Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/60e5c33d-6cb2-351b-8aad-a4e337c20093.roa
File:                     60e5c33d-6cb2-351b-8aad-a4e337c20093.roa (raw, json)
Hash identifier:          5x+Xt6yQuiDEPP2M3F7j1rd6gYrSc3wRUeybMsGFtNs=
Subject key identifier:   27:1A:F9:33:CE:44:BE:38:7B:50:F8:49:D2:B0:1F:AB:6C:31:6A:5C
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858457A488A79D6E36577FDDE9D00
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/60e5c33d-6cb2-351b-8aad-a4e337c20093.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     64533
IP address blocks:        65.51.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:8a:79:d6:e3:65:77:fd:de:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=48735f93-4f0e-4c56-bbad-2e6fd383948c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:35:c6:48:a7:97:10:64:7c:be:86:6d:35:0a:
                    b3:f4:8a:32:39:86:a2:61:11:39:88:6e:44:16:c3:
                    8e:28:c2:d6:7b:f2:8b:1f:77:fb:8b:10:15:2f:fe:
                    f6:f0:c8:86:80:94:5b:83:48:f8:2a:39:4d:dc:7a:
                    b6:c7:b6:a5:c4:a8:56:ac:d2:20:c3:78:06:33:cd:
                    f6:32:ad:0b:ea:ab:4e:20:6a:61:e0:11:14:7c:26:
                    c3:93:e0:59:25:0d:1e:77:e9:aa:dc:8d:66:15:63:
                    f4:14:99:75:b8:53:78:3a:46:0e:86:cb:72:33:85:
                    ae:08:59:78:b5:2b:3e:d9:9f:10:5d:87:b3:87:db:
                    df:ba:c2:a6:91:dd:f1:0a:9f:1a:18:df:e4:a8:67:
                    c5:e9:bc:de:92:79:60:3d:36:0f:38:62:69:11:f3:
                    af:50:af:12:57:db:18:93:07:7b:29:c5:db:c1:bc:
                    11:04:ed:93:fd:0a:58:19:f7:3f:33:b9:c8:5d:47:
                    10:d9:ff:e9:68:05:f2:02:ca:ea:94:b6:fc:f1:e3:
                    79:b9:18:00:cc:1d:e8:95:2b:5e:5c:04:58:e3:81:
                    e6:8c:9c:b4:e9:7d:06:9e:95:f6:c5:ef:5c:90:4a:
                    8d:75:6f:da:10:b2:f1:67:66:94:88:81:d3:93:57:
                    5e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1A:F9:33:CE:44:BE:38:7B:50:F8:49:D2:B0:1F:AB:6C:31:6A:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/60e5c33d-6cb2-351b-8aad-a4e337c20093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d5:75:2c:c9:47:6c:60:5a:ba:68:d4:5d:c7:71:0e:72:20:
         c0:a2:ab:54:94:dc:01:a5:e2:f7:37:be:1b:8c:ad:72:f1:f2:
         e1:e7:84:09:7e:c3:db:15:c0:7f:42:d6:7d:c9:85:e8:3b:a3:
         69:23:d3:e9:c1:49:a0:3b:d8:b6:57:43:03:dc:da:1c:60:2e:
         38:c0:6b:e7:2f:c5:3f:47:7e:ea:6d:b9:2a:65:ac:4a:d0:61:
         d7:3a:03:35:8e:62:cb:94:36:da:36:0f:00:e6:ac:15:2a:56:
         b4:95:c3:36:b0:a8:26:e3:0c:45:69:45:55:fe:69:ee:ce:b2:
         58:0e:b3:b4:03:24:33:59:96:f0:6a:86:f4:c1:a2:e6:db:16:
         67:fb:6e:a7:1e:f6:19:4e:07:d3:03:60:ca:1d:d6:6b:23:8a:
         ab:81:5b:17:ec:28:a2:56:fb:51:37:7a:51:ae:6d:65:73:6c:
         60:fd:73:56:19:4f:bd:9f:e0:67:69:a3:87:c0:52:a1:bb:85:
         cd:47:04:ec:ee:1b:31:2f:33:55:41:ec:78:67:14:a9:5c:11:
         ae:e4:83:5c:47:aa:bb:8a:97:bd:60:f4:ca:e2:dc:bc:b5:09:
         d5:3c:e7:f1:aa:0e:e8:c3:ea:4b:e4:58:b1:49:c2:90:24:07:
         59:70:e4:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV6SIp51uNld/3enQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI0MDQwODEzMDAzNFoXDTI0MDcwNzEzMDAzNFowLzEtMCsGA1UEAxMk
NDg3MzVmOTMtNGYwZS00YzU2LWJiYWQtMmU2ZmQzODM5NDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjXGSKeXEGR8voZtNQqz9IoyOYaiYRE5iG5E
FsOOKMLWe/KLH3f7ixAVL/728MiGgJRbg0j4KjlN3Hq2x7alxKhWrNIgw3gGM832
Mq0L6qtOIGph4BEUfCbDk+BZJQ0ed+mq3I1mFWP0FJl1uFN4OkYOhstyM4WuCFl4
tSs+2Z8QXYezh9vfusKmkd3xCp8aGN/kqGfF6bzeknlgPTYPOGJpEfOvUK8SV9sY
kwd7KcXbwbwRBO2T/QpYGfc/M7nIXUcQ2f/paAXyAsrqlLb88eN5uRgAzB3olSte
XARY44HmjJy06X0GnpX2xe9ckEqNdW/aELLxZ2aUiIHTk1deeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCca+TPORL44e1D4SdKwH6tsMWpcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvNjBlNWMzM2QtNmNiMi0z
NTFiLThhYWQtYTRlMzM3YzIwMDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTPCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDVdSzJR2xgWrpo1F3HcQ5yIMCiq1SU3AGl4vc3vhuMrXLx8uHnhAl+
w9sVwH9C1n3Jheg7o2kj0+nBSaA72LZXQwPc2hxgLjjAa+cvxT9HfuptuSplrErQ
Ydc6AzWOYsuUNto2DwDmrBUqVrSVwzawqCbjDEVpRVX+ae7OslgOs7QDJDNZlvBq
hvTBoubbFmf7bqce9hlOB9MDYMod1msjiquBWxfsKKJW+1E3elGubWVzbGD9c1YZ
T72f4Gdpo4fAUqG7hc1HBOzuGzEvM1VB7HhnFKlcEa7kg1xHqruKl71g9Mri3Ly1
CdU85/GqDujD6kvkWLFJwpAkB1lw5Pg=
-----END CERTIFICATE-----
Generated at Tue May 7 07:04:40 2024 by rpki-client on console-fra.rpki-client.org