Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/6c64e825-16bf-3331-8877-9a759754bd51.roa
File:                     6c64e825-16bf-3331-8877-9a759754bd51.roa (raw, json)
Hash identifier:          9attnvoSbXzHDWMKJPmZB/ePRrocCQIglqf3dM/CG/w=
Subject key identifier:   86:A0:9D:E8:71:F1:FD:C4:5B:9F:85:01:8F:B0:E7:51:DA:92:BA:53
Certificate issuer:       /CN=49b876c3-2c45-48fd-9b06-9930edf118fa
Certificate serial:       010D0C9F432858472E47C63147B74D442CD5B500
Authority key identifier: EE:E2:29:5C:7C:0B:88:A3:24:EB:14:04:AB:80:4F:A1:52:41:83:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/6c64e825-16bf-3331-8877-9a759754bd51.roa
Signing time:             Wed 11 Sep 2024 17:11:45 +0000
ROA not before:           Wed 11 Sep 2024 17:11:45 +0000
ROA not after:            Tue 10 Dec 2024 18:11:45 +0000
asID:                     46626
IP address blocks:        142.20.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/49b876c3-2c45-48fd-9b06-9930edf118fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/49b876c3-2c45-48fd-9b06-9930edf118fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2e:47:c6:31:47:b7:4d:44:2c:d5:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49b876c3-2c45-48fd-9b06-9930edf118fa
        Validity
            Not Before: Sep 11 17:11:45 2024 GMT
            Not After : Dec 10 18:11:45 2024 GMT
        Subject: CN=76a7dedb-faef-4c35-a4a1-f0de161f3dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:47:c7:ab:a5:78:2c:91:2c:66:76:2e:90:
                    99:5b:2d:55:ee:2f:da:4a:68:b0:bf:2a:ca:5b:21:
                    3d:5a:81:31:99:97:05:19:b2:e3:ba:ea:2c:79:77:
                    6f:c8:57:23:f6:38:5a:73:74:0c:3c:6b:86:8e:3f:
                    07:d6:6e:81:7b:c6:a8:0c:75:38:9f:53:cb:e8:4d:
                    e3:fa:3f:7b:7a:37:9f:ae:da:80:0f:04:4c:fd:2d:
                    aa:ad:0f:09:d2:a8:f0:dd:c3:48:7a:ec:19:7e:e9:
                    36:b2:35:9f:d7:14:f0:18:e9:05:29:30:bd:24:5d:
                    89:79:76:3e:fa:47:f1:08:0e:ce:e3:9d:44:26:51:
                    ab:af:5d:20:b1:42:40:9d:dd:82:4f:85:46:0e:b9:
                    d4:7b:8d:7b:c5:f8:b2:f1:55:e8:5f:16:98:5e:a4:
                    d8:8b:c6:fd:7c:fe:60:20:ff:5b:4b:b5:39:5d:52:
                    98:10:84:b3:c4:7f:32:16:fc:7e:c9:88:23:27:e8:
                    75:15:d3:7a:e2:7c:2e:05:20:ca:08:f1:3a:a8:1c:
                    1d:1d:76:78:de:52:92:7c:85:d6:c4:28:54:5b:19:
                    06:f7:32:01:41:cb:1a:73:9f:79:a6:81:66:67:8d:
                    1b:f8:72:87:bd:4f:6a:7d:95:b2:34:94:de:1a:08:
                    c2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A0:9D:E8:71:F1:FD:C4:5B:9F:85:01:8F:B0:E7:51:DA:92:BA:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/6c64e825-16bf-3331-8877-9a759754bd51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/49b876c3-2c45-48fd-9b06-9930edf118fa.crl

            X509v3 Authority Key Identifier:
