Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/a680df6e-155d-3d93-babb-124b8a696bd5.roa
File:                     a680df6e-155d-3d93-babb-124b8a696bd5.roa (raw, json)
Hash identifier:          0h9JKMoKYwnB+to9mh3S+VpZhYow5NI+GRcHa/+/c3U=
Subject key identifier:   78:24:FC:52:16:18:6F:E4:21:1D:1B:A6:91:A8:19:92:BC:53:A2:18
Certificate issuer:       /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818
Certificate serial:       010D0C9F432858472835FB57AE4E1B7990C34900
Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/a680df6e-155d-3d93-babb-124b8a696bd5.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     46672
IP address blocks:        199.30.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:fb:57:ae:4e:1b:79:90:c3:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=dc1fd361-a93f-4c03-8069-0fa32438e302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:61:d1:8e:46:4b:b8:b4:4e:e6:21:d9:8a:13:
                    d1:12:79:14:55:8b:13:73:12:f8:4f:10:71:2f:6a:
                    a3:bf:7b:c1:4b:f4:04:e2:66:0c:18:28:f7:55:ab:
                    12:e8:ae:fd:e2:5c:ae:66:d5:14:b1:e9:4a:57:b9:
                    9d:22:3e:5e:0c:b6:cf:43:0d:0a:96:43:71:4d:45:
                    7b:b5:96:57:20:f0:22:12:40:5e:ae:e1:51:69:38:
                    d4:0f:4f:05:39:ad:2f:db:cb:6a:e6:78:10:07:ed:
                    64:93:18:d7:bd:30:a2:b4:32:ad:80:3a:9d:cb:e9:
                    6d:e2:5d:77:e6:e7:bb:42:8b:a2:80:62:73:4e:7f:
                    ef:d9:be:a5:48:7b:bb:59:b3:29:af:f9:65:11:8e:
                    a1:77:ca:4b:b8:1b:40:36:44:f4:88:9d:68:3f:b2:
                    0a:22:64:1e:08:42:1d:9b:41:a6:35:02:49:2c:69:
                    6c:de:fa:8f:3f:26:73:e9:c4:01:4a:3a:9b:0e:3d:
                    fb:25:f9:6e:43:4d:12:12:d3:ae:90:71:c8:14:65:
                    6b:d4:94:d2:75:30:ea:d0:f0:ca:e0:19:7b:2f:79:
                    e8:96:b3:7e:e2:fb:93:c9:78:66:1a:6b:62:3a:98:
                    b1:f7:fe:d8:ad:92:f1:4f:a5:b5:28:94:da:b7:c0:
                    e1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:24:FC:52:16:18:6F:E4:21:1D:1B:A6:91:A8:19:92:BC:53:A2:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/a680df6e-155d-3d93-babb-124b8a696bd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:71:b6:f5:a1:1f:e4:ed:c2:d7:63:ff:6e:bb:d3:40:b0:c0:
         99:bb:93:b3:85:0a:78:01:e6:7f:f2:8c:93:a7:f6:44:b6:5a:
         87:69:64:6e:97:af:e2:0b:6f:02:2d:3d:c7:1e:d2:70:24:f5:
         9f:84:b2:7f:ba:00:83:30:3e:c1:0c:e6:69:47:f5:5c:ff:fe:
         d2:e2:db:95:8c:14:e2:1b:ac:b9:35:09:26:a8:85:36:df:b4:
         65:ab:e2:97:cf:54:93:a4:bf:3c:95:30:84:61:fc:99:ac:1e:
         37:66:78:3c:3f:2e:23:fe:cd:4b:1b:d0:06:0b:06:94:c5:1a:
         d7:4b:e1:fb:d9:e0:cf:8d:6a:b8:8c:34:26:46:b7:16:d1:61:
         d6:a8:46:bd:ce:68:6d:85:dd:0a:d8:2e:f1:28:df:99:57:4f:
         84:b6:6e:1b:70:ee:d3:6c:e6:df:ba:83:fe:28:ef:16:af:03:
         d0:a9:dc:62:05:34:ca:69:40:c0:02:47:ea:a2:4e:bf:64:ab:
         2e:ef:6c:e5:8a:1a:0a:5b:23:86:28:98:99:1c:d3:bb:b7:f7:
         fe:89:08:46:0d:be:61:86:40:24:da:56:f2:5a:4a:87:96:11:
         ca:1b:39:c7:cd:fb:7a:93:0f:56:cf:6a:0d:cc:60:7a:83:10:
         03:ce:07:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcoNftXrk4beZDDSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh
ODE4MB4XDTI0MDkwOTEzMDA0MVoXDTI0MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk
ZGMxZmQzNjEtYTkzZi00YzAzLTgwNjktMGZhMzI0MzhlMzAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmHRjkZLuLRO5iHZihPREnkUVYsTcxL4TxBx
L2qjv3vBS/QE4mYMGCj3VasS6K794lyuZtUUselKV7mdIj5eDLbPQw0KlkNxTUV7
tZZXIPAiEkBeruFRaTjUD08FOa0v28tq5ngQB+1kkxjXvTCitDKtgDqdy+lt4l13
5ue7QouigGJzTn/v2b6lSHu7WbMpr/llEY6hd8pLuBtANkT0iJ1oP7IKImQeCEId
m0GmNQJJLGls3vqPPyZz6cQBSjqbDj37JfluQ00SEtOukHHIFGVr1JTSdTDq0PDK
4Bl7L3nolrN+4vuTyXhmGmtiOpix9/7YrZLxT6W1KJTat8Dh7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHgk/FIWGG/kIR0bppGoGZK8U6IYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi
MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvYTY4MGRmNmUtMTU1ZC0z
ZDkzLWJhYmItMTI0YjhhNjk2YmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0
MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz
YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5
N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxx6BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGBxtvWhH+Ttwtdj/26700CwwJm7k7OFCngB5n/yjJOn9kS2WodpZG6X
r+ILbwItPcce0nAk9Z+Esn+6AIMwPsEM5mlH9Vz//tLi25WMFOIbrLk1CSaohTbf
tGWr4pfPVJOkvzyVMIRh/JmsHjdmeDw/LiP+zUsb0AYLBpTFGtdL4fvZ4M+NariM
NCZGtxbRYdaoRr3OaG2F3QrYLvEo35lXT4S2bhtw7tNs5t+6g/4o7xavA9Cp3GIF
NMppQMACR+qiTr9kqy7vbOWKGgpbI4YomJkc07u39/6JCEYNvmGGQCTaVvJaSoeW
EcobOcfN+3qTD1bPag3MYHqDEAPOB9Y=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org