Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/be8131de-e209-3d15-973a-2033c6243c71.roa
File:                     be8131de-e209-3d15-973a-2033c6243c71.roa (raw, json)
Hash identifier:          Ek6RXu1h8AAP7Ru61PQE8FljZkZN8K+gnmtM90F65sI=
Subject key identifier:   CB:25:3D:F2:09:0A:E7:9D:3A:9B:21:DC:DA:24:60:10:06:88:63:D6
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F432858451CE0390E8586A81018590B00
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/be8131de-e209-3d15-973a-2033c6243c71.roa
Signing time:             Wed 06 Mar 2024 02:00:25 +0000
ROA not before:           Wed 06 Mar 2024 02:00:25 +0000
ROA not after:            Tue 04 Jun 2024 01:00:25 +0000
asID:                     62802
IP address blocks:        63.170.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1c:e0:39:0e:85:86:a8:10:18:59:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Mar  6 02:00:25 2024 GMT
            Not After : Jun  4 01:00:25 2024 GMT
        Subject: CN=019f4300-8f95-49fb-87ee-6ed82e173269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ca:6a:f1:b8:e9:f9:2e:88:36:11:b8:b1:12:
                    0c:d6:ff:30:a4:de:23:f1:62:36:21:27:e9:d0:b6:
                    f4:6e:df:79:5d:1e:82:ae:cd:52:8c:7a:aa:fd:1e:
                    a5:bd:75:1e:8a:b9:f3:01:b3:33:be:b5:de:0e:c1:
                    11:ea:fe:9d:e5:99:39:c7:66:20:1d:0c:c5:b1:0b:
                    85:63:4d:1a:a3:1d:b0:41:a3:f7:67:31:30:1e:38:
                    d7:87:bf:1d:f0:19:ad:d7:91:d7:26:27:72:58:80:
                    db:c9:7a:b0:c5:02:36:fc:47:61:76:f9:89:cd:e6:
                    62:1a:35:13:8c:08:2e:77:7d:c3:14:f6:63:dc:8a:
                    df:85:5c:6e:5e:ea:c4:9f:7c:26:5f:70:93:61:dd:
                    66:b2:27:ca:47:c8:32:63:92:e5:f7:83:52:3d:9c:
                    bc:e1:44:9d:4f:be:13:59:c5:83:3c:34:f9:f0:88:
                    dc:01:a9:de:05:bd:c1:a3:b3:df:80:55:9f:80:fe:
                    d7:ba:ee:7d:a5:ac:a7:16:fd:dd:30:17:fe:83:97:
                    f8:2b:01:5d:be:8a:d8:a7:b0:cb:f5:58:c3:18:7e:
                    08:7f:27:b6:83:ee:6e:54:6f:ae:28:00:be:77:55:
                    02:74:0e:e3:cf:ed:71:ac:0f:19:3f:9e:9d:0c:86:
                    88:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:25:3D:F2:09:0A:E7:9D:3A:9B:21:DC:DA:24:60:10:06:88:63:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/be8131de-e209-3d15-973a-2033c6243c71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.170.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:62:7a:e8:f4:1b:dd:43:b6:ba:07:76:9d:18:7b:0a:a6:b9:
         46:ba:39:9d:72:86:59:a1:c5:4f:68:01:32:b1:69:b3:62:fe:
         0a:02:47:3c:ed:16:e1:1d:ec:60:cf:2e:09:7b:0f:88:7b:10:
         0c:a0:61:51:79:b2:62:a3:ae:73:d0:31:f1:31:2a:5a:04:dc:
         38:a1:0b:46:e3:85:ea:61:b0:01:f2:26:8f:f4:3c:cd:12:b8:
         f7:62:b6:b7:b8:b0:17:c0:a7:58:45:16:86:5c:76:c7:2f:4c:
         3f:b3:27:52:7d:5e:b1:70:58:72:1e:39:19:76:49:78:42:83:
         8f:90:c1:26:19:3a:94:3f:91:63:d4:5d:14:51:a8:15:5f:73:
         50:f7:96:76:76:82:2e:99:50:48:47:bf:8b:f3:93:74:13:29:
         e3:33:74:4b:0e:40:85:23:ee:80:d2:a1:f1:d3:ce:6a:d8:ce:
         3a:d0:ab:30:37:ba:ec:5d:15:21:34:4c:66:d1:6d:7f:97:5d:
         0b:9c:7e:eb:45:35:e3:b1:0a:30:b9:86:42:07:a2:69:f8:9d:
         7a:87:28:c1:ca:24:28:af:9f:37:c6:50:28:ee:e9:1c:68:5f:
         d7:f1:ff:6a:c3:8b:9d:ab:9c:9f:6e:1c:68:c4:6a:15:4e:96:
         9a:b5:c1:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUc4DkOhYaoEBhZCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk
ZjZkMB4XDTI0MDMwNjAyMDAyNVoXDTI0MDYwNDAxMDAyNVowLzEtMCsGA1UEAxMk
MDE5ZjQzMDAtOGY5NS00OWZiLTg3ZWUtNmVkODJlMTczMjY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78pq8bjp+S6INhG4sRIM1v8wpN4j8WI2ISfp
0Lb0bt95XR6Crs1SjHqq/R6lvXUeirnzAbMzvrXeDsER6v6d5Zk5x2YgHQzFsQuF
Y00aox2wQaP3ZzEwHjjXh78d8Bmt15HXJidyWIDbyXqwxQI2/EdhdvmJzeZiGjUT
jAgud33DFPZj3IrfhVxuXurEn3wmX3CTYd1msifKR8gyY5Ll94NSPZy84USdT74T
WcWDPDT58IjcAaneBb3Bo7PfgFWfgP7Xuu59paynFv3dMBf+g5f4KwFdvorYp7DL
9VjDGH4Ifye2g+5uVG+uKAC+d1UCdA7jz+1xrA8ZP56dDIaI/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMslPfIJCuedOpsh3NokYBAGiGPWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm
MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvYmU4MTMxZGUtZTIwOS0z
ZDE1LTk3M2EtMjAzM2M2MjQzYzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw
MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy
ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy
ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP6pAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACZieuj0G91DtroHdp0YewqmuUa6OZ1yhlmhxU9oATKxabNi/goCRzzt
FuEd7GDPLgl7D4h7EAygYVF5smKjrnPQMfExKloE3DihC0bjhephsAHyJo/0PM0S
uPditre4sBfAp1hFFoZcdscvTD+zJ1J9XrFwWHIeORl2SXhCg4+QwSYZOpQ/kWPU
XRRRqBVfc1D3lnZ2gi6ZUEhHv4vzk3QTKeMzdEsOQIUj7oDSofHTzmrYzjrQqzA3
uuxdFSE0TGbRbX+XXQucfutFNeOxCjC5hkIHomn4nXqHKMHKJCivnzfGUCju6Rxo
X9fx/2rDi52rnJ9uHGjEahVOlpq1wYA=
-----END CERTIFICATE-----
Generated at Sat May 4 02:56:04 2024 by rpki-client on console-fra.rpki-client.org