Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/6a979d4f-d85c-3b15-966d-2651bd274e81.roa
File:                     6a979d4f-d85c-3b15-966d-2651bd274e81.roa (raw, json)
Hash identifier:          NK99csxfdTCK26Cle7Ulb55lNt4I13f3kKuLrkELw9o=
Subject key identifier:   F0:A8:81:F6:03:4B:74:F7:20:85:7F:80:AF:1B:DE:51:20:AF:17:73
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F43285847F84F89D42035F84A3AA2B780
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/6a979d4f-d85c-3b15-966d-2651bd274e81.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     174
IP address blocks:        65.168.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:89:d4:20:35:f8:4a:3a:a2:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=5079405b-dd41-40e1-a33a-e9fb0f61f6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:12:8f:c6:ed:b8:93:e3:b8:df:3b:b7:db:d0:
                    26:dc:52:39:8e:c6:28:44:9b:ec:0b:6b:aa:a1:4e:
                    66:44:32:b7:67:81:97:03:5e:cb:8d:59:ab:1b:60:
                    b0:c2:6e:d8:19:67:df:07:69:dc:74:e2:88:34:a9:
                    b6:c6:da:9e:15:39:16:57:0d:b4:e1:5a:7f:98:c3:
                    92:bd:f0:56:17:8f:10:19:77:1b:cf:b2:a8:16:ab:
                    fb:9d:2f:7b:d4:21:81:b4:37:a4:3f:de:45:88:a9:
                    6f:f2:0f:bd:bb:07:d6:b7:ca:63:47:0b:bb:3b:ed:
                    e7:8c:1b:e0:dc:2e:bc:0d:f3:e4:29:78:23:b1:0d:
                    09:19:fd:28:72:71:1a:5d:69:ef:10:07:91:29:b7:
                    8e:47:4f:e4:99:fd:cb:69:1f:c0:45:ac:c6:70:d7:
                    7c:85:23:1c:72:a8:b8:fa:64:c8:e9:52:97:77:9c:
                    08:3e:cb:e5:8d:8e:6b:d7:f5:9c:5f:86:c6:d5:ab:
                    f5:3c:cd:0a:42:7a:c6:d2:80:a1:8f:02:44:bc:94:
                    04:e4:11:64:bf:0a:16:54:fc:60:8d:76:0c:57:81:
                    77:fa:35:67:0a:60:15:6c:78:70:90:a2:9f:1c:83:
                    fb:df:af:1d:7b:f3:0a:ca:6c:87:5c:10:d6:30:7d:
                    c1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A8:81:F6:03:4B:74:F7:20:85:7F:80:AF:1B:DE:51:20:AF:17:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/6a979d4f-d85c-3b15-966d-2651bd274e81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.168.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:c6:8a:3f:f2:cd:f8:f0:16:d4:50:46:07:c6:ae:e1:e3:16:
         f7:80:39:9f:db:36:78:5a:96:04:db:11:cc:fd:88:46:5e:6b:
         bc:6e:b6:fe:ae:92:53:18:76:f7:08:8c:dc:f5:b9:e4:35:0f:
         b5:4b:ac:ff:aa:63:45:e9:90:fb:2b:ff:2f:28:e1:39:57:bc:
         b0:db:0b:04:a3:19:c1:e0:dc:8a:2b:ed:d6:bc:51:56:3f:49:
         79:16:a3:43:48:01:11:df:76:db:80:45:50:dd:f6:2d:a0:99:
         37:02:d7:2a:ef:5c:7f:01:91:a2:ce:4b:5e:d5:00:2d:dc:e8:
         b2:e1:3d:1c:b8:1f:9c:69:21:1e:1d:7b:7b:f8:79:37:3a:fc:
         13:1a:6b:8b:5c:9f:46:77:11:a2:bd:9a:38:db:05:38:a9:62:
         b2:2e:6c:cf:96:c1:59:a8:84:d3:34:be:14:50:52:ca:0e:57:
         e3:d4:03:d6:cc:d4:4e:88:76:e3:a5:aa:28:ee:d8:32:2c:54:
         b5:35:f7:74:85:00:2a:09:42:48:15:25:d9:9b:34:b5:34:9b:
         b6:7d:8b:1c:ea:8e:5c:aa:2a:6a:cf:a9:c8:61:a9:64:e1:ef:
         4a:fc:e5:c7:da:93:44:0e:ef:2c:41:97:ba:3e:a4:7c:1b:87:
         e2:e8:f2:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf4T4nUIDX4Sjqit4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk
ZjZkMB4XDTI0MTEyMzAyMDAyOFoXDTI1MDIyMTAyMDAyOFowLzEtMCsGA1UEAxMk
NTA3OTQwNWItZGQ0MS00MGUxLWEzM2EtZTlmYjBmNjFmNmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hKPxu24k+O43zu329Am3FI5jsYoRJvsC2uq
oU5mRDK3Z4GXA17LjVmrG2Cwwm7YGWffB2ncdOKINKm2xtqeFTkWVw204Vp/mMOS
vfBWF48QGXcbz7KoFqv7nS971CGBtDekP95FiKlv8g+9uwfWt8pjRwu7O+3njBvg
3C68DfPkKXgjsQ0JGf0ocnEaXWnvEAeRKbeOR0/kmf3LaR/ARazGcNd8hSMccqi4
+mTI6VKXd5wIPsvljY5r1/WcX4bG1av1PM0KQnrG0oChjwJEvJQE5BFkvwoWVPxg
jXYMV4F3+jVnCmAVbHhwkKKfHIP7368de/MKymyHXBDWMH3B9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPCogfYDS3T3IIV/gK8b3lEgrxdzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm
MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvNmE5NzlkNGYtZDg1Yy0z
YjE1LTk2NmQtMjY1MWJkMjc0ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw
MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy
ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy
ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQagQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAbGij/yzfjwFtRQRgfGruHjFveAOZ/bNnhalgTbEcz9iEZea7xutv6u
klMYdvcIjNz1ueQ1D7VLrP+qY0XpkPsr/y8o4TlXvLDbCwSjGcHg3Ior7da8UVY/
SXkWo0NIARHfdtuARVDd9i2gmTcC1yrvXH8BkaLOS17VAC3c6LLhPRy4H5xpIR4d
e3v4eTc6/BMaa4tcn0Z3EaK9mjjbBTipYrIubM+WwVmohNM0vhRQUsoOV+PUA9bM
1E6IduOlqiju2DIsVLU193SFACoJQkgVJdmbNLU0m7Z9ixzqjlyqKmrPqchhqWTh
70r85cfak0QO7yxBl7o+pHwbh+Lo8kw=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:56:28 2024 by rpki-client on console-ams.rpki-client.org