Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f/74be51c8-f4d9-3046-952a-c64a5d214db9.roa
File:                     74be51c8-f4d9-3046-952a-c64a5d214db9.roa (raw, json)
Hash identifier:          B2g2Yu4fYZvPAr+ixymbVhswQ8o3wSCNcn5PiSz12uM=
Subject key identifier:   CD:62:CC:44:C3:A7:7E:7C:0C:49:13:29:EE:38:A7:96:DC:62:8D:9B
Certificate issuer:       /CN=ba6df326-d80c-4cb4-91a1-83dda19f144f
Certificate serial:       010D0C9F43285845E88E6E311BADF3DBD3762480
Authority key identifier: EE:A7:AD:14:39:82:06:B4:AA:93:56:2E:34:F2:56:BB:A0:7C:95:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f/74be51c8-f4d9-3046-952a-c64a5d214db9.roa
Signing time:             Sat 18 May 2024 01:00:27 +0000
ROA not before:           Sat 18 May 2024 01:00:27 +0000
ROA not after:            Fri 16 Aug 2024 01:00:27 +0000
asID:                     36378
IP address blocks:        64.29.24.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f/ba6df326-d80c-4cb4-91a1-83dda19f144f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f/ba6df326-d80c-4cb4-91a1-83dda19f144f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e8:8e:6e:31:1b:ad:f3:db:d3:76:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6df326-d80c-4cb4-91a1-83dda19f144f
        Validity
            Not Before: May 18 01:00:27 2024 GMT
            Not After : Aug 16 01:00:27 2024 GMT
        Subject: CN=3c612fa0-86c7-47fe-ace3-41dfb6ab9d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:37:0e:d9:5f:4e:57:31:e6:b9:fc:75:25:0b:
                    cb:5c:47:6c:30:70:8a:e5:5a:a5:b1:78:d6:54:de:
                    61:95:54:5d:72:54:96:29:0f:aa:20:03:74:ef:5c:
                    e4:c6:b9:9d:88:9c:fc:8c:af:08:65:f2:ce:a9:36:
                    6a:14:80:a5:c3:49:39:2b:81:06:ee:98:df:bb:28:
                    6c:84:0b:c2:d5:a3:be:9b:b2:a1:db:4a:16:61:70:
                    c2:af:28:1d:4e:55:25:0a:35:4c:0f:40:05:79:c4:
                    53:e9:4a:97:3d:83:16:a0:c5:58:7b:a9:a0:13:18:
                    39:c5:5a:3d:3b:b6:36:b7:7f:b9:1a:58:42:13:91:
                    7b:bb:40:7d:68:9d:53:8f:a5:be:58:f3:57:39:62:
                    36:dc:5a:de:df:4c:3f:25:ee:d8:92:d1:29:9f:ba:
                    39:bd:f0:9f:cb:d3:4f:bc:a1:11:6a:35:c5:32:51:
                    fe:cb:82:46:6e:ab:e3:66:4f:5d:dd:8e:51:4b:a1:
                    e8:7c:03:02:26:7e:42:84:8a:60:c7:13:c0:63:c4:
                    d8:be:6e:70:b7:39:e8:25:f1:a4:00:97:b9:8b:05:
                    a4:49:bd:40:99:8f:11:8a:1e:0c:db:02:15:c9:c0:
                    31:6e:2b:0e:ac:0a:41:73:22:9b:04:dc:5f:0f:0f:
                    09:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:62:CC:44:C3:A7:7E:7C:0C:49:13:29:EE:38:A7:96:DC:62:8D:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f/74be51c8-f4d9-3046-952a-c64a5d214db9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f/ba6df326-d80c-4cb4-91a1-83dda19f144f.crl

