Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/fc48759a-45e6-3a50-8dcf-0415b6c19399.roa
File:                     fc48759a-45e6-3a50-8dcf-0415b6c19399.roa (raw, json)
Hash identifier:          AkYaI/CsA7Nb6VTOBnM1PTrrKqRSUQWYn/ssN4TZsqk=
Subject key identifier:   AE:34:5D:0B:E9:30:4C:0A:C0:02:E5:AB:AF:F9:24:F8:82:9F:9E:98
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858474585FD00A73BFB918705F600
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/fc48759a-45e6-3a50-8dcf-0415b6c19399.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     16696
IP address blocks:        216.247.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:fd:00:a7:3b:fb:91:87:05:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=9493ea41-0282-4fad-98c9-6c4a2b34bf7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:07:db:55:09:b1:26:44:08:9f:d3:8b:1c:
                    9e:06:21:21:b1:52:33:1b:47:c9:2a:9b:08:18:74:
                    7e:e6:ca:cb:bc:c9:f5:3d:5c:2f:9e:9f:48:ef:d8:
                    46:15:7d:21:91:0e:42:08:6c:ab:8c:4e:c3:8a:5a:
                    c4:de:dd:47:88:cf:9e:26:98:04:c9:ca:5c:ae:ed:
                    7f:ae:68:af:e4:f0:28:c6:f0:06:05:a2:25:64:c3:
                    d9:12:6f:a1:9e:88:b3:41:78:92:1a:5f:8b:16:2b:
                    d8:0e:d7:e5:46:32:07:8c:ed:53:0d:8f:50:dc:55:
                    96:c5:51:fb:00:25:d5:2f:7a:22:0f:c6:c9:f5:b0:
                    ef:6c:e3:40:76:5f:90:b7:76:8e:9f:4c:0f:99:92:
                    a0:94:5b:f9:d5:c8:79:9e:4d:05:af:5f:9d:b7:ef:
                    e5:61:4f:eb:b9:10:d0:c3:b1:4e:4c:e6:c6:b9:66:
                    24:37:9b:a4:2d:fa:8e:91:11:02:cf:d8:16:d7:e9:
                    da:a9:29:d4:33:ea:be:65:8f:ba:1a:9b:26:2e:9f:
                    7b:0c:bc:ae:cd:46:ef:b8:b2:46:0d:3d:a4:72:ed:
                    94:7e:65:f4:f7:06:74:cf:2d:33:eb:88:8b:a0:a1:
                    00:21:2b:a4:23:f9:44:13:b1:aa:7a:75:a1:86:05:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:34:5D:0B:E9:30:4C:0A:C0:02:E5:AB:AF:F9:24:F8:82:9F:9E:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/fc48759a-45e6-3a50-8dcf-0415b6c19399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b0:88:46:12:e5:77:95:ae:82:33:62:83:55:38:da:f2:40:
         24:76:9a:8f:8e:4f:88:9e:6a:c0:d1:51:3a:fd:42:a1:be:45:
         92:bd:92:1a:bc:81:26:9e:ec:84:34:02:ba:eb:3e:c5:94:59:
         0b:97:2e:a8:43:86:91:d2:bf:e2:b7:ea:8a:b9:39:17:05:79:
         ba:f4:17:e8:89:6b:7b:c0:92:98:f6:62:0a:1e:2e:8b:ac:26:
         69:f0:60:f9:b4:3a:33:2d:49:8b:f5:31:27:c7:b0:3e:5d:fc:
         25:99:e5:f9:22:89:c6:74:5f:26:7f:5c:e5:bb:16:75:ec:ea:
         a2:b5:60:5e:5d:e8:49:9f:90:c5:b1:f6:2a:6d:27:68:7c:5c:
         43:6b:af:a0:18:77:5d:82:b7:2a:d2:46:dd:2d:be:25:7d:68:
         70:9b:b2:bc:8f:40:4d:61:c2:85:4a:02:3c:b6:ba:5c:86:94:
         b2:95:ea:27:8e:8d:b9:83:54:38:1b:c6:65:21:47:23:c1:e6:
         df:49:03:55:82:db:16:44:7e:45:89:b0:12:09:f3:b9:7c:08:
         1a:86:9c:e7:71:3d:96:43:cd:19:f8:00:cc:5a:b4:1c:92:3d:
         42:d4:16:ab:b5:cb:5e:fa:0e:f6:5b:1a:a4:81:e0:58:ba:f2:
         8e:92:35:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdFhf0Apzv7kYcF9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI0MDkyMDAxMDAzMVoXDTI0MTIxOTAyMDAzMVowLzEtMCsGA1UEAxMk
OTQ5M2VhNDEtMDI4Mi00ZmFkLTk4YzktNmM0YTJiMzRiZjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAIH21UJsSZECJ/TixyeBiEhsVIzG0fJKpsI
GHR+5srLvMn1PVwvnp9I79hGFX0hkQ5CCGyrjE7DilrE3t1HiM+eJpgEycpcru1/
rmiv5PAoxvAGBaIlZMPZEm+hnoizQXiSGl+LFivYDtflRjIHjO1TDY9Q3FWWxVH7
ACXVL3oiD8bJ9bDvbONAdl+Qt3aOn0wPmZKglFv51ch5nk0Fr1+dt+/lYU/ruRDQ
w7FOTObGuWYkN5ukLfqOkRECz9gW1+naqSnUM+q+ZY+6GpsmLp97DLyuzUbvuLJG
DT2kcu2UfmX09wZ0zy0z64iLoKEAISukI/lEE7GqenWhhgXPywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK40XQvpMEwKwALlq6/5JPiCn56YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZmM0ODc1OWEtNDVlNi0z
YTUwLThkY2YtMDQxNWI2YzE5Mzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PdEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFiwiEYS5XeVroIzYoNVONryQCR2mo+OT4ieasDRUTr9QqG+RZK9khq8
gSae7IQ0ArrrPsWUWQuXLqhDhpHSv+K36oq5ORcFebr0F+iJa3vAkpj2YgoeLous
JmnwYPm0OjMtSYv1MSfHsD5d/CWZ5fkiicZ0XyZ/XOW7FnXs6qK1YF5d6EmfkMWx
9iptJ2h8XENrr6AYd12CtyrSRt0tviV9aHCbsryPQE1hwoVKAjy2ulyGlLKV6ieO
jbmDVDgbxmUhRyPB5t9JA1WC2xZEfkWJsBIJ87l8CBqGnOdxPZZDzRn4AMxatByS
PULUFqu1y176DvZbGqSB4Fi68o6SNXM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:39 2024 by rpki-client on console-fra.rpki-client.org