Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/f1720a0c-c98d-3792-aa2b-8302522f6935.roa
File:                     f1720a0c-c98d-3792-aa2b-8302522f6935.roa (raw, json)
Hash identifier:          pb2P8D6rv1o/S8HSLjNYMhplDG0bj6EmoKu1a/qLy5k=
Subject key identifier:   62:B4:0B:BE:25:CB:21:70:7A:5B:35:4C:00:E2:B0:4D:1A:00:14:B3
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285848C6E637BE899E1CAD8D4B2100
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/f1720a0c-c98d-3792-aa2b-8302522f6935.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     13213
IP address blocks:        64.64.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:37:be:89:9e:1c:ad:8d:4b:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=623123c0-db5e-415c-8f76-bd9970faf070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:99:be:52:0d:c2:f4:bc:12:3f:0a:31:ea:08:
                    4b:13:40:f2:06:c0:20:8f:c6:4d:04:e5:99:31:47:
                    c7:8c:c0:20:41:5a:6a:b7:50:40:2b:a3:c7:8a:a9:
                    bb:b8:f4:92:c2:fd:cb:06:da:66:98:17:5a:e5:4a:
                    52:92:e2:d4:33:82:76:2e:fe:39:69:18:f5:b4:8d:
                    85:3e:22:e3:c2:30:73:dc:6c:28:89:ef:1b:22:63:
                    a7:25:16:d6:72:ec:b8:50:c9:75:82:78:56:24:43:
                    ec:24:c5:0a:7b:97:fe:46:9e:48:98:41:91:67:4c:
                    a5:1f:ff:33:31:57:71:da:4b:04:ca:3a:6a:61:5e:
                    90:12:1c:93:9b:26:84:5b:a9:95:38:3d:72:9f:68:
                    82:5c:53:ce:aa:4c:7a:25:5d:38:1a:4c:1a:23:f4:
                    c5:ce:33:52:cc:f3:c3:6e:f1:94:6d:37:ce:2b:0a:
                    61:ce:92:a4:b7:56:d1:55:66:68:2b:ac:46:9b:99:
                    60:f9:0c:74:c6:79:97:2e:df:b9:b2:23:a0:e1:9e:
                    40:19:9b:a8:55:fe:ec:e6:21:20:4e:ed:cd:d7:bb:
                    94:f9:5e:57:14:d1:26:a1:ac:34:01:09:cf:a6:51:
                    87:60:c4:ad:1a:9b:58:44:ee:8a:ff:d6:fc:e6:af:
                    d8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B4:0B:BE:25:CB:21:70:7A:5B:35:4C:00:E2:B0:4D:1A:00:14:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/f1720a0c-c98d-3792-aa2b-8302522f6935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:f4:ac:8f:d5:5f:3e:2a:72:80:81:21:02:ce:2c:23:1b:b6:
         80:69:5e:99:c9:eb:1c:7a:be:82:50:89:2d:16:25:3e:88:12:
         d5:39:8e:f1:9d:c1:79:d8:5d:19:a7:54:c5:e7:57:71:94:f9:
         5d:47:98:66:40:59:75:4c:62:a2:3c:2c:1c:89:9c:a0:46:5e:
         ea:c8:cf:7a:b1:0b:34:8d:58:66:1f:1a:2a:c8:70:9e:d5:e2:
         bf:a9:03:a0:5b:31:f0:8a:cd:e0:58:ff:3b:48:71:f8:38:17:
         cd:65:4e:be:2f:77:d6:9e:91:1b:a7:18:14:7e:72:17:8f:ed:
         f5:7e:c1:a6:5f:2c:88:34:b3:d1:42:02:62:26:aa:64:dc:dc:
         3d:a2:12:16:b2:fd:f5:04:80:51:d6:98:66:a7:1a:91:a6:89:
         f9:77:ae:ca:28:d1:70:b7:e4:05:46:08:31:f7:83:26:c9:2e:
         ad:99:1d:eb:06:a0:74:42:55:68:67:af:fe:cb:5e:40:47:98:
         63:1d:42:a2:22:2d:04:94:c0:d4:6c:d3:19:31:58:f8:25:b6:
         ee:d3:ac:c5:4f:26:4d:93:3a:25:1b:af:69:9d:a5:1a:60:92:
         47:35:81:d8:68:f7:b5:49:be:50:90:9c:b0:66:41:de:72:9b:
         59:09:39:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5je+iZ4crY1LIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk
NjIzMTIzYzAtZGI1ZS00MTVjLThmNzYtYmQ5OTcwZmFmMDcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipm+Ug3C9LwSPwox6ghLE0DyBsAgj8ZNBOWZ
MUfHjMAgQVpqt1BAK6PHiqm7uPSSwv3LBtpmmBda5UpSkuLUM4J2Lv45aRj1tI2F
PiLjwjBz3Gwoie8bImOnJRbWcuy4UMl1gnhWJEPsJMUKe5f+Rp5ImEGRZ0ylH/8z
MVdx2ksEyjpqYV6QEhyTmyaEW6mVOD1yn2iCXFPOqkx6JV04GkwaI/TFzjNSzPPD
bvGUbTfOKwphzpKkt1bRVWZoK6xGm5lg+Qx0xnmXLt+5siOg4Z5AGZuoVf7s5iEg
Tu3N17uU+V5XFNEmoaw0AQnPplGHYMStGptYRO6K/9b85q/YjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGK0C74lyyFwels1TADisE0aABSzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZjE3MjBhMGMtYzk4ZC0z
NzkyLWFhMmItODMwMjUyMmY2OTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEB7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMP0rI/VXz4qcoCBIQLOLCMbtoBpXpnJ6xx6voJQiS0WJT6IEtU5jvGd
wXnYXRmnVMXnV3GU+V1HmGZAWXVMYqI8LByJnKBGXurIz3qxCzSNWGYfGirIcJ7V
4r+pA6BbMfCKzeBY/ztIcfg4F81lTr4vd9aekRunGBR+cheP7fV+waZfLIg0s9FC
AmImqmTc3D2iEhay/fUEgFHWmGanGpGmifl3rsoo0XC35AVGCDH3gybJLq2ZHesG
oHRCVWhnr/7LXkBHmGMdQqIiLQSUwNRs0xkxWPgltu7TrMVPJk2TOiUbr2mdpRpg
kkc1gdho97VJvlCQnLBmQd5ym1kJOTM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:05 2025 by rpki-client