Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/8434c828-a03c-3904-a814-5cce3e24359a.roa
File:                     8434c828-a03c-3904-a814-5cce3e24359a.roa (raw, json)
Hash identifier:          a/q4LC8jlpwym0ICj+SNbK99MeFS1xsPZklysvR4fYc=
Subject key identifier:   6B:4F:43:38:A7:F8:B3:95:D7:70:13:6A:6B:D1:32:AD:C4:68:01:8B
Certificate issuer:       /CN=81565da9-aab9-45ca-b99c-0684053daa09
Certificate serial:       010D0C9F43285847E1A3CE3ADFE2CEE9417A5680
Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/8434c828-a03c-3904-a814-5cce3e24359a.roa
Signing time:             Thu 14 Nov 2024 23:06:53 +0000
ROA not before:           Thu 14 Nov 2024 23:06:53 +0000
ROA not after:            Wed 12 Feb 2025 23:06:53 +0000
asID:                     8987
IP address blocks:        149.64.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:a3:ce:3a:df:e2:ce:e9:41:7a:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09
        Validity
            Not Before: Nov 14 23:06:53 2024 GMT
            Not After : Feb 12 23:06:53 2025 GMT
        Subject: CN=6ff1e954-59a4-41e3-845f-5988950526a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:77:c3:ea:a4:c8:ee:61:ac:74:51:9c:cd:
                    dc:47:f6:0d:3d:df:ac:1e:12:b4:6c:c0:b5:b9:63:
                    0a:9e:fb:26:e0:3d:31:8f:0d:33:f8:b8:e6:21:55:
                    99:82:dc:61:1e:9b:56:01:b5:f2:35:5d:16:23:d8:
                    cf:b2:9d:20:22:e2:1b:22:f0:01:86:4b:32:8b:8d:
                    2d:3f:5a:62:c2:1e:04:79:13:0f:e6:18:49:61:0b:
                    e9:82:c9:ab:e5:4f:7f:d0:e7:4d:78:d0:81:33:db:
                    81:01:3b:3a:ab:e5:0a:b7:0c:c7:cc:8a:6f:b8:c0:
                    22:9e:ac:03:96:8f:bc:d5:e3:d9:2a:85:76:20:de:
                    e8:e3:74:a7:85:fe:5b:76:0a:9e:3b:82:3b:07:7a:
                    67:09:3b:da:c9:ed:a2:96:5a:3c:0b:fd:ae:f0:84:
                    38:5f:1e:3d:16:45:ac:71:90:33:94:63:f8:af:1e:
                    84:e3:c7:c2:29:96:c7:2f:49:68:30:88:87:bc:48:
                    cf:5c:c2:38:95:2e:d7:b6:88:33:a4:ef:3f:5e:fa:
                    42:08:52:5b:f1:b4:00:a5:dd:6d:93:c4:f0:ef:5b:
                    22:96:b4:64:6f:51:7c:63:2f:e7:bb:e7:24:67:db:
                    ab:f9:15:c2:a2:f7:55:3d:eb:12:73:35:f1:b5:f3:
                    20:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4F:43:38:A7:F8:B3:95:D7:70:13:6A:6B:D1:32:AD:C4:68:01:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/8434c828-a03c-3904-a814-5cce3e24359a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl

            X509v3 Authority Key Identifier:
                keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.64.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:d8:55:84:4f:3a:6f:69:ad:71:8a:e6:69:3c:fc:92:dc:f1:
         ae:af:e3:f0:54:92:e7:dd:c5:bd:9f:2c:6f:c6:47:d0:08:1d:
         46:86:91:19:84:90:00:02:d2:56:1d:15:37:41:a1:fc:60:0d:
         fb:d2:1f:0b:4b:d2:9a:2c:e9:cd:e3:16:47:bf:46:73:ba:77:
         82:88:16:8d:f7:af:06:08:de:2b:f8:0e:94:ed:9e:02:4b:b9:
         3d:44:6e:de:5d:ff:01:42:e8:53:f2:13:33:b8:54:95:42:f8:
         db:a3:27:dc:97:d2:b7:92:3a:24:e7:e8:b8:e2:3e:fd:45:0b:
         1f:de:22:6c:eb:a8:61:46:c9:23:76:ac:c7:dc:06:d7:d1:c3:
         53:f0:17:cc:52:13:89:e1:54:0c:d5:a6:7e:81:47:57:3d:d1:
         b7:6e:6b:f2:b3:5a:d9:ae:6e:27:fb:bb:c5:dd:9e:6b:1c:b7:
         70:e5:a3:44:26:57:96:89:4d:65:75:37:52:9c:04:05:cc:92:
         13:65:d7:e2:a1:64:98:08:a8:a4:89:c6:dc:52:9e:19:56:25:
         91:00:e4:22:6c:30:5e:04:a4:ea:d2:21:b9:c6:bd:2f:33:51:
         be:b2:92:94:2a:a3:ef:3b:f4:c8:ff:43:2e:e9:21:71:48:3b:
         35:5c:e4:29
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfho8463+LO6UF6VoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh
YTA5MB4XDTI0MTExNDIzMDY1M1oXDTI1MDIxMjIzMDY1M1owLzEtMCsGA1UEAxMk
NmZmMWU5NTQtNTlhNC00MWUzLTg0NWYtNTk4ODk1MDUyNmE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRN3w+qkyO5hrHRRnM3cR/YNPd+sHhK0bMC1
uWMKnvsm4D0xjw0z+LjmIVWZgtxhHptWAbXyNV0WI9jPsp0gIuIbIvABhksyi40t
P1piwh4EeRMP5hhJYQvpgsmr5U9/0OdNeNCBM9uBATs6q+UKtwzHzIpvuMAinqwD
lo+81ePZKoV2IN7o43Snhf5bdgqeO4I7B3pnCTvaye2illo8C/2u8IQ4Xx49FkWs
cZAzlGP4rx6E48fCKZbHL0loMIiHvEjPXMI4lS7XtogzpO8/XvpCCFJb8bQApd1t
k8Tw71silrRkb1F8Yy/nu+ckZ9ur+RXCovdVPesSczXxtfMgOQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGtPQzin+LOV13ATamvRMq3EaAGLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2
NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvODQzNGM4MjgtYTAzYy0z
OTA0LWE4MTQtNWNjZTNlMjQzNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5
OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk
YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0
MDUzZGFhMDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlUAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASdhVhE86b2mtcYrmaTz8ktzxrq/j8FSS593FvZ8sb8ZH0AgdRoaRGYSQ
AALSVh0VN0Gh/GAN+9IfC0vSmizpzeMWR79Gc7p3gogWjfevBgjeK/gOlO2eAku5
PURu3l3/AULoU/ITM7hUlUL426Mn3JfSt5I6JOfouOI+/UULH94ibOuoYUbJI3as
x9wG19HDU/AXzFITieFUDNWmfoFHVz3Rt25r8rNa2a5uJ/u7xd2eaxy3cOWjRCZX
lolNZXU3UpwEBcySE2XX4qFkmAiopInG3FKeGVYlkQDkImwwXgSk6tIhuca9LzNR
vrKSlCqj7zv0yP9DLukhcUg7NVzkKQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:23 2024 by rpki-client on console-ams.rpki-client.org