Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/8766da4d-065f-3c8d-894f-b0a8cad5c77f.roa
File:                     8766da4d-065f-3c8d-894f-b0a8cad5c77f.roa (raw, json)
Hash identifier:          99dd4d02MkQESKDon3GIb5MMuEt0Mus2ftwnfk4uu5g=
Subject key identifier:   FB:86:5C:58:6E:6F:35:2C:12:09:92:3A:2E:9C:96:2F:93:86:90:76
Certificate issuer:       /CN=0be9634a-0674-471a-bb54-7866e12ded7a
Certificate serial:       010D0C9F432858487759944B6D036D42AD63EE80
Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/8766da4d-065f-3c8d-894f-b0a8cad5c77f.roa
Signing time:             Tue 07 Jan 2025 14:08:34 +0000
ROA not before:           Tue 07 Jan 2025 14:08:34 +0000
ROA not after:            Mon 07 Apr 2025 13:08:34 +0000
asID:                     16509
IP address blocks:        64.42.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:59:94:4b:6d:03:6d:42:ad:63:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a
        Validity
            Not Before: Jan  7 14:08:34 2025 GMT
            Not After : Apr  7 13:08:34 2025 GMT
        Subject: CN=3c1a57e8-ca3d-4cf6-952f-61308362464c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:6e:3d:5a:52:dd:78:3a:50:f2:08:a3:0c:
                    5b:c1:2e:0b:50:70:55:a9:05:9d:b0:9f:b8:47:ce:
                    5c:3a:9d:f8:a3:45:e6:c9:d7:03:fb:31:8a:28:5f:
                    d2:56:11:5b:af:20:17:a2:8e:8b:1e:42:f7:25:69:
                    07:16:d6:97:81:3e:59:fe:21:e0:91:15:08:c7:fc:
                    fa:9c:01:78:c8:d1:89:d9:ee:81:70:87:c8:24:84:
                    df:fb:30:f7:4e:0b:8e:2a:a3:2c:53:51:cb:35:09:
                    2f:e8:b7:19:cd:3f:ae:ac:78:c5:13:b3:4d:0e:5b:
                    04:e8:d1:bc:61:06:68:99:8c:5d:6f:84:ef:cb:32:
                    68:28:13:36:e4:62:42:e1:71:ff:9b:05:c9:da:70:
                    41:5b:0c:c8:38:1d:7d:24:83:0f:93:9a:ca:07:48:
                    78:33:e8:d5:1a:a9:d0:3b:78:d3:2b:c9:a0:19:18:
                    1c:e6:b2:e3:f6:d4:31:ba:22:b9:e3:8d:74:e6:58:
                    51:87:8a:b6:a5:b1:30:44:0e:c2:e0:8d:08:a9:a9:
                    b6:81:85:d6:f7:ce:f9:5e:85:f2:6a:4b:08:0d:8c:
                    bd:92:a6:26:52:6d:25:4d:4a:5c:ec:6d:93:46:4d:
                    93:56:d5:f3:83:b1:37:58:b1:59:9e:3f:f2:f2:3a:
                    23:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:86:5C:58:6E:6F:35:2C:12:09:92:3A:2E:9C:96:2F:93:86:90:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/8766da4d-065f-3c8d-894f-b0a8cad5c77f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl

            X509v3 Authority Key Identifier:
                keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.42.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:06:a9:d7:4b:45:d4:06:7d:f7:32:4f:3c:29:33:17:d2:03:
