Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/127ddba2-8066-3325-85dc-986c65d82987.roa
File:                     127ddba2-8066-3325-85dc-986c65d82987.roa (raw, json)
Hash identifier:          lbtC4Du45nHMPYGF89UUqf7dRk6i29jRiidfLmZnHHc=
Subject key identifier:   D1:2B:23:DF:0C:1F:FA:14:33:DF:B3:17:ED:64:8B:AE:FA:25:F2:86
Certificate issuer:       /CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
Certificate serial:       010D0C9F43285847AB6C16C7A066AD5E40135280
Authority key identifier: 0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/127ddba2-8066-3325-85dc-986c65d82987.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     32024
IP address blocks:        2607:69c0:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:16:c7:a0:66:ad:5e:40:13:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=ef162d0d-1317-4fac-8d1f-5a99a50bdc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:6a:9f:34:2c:dc:67:0a:2c:26:ad:f7:d0:
                    f7:73:12:74:16:fd:0f:98:fa:61:bd:2d:95:33:11:
                    08:c3:b5:cd:0d:fc:ef:c8:0b:9e:db:77:32:c0:2b:
                    71:85:da:19:59:a0:7d:43:41:4c:54:70:e7:bc:07:
                    14:ab:dd:a9:0a:c8:3d:f8:10:9a:84:86:91:48:c8:
                    6c:2c:af:9a:82:8b:4d:86:6e:5c:f3:6d:76:72:4c:
                    bd:49:1a:19:a0:70:0c:1f:c1:cc:86:1e:cb:17:9a:
                    98:bf:06:fa:94:8f:36:ea:fe:8b:9f:0f:36:5a:77:
                    51:14:f0:66:4a:5d:c0:79:d9:fc:c2:b6:fa:1c:d1:
                    cf:cc:93:a3:82:4b:e4:97:be:d0:0a:1d:0c:94:9e:
                    f3:c7:82:fe:7d:50:ac:fa:22:30:3b:4f:4c:9e:e9:
                    18:6c:18:97:0a:1e:bd:ca:61:06:0f:b5:d0:e1:0c:
                    e5:92:39:2b:ce:76:3b:cd:4f:51:06:d1:24:74:12:
                    fc:5a:e7:71:09:c7:79:28:d2:8d:98:f2:bc:e4:61:
                    ef:d2:b8:4a:e7:49:a4:04:65:7e:4e:64:be:86:bb:
                    90:bf:6e:6d:a5:a9:ad:b7:c3:28:25:b4:14:d9:56:
                    6a:97:1a:d3:bd:5c:5f:13:65:9b:0b:a7:ca:8d:a2:
                    8a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2B:23:DF:0C:1F:FA:14:33:DF:B3:17:ED:64:8B:AE:FA:25:F2:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/127ddba2-8066-3325-85dc-986c65d82987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl

            X509v3 Authority Key Identifier:
                keyid:0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:69c0:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:5d:67:62:06:08:94:44:1d:c6:bd:9d:b3:80:92:74:d2:38:
         bb:21:95:92:8e:a5:ac:b3:ff:a4:d0:e4:8e:61:f4:b6:2f:84:
         6c:9f:62:16:35:b1:1d:fa:be:49:44:6e:af:ad:37:c3:3c:24:
         08:e5:06:37:9b:2c:f5:a4:03:b3:dd:37:91:af:c5:fe:17:bc:
         16:1b:c4:00:f7:ed:1d:ce:de:68:94:57:bc:37:e4:42:86:1a:
         fc:52:f5:90:1c:03:06:ea:cd:11:16:8a:48:61:27:97:58:3b:
         42:71:f5:48:61:e6:a5:70:c7:4c:37:85:6e:aa:8e:e7:90:71:
         a5:0e:2e:e4:23:5c:a3:e6:7a:55:5f:1e:e3:e2:09:be:5c:e2:
         b9:e7:8d:4d:ad:b4:cd:29:fa:3e:64:e8:19:fb:17:2a:21:11:
         05:e3:f2:73:84:29:cd:17:e5:be:57:78:07:60:af:5f:b3:64:
         5b:3f:51:82:4d:ff:25:0d:35:73:8d:b3:f4:74:b8:87:7e:d6:
         9d:24:b0:ad:7b:1f:fd:c6:56:f2:ec:9e:01:f7:66:90:27:de:
         e2:1c:4d:d6:ca:ac:4c:4e:c8:f1:e7:32:b3:72:4a:98:77:1b:
         62:f3:8e:4a:9b:5a:13:2b:e4:35:3f:f5:56:51:9b:fa:ba:11:
         c6:78:04:7a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEerbBbHoGatXkATUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjA0YzI3ZGQtY2UwNi00ZDBhLWFlODQtMWQ2NzVlODVj
ZTU5MB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk
ZWYxNjJkMGQtMTMxNy00ZmFjLThkMWYtNWE5OWE1MGJkYzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGdqnzQs3GcKLCat99D3cxJ0Fv0PmPphvS2V
MxEIw7XNDfzvyAue23cywCtxhdoZWaB9Q0FMVHDnvAcUq92pCsg9+BCahIaRSMhs
LK+agotNhm5c8212cky9SRoZoHAMH8HMhh7LF5qYvwb6lI826v6Lnw82WndRFPBm
Sl3Aedn8wrb6HNHPzJOjgkvkl77QCh0MlJ7zx4L+fVCs+iIwO09MnukYbBiXCh69
ymEGD7XQ4QzlkjkrznY7zU9RBtEkdBL8WudxCcd5KNKNmPK85GHv0rhK50mkBGV+
TmS+hruQv25tpamtt8MoJbQU2VZqlxrTvVxfE2WbC6fKjaKKRwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNErI98MH/oUM9+zF+1ki676JfKGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMDRj
MjdkZC1jZTA2LTRkMGEtYWU4NC0xZDY3NWU4NWNlNTkvMTI3ZGRiYTItODA2Ni0z
MzI1LTg1ZGMtOTg2YzY1ZDgyOTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjA0YzI3ZGQtY2UwNi00ZDBhLWFl
ODQtMWQ2NzVlODVjZTU5L2IwNGMyN2RkLWNlMDYtNGQwYS1hZTg0LTFkNjc1ZTg1
Y2U1OS5jcmwwHwYDVR0jBBgwFoAUDVFmljoHwMlWTTBWrDr/DJz0GQIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMDRjMjdkZC1jZTA2LTRkMGEtYWU4NC0xZDY3
NWU4NWNlNTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgdpwIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAS11nYgYIlEQdxr2ds4CSdNI4uyGVko6lrLP/pNDkjmH0ti+EbJ9i
FjWxHfq+SURur603wzwkCOUGN5ss9aQDs903ka/F/he8FhvEAPftHc7eaJRXvDfk
QoYa/FL1kBwDBurNERaKSGEnl1g7QnH1SGHmpXDHTDeFbqqO55BxpQ4u5CNco+Z6
VV8e4+IJvlziueeNTa20zSn6PmToGfsXKiERBePyc4QpzRflvld4B2CvX7NkWz9R
gk3/JQ01c42z9HS4h37WnSSwrXsf/cZW8uyeAfdmkCfe4hxN1sqsTE7I8ecys3JK
mHcbYvOOSptaEyvkNT/1VlGb+roRxngEeg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:17 2024 by rpki-client on console-ams.rpki-client.org