Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0787dbca-9a29-3f87-a423-dbdac1afe6f7.roa
File:                     0787dbca-9a29-3f87-a423-dbdac1afe6f7.roa (raw, json)
Hash identifier:          78pG2c1TqavHOu6WjoZzsadl1HQQOFeQz1DH72hfzPE=
Subject key identifier:   97:6C:3D:70:27:20:14:E3:9C:3E:84:57:8A:2A:F4:27:01:C8:17:FF
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584733609D234FA62F60C32D9E80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0787dbca-9a29-3f87-a423-dbdac1afe6f7.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     393631
IP address blocks:        64.125.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:9d:23:4f:a6:2f:60:c3:2d:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=6ef093da-452b-4bea-9afb-1900c8e2bda3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:76:25:64:ff:c4:3b:85:c0:58:5c:b5:b9:f6:
                    c3:a2:e1:27:d0:97:bd:3b:8b:53:58:f6:0e:66:6a:
                    01:38:c4:61:0e:38:60:c8:98:d9:94:78:86:10:d0:
                    e2:2b:fb:fe:7a:c5:1c:08:02:c2:9c:ff:88:12:77:
                    2f:6e:f2:0c:14:a0:62:64:aa:75:35:35:e5:92:4b:
                    6b:2c:08:b6:9f:83:17:85:4e:25:4e:f8:0a:bd:67:
                    85:62:16:69:3d:d1:87:ea:b6:af:0b:38:d7:13:f9:
                    ae:c7:be:5b:5e:84:5f:9b:83:d4:46:ba:21:2e:f6:
                    35:62:78:7b:78:2d:f1:f4:dd:a6:e4:da:da:0c:4d:
                    f9:9c:7d:1c:12:11:9e:9f:07:b0:74:b0:dc:42:85:
                    7c:53:1d:65:b6:15:4f:0f:cc:fe:14:ae:a6:9e:c9:
                    1e:02:86:16:47:67:99:52:9c:b5:9a:8f:68:70:a5:
                    90:2e:32:7b:63:86:50:9d:10:e7:5a:95:8c:6c:a9:
                    96:67:87:a7:ef:9b:03:53:d8:c7:5d:59:9d:e9:f3:
                    e6:e6:ba:aa:74:83:60:9a:6a:4e:24:cc:27:89:ab:
                    5b:13:5f:d1:2e:a4:66:77:04:b3:e9:70:d3:26:72:
                    f7:28:65:c7:16:bf:44:50:ea:cd:b4:aa:75:9d:e9:
                    b6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6C:3D:70:27:20:14:E3:9C:3E:84:57:8A:2A:F4:27:01:C8:17:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0787dbca-9a29-3f87-a423-dbdac1afe6f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:6b:60:e8:b5:af:9f:fa:ec:50:48:08:5a:b0:fb:65:b6:79:
         6e:d6:0e:b7:9f:52:1a:03:71:ce:4c:cb:82:ac:7c:bf:2c:e7:
         7c:dd:cb:e3:ba:05:9f:63:d6:58:b2:f9:6a:50:72:b1:49:98:
         19:a1:89:57:42:d6:3e:51:dd:55:8e:3b:57:b3:61:5b:49:99:
         51:e8:74:48:5f:34:20:0b:d6:36:d3:79:b7:f5:87:47:82:57:
         b3:49:a0:cd:c5:42:52:e4:39:12:ee:b2:fb:d1:ae:31:5d:37:
         a4:0d:bc:62:1a:ff:a4:6d:e6:64:9c:10:a1:29:c0:7c:7c:f6:
         de:cc:71:d4:ac:35:0f:5e:40:25:2a:27:c7:3e:01:4a:2c:59:
         98:6f:d2:9b:ff:d9:56:a9:42:1e:8f:ec:78:85:41:88:5f:7f:
         ac:79:b4:b0:23:7d:47:bf:78:ca:a8:62:de:d1:ea:b7:a0:e2:
         7f:8e:29:bd:5f:8a:72:b7:2e:4f:b1:f9:34:dd:69:c8:52:f7:
         15:96:28:54:a4:a5:ba:0b:73:f2:4e:af:4a:a0:bb:16:89:28:
         fd:8a:a5:26:8f:2b:1f:63:a2:6d:3e:6c:e9:a2:ce:88:7e:1f:
         af:30:29:dc:d4:fe:7d:cf:3c:d1:cc:5c:df:3b:e7:dd:51:82:
         b9:9a:d8:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEczYJ0jT6YvYMMtnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDkxMzEzMDA0MVoXDTI0MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk
NmVmMDkzZGEtNDUyYi00YmVhLTlhZmItMTkwMGM4ZTJiZGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3YlZP/EO4XAWFy1ufbDouEn0Je9O4tTWPYO
ZmoBOMRhDjhgyJjZlHiGENDiK/v+esUcCALCnP+IEncvbvIMFKBiZKp1NTXlkktr
LAi2n4MXhU4lTvgKvWeFYhZpPdGH6ravCzjXE/mux75bXoRfm4PURrohLvY1Ynh7
eC3x9N2m5NraDE35nH0cEhGenwewdLDcQoV8Ux1lthVPD8z+FK6mnskeAoYWR2eZ
Upy1mo9ocKWQLjJ7Y4ZQnRDnWpWMbKmWZ4en75sDU9jHXVmd6fPm5rqqdINgmmpO
JMwniatbE1/RLqRmdwSz6XDTJnL3KGXHFr9EUOrNtKp1nem2NQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJdsPXAnIBTjnD6EV4oq9CcByBf/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvMDc4N2RiY2EtOWEyOS0z
Zjg3LWE0MjMtZGJkYWMxYWZlNmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQH2GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHdrYOi1r5/67FBICFqw+2W2eW7WDrefUhoDcc5My4KsfL8s53zdy+O6
BZ9j1liy+WpQcrFJmBmhiVdC1j5R3VWOO1ezYVtJmVHodEhfNCAL1jbTebf1h0eC
V7NJoM3FQlLkORLusvvRrjFdN6QNvGIa/6Rt5mScEKEpwHx89t7McdSsNQ9eQCUq
J8c+AUosWZhv0pv/2VapQh6P7HiFQYhff6x5tLAjfUe/eMqoYt7R6reg4n+OKb1f
inK3Lk+x+TTdachS9xWWKFSkpboLc/JOr0qguxaJKP2KpSaPKx9jom0+bOmizoh+
H68wKdzU/n3PPNHMXN87591Rgrma2PE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:54 2024 by rpki-client on console-fra.rpki-client.org