         8c:70:89:c8:85:11:54:a5:2a:2b:e0:88:f8:63:ba:20:72:e5:
         3c:73:5f:dd:05:e2:62:fc:89:1b:cd:cc:2b:39:5f:65:00:33:
         89:aa:07:b0:dd:3d:84:ba:94:ff:25:9d:65:dd:4e:24:f1:e9:
         a5:59:a4:f0:96:a8:e3:0f:d4:61:63:aa:e0:7c:fc:89:e6:f2:
         c7:7f:6a:bd:8b:b5:91:08:b9:19:2f:3d:a3:68:66:4f:f9:09:
         1a:c3:93:fe:48:39:a9:37:41:0c:aa:53:d2:8b:e7:46:23:47:
         34:a8:bf:39:f0:13:86:4b:35:c0:2a:0e:3a:7c:9c:70:fd:72:
         9f:8e:c0:29:ec:fc:ab:96:db:fb:59:97:29:ca:36:cc:78:b6:
         58:87:78:c4:6a:31:56:c7:1e:1e:19:96:95:a3:5f:d3:3b:32:
         73:61:a2:dc:93:be:be:84:9e:25:00:da:78:5e:5e:38:8b:0a:
         37:d0:56:16:08:16:9b:80:28:e0:cd:9d:51:ab:a6:90:93:71:
         10:fd:10:03:d8:1f:9e:02:c7:8d:80:e2:33:12:a0:e8:58:9a:
         44:ef:60:a9:2f:ec:00:66:10:a0:b0:19:bf:e5:86:f8:e1:7c:
         82:8a:cc:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3WZRLbQNtQq1j7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGJlOTYzNGEtMDY3NC00NzFhLWJiNTQtNzg2NmUxMmRl
ZDdhMB4XDTI1MDEwNzE0MDgzNFoXDTI1MDQwNzEzMDgzNFowLzEtMCsGA1UEAxMk
M2MxYTU3ZTgtY2EzZC00Y2Y2LTk1MmYtNjEzMDgzNjI0NjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/tuPVpS3Xg6UPIIowxbwS4LUHBVqQWdsJ+4
R85cOp34o0XmydcD+zGKKF/SVhFbryAXoo6LHkL3JWkHFtaXgT5Z/iHgkRUIx/z6
nAF4yNGJ2e6BcIfIJITf+zD3TguOKqMsU1HLNQkv6LcZzT+urHjFE7NNDlsE6NG8
YQZomYxdb4TvyzJoKBM25GJC4XH/mwXJ2nBBWwzIOB19JIMPk5rKB0h4M+jVGqnQ
O3jTK8mgGRgc5rLj9tQxuiK544105lhRh4q2pbEwRA7C4I0Iqam2gYXW9875XoXy
aksIDYy9kqYmUm0lTUpc7G2TRk2TVtXzg7E3WLFZnj/y8jojxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPuGXFhubzUsEgmSOi6cli+ThpB2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5
NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2ZTEyZGVkN2EvODc2NmRhNGQtMDY1Zi0z
YzhkLTg5NGYtYjBhOGNhZDVjNzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGJlOTYzNGEtMDY3NC00NzFhLWJi
NTQtNzg2NmUxMmRlZDdhLzBiZTk2MzRhLTA2NzQtNDcxYS1iYjU0LTc4NjZlMTJk
ZWQ3YS5jcmwwHwYDVR0jBBgwFoAUmcJzE2fDRji36wpv3V7puIFI97EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2
ZTEyZGVkN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCq8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC4GqddLRdQGffcyTzwpMxfSA4xwiciFEVSlKivgiPhjuiBy5TxzX90F
4mL8iRvNzCs5X2UAM4mqB7DdPYS6lP8lnWXdTiTx6aVZpPCWqOMP1GFjquB8/Inm
8sd/ar2LtZEIuRkvPaNoZk/5CRrDk/5IOak3QQyqU9KL50YjRzSovznwE4ZLNcAq
Djp8nHD9cp+OwCns/KuW2/tZlynKNsx4tliHeMRqMVbHHh4ZlpWjX9M7MnNhotyT
vr6EniUA2nheXjiLCjfQVhYIFpuAKODNnVGrppCTcRD9EAPYH54Cx42A4jMSoOhY
mkTvYKkv7ABmEKCwGb/lhvjhfIKKzEY=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:00:11 2025 by rpki-client