Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/78c99d61-de96-33df-b757-bdeb7746dada.roa
File:                     78c99d61-de96-33df-b757-bdeb7746dada.roa (raw, json)
Hash identifier:          zaNCKO22jnFwqg7++BQJvCG2PNtun9zYB6Zh1fEpnWs=
Subject key identifier:   1F:3B:2B:FD:7A:33:C6:DD:6B:3D:B9:4B:C7:83:9F:E6:DE:E2:27:F8
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F43285847AB6C06D597D7AFE177E60F40
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/78c99d61-de96-33df-b757-bdeb7746dada.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     63363
IP address blocks:        64.96.2.0/24 maxlen: 24
                          2620:57:4002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:06:d5:97:d7:af:e1:77:e6:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=bd2bb411-a16b-485a-a498-785d578d5d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f9:4b:a3:57:80:16:91:e9:3d:51:ba:54:f2:
                    0f:66:7b:10:2e:1b:69:ae:d6:3e:fe:06:5d:4a:c4:
                    05:e8:de:fe:9b:3d:18:72:af:7a:d7:92:67:75:e7:
                    6a:3a:8d:ac:f8:1f:52:ba:a0:db:1c:15:f5:2c:11:
                    a9:4e:e3:13:cc:58:3a:ad:82:0c:1d:ed:cc:b9:d0:
                    e9:db:76:cd:74:1c:02:ba:a4:28:5a:cd:73:53:ee:
                    f4:94:33:36:05:c4:90:d2:05:a3:8c:0e:e7:d2:8d:
                    a1:3c:69:19:c0:4e:f7:fc:a9:f3:2b:69:60:47:de:
                    36:d9:97:66:7e:ba:4c:da:d2:4e:3f:a7:9d:1d:6f:
                    22:e5:91:85:09:09:ba:8e:95:8f:55:4d:f0:ae:fb:
                    81:ec:e2:7e:71:98:8b:ac:40:a8:a7:ed:74:2f:6e:
                    05:9e:71:ac:b1:1b:6d:59:01:48:9d:bd:9d:41:35:
                    4d:47:db:4d:86:47:22:57:d3:78:1c:47:80:8f:8f:
                    66:3a:48:88:55:e2:3d:54:e6:5a:e5:6c:aa:82:6a:
                    81:65:66:c7:57:d6:0c:50:99:39:0c:a4:ce:a7:2c:
                    b7:0e:4d:3a:16:5e:90:ee:bc:e7:8e:c1:01:b2:21:
                    a7:36:e7:75:3c:c8:56:94:3e:d5:78:02:51:55:16:
                    c2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3B:2B:FD:7A:33:C6:DD:6B:3D:B9:4B:C7:83:9F:E6:DE:E2:27:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/78c99d61-de96-33df-b757-bdeb7746dada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.96.2.0/24
                IPv6:
                  2620:57:4002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:17:00:e9:5f:98:56:b2:d6:dd:c5:7b:a1:5f:fc:9b:9c:5f:
         ae:5a:43:8a:74:46:47:e9:7b:52:f3:00:0e:1d:41:f8:c3:e7:
         aa:b5:08:89:1e:ff:1c:d0:e9:2f:68:8c:e3:bd:5c:b7:0b:3a:
         37:ce:33:d0:23:1b:84:ff:b6:50:6f:6f:b0:be:5c:be:c6:eb:
         91:7a:76:a1:58:1b:ce:3d:67:59:d5:8f:04:bc:5f:e0:a8:df:
         9c:56:94:0e:72:73:25:11:96:ef:18:01:01:93:13:8b:36:04:
         a5:68:9e:b5:bf:0f:35:f2:07:f1:c2:42:f1:fa:68:9c:b7:1e:
         3b:6d:e4:b1:e9:2d:60:14:23:6b:01:bb:0f:ab:8b:57:05:94:
         a1:a4:52:a5:bc:2a:22:1c:bf:2b:b8:aa:f8:07:8a:94:cd:c9:
         cb:79:72:53:eb:82:2c:44:86:d9:3f:bb:93:21:df:1f:fb:38:
         49:31:43:ea:82:de:1c:e9:84:cf:46:77:04:06:b2:9f:23:a6:
         ef:d1:3e:9a:00:0b:c0:92:49:bc:68:19:0a:a7:2e:73:37:08:
         e2:62:3c:9b:ed:d4:a4:c5:ce:d7:c1:1e:f2:8d:55:30:fb:d9:
         f5:b0:5a:d2:84:31:a5:aa:66:a0:4a:9d:80:f9:98:5a:96:75:
         57:9f:5a:5a
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEerbAbVl9ev4XfmD0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdk
ZDBiMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk
YmQyYmI0MTEtYTE2Yi00ODVhLWE0OTgtNzg1ZDU3OGQ1ZDZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPlLo1eAFpHpPVG6VPIPZnsQLhtprtY+/gZd
SsQF6N7+mz0Ycq9615JndedqOo2s+B9SuqDbHBX1LBGpTuMTzFg6rYIMHe3MudDp
23bNdBwCuqQoWs1zU+70lDM2BcSQ0gWjjA7n0o2hPGkZwE73/KnzK2lgR9422Zdm
frpM2tJOP6edHW8i5ZGFCQm6jpWPVU3wrvuB7OJ+cZiLrECop+10L24FnnGssRtt
WQFInb2dQTVNR9tNhkciV9N4HEeAj49mOkiIVeI9VOZa5WyqgmqBZWbHV9YMUJk5
DKTOpyy3Dk06Fl6Q7rznjsEBsiGnNud1PMhWlD7VeAJRVRbCGwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFB87K/16M8bdaz25S8eDn+be4if4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5
MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvNzhjOTlkNjEtZGU5Ni0z
M2RmLWI3NTctYmRlYjc3NDZkYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEy
YzItZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3
ZGQwYi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQy
M2VhN2RkMGIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQGACMA8E
AgACMAkDBwAmIABXQAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAsBcA6V+YVrLW3cV7oV/8m5xfrlpDinRG
R+l7UvMADh1B+MPnqrUIiR7/HNDpL2iM471ctws6N84z0CMbhP+2UG9vsL5cvsbr
kXp2oVgbzj1nWdWPBLxf4KjfnFaUDnJzJRGW7xgBAZMTizYEpWietb8PNfIH8cJC
8fponLceO23ksektYBQjawG7D6uLVwWUoaRSpbwqIhy/K7iq+AeKlM3Jy3lyU+uC
LESG2T+7kyHfH/s4STFD6oLeHOmEz0Z3BAaynyOm79E+mgALwJJJvGgZCqcuczcI
4mI8m+3UpMXO18Ee8o1VMPvZ9bBa0oQxpapmoEqdgPmYWpZ1V59aWg==
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:57:11 2024 by rpki-client on console-ams.rpki-client.org