            X509v3 Authority Key Identifier:
                keyid:EE:A7:AD:14:39:82:06:B4:AA:93:56:2E:34:F2:56:BB:A0:7C:95:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:c1:1d:d4:3d:b3:5e:fa:0d:40:7f:04:66:dd:b5:cd:d4:e0:
         4c:b7:00:b6:eb:5b:61:df:49:85:99:5c:69:19:8e:8e:8f:c1:
         63:02:57:92:de:11:45:68:d3:3d:32:bb:73:ac:6c:21:c0:05:
         de:bd:9d:79:ff:e0:1e:a4:d9:90:b7:f1:2b:aa:91:1c:1d:6a:
         7e:01:00:5d:a5:c8:49:35:1d:f3:b7:64:70:81:be:99:63:7e:
         aa:99:77:9a:16:1b:c8:29:7f:4e:47:64:31:ee:03:44:6f:f0:
         68:31:e4:19:59:ef:c9:06:9f:e7:82:17:60:18:7e:17:75:48:
         ab:a3:da:4d:08:b6:97:49:31:45:6c:07:f1:a2:a8:f1:91:38:
         fd:c5:95:d1:13:72:81:00:6c:76:48:10:d2:29:01:19:68:fa:
         5e:63:79:2c:dd:df:61:66:c1:4d:39:cd:ce:60:b8:c4:73:88:
         6b:e1:58:0c:ff:6a:b0:88:8c:1a:c1:15:e0:4e:9a:f5:d2:32:
         71:d5:41:4b:21:5a:58:ff:c2:d7:ce:4d:80:9c:bc:a6:a6:39:
         b4:76:b9:a2:94:67:f9:26:ed:3b:2b:a9:d0:ae:86:13:4b:75:
         57:35:68:1f:05:b0:37:db:7d:ad:ab:80:6d:16:46:f3:55:b2:
         60:10:ba:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXojm4xG63z29N2JIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmE2ZGYzMjYtZDgwYy00Y2I0LTkxYTEtODNkZGExOWYx
NDRmMB4XDTI0MDUxODAxMDAyN1oXDTI0MDgxNjAxMDAyN1owLzEtMCsGA1UEAxMk
M2M2MTJmYTAtODZjNy00N2ZlLWFjZTMtNDFkZmI2YWI5ZDM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTcO2V9OVzHmufx1JQvLXEdsMHCK5VqlsXjW
VN5hlVRdclSWKQ+qIAN071zkxrmdiJz8jK8IZfLOqTZqFIClw0k5K4EG7pjfuyhs
hAvC1aO+m7Kh20oWYXDCrygdTlUlCjVMD0AFecRT6UqXPYMWoMVYe6mgExg5xVo9
O7Y2t3+5GlhCE5F7u0B9aJ1Tj6W+WPNXOWI23Fre30w/Je7YktEpn7o5vfCfy9NP
vKERajXFMlH+y4JGbqvjZk9d3Y5RS6HofAMCJn5ChIpgxxPAY8TYvm5wtznoJfGk
AJe5iwWkSb1AmY8Rih4M2wIVycAxbisOrApBcyKbBNxfDw8JSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM1izETDp358DEkTKe44p5bcYo2bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYTZk
ZjMyNi1kODBjLTRjYjQtOTFhMS04M2RkYTE5ZjE0NGYvNzRiZTUxYzgtZjRkOS0z
MDQ2LTk1MmEtYzY0YTVkMjE0ZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmE2ZGYzMjYtZDgwYy00Y2I0LTkx
YTEtODNkZGExOWYxNDRmL2JhNmRmMzI2LWQ4MGMtNGNiNC05MWExLTgzZGRhMTlm
MTQ0Zi5jcmwwHwYDVR0jBBgwFoAU7qetFDmCBrSqk1YuNPJWu6B8lckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYTZkZjMyNi1kODBjLTRjYjQtOTFhMS04M2Rk
YTE5ZjE0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQB0YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAfBHdQ9s176DUB/BGbdtc3U4Ey3ALbrW2HfSYWZXGkZjo6PwWMCV5Le
EUVo0z0yu3OsbCHABd69nXn/4B6k2ZC38SuqkRwdan4BAF2lyEk1HfO3ZHCBvplj
fqqZd5oWG8gpf05HZDHuA0Rv8Ggx5BlZ78kGn+eCF2AYfhd1SKuj2k0ItpdJMUVs
B/GiqPGROP3FldETcoEAbHZIENIpARlo+l5jeSzd32FmwU05zc5guMRziGvhWAz/
arCIjBrBFeBOmvXSMnHVQUshWlj/wtfOTYCcvKamObR2uaKUZ/km7TsrqdCuhhNL
dVc1aB8FsDfbfa2rgG0WRvNVsmAQurg=
-----END CERTIFICATE-----
Generated at Mon May 20 15:19:46 2024 by rpki-client on console-fra.rpki-client.org