Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/258c1b4d-b1b5-37e7-b00d-dd7b1eda6175.roa
File:                     258c1b4d-b1b5-37e7-b00d-dd7b1eda6175.roa (raw, json)
Hash identifier:          2fxnkXw/eTMVlLjpium++6ZMwe0kooKgXpwh8UUBZNY=
Subject key identifier:   36:99:AF:1F:6A:03:B9:02:E9:80:72:99:A9:F9:F3:6B:DD:E5:D0:EB
Certificate issuer:       /CN=c6e1ed9d-801c-41b9-aa56-1da8ff79a65a
Certificate serial:       010D0C9F43285845777DBFA2C88651F988A96180
Authority key identifier: 96:95:C3:C2:BB:71:AF:28:9F:BE:56:B6:8A:7F:25:C5:47:CC:AD:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/258c1b4d-b1b5-37e7-b00d-dd7b1eda6175.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     16509
IP address blocks:        64.112.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:bf:a2:c8:86:51:f9:88:a9:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1ed9d-801c-41b9-aa56-1da8ff79a65a
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=7e9dbc77-e2ea-4781-933a-9f882ec6df3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d9:b1:f6:9f:8c:d8:5c:e3:d5:83:82:2e:71:
                    35:ec:44:04:5d:a9:4e:f6:b9:83:21:39:ef:b9:73:
                    54:63:a5:43:dd:d4:b9:64:eb:5e:18:c4:ac:34:c2:
                    2f:fc:b3:35:a3:0e:2a:2c:01:3d:3c:ff:7e:9e:c8:
                    61:40:33:97:3b:68:ec:ab:ed:f0:55:8e:01:49:81:
                    68:3b:ec:73:33:80:8f:d0:fc:47:b7:b6:60:1f:f6:
                    8d:0e:f7:2a:59:85:83:23:b9:f0:11:ef:62:e0:37:
                    05:fd:c1:0b:7a:27:27:63:80:4d:77:8b:86:14:03:
                    7e:80:6b:b3:ff:9d:06:1e:f6:0c:ec:ee:89:4c:e6:
                    45:e3:1b:4d:0c:00:40:89:d9:dc:84:77:82:df:95:
                    c5:a4:2b:e0:6c:1f:c4:7a:aa:95:7c:c3:c3:bf:c4:
                    b1:70:88:89:23:80:71:ce:88:27:d6:9e:7d:c8:18:
                    af:e3:e4:d7:68:47:2b:4d:85:13:89:71:2c:c8:a6:
                    1f:be:3f:00:a6:65:3d:d2:29:ca:a1:03:4c:16:ab:
                    75:40:0d:bd:61:72:b5:b9:1a:9d:e6:e8:3e:d5:40:
                    fe:94:71:7a:e9:37:db:5d:84:65:1e:7e:08:5e:ae:
                    5b:a9:c9:9d:c0:c9:e8:44:a2:65:68:5f:22:1c:a9:
                    01:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:99:AF:1F:6A:03:B9:02:E9:80:72:99:A9:F9:F3:6B:DD:E5:D0:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/258c1b4d-b1b5-37e7-b00d-dd7b1eda6175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.crl

            X509v3 Authority Key Identifier:
                keyid:96:95:C3:C2:BB:71:AF:28:9F:BE:56:B6:8A:7F:25:C5:47:CC:AD:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:1a:32:78:ce:fc:41:36:bc:5b:69:0d:6b:2f:41:ba:f0:e1:
