWjKJhs
gEqap9YCiKt33ZQfa7GuTkO2Go/g8FWQkc42ALKeJRXFIDoSbLZXW4k1sZeiSZ6d
LOxbFfXa49jHiziLtHYdJlqXrKZwjoHT/tnga9C/ipsAFTSlOJ6U9vQP1HHLMnFJ
qrm1lntb1o5Ri30gA8lgaQ6OOe/5un/lkC5AZrm1uHX5JQvYgz4lhMfZgNSNS9q5
PaHKKea0zruLQhmdRyqZlA/PCpfcj21X4NQ4Fajo26hgin5auQhAGBauB1179HCh
igPf18nlycA/AGU0MFUMlDT/kfYJ564=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:37 2024 by rpki-client on console-ams.rpki-client.org