Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/85518f83-6d82-3dbd-ad23-fd6459007b47.roa
File:                     85518f83-6d82-3dbd-ad23-fd6459007b47.roa (raw, json)
Hash identifier:          eQwjPG6r7iqlthUFx4sX78CTBVC8j1cgGNsSqAJhcZE=
Subject key identifier:   02:57:7E:8B:01:98:BB:D7:A3:D9:90:7F:2D:DA:FE:42:AE:2C:09:25
Certificate issuer:       /CN=c42cfaea-6b46-494e-95ea-944662b8624b
Certificate serial:       010D0C9F43285847A8A14EC785ADC23B50CD3EE0
Authority key identifier: 3F:AF:58:9A:D1:8F:65:47:CD:5A:B7:57:C6:B6:EA:CD:2D:AB:6A:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/85518f83-6d82-3dbd-ad23-fd6459007b47.roa
Signing time:             Fri 25 Oct 2024 13:00:42 +0000
ROA not before:           Fri 25 Oct 2024 13:00:42 +0000
ROA not after:            Thu 23 Jan 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        198.232.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/c42cfaea-6b46-494e-95ea-944662b8624b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/c42cfaea-6b46-494e-95ea-944662b8624b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a8:a1:4e:c7:85:ad:c2:3b:50:cd:3e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42cfaea-6b46-494e-95ea-944662b8624b
        Validity
            Not Before: Oct 25 13:00:42 2024 GMT
            Not After : Jan 23 14:00:42 2025 GMT
        Subject: CN=6269c282-c9f5-4613-89ae-0a783abb1d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8f:80:15:4a:19:a7:44:fc:de:03:96:25:5a:
                    9b:23:70:b1:4a:97:fa:ef:ad:48:1b:44:4c:9a:f9:
                    58:ba:7a:b0:bc:5e:8e:e5:03:45:0c:d3:98:09:f0:
                    18:93:35:60:67:60:08:f6:e7:2a:a8:35:82:68:d5:
                    f6:b0:9f:a2:5f:86:07:7b:db:38:b6:07:4b:90:f8:
                    30:ee:1d:66:d6:10:f0:3e:f8:3e:40:07:2c:6d:a1:
                    1d:fc:68:8c:15:3e:eb:d7:fe:26:b3:9d:92:02:ab:
                    17:66:cd:b9:68:4c:d2:60:54:24:45:e2:fd:5f:7e:
                    6a:42:58:5a:45:16:a0:19:4a:0a:35:a8:4d:b7:84:
                    ca:d4:ff:b2:e0:57:51:da:16:e4:b8:4f:0f:aa:6f:
                    39:e5:bb:49:c7:7e:70:c8:13:cb:f1:2f:f3:b4:13:
                    11:c4:9f:12:77:db:e6:1e:04:08:79:44:0b:6b:72:
                    62:9e:87:92:e4:bd:ff:25:6c:3a:5f:87:0a:c7:31:
                    ab:93:55:88:0b:16:e4:15:a1:18:6a:3c:b1:5c:0b:
                    b4:90:e0:c9:f6:b3:c1:f8:b2:c7:c9:d0:8c:79:37:
                    0b:49:25:2e:a1:fb:84:8c:1b:47:59:46:a5:d0:b0:
                    dc:73:48:d8:c1:9a:67:d2:36:03:35:3a:4b:d2:35:
                    62:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:57:7E:8B:01:98:BB:D7:A3:D9:90:7F:2D:DA:FE:42:AE:2C:09:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/85518f83-6d82-3dbd-ad23-fd6459007b47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/c42cfaea-6b46-494e-95ea-944662b8624b.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AF:58:9A:D1:8F:65:47:CD:5A:B7:57:C6:B6:EA:CD:2D:AB:6A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.232.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:aa:2e:ab:97:d1:c5:78:76:5f:40:eb:58:b3:1f:9f:a6:3c:
         02:b1:83:03:27:f5:c0:1d:78:0d:7d:aa:3b:2f:30:7b:f9:29:
         ce:a5:f4:6e:f0:ab:a8:60:30:37:7d:46:61:37:62:c8:7e:56:
         8f:db:a1:5d:75:e3:e3:14:ae:5c:f0:da:dd:65:83:61:87:b8:
         d3:20:3e:48:8b:1b:7c:d9:06:b4:14:88:14:1a:dd:5e:fa:18:
         6b:ee:76:cb:06:26:00:b8:f8:05:57:13:9f:9e:d4:98:dd:0e:
         d6:44:75:10:7d:35:77:a4:1d:04:9e:ab:98:62:d0:64:53:71:
         d1:8f:73:07:a3:a8:7b:1a:72:87:87:c3:d1:1c:85:7c:25:dc:
         70:c6:bd:27:c2:89:a6:71:44:6c:9a:3d:61:b7:ce:6f:e2:d3:
         b5:c5:a5:55:e1:e5:e4:19:e5:78:25:64:62:7c:3d:dc:20:3f:
         3f:a5:38:a8:97:cc:23:69:48:9b:2e:76:00:08:03:59:07:e4:
         0d:92:e3:ad:07:77:c9:c6:2a:76:a0:f5:65:fc:a2:11:59:e0:
         70:ec:70:0b:d6:ff:e5:2c:53:64:dd:bf:ac:58:8c:80:81:3c:
         f8:bd:fd:2a:93:6c:1c:76:99:81:f2:c1:02:e4:c1:2c:44:3f:
         94:6f:c4:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeooU7Hha3CO1DNPuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyY2ZhZWEtNmI0Ni00OTRlLTk1ZWEtOTQ0NjYyYjg2
MjRiMB4XDTI0MTAyNTEzMDA0MloXDTI1MDEyMzE0MDA0MlowLzEtMCsGA1UEAxMk
NjI2OWMyODItYzlmNS00NjEzLTg5YWUtMGE3ODNhYmIxZDEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I+AFUoZp0T83gOWJVqbI3CxSpf6761IG0RM
mvlYunqwvF6O5QNFDNOYCfAYkzVgZ2AI9ucqqDWCaNX2sJ+iX4YHe9s4tgdLkPgw
7h1m1hDwPvg+QAcsbaEd/GiMFT7r1/4ms52SAqsXZs25aEzSYFQkReL9X35qQlha
RRagGUoKNahNt4TK1P+y4FdR2hbkuE8Pqm855btJx35wyBPL8S/ztBMRxJ8Sd9vm
HgQIeUQLa3JinoeS5L3/JWw6X4cKxzGrk1WICxbkFaEYajyxXAu0kODJ9rPB+LLH
ydCMeTcLSSUuofuEjBtHWUal0LDcc0jYwZpn0jYDNTpL0jVitQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAJXfosBmLvXo9mQfy3a/kKuLAklMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDJj
ZmFlYS02YjQ2LTQ5NGUtOTVlYS05NDQ2NjJiODYyNGIvODU1MThmODMtNmQ4Mi0z
ZGJkLWFkMjMtZmQ2NDU5MDA3YjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyY2ZhZWEtNmI0Ni00OTRlLTk1
ZWEtOTQ0NjYyYjg2MjRiL2M0MmNmYWVhLTZiNDYtNDk0ZS05NWVhLTk0NDY2MmI4
NjI0Yi5jcmwwHwYDVR0jBBgwFoAUP69YmtGPZUfNWrdXxrbqzS2raukwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDJjZmFlYS02YjQ2LTQ5NGUtOTVlYS05NDQ2
NjJiODYyNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxuiQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+qLquX0cV4dl9A61izH5+mPAKxgwMn9cAdeA19qjsvMHv5Kc6l9G7w
q6hgMDd9RmE3Ysh+Vo/boV114+MUrlzw2t1lg2GHuNMgPkiLG3zZBrQUiBQa3V76
GGvudssGJgC4+AVXE5+e1JjdDtZEdRB9NXekHQSeq5hi0GRTcdGPcwejqHsacoeH
w9EchXwl3HDGvSfCiaZxRGyaPWG3zm/i07XFpVXh5eQZ5XglZGJ8PdwgPz+lOKiX
zCNpSJsudgAIA1kH5A2S460Hd8nGKnag9WX8ohFZ4HDscAvW/+UsU2Tdv6xYjICB
PPi9/SqTbBx2mYHywQLkwSxEP5RvxAk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:52 2024 by rpki-client on console-ams.rpki-client.org