Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/c74b8158-6648-35a6-ae88-d18933b0475f.roa
File:                     c74b8158-6648-35a6-ae88-d18933b0475f.roa (raw, json)
Hash identifier:          fD/suTPDDLSL7WXDrxa0peoO9dYZkrOeGae8tTLfhis=
Subject key identifier:   AC:90:34:61:AD:EA:F9:78:5D:3D:55:24:9A:54:6D:EC:7A:4D:29:A0
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F432858451480353ABFDCDBBA22782610
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/c74b8158-6648-35a6-ae88-d18933b0475f.roa
Signing time:             Sun 03 Mar 2024 02:00:27 +0000
ROA not before:           Sun 03 Mar 2024 02:00:27 +0000
ROA not after:            Sat 01 Jun 2024 01:00:27 +0000
asID:                     21561
IP address blocks:        67.59.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:14:80:35:3a:bf:dc:db:ba:22:78:26:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Mar  3 02:00:27 2024 GMT
            Not After : Jun  1 01:00:27 2024 GMT
        Subject: CN=7a425e50-490f-4c6d-b0bf-5a58f35d3678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:e5:34:18:8d:8c:c3:a4:51:9e:12:5c:a7:
                    8a:e5:4e:92:d3:40:fe:99:80:96:c1:0e:df:e9:96:
                    6d:0d:57:04:95:d1:42:14:71:61:21:c9:26:f2:f1:
                    af:02:fd:6f:47:7f:0f:c2:b6:43:5b:97:99:04:c3:
                    da:3a:ab:00:55:2b:d4:07:72:60:b2:ec:de:5e:96:
                    3a:ef:bd:3a:ea:0b:05:59:6b:92:07:cb:1e:e5:47:
                    2f:03:7d:1c:57:dc:45:3b:53:22:2d:57:d9:aa:1f:
                    79:8a:91:15:e6:00:2e:c1:34:e9:72:a2:fa:06:c6:
                    dd:8e:07:29:dc:7b:3d:53:04:0e:87:8b:05:cd:8b:
                    73:81:6a:b6:95:61:28:2d:77:f7:50:1b:c7:e6:a4:
                    62:21:c5:c8:e3:92:fe:7c:4e:e5:d2:49:eb:73:51:
                    1a:cb:8b:c6:79:27:d5:a9:08:be:a8:e5:ca:5f:e1:
                    77:43:d8:f4:0d:1e:22:55:ef:f3:95:17:4d:32:80:
                    c3:59:f6:ee:5e:97:d5:17:cf:16:76:7b:7d:8e:18:
                    b8:bc:e1:de:55:49:86:94:17:b4:9d:b3:66:15:cf:
                    78:5f:8e:83:a9:ff:2a:a1:2d:65:76:a4:73:0a:8e:
                    53:56:de:3d:00:07:fb:7d:12:5f:71:eb:59:ad:34:
                    a5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:90:34:61:AD:EA:F9:78:5D:3D:55:24:9A:54:6D:EC:7A:4D:29:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/c74b8158-6648-35a6-ae88-d18933b0475f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a2:fd:3b:f6:3d:a1:bf:40:fa:e0:fb:1d:10:5c:a9:28:ed:
         e9:e6:d4:7d:1a:65:2b:36:e9:b8:17:65:ac:64:ae:76:62:54:
         ab:31:f1:dd:8b:fd:51:c8:a9:a7:84:b9:55:c6:c4:9b:dd:0b:
         75:1e:c3:30:35:55:8e:9e:23:d2:20:f2:30:f6:09:83:3b:a9:
         e8:78:ba:da:c1:91:53:f0:32:50:ba:3c:0c:e1:03:8f:7d:e4:
         4d:4d:5b:9c:26:0e:c9:c7:36:0b:8c:18:1e:2b:98:c4:b7:09:
         18:72:61:84:cb:b6:04:fb:5a:5c:22:4b:1f:7b:3f:4f:5a:33:
         8b:9c:c8:64:96:94:4d:d6:ba:c2:5f:4b:f4:56:ff:b2:56:3d:
         d2:3b:eb:64:b9:db:64:f8:db:cf:90:d5:c0:dc:64:80:9f:ba:
         47:3a:06:b5:29:a3:4e:28:de:24:6b:4b:85:92:96:62:34:89:
         fc:73:e7:c0:dd:b1:29:b9:e2:dc:97:2f:5b:26:8e:3b:8d:d6:
         c3:47:d1:07:80:49:8c:7b:86:1b:34:cd:db:23:67:9a:74:60:
         cc:9a:59:84:1c:19:1f:44:3d:a1:d9:4d:6e:f5:78:ce:28:92:
         fb:6d:db:38:be:88:f1:5b:10:c3:67:1a:25:4c:12:e4:10:b1:
         76:3f:0f:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUUgDU6v9zbuiJ4JhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ2NzJlYTYtZDFjNC00M2E5LWJlZTEtOGRhMTM1YWUz
ZmY0MB4XDTI0MDMwMzAyMDAyN1oXDTI0MDYwMTAxMDAyN1owLzEtMCsGA1UEAxMk
N2E0MjVlNTAtNDkwZi00YzZkLWIwYmYtNWE1OGYzNWQzNjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2nlNBiNjMOkUZ4SXKeK5U6S00D+mYCWwQ7f
6ZZtDVcEldFCFHFhIckm8vGvAv1vR38PwrZDW5eZBMPaOqsAVSvUB3JgsuzeXpY6
77066gsFWWuSB8se5UcvA30cV9xFO1MiLVfZqh95ipEV5gAuwTTpcqL6Bsbdjgcp
3Hs9UwQOh4sFzYtzgWq2lWEoLXf3UBvH5qRiIcXI45L+fE7l0knrc1Eay4vGeSfV
qQi+qOXKX+F3Q9j0DR4iVe/zlRdNMoDDWfbuXpfVF88Wdnt9jhi4vOHeVUmGlBe0
nbNmFc94X46Dqf8qoS1ldqRzCo5TVt49AAf7fRJfcetZrTSlOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKyQNGGt6vl4XT1VJJpUbex6TSmgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3
MmVhNi1kMWM0LTQzYTktYmVlMS04ZGExMzVhZTNmZjQvYzc0YjgxNTgtNjY0OC0z
NWE2LWFlODgtZDE4OTMzYjA0NzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTQ2NzJlYTYtZDFjNC00M2E5LWJl
ZTEtOGRhMTM1YWUzZmY0L2U0NjcyZWE2LWQxYzQtNDNhOS1iZWUxLThkYTEzNWFl
M2ZmNC5jcmwwHwYDVR0jBBgwFoAUmE5B99/V+4Bg4x3qq/AKwG+0SlswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3MmVhNi1kMWM0LTQzYTktYmVlMS04ZGEx
MzVhZTNmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQztPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADii/Tv2PaG/QPrg+x0QXKko7enm1H0aZSs26bgXZaxkrnZiVKsx8d2L
/VHIqaeEuVXGxJvdC3UewzA1VY6eI9Ig8jD2CYM7qeh4utrBkVPwMlC6PAzhA499
5E1NW5wmDsnHNguMGB4rmMS3CRhyYYTLtgT7WlwiSx97P09aM4ucyGSWlE3WusJf
S/RW/7JWPdI762S522T428+Q1cDcZICfukc6BrUpo04o3iRrS4WSlmI0ifxz58Dd
sSm54tyXL1smjjuN1sNH0QeASYx7hhs0zdsjZ5p0YMyaWYQcGR9EPaHZTW71eM4o
kvtt2zi+iPFbEMNnGiVMEuQQsXY/D8A=
-----END CERTIFICATE-----
Generated at Mon May 20 20:03:48 2024 by rpki-client on console-fra.rpki-client.org