         26:03:31:86:63:65:84:1c:89:93:5c:55:61:96:1d:8d:1c:71:
         5a:94:bb:a2:d3:ea:52:b5:3a:4d:a6:57:e2:bf:b4:ec:89:b2:
         4c:7c:2f:ef:c4:b8:57:48:c4:94:10:ab:da:4a:e6:62:95:74:
         90:18:48:95:7d:e5:f1:47:ba:22:6b:aa:16:c5:1f:5c:d6:07:
         52:03:32:29:fc:10:6b:fa:f1:a8:28:0f:2c:0c:6f:d8:ea:cb:
         c9:3a:f4:d8:77:b0:5d:44:e3:34:ba:3b:53:16:c9:02:ed:dd:
         74:94:36:7a:44:28:7c:c8:cc:0d:98:65:fc:86:16:a3:64:48:
         f4:46:eb:b0:1b:fd:bf:4d:28:7d:f0:8d:10:6f:ff:df:6b:0f:
         9d:97:d2:ee:bc:61:57:e0:14:2c:b0:e5:2b:ef:7e:1f:ea:b9:
         12:c7:8d:e2:a6:63:c2:0c:ac:05:00:b8:35:de:15:b8:04:84:
         4e:aa:5a:b2:52:bc:9b:10:9d:b8:4b:10:d4:23:0c:fa:4e:60:
         f3:84:4f:e5:f4:43:ab:59:f1:9a:c2:be:3d:8b:24:dc:af:ab:
         46:68:ae:27:a7:44:e4:58:08:3b:50:29:9f:6c:76:4e:3b:1b:
         d2:f1:42:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV3fb+iyIZR+YipYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlMWVkOWQtODAxYy00MWI5LWFhNTYtMWRhOGZmNzlh
NjVhMB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk
N2U5ZGJjNzctZTJlYS00NzgxLTkzM2EtOWY4ODJlYzZkZjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNmx9p+M2Fzj1YOCLnE17EQEXalO9rmDITnv
uXNUY6VD3dS5ZOteGMSsNMIv/LM1ow4qLAE9PP9+nshhQDOXO2jsq+3wVY4BSYFo
O+xzM4CP0PxHt7ZgH/aNDvcqWYWDI7nwEe9i4DcF/cELeicnY4BNd4uGFAN+gGuz
/50GHvYM7O6JTOZF4xtNDABAidnchHeC35XFpCvgbB/EeqqVfMPDv8SxcIiJI4Bx
zogn1p59yBiv4+TXaEcrTYUTiXEsyKYfvj8ApmU90inKoQNMFqt1QA29YXK1uRqd
5ug+1UD+lHF66TfbXYRlHn4IXq5bqcmdwMnoRKJlaF8iHKkBIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDaZrx9qA7kC6YByman582vd5dDrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jNmUx
ZWQ5ZC04MDFjLTQxYjktYWE1Ni0xZGE4ZmY3OWE2NWEvMjU4YzFiNGQtYjFiNS0z
N2U3LWIwMGQtZGQ3YjFlZGE2MTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzZlMWVkOWQtODAxYy00MWI5LWFh
NTYtMWRhOGZmNzlhNjVhL2M2ZTFlZDlkLTgwMWMtNDFiOS1hYTU2LTFkYThmZjc5
YTY1YS5jcmwwHwYDVR0jBBgwFoAUlpXDwrtxryifvla2in8lxUfMrfkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jNmUxZWQ5ZC04MDFjLTQxYjktYWE1Ni0xZGE4
ZmY3OWE2NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHAMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGsaMnjO/EE2vFtpDWsvQbrw4SYDMYZjZYQciZNcVWGWHY0ccVqUu6LT
6lK1Ok2mV+K/tOyJskx8L+/EuFdIxJQQq9pK5mKVdJAYSJV95fFHuiJrqhbFH1zW
B1IDMin8EGv68agoDywMb9jqy8k69Nh3sF1E4zS6O1MWyQLt3XSUNnpEKHzIzA2Y
ZfyGFqNkSPRG67Ab/b9NKH3wjRBv/99rD52X0u68YVfgFCyw5Svvfh/quRLHjeKm
Y8IMrAUAuDXeFbgEhE6qWrJSvJsQnbhLENQjDPpOYPOET+X0Q6tZ8ZrCvj2LJNyv
q0ZorienRORYCDtQKZ9sdk47G9LxQoQ=
-----END CERTIFICATE-----
Generated at Thu May 2 14:57:50 2024 by rpki-client on console-fra.rpki-client.org