Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/297be4aa-7286-3b85-82e3-0b42a3c3ca7b.roa
File:                     297be4aa-7286-3b85-82e3-0b42a3c3ca7b.roa (raw, json)
Hash identifier:          sCVzUXjrElmnfNs6HWxEn+YJCH2cxEIgiG88MC7mMBY=
Subject key identifier:   BF:08:A4:05:DA:78:42:15:62:56:04:58:C7:6C:31:C4:21:CD:CE:FB
Certificate issuer:       /CN=5294026e-22fb-4d13-b040-a0d74302e57e
Certificate serial:       010D0C9F432858473095EC721B7A887EF0C821A0
Authority key identifier: 01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/297be4aa-7286-3b85-82e3-0b42a3c3ca7b.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     14618
IP address blocks:        69.187.64.0/24 maxlen: 24
                          69.187.69.0/24 maxlen: 24
                          69.187.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:ec:72:1b:7a:88:7e:f0:c8:21:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5294026e-22fb-4d13-b040-a0d74302e57e
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=420b2c92-7515-48dd-a9f7-b7c60b4d26b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:73:02:53:19:07:06:89:e6:7e:a4:bd:71:da:
                    36:20:5f:46:c7:18:ec:83:44:c7:38:4d:83:3a:de:
                    f1:e6:91:ae:1e:5e:48:b0:0b:e9:61:1d:1c:a1:0b:
                    47:b3:93:06:70:d9:e9:21:55:da:c2:af:6c:4c:4d:
                    02:07:72:b0:21:0b:68:68:dd:4c:97:df:85:60:51:
                    b4:a1:c5:c3:41:54:20:cf:2b:57:56:0c:04:11:b6:
                    e4:cf:24:f8:79:e1:0c:cb:03:7c:4e:23:dc:cb:d2:
                    b4:0c:ce:f6:35:a9:2e:ec:3f:76:cb:9d:64:45:de:
                    50:b6:27:0f:09:3e:b1:81:39:49:a1:c6:c1:e0:c2:
                    27:7a:2b:eb:e4:25:05:d6:91:85:56:63:c3:94:88:
                    fb:75:2d:5a:28:ca:47:23:73:a1:dc:a9:d5:ff:bd:
                    3f:da:25:b3:a4:82:32:af:44:b5:e6:15:8d:c4:75:
                    d3:9a:97:1b:b6:dd:71:3d:4f:ab:e8:03:4f:9a:4c:
                    5f:31:6a:f1:12:c9:42:d6:be:01:70:ac:1d:7d:1b:
                    63:d3:e8:b4:97:89:ff:81:58:1b:89:ca:fa:14:16:
                    9b:5b:b7:44:fa:c4:8d:79:c4:23:35:45:b2:4d:85:
                    62:c5:1a:c7:10:90:0a:4a:31:be:d6:2f:46:d5:ee:
                    c5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:08:A4:05:DA:78:42:15:62:56:04:58:C7:6C:31:C4:21:CD:CE:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/297be4aa-7286-3b85-82e3-0b42a3c3ca7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl

            X509v3 Authority Key Identifier:
                keyid:01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.187.64.0/24
                  69.187.69.0/24
                  69.187.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:25:e8:2d:b4:2e:8b:a3:51:e3:a1:6a:17:6a:60:b5:78:51:
         29:b4:d1:53:92:87:c8:0b:13:cd:49:98:9c:4e:af:f9:a8:95:
         8d:d2:8c:99:eb:b8:ee:82:5e:a8:36:ec:7b:7f:94:1c:7f:f4:
         c9:86:1d:07:cd:99:5e:bc:57:16:e0:ec:42:6c:35:17:bd:f9:
         1b:5e:da:60:6d:82:4d:60:78:03:92:30:88:25:26:2a:e3:a3:
         8e:bb:7a:70:4f:60:af:3e:1e:9f:28:fb:4f:85:80:fa:e1:13:
         09:a7:fe:74:5a:3f:4c:c7:13:f5:a3:0d:33:6a:47:f5:5e:39:
         d1:77:23:c8:00:89:eb:4c:57:2b:17:c5:b0:ac:27:e0:91:4f:
         bd:a5:b1:96:c6:99:52:82:57:3f:73:18:ee:52:0b:c2:77:fa:
         55:bc:f9:b1:bd:97:aa:c9:4e:82:d1:94:ae:6a:aa:eb:a4:7b:
         4c:d5:25:fc:d9:50:e8:63:0e:f1:0f:69:07:33:c4:3b:c1:c3:
         3f:2a:85:2f:90:10:74:bb:c1:c7:b0:05:ff:da:f5:f6:61:da:
         6b:fd:77:ac:3f:f2:a3:2a:04:03:9c:49:54:f1:a8:bd:2e:fb:
         d4:fb:53:1d:2d:34:0d:ff:95:28:82:79:53:4b:e8:0d:07:7b:
         5b:52:a3:53
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEcwlexyG3qIfvDIIaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTI5NDAyNmUtMjJmYi00ZDEzLWIwNDAtYTBkNzQzMDJl
NTdlMB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk
NDIwYjJjOTItNzUxNS00OGRkLWE5ZjctYjdjNjBiNGQyNmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3MCUxkHBonmfqS9cdo2IF9Gxxjsg0THOE2D
Ot7x5pGuHl5IsAvpYR0coQtHs5MGcNnpIVXawq9sTE0CB3KwIQtoaN1Ml9+FYFG0
ocXDQVQgzytXVgwEEbbkzyT4eeEMywN8TiPcy9K0DM72Naku7D92y51kRd5QticP
CT6xgTlJocbB4MIneivr5CUF1pGFVmPDlIj7dS1aKMpHI3Oh3KnV/70/2iWzpIIy
r0S15hWNxHXTmpcbtt1xPU+r6ANPmkxfMWrxEslC1r4BcKwdfRtj0+i0l4n/gVgb
icr6FBabW7dE+sSNecQjNUWyTYVixRrHEJAKSjG+1i9G1e7FxQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFL8IpAXaeEIVYlYEWMdsMcQhzc77MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81Mjk0
MDI2ZS0yMmZiLTRkMTMtYjA0MC1hMGQ3NDMwMmU1N2UvMjk3YmU0YWEtNzI4Ni0z
Yjg1LTgyZTMtMGI0MmEzYzNjYTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTI5NDAyNmUtMjJmYi00ZDEzLWIw
NDAtYTBkNzQzMDJlNTdlLzUyOTQwMjZlLTIyZmItNGQxMy1iMDQwLWEwZDc0MzAy
ZTU3ZS5jcmwwHwYDVR0jBBgwFoAUAZqCpLSr3NqeNZ9acrsak1mXe8YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81Mjk0MDI2ZS0yMmZiLTRkMTMtYjA0MC1hMGQ3
NDMwMmU1N2UuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQARbtAAwQA
RbtFAwQARbtHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAKgl6C20LoujUeOhahdqYLV4USm00VOSh8gLE81J
mJxOr/molY3SjJnruO6CXqg27Ht/lBx/9MmGHQfNmV68Vxbg7EJsNRe9+Rte2mBt
gk1geAOSMIglJirjo467enBPYK8+Hp8o+0+FgPrhEwmn/nRaP0zHE/WjDTNqR/Ve
OdF3I8gAietMVysXxbCsJ+CRT72lsZbGmVKCVz9zGO5SC8J3+lW8+bG9l6rJToLR
lK5qquuke0zVJfzZUOhjDvEPaQczxDvBwz8qhS+QEHS7wcewBf/a9fZh2mv9d6w/
8qMqBAOcSVTxqL0u+9T7Ux0tNA3/lSiCeVNL6A0He1tSo1M=
-----END CERTIFICATE-----
Generated at Sun Nov 24 20:11:42 2024 by rpki-client on console-ams.rpki-client.org