Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66315e03-260e-36b2-a6cf-e8925404c7de.roa
File:                     66315e03-260e-36b2-a6cf-e8925404c7de.roa (raw, json)
Hash identifier:          L7LEJTLTJiWRi/GT71PtPT71Zry35rPVaOofCp9CpKw=
Subject key identifier:   11:B2:1B:62:D6:D9:0A:EB:53:EB:A0:FE:45:77:79:32:7E:F7:59:E8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845D933CE7707FD545B88062600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66315e03-260e-36b2-a6cf-e8925404c7de.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     63186
IP address blocks:        64.71.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:ce:77:07:fd:54:5b:88:06:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=122266b0-812a-440d-b1fe-a7766277b3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e3:a3:92:01:b2:06:83:2e:e6:31:68:22:e6:
                    5d:3e:7a:64:42:35:46:36:4c:cf:39:88:0f:99:85:
                    9a:30:ef:f1:56:89:2e:e5:53:5b:57:1a:12:87:c4:
                    5d:4c:f4:95:54:ac:0e:97:c0:5e:47:07:49:7c:a9:
                    e5:93:bd:ac:b6:d4:c3:fd:a2:14:d4:56:bb:3f:d4:
                    5d:d5:87:f6:df:27:01:aa:bc:a4:a6:c0:ba:a6:17:
                    89:ff:8b:01:e3:2b:e6:ca:ba:c0:ae:e7:23:fa:3d:
                    db:26:c6:34:1c:4a:22:a4:72:37:90:db:27:f3:a2:
                    5d:b2:7b:ab:e6:20:32:5c:85:bf:fe:c3:b7:21:3d:
                    74:31:33:4c:58:cd:5f:c0:71:21:9e:62:0c:a1:5d:
                    0d:08:ea:1d:f1:c4:ee:28:13:7e:75:25:00:58:62:
                    c1:2e:b2:4e:02:27:aa:c3:6b:58:34:c3:63:c4:63:
                    95:28:5b:1a:8a:a3:57:cf:9f:cb:4e:99:db:7b:e6:
                    63:6a:07:14:91:86:fc:ce:b3:0b:f3:6a:3a:b3:b3:
                    e1:81:2f:66:0e:df:0f:81:0f:6e:c5:c0:d1:ad:c7:
                    5a:1a:c9:59:ee:bb:d2:1c:88:3c:ce:07:de:2c:e2:
                    a5:13:26:78:1c:f8:3a:4d:3e:75:89:0d:60:bc:91:
                    a9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B2:1B:62:D6:D9:0A:EB:53:EB:A0:FE:45:77:79:32:7E:F7:59:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66315e03-260e-36b2-a6cf-e8925404c7de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:59:44:46:7e:5d:42:d3:ed:57:7f:59:d8:63:e5:ed:cb:dd:
         59:01:dd:c2:b8:9a:ec:b3:50:e1:15:3f:07:46:31:eb:2f:0b:
         a2:e5:25:ef:a1:68:85:ec:43:d7:58:57:2f:41:33:55:fb:a6:
         f5:6d:80:6b:10:53:8b:64:69:5d:ec:de:1e:90:3f:3e:d5:f0:
         79:35:ec:53:67:41:2f:bc:d2:04:00:b8:52:33:95:62:fa:91:
         97:ca:37:a0:6e:cc:b3:cc:cb:60:2f:12:3a:80:a7:91:c1:3e:
         e8:ed:db:78:a8:ae:11:a8:89:bb:23:31:9b:38:f0:86:71:3b:
         cd:8b:c7:e2:3a:c7:e4:d1:4b:63:d8:06:33:9e:bb:8e:46:19:
         39:97:5d:af:5c:92:90:4d:a4:a7:5f:76:a1:06:46:97:84:4d:
         1d:ab:f9:60:87:a0:ea:54:22:29:49:bd:a3:53:dd:96:26:4a:
         77:d3:65:52:fc:ef:d1:9d:c1:1c:bb:88:48:32:4a:27:21:8b:
         0b:69:5b:20:12:18:00:dd:e6:35:12:4c:89:51:2d:2c:bd:a8:
         5b:9a:4b:df:6a:07:56:c6:8f:a8:f8:57:d9:92:9b:8e:c7:a0:
         6e:c5:9e:d7:9d:04:be:42:b2:c3:a5:c8:8c:2e:c5:0d:0b:73:
         1c:3f:e6:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXZM853B/1UW4gGJgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDUxMjEzMDAzNFoXDTI0MDgxMDEzMDAzNFowLzEtMCsGA1UEAxMk
MTIyMjY2YjAtODEyYS00NDBkLWIxZmUtYTc3NjYyNzdiM2VkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOOjkgGyBoMu5jFoIuZdPnpkQjVGNkzPOYgP
mYWaMO/xVoku5VNbVxoSh8RdTPSVVKwOl8BeRwdJfKnlk72sttTD/aIU1Fa7P9Rd
1Yf23ycBqrykpsC6pheJ/4sB4yvmyrrArucj+j3bJsY0HEoipHI3kNsn86Jdsnur
5iAyXIW//sO3IT10MTNMWM1fwHEhnmIMoV0NCOod8cTuKBN+dSUAWGLBLrJOAieq
w2tYNMNjxGOVKFsaiqNXz5/LTpnbe+ZjagcUkYb8zrML82o6s7PhgS9mDt8PgQ9u
xcDRrcdaGslZ7rvSHIg8zgfeLOKlEyZ4HPg6TT51iQ1gvJGpuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBGyG2LW2QrrU+ug/kV3eTJ+91noMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjYzMTVlMDMtMjYwZS0z
NmIyLWE2Y2YtZTg5MjU0MDRjN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEesMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHhZREZ+XULT7Vd/Wdhj5e3L3VkB3cK4muyzUOEVPwdGMesvC6LlJe+h
aIXsQ9dYVy9BM1X7pvVtgGsQU4tkaV3s3h6QPz7V8Hk17FNnQS+80gQAuFIzlWL6
kZfKN6BuzLPMy2AvEjqAp5HBPujt23iorhGoibsjMZs48IZxO82Lx+I6x+TRS2PY
BjOeu45GGTmXXa9ckpBNpKdfdqEGRpeETR2r+WCHoOpUIilJvaNT3ZYmSnfTZVL8
79GdwRy7iEgySichiwtpWyASGADd5jUSTIlRLSy9qFuaS99qB1bGj6j4V9mSm47H
oG7FntedBL5CssOlyIwuxQ0Lcxw/5o4=
-----END CERTIFICATE-----
Generated at Mon May 20 01:52:45 2024 by rpki-client on console-fra.rpki-client.org