                keyid:EE:E2:29:5C:7C:0B:88:A3:24:EB:14:04:AB:80:4F:A1:52:41:83:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.20.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9c:b1:7d:6c:93:1e:5d:40:06:17:99:85:dc:03:5b:f7:4d:
         8c:d8:61:b3:7b:67:28:8a:a3:db:20:cd:98:c2:8e:a8:4a:93:
         f1:eb:fb:48:b6:90:89:90:fc:b6:ad:b0:47:fb:0c:0d:6f:bf:
         31:75:8d:71:75:64:8f:77:60:4b:c0:2a:cf:b6:97:b6:f5:02:
         39:4f:8a:64:83:f2:8c:31:26:31:3f:44:eb:08:ed:a0:03:33:
         5e:7d:3b:e8:38:1a:d7:ef:bd:50:78:8a:39:7d:cd:af:9c:d3:
         b8:18:3b:83:90:6b:fe:91:ab:5a:fc:49:6e:c0:ac:14:ae:16:
         b1:5d:74:62:3f:6d:d2:bb:c9:05:db:70:bd:85:94:90:d4:24:
         18:13:29:8c:de:cf:b1:9f:df:e2:6b:80:a2:8a:4a:ab:91:ca:
         ba:db:ec:e3:9a:f2:10:85:26:2c:5d:63:1c:3a:c6:eb:98:30:
         d3:b1:fc:df:e2:30:d9:14:34:e3:b2:d0:55:8a:80:aa:8c:82:
         25:ca:9a:5e:c7:33:bf:11:64:86:2f:33:f0:57:09:77:f7:a5:
         71:c2:c0:46:42:42:cc:1c:f5:03:1a:e4:61:7d:ca:80:9c:9b:
         cd:41:90:45:c7:6f:5c:93:29:c6:04:45:b4:76:56:ad:90:7b:
         e3:04:22:8e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcuR8YxR7dNRCzVtQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliODc2YzMtMmM0NS00OGZkLTliMDYtOTkzMGVkZjEx
OGZhMB4XDTI0MDkxMTE3MTE0NVoXDTI0MTIxMDE4MTE0NVowLzEtMCsGA1UEAxMk
NzZhN2RlZGItZmFlZi00YzM1LWE0YTEtZjBkZTE2MWYzZGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk9Hx6uleCyRLGZ2LpCZWy1V7i/aSmiwvyrK
WyE9WoExmZcFGbLjuuoseXdvyFcj9jhac3QMPGuGjj8H1m6Be8aoDHU4n1PL6E3j
+j97ejefrtqADwRM/S2qrQ8J0qjw3cNIeuwZfuk2sjWf1xTwGOkFKTC9JF2JeXY+
+kfxCA7O451EJlGrr10gsUJAnd2CT4VGDrnUe417xfiy8VXoXxaYXqTYi8b9fP5g
IP9bS7U5XVKYEISzxH8yFvx+yYgjJ+h1FdN64nwuBSDKCPE6qBwdHXZ43lKSfIXW
xChUWxkG9zIBQcsac595poFmZ40b+HKHvU9qfZWyNJTeGgjCIQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIagnehx8f3EW5+FAY+w51HakrpTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80OWI4
NzZjMy0yYzQ1LTQ4ZmQtOWIwNi05OTMwZWRmMTE4ZmEvNmM2NGU4MjUtMTZiZi0z
MzMxLTg4NzctOWE3NTk3NTRiZDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDliODc2YzMtMmM0NS00OGZkLTli
MDYtOTkzMGVkZjExOGZhLzQ5Yjg3NmMzLTJjNDUtNDhmZC05YjA2LTk5MzBlZGYx
MThmYS5jcmwwHwYDVR0jBBgwFoAU7uIpXHwLiKMk6xQEq4BPoVJBg2kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80OWI4NzZjMy0yYzQ1LTQ4ZmQtOWIwNi05OTMw
ZWRmMTE4ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjhQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACpyxfWyTHl1ABheZhdwDW/dNjNhhs3tnKIqj2yDNmMKOqEqT8ev7SLaQ
iZD8tq2wR/sMDW+/MXWNcXVkj3dgS8Aqz7aXtvUCOU+KZIPyjDEmMT9E6wjtoAMz
Xn076Dga1++9UHiKOX3Nr5zTuBg7g5Br/pGrWvxJbsCsFK4WsV10Yj9t0rvJBdtw
vYWUkNQkGBMpjN7PsZ/f4muAoopKq5HKutvs45ryEIUmLF1jHDrG65gw07H83+Iw
2RQ047LQVYqAqoyCJcqaXsczvxFkhi8z8FcJd/elccLARkJCzBz1AxrkYX3KgJyb
zUGQRcdvXJMpxgRFtHZWrZB74wQijg==
-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:28 2024 by rpki-client on console-ams.rpki-client.org