Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/31a0db8c-f159-3f4c-b719-1c5daed94e47.roa
File:                     31a0db8c-f159-3f4c-b719-1c5daed94e47.roa (raw, json)
Hash identifier:          T7jSDArizgtuRItHyRof6fOsAMSOEsgOTsGLCDpZaUw=
Subject key identifier:   CE:F8:92:66:65:1F:65:6D:ED:56:1E:ED:89:2C:83:24:EF:BB:76:C4
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F432858477EE34435D86322DED5CC0300
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/31a0db8c-f159-3f4c-b719-1c5daed94e47.roa
Signing time:             Thu 10 Oct 2024 14:09:43 +0000
ROA not before:           Thu 10 Oct 2024 14:09:43 +0000
ROA not after:            Wed 08 Jan 2025 15:09:43 +0000
asID:                     205220
IP address blocks:        65.87.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Dec 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:e3:44:35:d8:63:22:de:d5:cc:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Oct 10 14:09:43 2024 GMT
            Not After : Jan  8 15:09:43 2025 GMT
        Subject: CN=6684244f-0a97-41ed-bed4-52f7df2b1242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5d:8c:a0:34:36:bb:90:ed:69:5e:ba:a5:61:
                    4b:07:8f:00:82:13:6b:3e:6d:6f:a9:33:05:0f:fa:
                    0a:50:80:4c:20:20:11:9f:b5:27:01:ea:c2:61:08:
                    c3:20:d9:ea:35:ad:5b:5b:6d:b8:90:f5:dc:be:2e:
                    43:9e:9f:8a:13:64:fc:8e:3f:af:68:51:2c:57:0c:
                    46:a0:cd:80:bb:df:06:34:c3:88:ca:4c:2a:61:2d:
                    cb:92:89:c3:1e:93:92:2d:22:a0:f5:c1:16:e2:7b:
                    70:e8:7f:cc:40:5b:5a:e1:aa:94:d1:ab:1f:3a:38:
                    f0:28:aa:de:c4:b5:68:c5:e1:fc:9b:19:5d:fa:6e:
                    13:41:9d:54:c1:52:6e:40:11:ca:c4:b6:15:ef:4e:
                    b3:8d:49:74:c2:4b:11:1a:0a:63:df:0b:5f:ab:68:
                    88:f5:fd:c5:03:31:be:1e:2c:9f:1f:d4:6c:de:63:
                    7d:35:c1:41:e5:08:5e:bc:5b:15:ea:48:8b:3b:e3:
                    81:04:3e:4e:42:bc:ca:23:10:71:93:d5:b6:a7:a7:
                    48:93:7d:fd:38:8f:b8:79:f3:2e:f1:b5:10:dd:46:
                    85:00:80:2b:b9:db:54:3e:fa:17:13:07:21:8d:90:
                    02:45:94:ee:ba:46:ab:ac:c3:f9:c1:71:25:10:38:
                    4f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F8:92:66:65:1F:65:6D:ED:56:1E:ED:89:2C:83:24:EF:BB:76:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/31a0db8c-f159-3f4c-b719-1c5daed94e47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:fe:23:24:2c:50:ec:6c:f0:a1:d0:56:8d:88:99:49:18:41:
         ef:8b:49:4c:4f:f3:1e:d8:ad:aa:a8:6a:1c:5e:8f:b6:03:ef:
         6c:bf:7c:61:93:b5:4a:e8:fe:01:fa:80:ef:ce:17:29:21:60:
         ab:00:79:80:70:0d:0f:69:a5:5a:26:88:af:3b:71:73:18:bb:
         3c:2a:12:9c:0b:dc:18:41:30:c7:3e:bd:c9:8a:90:ab:1f:96:
         d2:23:de:43:e4:23:fa:53:ee:72:67:cf:2c:0b:78:e1:0a:13:
         90:e3:cf:d9:56:9f:33:0b:16:f3:26:a7:aa:0a:01:53:08:0a:
         49:ab:8d:13:b7:5c:ce:13:a3:b6:d7:c8:ab:f2:9d:9e:1c:a4:
         f8:5a:e2:91:12:16:4f:3a:96:ba:6a:66:d2:b2:76:72:23:1c:
         42:1b:f1:4b:db:f8:a9:34:02:d4:f4:54:4b:93:0e:84:0d:bb:
         03:50:1e:ac:b5:6e:1c:65:7a:15:f9:02:26:98:b6:8f:4c:eb:
         7d:c3:d0:e7:6c:81:fb:c8:68:7b:b5:ac:e4:f8:77:fe:3a:60:
         1a:65:0d:d5:c0:7c:95:72:24:96:e2:6a:8b:43:6d:81:f8:ff:
         97:fa:71:3c:7c:16:f7:93:bf:b4:ce:d9:da:b2:7f:5e:6d:6c:
         30:1f:0b:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd+40Q12GMi3tXMAwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk
NWYzMB4XDTI0MTAxMDE0MDk0M1oXDTI1MDEwODE1MDk0M1owLzEtMCsGA1UEAxMk
NjY4NDI0NGYtMGE5Ny00MWVkLWJlZDQtNTJmN2RmMmIxMjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm12MoDQ2u5DtaV66pWFLB48AghNrPm1vqTMF
D/oKUIBMICARn7UnAerCYQjDINnqNa1bW224kPXcvi5Dnp+KE2T8jj+vaFEsVwxG
oM2Au98GNMOIykwqYS3LkonDHpOSLSKg9cEW4ntw6H/MQFta4aqU0asfOjjwKKre
xLVoxeH8mxld+m4TQZ1UwVJuQBHKxLYV706zjUl0wksRGgpj3wtfq2iI9f3FAzG+
HiyfH9Rs3mN9NcFB5QhevFsV6kiLO+OBBD5OQrzKIxBxk9W2p6dIk339OI+4efMu
8bUQ3UaFAIArudtUPvoXEwchjZACRZTuukarrMP5wXElEDhPdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM74kmZlH2Vt7VYe7YksgyTvu3bEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl
Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvMzFhMGRiOGMtZjE1OS0z
ZjRjLWI3MTktMWM1ZGFlZDk0ZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky
ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi
ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk
M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACH+IyQsUOxs8KHQVo2ImUkYQe+LSUxP8x7Yraqoahxej7YD72y/fGGT
tUro/gH6gO/OFykhYKsAeYBwDQ9ppVomiK87cXMYuzwqEpwL3BhBMMc+vcmKkKsf
ltIj3kPkI/pT7nJnzywLeOEKE5Djz9lWnzMLFvMmp6oKAVMICkmrjRO3XM4To7bX
yKvynZ4cpPha4pESFk86lrpqZtKydnIjHEIb8Uvb+Kk0AtT0VEuTDoQNuwNQHqy1
bhxlehX5AiaYto9M633D0OdsgfvIaHu1rOT4d/46YBplDdXAfJVyJJbiaotDbYH4
/5f6cTx8FveTv7TO2dqyf15tbDAfC8M=
-----END CERTIFICATE-----
Generated at Tue Dec 10 21:01:17 2024 by rpki-client on console-fra.rpki-client.org