Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/f1e5fe4f-72e7-3a39-a046-dd4f666c3204.roa
File:                     f1e5fe4f-72e7-3a39-a046-dd4f666c3204.roa (raw, json)
Hash identifier:          bG8Xcr5wNn5vOvqvWiI+I60ZRhcfdwV2j8CL18zgzHE=
Subject key identifier:   DE:73:AC:E0:77:B3:71:D2:8E:0D:5E:4B:26:BD:16:D9:55:5A:17:C0
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F432858473A5B96395E461C2359F02F00
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/f1e5fe4f-72e7-3a39-a046-dd4f666c3204.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     25899
IP address blocks:        67.59.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:96:39:5e:46:1c:23:59:f0:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=04cc06b5-9651-4cbe-8bad-cb26958729a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:cb:7f:f9:9f:fc:c4:ee:f4:07:60:4d:0f:
                    8c:3d:f9:d6:b8:fb:5f:96:24:45:9b:8b:54:62:1d:
                    08:c3:35:82:69:57:23:6c:34:3f:1b:a0:35:93:e4:
                    3f:48:d4:40:a2:ef:4f:7c:d6:9e:c4:53:03:d4:8c:
                    fe:3a:dc:eb:6f:08:f1:04:e6:35:e6:f8:7e:ae:2a:
                    1f:9b:79:75:31:3d:2e:7b:7b:dc:70:34:68:1a:2f:
                    65:71:66:bd:fa:06:cf:b0:07:d8:5a:ac:f2:05:92:
                    bf:51:ca:5b:eb:a7:ed:85:c6:e8:57:6b:46:f1:ff:
                    56:c3:3c:00:33:33:98:2c:12:62:3a:e0:68:f3:2a:
                    3a:c0:76:d3:3f:0d:a7:50:bd:3e:63:c1:bd:00:bb:
                    7b:e3:f6:0b:04:6f:74:aa:47:a8:5d:b1:93:cb:b6:
                    98:04:8c:8f:ce:2e:f9:42:ae:f7:b1:6f:e2:aa:f1:
                    03:e7:88:92:80:15:8c:26:21:fd:07:7c:88:98:2b:
                    af:40:46:22:c8:8c:5c:fd:7e:c1:84:2e:49:7d:7d:
                    17:12:ed:84:52:14:2a:b3:22:96:2a:eb:0f:b3:32:
                    00:a8:6e:d5:37:2c:d5:87:36:1e:19:7a:35:2d:76:
                    48:05:dc:7f:02:13:f4:e6:d2:23:e7:63:b2:0a:42:
                    00:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:73:AC:E0:77:B3:71:D2:8E:0D:5E:4B:26:BD:16:D9:55:5A:17:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/f1e5fe4f-72e7-3a39-a046-dd4f666c3204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e0:2e:ca:ee:e2:98:54:67:3f:2a:9d:18:51:a0:2d:ed:98:
         ba:62:7a:3c:45:04:8a:63:d4:fa:e1:c4:f4:ef:9e:5b:28:9c:
         37:b9:0f:94:45:40:b7:0b:03:ad:9c:c0:03:44:e3:da:6b:da:
         54:3f:82:f0:92:63:15:39:88:54:6d:97:4f:42:f5:91:51:64:
         5a:dc:53:1c:00:db:98:9d:78:de:a6:76:33:32:cb:3e:cb:3a:
         b9:ef:bc:ca:81:f0:7c:0a:54:48:87:3e:1f:63:8a:72:f7:ea:
         0a:eb:29:6f:f6:2a:26:20:cd:91:cf:ad:37:2e:62:e5:a3:a2:
         07:73:82:1f:b0:ce:70:6f:64:8e:06:c9:17:cd:a2:f6:68:f1:
         df:47:88:6a:7d:50:c6:82:c3:f4:8c:7f:a0:66:62:21:09:22:
         76:03:c9:ec:ec:e1:32:31:4a:00:91:fe:59:50:6d:89:73:a5:
         eb:6c:17:a9:82:f8:b0:bd:05:bd:98:9e:6c:f3:c8:e9:e4:94:
         ab:48:d1:7e:dc:02:f2:90:99:48:39:3c:1b:db:f2:f8:38:23:
         5a:35:bc:cc:03:6c:1f:80:55:23:44:90:4a:52:f7:4e:25:92:
         bc:dc:5a:40:23:9f:14:8d:5a:ae:16:65:46:40:ce:cd:df:3b:
         43:8f:56:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6W5Y5XkYcI1nwLwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ2NzJlYTYtZDFjNC00M2E5LWJlZTEtOGRhMTM1YWUz
ZmY0MB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
MDRjYzA2YjUtOTY1MS00Y2JlLThiYWQtY2IyNjk1ODcyOWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsDLf/mf/MTu9AdgTQ+MPfnWuPtfliRFm4tU
Yh0IwzWCaVcjbDQ/G6A1k+Q/SNRAou9PfNaexFMD1Iz+OtzrbwjxBOY15vh+riof
m3l1MT0ue3vccDRoGi9lcWa9+gbPsAfYWqzyBZK/Ucpb66fthcboV2tG8f9WwzwA
MzOYLBJiOuBo8yo6wHbTPw2nUL0+Y8G9ALt74/YLBG90qkeoXbGTy7aYBIyPzi75
Qq73sW/iqvED54iSgBWMJiH9B3yImCuvQEYiyIxc/X7BhC5JfX0XEu2EUhQqsyKW
KusPszIAqG7VNyzVhzYeGXo1LXZIBdx/AhP05tIj52OyCkIAuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN5zrOB3s3HSjg1eSya9FtlVWhfAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3
MmVhNi1kMWM0LTQzYTktYmVlMS04ZGExMzVhZTNmZjQvZjFlNWZlNGYtNzJlNy0z
YTM5LWEwNDYtZGQ0ZjY2NmMzMjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTQ2NzJlYTYtZDFjNC00M2E5LWJl
ZTEtOGRhMTM1YWUzZmY0L2U0NjcyZWE2LWQxYzQtNDNhOS1iZWUxLThkYTEzNWFl
M2ZmNC5jcmwwHwYDVR0jBBgwFoAUmE5B99/V+4Bg4x3qq/AKwG+0SlswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3MmVhNi1kMWM0LTQzYTktYmVlMS04ZGEx
MzVhZTNmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQztEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvgLsru4phUZz8qnRhRoC3tmLpiejxFBIpj1PrhxPTvnlsonDe5D5RF
QLcLA62cwANE49pr2lQ/gvCSYxU5iFRtl09C9ZFRZFrcUxwA25ideN6mdjMyyz7L
OrnvvMqB8HwKVEiHPh9jinL36grrKW/2KiYgzZHPrTcuYuWjogdzgh+wznBvZI4G
yRfNovZo8d9HiGp9UMaCw/SMf6BmYiEJInYDyezs4TIxSgCR/llQbYlzpetsF6mC
+LC9Bb2YnmzzyOnklKtI0X7cAvKQmUg5PBvb8vg4I1o1vMwDbB+AVSNEkEpS904l
krzcWkAjnxSNWq4WZUZAzs3fO0OPVis=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:01 2024 by rpki-client on console-fra.rpki-client.org