Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/975ebd21-00c4-32f7-baf2-53fa6ef43997.roa
File:                     975ebd21-00c4-32f7-baf2-53fa6ef43997.roa (raw, json)
Hash identifier:          NcVxZO/2qMkhTjt+dLt0TvzYuwni58pV0c8cjXMwcjM=
Subject key identifier:   A6:3B:2F:17:58:3D:AD:D6:55:B5:08:B5:1B:03:54:F1:3D:11:24:E6
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858475A76354DDDBC6C4A93AE8F80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/975ebd21-00c4-32f7-baf2-53fa6ef43997.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     36222
IP address blocks:        66.62.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:35:4d:dd:bc:6c:4a:93:ae:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=a868f97c-7054-4352-ae64-71607e3eda67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5a:4c:8a:78:20:83:80:02:83:df:b6:59:ff:
                    8c:69:96:18:aa:8a:1c:fb:93:7e:d8:f5:35:d2:d0:
                    6b:3f:a5:53:0b:38:06:14:1c:63:ab:9d:3b:0e:67:
                    2b:30:fd:e6:5c:bc:c6:f2:90:87:5b:e8:90:36:5d:
                    7f:65:12:6c:df:80:02:39:4f:a9:fb:4b:60:5b:eb:
                    95:ae:4f:4b:8a:1e:c8:3e:58:d1:4e:df:e2:8b:48:
                    3b:f6:e4:02:da:1b:4d:4f:9d:53:3b:83:27:a6:e7:
                    8b:e6:1f:de:79:22:e0:21:93:fc:37:1d:61:76:66:
                    7b:8a:1d:19:84:82:0f:71:8f:ce:4d:c4:69:b8:07:
                    df:e0:d8:cb:94:b8:cf:11:1b:4c:d7:b4:c3:c8:44:
                    fd:8a:25:f3:38:ea:d6:eb:04:69:41:e4:96:62:1b:
                    bd:dc:ed:93:6d:2c:e8:56:7a:00:96:36:51:0c:12:
                    01:c9:14:86:af:8c:7a:9a:57:d2:70:44:50:6d:9c:
                    1e:60:4a:44:71:41:d1:38:1f:a8:7d:e7:56:f8:4b:
                    79:91:93:d9:21:a8:3b:3e:60:98:d3:18:cc:0c:ac:
                    39:fb:c4:da:bd:db:2d:61:77:92:95:bb:79:bb:f2:
                    af:93:8f:d5:33:4a:4c:dd:8b:1c:66:9e:bb:99:06:
                    5e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3B:2F:17:58:3D:AD:D6:55:B5:08:B5:1B:03:54:F1:3D:11:24:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/975ebd21-00c4-32f7-baf2-53fa6ef43997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d4:f1:7e:4b:a5:12:23:51:c9:f2:3f:2c:1e:dc:23:69:6f:
         d2:c1:5c:d9:b3:c8:11:b9:83:19:10:2c:44:d1:c4:be:5d:63:
         c2:05:de:56:20:39:f8:4d:c4:ed:13:a9:69:91:45:43:b6:03:
         f0:4d:bf:d1:ff:1c:d7:02:bd:d9:47:26:26:e3:85:9d:74:9b:
         7f:a8:c4:f7:4f:d3:f5:51:91:9d:e7:62:21:3d:37:d3:0c:c9:
         dc:5b:57:72:c6:13:ee:eb:3d:76:68:13:91:b6:4f:01:15:72:
         d8:84:a0:59:4d:8c:55:8f:17:d2:03:e9:7b:8f:70:ca:5a:1d:
         2c:e1:ac:71:a9:05:37:c6:c2:a3:49:99:25:cd:d2:b6:0f:e9:
         84:51:fc:0e:58:b7:7b:b3:59:43:64:47:4a:1e:1a:7b:f0:a6:
         ef:47:d5:9a:f2:7e:39:ab:45:5a:de:ba:47:a8:f0:38:64:79:
         22:60:2c:da:a9:c3:ca:de:a1:f2:17:6f:f8:85:52:ea:40:b7:
         08:b7:0a:f8:13:68:f8:82:bc:34:ee:97:23:41:b3:fc:fe:68:
         71:8b:f5:2d:4c:53:1c:d6:5d:07:cf:eb:a9:e3:62:c4:9f:ea:
         67:7d:ff:7a:ca:94:f2:39:10:ec:d5:69:9f:13:0a:18:61:01:
         50:57:ae:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdadjVN3bxsSpOuj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDkyNzEzMDA0MVoXDTI0MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk
YTg2OGY5N2MtNzA1NC00MzUyLWFlNjQtNzE2MDdlM2VkYTY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFpMinggg4ACg9+2Wf+MaZYYqooc+5N+2PU1
0tBrP6VTCzgGFBxjq507DmcrMP3mXLzG8pCHW+iQNl1/ZRJs34ACOU+p+0tgW+uV
rk9Lih7IPljRTt/ii0g79uQC2htNT51TO4MnpueL5h/eeSLgIZP8Nx1hdmZ7ih0Z
hIIPcY/OTcRpuAff4NjLlLjPERtM17TDyET9iiXzOOrW6wRpQeSWYhu93O2TbSzo
VnoAljZRDBIByRSGr4x6mlfScERQbZweYEpEcUHROB+ofedW+Et5kZPZIag7PmCY
0xjMDKw5+8TavdstYXeSlbt5u/Kvk4/VM0pM3YscZp67mQZemQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKY7LxdYPa3WVbUItRsDVPE9ESTmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvOTc1ZWJkMjEtMDBjNC0z
MmY3LWJhZjItNTNmYTZlZjQzOTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQj49MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTU8X5LpRIjUcnyPywe3CNpb9LBXNmzyBG5gxkQLETRxL5dY8IF3lYg
OfhNxO0TqWmRRUO2A/BNv9H/HNcCvdlHJibjhZ10m3+oxPdP0/VRkZ3nYiE9N9MM
ydxbV3LGE+7rPXZoE5G2TwEVctiEoFlNjFWPF9ID6XuPcMpaHSzhrHGpBTfGwqNJ
mSXN0rYP6YRR/A5Yt3uzWUNkR0oeGnvwpu9H1ZryfjmrRVreukeo8DhkeSJgLNqp
w8reofIXb/iFUupAtwi3CvgTaPiCvDTulyNBs/z+aHGL9S1MUxzWXQfP66njYsSf
6md9/3rKlPI5EOzVaZ8TChhhAVBXrjg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:55 2024 by rpki-client on console-ams.rpki-client.org