Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecedc2b1-c38b-3bcd-84aa-8b22e0aaafec.roa
File:                     ecedc2b1-c38b-3bcd-84aa-8b22e0aaafec.roa (raw, json)
Hash identifier:          UpJxgEDSYIArdEmpW9FkHsLA+5F+My3EJRPIAx5w+bk=
Subject key identifier:   C0:FE:0F:84:12:D0:1B:B3:64:F7:DC:56:F2:1D:E4:C9:FC:D8:8A:1F
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858486C2B327137995FC6BB91A7E0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecedc2b1-c38b-3bcd-84aa-8b22e0aaafec.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     54858
IP address blocks:        64.85.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:32:71:37:99:5f:c6:bb:91:a7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=c2899356-3ce9-4e28-b287-bdc1c9e0465a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:52:0f:88:ec:94:ee:77:ef:e9:2d:53:21:
                    78:67:a4:6c:65:be:79:b4:ee:2c:f5:8f:17:73:13:
                    bb:e6:66:03:59:f0:cb:13:0f:08:a8:4c:ee:ce:23:
                    b9:1a:49:b9:51:74:45:fc:f0:14:f8:1c:64:d6:bd:
                    0a:90:53:0b:8b:1b:0a:89:76:20:1d:96:33:8c:c6:
                    25:26:bb:cc:1f:e2:20:54:26:ef:df:77:63:90:01:
                    9b:51:27:e6:5b:57:a9:ba:e5:53:dc:f5:ae:de:0a:
                    57:e2:3b:29:21:ce:20:f2:e6:0d:76:d6:29:3b:6c:
                    55:88:48:ae:51:06:89:7d:14:fd:46:ca:b7:16:6a:
                    16:33:5c:ef:73:dd:07:56:70:0b:15:c1:eb:a5:35:
                    16:03:99:13:b2:a2:e5:ab:81:29:b8:eb:62:b3:8c:
                    c0:e8:af:57:9b:6c:cc:9b:87:94:07:e4:b5:71:75:
                    ea:af:12:78:2b:8a:8a:6b:de:0d:0e:42:ae:91:2d:
                    5c:a4:58:c9:ae:2f:0d:ce:d9:b0:f9:d2:ba:8f:e0:
                    83:2c:97:2e:c2:e1:7c:f0:b3:52:cb:12:d5:dd:ef:
                    17:a4:ca:5a:ae:6b:2c:33:80:74:f3:96:7d:f8:2c:
                    2f:0d:9a:ed:88:05:1b:12:b9:dd:07:7c:46:91:d1:
                    e9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FE:0F:84:12:D0:1B:B3:64:F7:DC:56:F2:1D:E4:C9:FC:D8:8A:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecedc2b1-c38b-3bcd-84aa-8b22e0aaafec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.85.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:46:b2:14:9f:55:e7:12:4d:95:82:52:7d:0d:5f:a6:84:f0:
         2d:62:84:71:f8:13:a1:a1:a3:99:6b:2c:52:91:f5:c5:c0:59:
         dc:ed:fa:f4:a0:53:95:05:c5:77:2f:43:f3:8c:a1:91:c8:8a:
         08:45:b9:7e:94:63:2f:46:81:05:b1:52:0e:e2:75:c2:9e:f6:
         0f:b0:27:3a:47:4a:7c:fa:df:9d:2c:49:d4:41:4e:2a:1e:8e:
         4a:9c:ef:45:f3:03:57:42:bb:8c:c2:38:0f:47:a4:6c:cb:ed:
         15:c3:77:b3:16:ed:9b:a8:7c:73:df:d0:2a:d3:cb:62:a6:2f:
         5a:11:6a:37:61:ce:ee:58:7e:7b:98:d8:4b:db:ff:3c:78:c2:
         a2:ba:c4:c9:01:b5:92:51:e0:4c:5e:a0:da:c3:56:ba:f0:c2:
         e1:e3:72:d4:d6:6b:78:45:9a:fe:37:8a:d8:ad:73:ae:3c:7d:
         ef:c2:37:c9:c8:e1:29:6d:58:2d:7e:db:43:3e:9d:ef:b8:8c:
         6b:a0:5e:81:fe:8f:bd:e6:97:23:97:c6:73:71:45:8c:96:44:
         f4:a4:bf:92:7c:1e:58:c6:48:53:03:fb:e9:63:ba:05:53:6f:
         e7:7d:69:a2:c5:32:00:f4:ed:c1:8e:9e:3d:49:7f:b7:f4:0b:
         65:20:c4:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKzJxN5lfxruRp+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk
YzI4OTkzNTYtM2NlOS00ZTI4LWIyODctYmRjMWM5ZTA0NjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogNSD4jslO537+ktUyF4Z6RsZb55tO4s9Y8X
cxO75mYDWfDLEw8IqEzuziO5Gkm5UXRF/PAU+Bxk1r0KkFMLixsKiXYgHZYzjMYl
JrvMH+IgVCbv33djkAGbUSfmW1epuuVT3PWu3gpX4jspIc4g8uYNdtYpO2xViEiu
UQaJfRT9Rsq3FmoWM1zvc90HVnALFcHrpTUWA5kTsqLlq4EpuOtis4zA6K9Xm2zM
m4eUB+S1cXXqrxJ4K4qKa94NDkKukS1cpFjJri8Nztmw+dK6j+CDLJcuwuF88LNS
yxLV3e8XpMparmssM4B085Z9+CwvDZrtiAUbErndB3xGkdHp0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMD+D4QS0BuzZPfcVvId5Mn82IofMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWNlZGMyYjEtYzM4Yi0z
YmNkLTg0YWEtOGIyMmUwYWFhZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQFXgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZGshSfVecSTZWCUn0NX6aE8C1ihHH4E6Gho5lrLFKR9cXAWdzt+vSg
U5UFxXcvQ/OMoZHIighFuX6UYy9GgQWxUg7idcKe9g+wJzpHSnz6350sSdRBTioe
jkqc70XzA1dCu4zCOA9HpGzL7RXDd7MW7ZuofHPf0CrTy2KmL1oRajdhzu5YfnuY
2Evb/zx4wqK6xMkBtZJR4ExeoNrDVrrwwuHjctTWa3hFmv43ititc648fe/CN8nI
4SltWC1+20M+ne+4jGugXoH+j73mlyOXxnNxRYyWRPSkv5J8HljGSFMD++ljugVT
b+d9aaLFMgD07cGOnj1Jf7f0C2UgxCs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:06 2025 by rpki-client