Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0ca0e8e0-8338-3fb1-946d-9a9fb73c6e8a.roa
File:                     0ca0e8e0-8338-3fb1-946d-9a9fb73c6e8a.roa (raw, json)
Hash identifier:          aVcuxMTK3Gyf94FXrbhKaD1j4BiFFhZ7aCsaHN1f+Lk=
Subject key identifier:   C1:70:66:50:12:7E:CC:57:8C:F4:41:5B:AB:A5:E4:C8:F7:D8:18:64
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858473095FC0F986D673D71E90000
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0ca0e8e0-8338-3fb1-946d-9a9fb73c6e8a.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     204440
IP address blocks:        64.124.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:fc:0f:98:6d:67:3d:71:e9:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=03339aed-9600-403c-bf4e-503d2f1492c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6f:13:bc:6c:e2:da:3b:d0:1f:08:b3:02:4a:
                    96:76:e6:d2:77:bb:17:24:fc:43:72:a1:c3:33:76:
                    df:9d:ba:42:aa:af:cd:71:0c:51:10:dd:33:1a:c2:
                    2f:af:36:e4:95:a0:7c:3f:da:7b:10:42:2a:97:3e:
                    ea:4f:58:97:57:88:6c:24:d7:42:b7:af:e1:a6:fb:
                    5f:f3:d7:ff:db:c3:a6:4b:48:7c:4a:28:7a:c4:cd:
                    77:94:12:9c:17:21:97:6f:75:0a:8a:9d:5b:78:b4:
                    41:0e:e9:c1:3c:4a:d0:82:5f:1b:16:3a:2d:03:ea:
                    06:e9:06:8a:67:31:7f:b8:cc:cb:1b:c6:63:9e:bf:
                    48:e1:97:ce:81:06:2c:44:a0:6b:f2:ea:d5:82:49:
                    23:78:65:d5:a9:24:5a:2b:e8:b5:32:0d:32:d8:42:
                    fb:2a:63:25:a7:3c:00:a9:4d:06:e6:83:99:3a:1a:
                    d8:8a:28:42:f6:88:b4:a1:62:0f:3b:3a:e5:42:6a:
                    d0:ba:41:17:9e:42:80:25:88:03:4c:2e:a7:0c:0b:
                    23:8d:00:ef:01:1a:74:f2:4a:9c:f1:3b:29:d2:c5:
                    74:5d:62:22:fe:22:16:29:36:fb:44:e6:6c:10:03:
                    66:ed:16:4a:52:32:a4:4d:78:78:a4:12:45:1d:e5:
                    8c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:70:66:50:12:7E:CC:57:8C:F4:41:5B:AB:A5:E4:C8:F7:D8:18:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0ca0e8e0-8338-3fb1-946d-9a9fb73c6e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:3d:6c:d6:91:19:41:c6:75:cb:1d:e1:38:67:f3:e0:b8:7a:
         af:48:2c:59:3d:83:d2:93:11:d8:61:ec:7e:24:ce:c8:86:37:
         56:70:26:7d:41:67:fb:01:c3:21:75:57:06:e7:f9:10:d6:dd:
         95:71:d2:7d:72:b7:c4:08:3a:ca:90:1d:20:56:64:57:9d:a4:
         53:64:a5:22:19:e9:0a:2f:c7:be:51:36:5d:51:c3:80:28:c6:
         ef:0c:2f:47:28:22:d9:53:58:a2:7b:73:97:84:c6:3a:50:0f:
         62:25:60:01:c9:e4:5e:e8:23:5b:ca:40:4b:c6:f9:ec:69:02:
         96:23:58:64:f6:52:83:ef:85:f0:c5:e6:a3:a6:2d:b3:9b:52:
         80:dd:ae:b1:92:c3:7a:0e:6c:2d:d6:3d:69:77:a9:17:a8:01:
         65:7f:da:82:da:b5:f3:94:7a:d1:72:4e:4d:69:04:aa:5e:44:
         cd:e8:9c:5d:34:66:34:37:6b:d3:4a:b5:3e:63:34:89:48:2f:
         4c:f7:02:4d:23:89:f2:7e:d3:cf:42:76:49:2d:9d:9f:32:f9:
         cc:e0:08:02:0f:b6:05:12:0e:e2:c6:11:4d:b0:bc:8a:59:c7:
         0a:9e:3f:03:3e:d7:f4:e2:6e:27:fa:49:e0:50:57:1f:3d:4b:
         c2:88:58:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwlfwPmG1nPXHpAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk
MDMzMzlhZWQtOTYwMC00MDNjLWJmNGUtNTAzZDJmMTQ5MmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW8TvGzi2jvQHwizAkqWdubSd7sXJPxDcqHD
M3bfnbpCqq/NcQxREN0zGsIvrzbklaB8P9p7EEIqlz7qT1iXV4hsJNdCt6/hpvtf
89f/28OmS0h8Sih6xM13lBKcFyGXb3UKip1beLRBDunBPErQgl8bFjotA+oG6QaK
ZzF/uMzLG8Zjnr9I4ZfOgQYsRKBr8urVgkkjeGXVqSRaK+i1Mg0y2EL7KmMlpzwA
qU0G5oOZOhrYiihC9oi0oWIPOzrlQmrQukEXnkKAJYgDTC6nDAsjjQDvARp08kqc
8Tsp0sV0XWIi/iIWKTb7ROZsEANm7RZKUjKkTXh4pBJFHeWMoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMFwZlASfsxXjPRBW6ul5Mj32BhkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvMGNhMGU4ZTAtODMzOC0z
ZmIxLTk0NmQtOWE5ZmI3M2M2ZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHxrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALM9bNaRGUHGdcsd4Thn8+C4eq9ILFk9g9KTEdhh7H4kzsiGN1ZwJn1B
Z/sBwyF1Vwbn+RDW3ZVx0n1yt8QIOsqQHSBWZFedpFNkpSIZ6Qovx75RNl1Rw4Ao
xu8ML0coItlTWKJ7c5eExjpQD2IlYAHJ5F7oI1vKQEvG+expApYjWGT2UoPvhfDF
5qOmLbObUoDdrrGSw3oObC3WPWl3qReoAWV/2oLatfOUetFyTk1pBKpeRM3onF00
ZjQ3a9NKtT5jNIlIL0z3Ak0jifJ+089CdkktnZ8y+czgCAIPtgUSDuLGEU2wvIpZ
xwqePwM+1/Tibif6SeBQVx89S8KIWCw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:54 2024 by rpki-client on console-fra.rpki-client.org