Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d0f4e14f-61b8-399b-b301-dd003cf0dc02.roa
File:                     d0f4e14f-61b8-399b-b301-dd003cf0dc02.roa (raw, json)
Hash identifier:          no9zWkhq60ppfdfwv8Tu3mlIig1xd6XscjbFNAVpRNI=
Subject key identifier:   EB:AF:8A:65:57:FB:3C:52:C9:C3:6A:ED:72:53:D6:29:E0:D0:07:E7
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584726D08C57A841662E158B0240
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d0f4e14f-61b8-399b-b301-dd003cf0dc02.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     16417
IP address blocks:        216.71.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:8c:57:a8:41:66:2e:15:8b:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=2fcca7b2-1fa5-4376-b59e-a11eb235a310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c0:0f:e9:d0:9f:ed:a9:b3:f1:82:d1:76:c6:
                    c0:d3:d1:c8:c9:39:bd:37:85:4a:e9:6d:5a:16:79:
                    0d:6b:fb:a4:32:63:d6:76:23:e4:c8:df:0e:b1:3b:
                    da:c9:a4:0e:3d:0a:5e:73:64:ac:9c:42:62:7d:77:
                    44:db:6d:50:b6:8f:1b:bb:6e:bf:df:a7:f5:21:22:
                    c0:92:f8:0a:99:bf:6a:94:51:ed:ec:76:25:1f:3f:
                    bb:16:e4:92:1d:bb:b1:b5:06:15:a1:f9:12:5c:80:
                    58:bf:c5:f1:7f:cb:9c:1e:56:f6:a1:31:f7:99:d4:
                    aa:71:55:ac:6b:3f:48:eb:50:fe:f4:c8:ed:de:0b:
                    d2:34:f7:db:d2:59:da:b2:e9:38:ac:5c:e3:4d:a1:
                    d3:12:5f:45:92:b9:ec:80:57:5b:fb:27:dc:ad:25:
                    67:85:5a:de:82:e1:b2:53:f0:12:10:05:95:47:ab:
                    1f:29:9e:da:20:19:4f:4c:1e:ad:63:3f:95:d5:74:
                    cf:33:fd:41:75:a3:34:c3:2a:c7:04:23:81:de:d2:
                    71:e7:26:8c:77:53:c0:61:e5:d7:ce:85:5f:ba:ed:
                    14:c9:45:7b:9c:0c:18:af:aa:62:69:ce:35:5a:d8:
                    ba:6d:e7:eb:e1:b7:59:1d:e7:ea:2d:cc:28:b5:6d:
                    06:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AF:8A:65:57:FB:3C:52:C9:C3:6A:ED:72:53:D6:29:E0:D0:07:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d0f4e14f-61b8-399b-b301-dd003cf0dc02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:7d:0f:85:92:ee:84:0e:ae:4f:74:ad:06:c0:7e:6c:52:79:
         2d:b6:f2:3c:36:c2:91:fa:e6:a7:02:1a:cd:94:9e:c6:1d:e8:
         49:05:80:31:d7:c7:c7:f7:27:a8:f4:b1:96:24:2a:e7:c5:4f:
         19:cc:f2:59:95:1d:30:31:2d:7e:cf:6c:9c:34:99:89:d5:c2:
         58:a0:f9:05:ed:7c:4e:89:5f:f9:33:20:c0:c5:0e:c7:8e:27:
         73:7e:53:de:ad:4d:41:f3:8d:18:21:f3:38:aa:85:37:6d:54:
         7c:ae:c8:1f:7e:62:62:35:7e:3e:fa:08:1b:44:35:10:49:b9:
         86:c6:d7:17:52:7d:39:47:a4:eb:89:16:51:92:a3:92:36:cb:
         02:02:0c:d1:90:87:15:3b:1d:07:48:70:59:4b:21:af:b0:c3:
         37:99:7a:31:dd:60:1c:28:36:c1:ce:a4:54:fb:94:32:7d:4f:
         6e:8f:d5:cb:a3:4f:bb:7f:d6:70:e6:1d:84:d9:a0:51:0c:b2:
         39:4c:3f:26:e5:15:28:e2:df:f2:29:b1:19:3e:fa:62:45:b0:
         9d:2b:1d:87:09:9e:13:6f:e4:00:be:b0:f1:b1:a3:8a:43:34:
         85:59:db:bc:d5:61:17:c6:24:2d:f1:b8:23:52:bb:9e:5b:48:
         37:9e:e7:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcm0IxXqEFmLhWLAkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk
MmZjY2E3YjItMWZhNS00Mzc2LWI1OWUtYTExZWIyMzVhMzEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8AP6dCf7amz8YLRdsbA09HIyTm9N4VK6W1a
FnkNa/ukMmPWdiPkyN8OsTvayaQOPQpec2SsnEJifXdE221Qto8bu26/36f1ISLA
kvgKmb9qlFHt7HYlHz+7FuSSHbuxtQYVofkSXIBYv8Xxf8ucHlb2oTH3mdSqcVWs
az9I61D+9Mjt3gvSNPfb0lnasuk4rFzjTaHTEl9FkrnsgFdb+yfcrSVnhVreguGy
U/ASEAWVR6sfKZ7aIBlPTB6tYz+V1XTPM/1BdaM0wyrHBCOB3tJx5yaMd1PAYeXX
zoVfuu0UyUV7nAwYr6piac41Wti6befr4bdZHefqLcwotW0G0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOuvimVX+zxSycNq7XJT1ing0AfnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZDBmNGUxNGYtNjFiOC0z
OTliLWIzMDEtZGQwMDNjZjBkYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHl9D4WS7oQOrk90rQbAfmxSeS228jw2wpH65qcCGs2UnsYd6EkFgDHX
x8f3J6j0sZYkKufFTxnM8lmVHTAxLX7PbJw0mYnVwlig+QXtfE6JX/kzIMDFDseO
J3N+U96tTUHzjRgh8ziqhTdtVHyuyB9+YmI1fj76CBtENRBJuYbG1xdSfTlHpOuJ
FlGSo5I2ywICDNGQhxU7HQdIcFlLIa+wwzeZejHdYBwoNsHOpFT7lDJ9T26P1cuj
T7t/1nDmHYTZoFEMsjlMPyblFSji3/IpsRk++mJFsJ0rHYcJnhNv5AC+sPGxo4pD
NIVZ27zVYRfGJC3xuCNSu55bSDee5yc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:35 2024 by rpki-client on console-fra.rpki-client.org