Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/60fc1c20-f11c-3c0f-be32-0c59e4705579.roa
File:                     60fc1c20-f11c-3c0f-be32-0c59e4705579.roa (raw, json)
Hash identifier:          e/S1ccELwGamavjueUtAcjc0DxgJ/9oO3MZxQB7eluU=
Subject key identifier:   B3:E8:37:82:5E:E1:F6:E0:51:D8:99:A7:C7:6A:F5:DB:3F:01:42:2E
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F43285847E45D4270863496BE333E7140
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/60fc1c20-f11c-3c0f-be32-0c59e4705579.roa
Signing time:             Fri 15 Nov 2024 22:32:10 +0000
ROA not before:           Fri 15 Nov 2024 22:32:10 +0000
ROA not after:            Thu 13 Feb 2025 22:32:10 +0000
asID:                     213867
IP address blocks:        199.79.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e4:5d:42:70:86:34:96:be:33:3e:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Nov 15 22:32:10 2024 GMT
            Not After : Feb 13 22:32:10 2025 GMT
        Subject: CN=4cb8737f-85d6-457a-8a89-ee2cd51424dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ea:ce:1d:74:43:63:7d:1a:3f:11:9f:b7:dc:
                    42:bc:1f:2c:e0:9f:bc:84:d2:a5:df:3d:39:eb:89:
                    ba:79:a5:ef:14:df:ee:f9:fd:0e:b4:ef:fd:f6:73:
                    9d:03:30:b6:b4:3d:41:e4:9c:20:eb:35:4b:94:15:
                    83:e9:41:42:3d:1f:ea:ec:bd:c3:50:7d:76:d2:d1:
                    e5:73:d0:ba:32:13:02:c9:9a:d5:80:68:4e:b2:1f:
                    7d:00:8c:31:c0:07:68:ba:3b:2e:76:6b:9b:ba:5c:
                    9b:fe:73:6b:e4:a3:cc:bd:71:7d:c3:85:12:cd:d1:
                    a8:94:3a:d1:47:f0:7c:03:27:f7:fc:b6:16:f6:36:
                    f6:7f:a5:6f:16:8b:d8:80:69:49:d2:f4:1b:b3:4c:
                    6c:90:ca:a4:1a:ec:47:bc:0b:52:90:27:85:b1:41:
                    c0:76:c1:2e:1e:a0:26:45:af:62:1f:78:ea:b2:73:
                    b9:2b:d2:21:56:1f:01:03:8d:98:37:0a:04:55:c2:
                    8b:8c:bb:8c:48:3c:37:62:51:03:e1:47:e2:49:fa:
                    04:9c:d7:9a:19:dc:21:ef:ff:a2:ed:05:b8:79:29:
                    12:db:8f:0e:69:c3:d7:9b:f6:75:e6:d5:d2:89:2b:
                    8a:c8:33:e2:95:d8:e8:75:32:02:14:65:6a:9a:c2:
                    7b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E8:37:82:5E:E1:F6:E0:51:D8:99:A7:C7:6A:F5:DB:3F:01:42:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/60fc1c20-f11c-3c0f-be32-0c59e4705579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.79.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d2:9c:38:d4:ba:5f:bc:2d:77:26:d3:d7:5f:1f:0a:a4:98:
         8b:3b:4d:c3:c6:70:ed:b4:15:6b:04:ce:4b:45:8c:bc:4e:2f:
         43:82:94:07:ee:1d:39:2e:92:2a:a6:be:14:20:f9:bf:30:33:
         32:e0:aa:90:c2:65:cb:ec:96:54:85:99:75:9c:a8:ae:8c:d9:
         18:23:92:31:2d:82:fe:fa:73:de:c5:81:af:e5:cd:19:88:33:
         6f:fc:07:f1:2a:9f:eb:2a:80:d2:c0:d4:96:21:21:97:04:ae:
         54:7d:89:55:bf:2d:70:bf:45:c8:4e:f5:df:f2:50:96:88:f1:
         b4:39:85:cf:3e:21:67:7f:01:83:e8:c5:e4:fb:37:88:98:0b:
         02:73:84:c1:62:c4:b0:27:d5:b6:80:08:d7:c1:21:41:a6:48:
         d5:db:cc:1b:32:d3:e2:4d:fc:c6:11:0b:73:4d:ae:1f:c9:63:
         b2:33:49:1d:7f:d7:3a:2e:eb:35:40:73:66:a0:f7:5e:fa:e4:
         94:10:16:e0:4c:78:c0:bf:9b:01:9d:33:82:5d:6c:c1:b6:ca:
         65:a1:81:fc:b9:6a:f3:04:8c:c6:8c:d2:ee:4f:86:54:96:d0:
         79:f4:3c:c0:11:1d:2b:b4:85:f1:6a:74:7c:4e:00:8c:92:60:
         b7:c3:ce:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfkXUJwhjSWvjM+cUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3
NWFiMB4XDTI0MTExNTIyMzIxMFoXDTI1MDIxMzIyMzIxMFowLzEtMCsGA1UEAxMk
NGNiODczN2YtODVkNi00NTdhLThhODktZWUyY2Q1MTQyNGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkurOHXRDY30aPxGft9xCvB8s4J+8hNKl3z05
64m6eaXvFN/u+f0OtO/99nOdAzC2tD1B5Jwg6zVLlBWD6UFCPR/q7L3DUH120tHl
c9C6MhMCyZrVgGhOsh99AIwxwAdoujsudmubulyb/nNr5KPMvXF9w4USzdGolDrR
R/B8Ayf3/LYW9jb2f6VvFovYgGlJ0vQbs0xskMqkGuxHvAtSkCeFsUHAdsEuHqAm
Ra9iH3jqsnO5K9IhVh8BA42YNwoEVcKLjLuMSDw3YlED4UfiSfoEnNeaGdwh7/+i
7QW4eSkS248OacPXm/Z15tXSiSuKyDPildjodTICFGVqmsJ7hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLPoN4Je4fbgUdiZp8dq9ds/AUIuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3
MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvNjBmYzFjMjAtZjExYy0z
YzBmLWJlMzItMGM1OWU0NzA1NTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj
ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3
NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz
NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0/3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHzSnDjUul+8LXcm09dfHwqkmIs7TcPGcO20FWsEzktFjLxOL0OClAfu
HTkukiqmvhQg+b8wMzLgqpDCZcvsllSFmXWcqK6M2RgjkjEtgv76c97Fga/lzRmI
M2/8B/Eqn+sqgNLA1JYhIZcErlR9iVW/LXC/RchO9d/yUJaI8bQ5hc8+IWd/AYPo
xeT7N4iYCwJzhMFixLAn1baACNfBIUGmSNXbzBsy0+JN/MYRC3NNrh/JY7IzSR1/
1zou6zVAc2ag91765JQQFuBMeMC/mwGdM4JdbMG2ymWhgfy5avMEjMaM0u5PhlSW
0Hn0PMARHSu0hfFqdHxOAIySYLfDziM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:10 2024 by rpki-client on console-ams.rpki-client.org