Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e5f5285b-e628-3455-8879-5db0205f9619.roa
File:                     e5f5285b-e628-3455-8879-5db0205f9619.roa (raw, json)
Hash identifier:          9YBF+JSSP1JdXGPX6mR91ckO+zxPQAXFr/LgaKgZ7V4=
Subject key identifier:   E5:AB:ED:E7:A9:3A:97:20:EE:19:41:AD:88:D4:E9:70:A7:29:8C:14
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584789EBF81CD74431708F400500
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e5f5285b-e628-3455-8879-5db0205f9619.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     13414
IP address blocks:        64.63.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:f8:1c:d7:44:31:70:8f:40:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=bdbb0f1c-db5f-4d3f-9afc-58d211f0dac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:44:e4:b4:a9:2a:11:a2:ce:fb:6a:35:74:
                    13:3d:40:5a:1d:8b:92:9b:bb:2a:7c:42:b8:05:54:
                    fe:07:6b:a5:0c:6b:af:b6:51:be:66:c5:10:ef:59:
                    96:fa:62:c1:40:57:b7:55:f2:4d:3e:45:d6:20:c0:
                    f7:0a:c1:4e:27:07:fd:f8:5d:49:82:83:e8:bc:4e:
                    df:db:ac:da:81:aa:78:9e:e1:e0:a5:27:73:5b:84:
                    e9:5b:bc:b0:73:ab:70:3f:31:99:05:b0:73:7e:ef:
                    26:1a:57:09:48:19:5e:b0:e0:47:2e:40:48:f7:fe:
                    ae:4a:c7:40:ac:0e:69:98:d9:99:b0:68:35:5b:45:
                    55:af:e2:89:f4:ab:54:96:dc:9c:10:97:9d:07:d5:
                    fd:5f:83:e3:27:7f:e1:6c:07:97:9d:25:e9:01:c0:
                    b1:98:c7:7e:cb:19:41:3d:7f:61:f1:ac:a7:18:79:
                    92:73:4e:17:53:9d:f7:b1:f7:ab:95:9e:a5:9b:1a:
                    86:1a:db:f2:f1:b0:c7:46:a0:f1:06:b4:75:92:47:
                    2f:51:45:0f:e5:03:d3:7e:26:75:bd:06:2e:ae:7e:
                    b4:3b:c1:32:3b:98:93:44:d9:9e:ef:90:6d:ce:fd:
                    8d:20:28:56:3c:3c:60:f7:df:7b:2d:ce:09:ec:57:
                    7c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AB:ED:E7:A9:3A:97:20:EE:19:41:AD:88:D4:E9:70:A7:29:8C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e5f5285b-e628-3455-8879-5db0205f9619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:cf:69:1e:b9:a2:b2:16:35:c8:41:cf:96:79:29:6d:09:38:
         90:c2:03:ce:c5:d9:b7:66:93:2a:6a:37:ac:db:b4:df:aa:a2:
         77:27:93:8e:cb:d3:36:64:2b:fc:87:5d:26:f7:09:95:b9:12:
         8c:0b:90:d9:82:a0:7c:b9:b1:f0:bb:21:72:8a:37:07:6a:ef:
         7d:c8:3c:37:82:96:11:9b:81:00:a2:c3:91:58:be:89:b1:29:
         2d:c0:5b:36:ce:44:0e:e5:cd:15:1e:44:ff:19:38:fa:a7:a9:
         5b:a1:a8:bb:85:3b:2b:6b:70:9e:5b:13:51:83:8e:64:06:7a:
         25:c8:67:31:0e:38:1c:3d:df:2d:96:ba:a5:71:52:17:b1:76:
         4e:db:a6:65:1c:f1:ae:1b:4b:ce:51:cf:31:98:1c:1f:08:11:
         8a:96:2f:52:1e:ba:8f:f1:80:d7:7b:d4:0c:50:74:9c:cc:48:
         32:f6:94:34:9b:b1:10:ce:c0:63:93:e3:53:47:0f:0c:4e:90:
         67:9f:79:b6:5a:b5:90:6a:21:a6:c7:e9:b6:62:12:70:d9:6a:
         50:2a:4b:56:67:65:4d:31:0c:8c:87:65:08:3d:5d:bb:13:52:
         ad:0c:ed:bf:97:22:49:57:33:93:b0:9c:56:d5:57:cb:d6:69:
         bb:8e:63:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeJ6/gc10QxcI9ABQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI0MTAxNDEzMDA0N1oXDTI1MDExMjE0MDA0N1owLzEtMCsGA1UEAxMk
YmRiYjBmMWMtZGI1Zi00ZDNmLTlhZmMtNThkMjExZjBkYWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3dE5LSpKhGizvtqNXQTPUBaHYuSm7sqfEK4
BVT+B2ulDGuvtlG+ZsUQ71mW+mLBQFe3VfJNPkXWIMD3CsFOJwf9+F1JgoPovE7f
26zagap4nuHgpSdzW4TpW7ywc6twPzGZBbBzfu8mGlcJSBlesOBHLkBI9/6uSsdA
rA5pmNmZsGg1W0VVr+KJ9KtUltycEJedB9X9X4PjJ3/hbAeXnSXpAcCxmMd+yxlB
PX9h8aynGHmSc04XU533sferlZ6lmxqGGtvy8bDHRqDxBrR1kkcvUUUP5QPTfiZ1
vQYurn60O8EyO5iTRNme75Btzv2NIChWPDxg9997Lc4J7Fd8dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOWr7eepOpcg7hlBrYjU6XCnKYwUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZTVmNTI4NWItZTYyOC0z
NDU1LTg4NzktNWRiMDIwNWY5NjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABHPaR65orIWNchBz5Z5KW0JOJDCA87F2bdmkypqN6zbtN+qoncnk47L
0zZkK/yHXSb3CZW5EowLkNmCoHy5sfC7IXKKNwdq733IPDeClhGbgQCiw5FYvomx
KS3AWzbORA7lzRUeRP8ZOPqnqVuhqLuFOytrcJ5bE1GDjmQGeiXIZzEOOBw93y2W
uqVxUhexdk7bpmUc8a4bS85RzzGYHB8IEYqWL1Ieuo/xgNd71AxQdJzMSDL2lDSb
sRDOwGOT41NHDwxOkGefebZatZBqIabH6bZiEnDZalAqS1ZnZU0xDIyHZQg9XbsT
Uq0M7b+XIklXM5OwnFbVV8vWabuOY7A=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:34 2024 by rpki-client on console-fra.rpki-client.org