Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/811d7a8a-d9cd-3d1a-983f-287703d2d62a.roa
File:                     811d7a8a-d9cd-3d1a-983f-287703d2d62a.roa (raw, json)
Hash identifier:          98jWj8DK/pkv+7txOv3pejDEfm9U6PGOJbFt8JPrxG0=
Subject key identifier:   C0:3E:6B:84:6C:DB:B1:4F:A5:EC:D9:F9:8D:F3:B4:CC:D9:E7:05:8E
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584742BB591711C67F06CB2F6300
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/811d7a8a-d9cd-3d1a-983f-287703d2d62a.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     25899
IP address blocks:        67.59.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:59:17:11:c6:7f:06:cb:2f:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=d10bdcad-89bb-4967-80d5-d5e435ed188d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6c:29:1b:34:bf:1b:54:58:37:be:98:d2:0e:
                    81:6f:a6:6e:86:4a:b8:f9:01:6f:d5:dc:9b:68:34:
                    c8:ff:45:0f:41:29:48:1d:05:7d:5d:98:fe:f3:17:
                    93:13:c5:b5:1e:1a:63:c4:38:8e:7b:e9:0d:ee:a0:
                    1e:1c:14:8a:e6:31:b6:16:d7:d7:fb:ee:3e:71:44:
                    0c:c2:6c:b9:34:1b:5b:4c:1d:a8:dd:72:3e:f7:64:
                    b9:fd:c5:59:73:b6:55:0c:bc:91:53:a2:76:ca:92:
                    ad:be:fa:7a:36:99:e4:e4:e2:ea:0b:98:d7:c6:25:
                    15:4e:f0:69:92:07:94:d0:ba:83:76:73:a2:d4:62:
                    ec:25:b9:f8:af:5e:24:37:10:b5:33:c6:26:7e:74:
                    f8:47:c5:58:34:89:9b:17:7d:d0:d8:3c:61:8a:0d:
                    2c:5b:dd:64:85:2d:1a:ee:1d:11:0e:9d:a8:eb:56:
                    7d:34:37:ce:a9:cc:25:23:6c:71:39:c2:29:76:4f:
                    65:72:94:af:30:3a:7d:20:99:2e:80:21:fc:73:e9:
                    9f:e9:20:7a:9f:64:a3:56:fa:52:fb:ac:d0:e3:ab:
                    86:55:30:ef:89:80:33:eb:3d:ad:ff:d7:67:e9:3b:
                    1e:49:37:7f:2a:0e:5d:da:89:72:9c:75:dd:f4:e4:
                    4e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3E:6B:84:6C:DB:B1:4F:A5:EC:D9:F9:8D:F3:B4:CC:D9:E7:05:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/811d7a8a-d9cd-3d1a-983f-287703d2d62a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:2d:3b:16:51:d8:c4:1a:34:0c:74:63:97:1b:a8:57:27:6d:
         da:b7:f3:d3:93:b8:1e:18:ee:f9:03:71:1a:2c:54:99:d9:46:
         a5:2c:f1:d8:94:53:b1:cb:2f:5f:89:cd:35:7a:a7:c6:a3:6a:
         67:b2:20:f5:23:83:65:7c:ec:d1:51:37:24:e5:37:01:ff:a8:
         d5:77:cc:47:12:84:7a:97:16:96:86:e1:a1:f4:52:7d:08:95:
         0b:47:c3:c3:df:f2:2d:5a:fa:fa:6a:7a:61:a6:d5:60:27:bf:
         80:cb:75:a4:a8:41:bd:da:2f:a9:24:fa:7e:db:59:43:3d:5d:
         5e:5e:3b:55:d4:19:1b:d9:2e:d8:53:9b:f1:bc:aa:a5:46:31:
         e3:98:b7:2b:b5:e7:c7:54:0e:cb:3b:f0:dd:89:88:68:c7:b3:
         0a:62:7c:63:21:79:89:d0:66:a6:c4:cc:aa:e0:1a:24:4a:d9:
         af:0b:b8:00:cc:85:df:d8:4b:dc:b2:9c:8e:65:14:a3:8d:92:
         89:5c:cd:53:88:aa:2f:50:74:9b:94:c9:da:1b:cf:3a:e5:1d:
         56:28:1f:e3:f8:30:d7:6e:27:44:4a:ae:e9:24:34:cd:f4:98:
         21:f4:73:07:ee:9f:35:de:4b:ae:ba:b2:3c:3a:fe:c9:cc:db:
         09:7e:4a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:01 2024 by rpki-client on console-fra.rpki-client.org