Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/1f0f7151-1a17-3c20-b5f6-6c21ad2a655a.roa
File:                     1f0f7151-1a17-3c20-b5f6-6c21ad2a655a.roa (raw, json)
Hash identifier:          B3QL2sML9On5DGy8oppNIpLa7BVykTtIpfKIWth+jKs=
Subject key identifier:   43:99:C0:5C:53:A7:31:99:9F:FD:ED:86:30:45:CC:CC:7D:2F:B1:24
Certificate issuer:       /CN=949c3388-1f02-441c-9195-5c40d8fd63d2
Certificate serial:       010D0C9F43285847B2669ECA8AA7689841E0B180
Authority key identifier: 68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/1f0f7151-1a17-3c20-b5f6-6c21ad2a655a.roa
Signing time:             Tue 29 Oct 2024 01:00:32 +0000
ROA not before:           Tue 29 Oct 2024 01:00:32 +0000
ROA not after:            Mon 27 Jan 2025 02:00:32 +0000
asID:                     14618
IP address blocks:        69.164.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b2:66:9e:ca:8a:a7:68:98:41:e0:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949c3388-1f02-441c-9195-5c40d8fd63d2
        Validity
            Not Before: Oct 29 01:00:32 2024 GMT
            Not After : Jan 27 02:00:32 2025 GMT
        Subject: CN=ed62b7d3-b09d-4b73-bfbd-f25f2e438123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9e:ff:a6:84:88:ac:cc:f6:a3:4d:97:72:8e:
                    6d:8a:e3:19:73:37:5b:5e:06:f3:21:be:84:e3:3a:
                    e6:7d:d3:ce:2d:68:dd:a2:b9:f8:6f:62:16:55:de:
                    a6:72:c8:b9:5f:e6:43:12:fd:14:25:14:11:d6:ea:
                    5a:88:c5:c9:d7:60:bb:2d:17:ef:46:87:71:f3:b0:
                    e1:b7:83:8a:b2:16:b8:d0:01:df:40:37:62:6d:65:
                    f8:e3:40:8a:cc:04:a6:01:44:e5:00:93:a8:3f:9c:
                    ca:39:0a:06:d0:77:62:57:c4:e4:4c:06:34:ab:89:
                    c3:c1:f3:97:53:e4:a7:e8:60:11:ee:3c:af:09:ff:
                    55:3f:a3:ad:8f:e9:99:34:05:69:9e:19:0f:c4:a6:
                    aa:5c:94:a5:0a:66:ba:37:25:f3:e8:02:6d:d8:64:
                    d7:a9:7e:5d:00:e0:65:e6:07:97:2a:68:70:b5:cb:
                    d8:e7:59:7a:80:07:2c:50:7b:3d:01:43:02:c0:08:
                    2d:e2:f2:cd:b9:ec:75:58:48:a4:85:fc:e2:ce:ce:
                    51:6c:7d:01:53:13:ec:ee:ef:1e:d4:9f:ef:57:8a:
                    21:d0:2c:5e:e1:bc:f0:32:8f:ee:66:52:dc:da:0b:
                    06:79:a8:b8:34:e1:44:a0:f5:55:d3:61:f0:78:39:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:99:C0:5C:53:A7:31:99:9F:FD:ED:86:30:45:CC:CC:7D:2F:B1:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/1f0f7151-1a17-3c20-b5f6-6c21ad2a655a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.crl

            X509v3 Authority Key Identifier:
                keyid:68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.164.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:61:db:93:ab:e5:5f:76:85:c4:b9:df:cf:67:9d:ed:d4:3f:
         9a:36:b4:e4:a1:84:cb:f2:8f:7c:7f:8c:33:fb:a6:df:3c:b6:
         f2:98:ae:cc:ea:8a:3c:b3:f9:33:1d:d1:4e:42:50:97:42:4f:
         79:f9:ec:81:12:65:b4:c5:8b:72:a5:1d:5e:40:ae:41:2c:70:
         e1:d1:67:05:d0:c9:d1:38:ea:e1:80:62:6f:0b:50:a6:f9:e5:
         40:4b:aa:4e:43:03:eb:64:a4:dd:4b:97:a3:30:1e:13:87:f7:
         8c:dc:a8:47:00:59:f7:05:36:6d:2b:18:f6:5f:83:cd:63:84:
         6e:c6:03:64:81:81:c2:e3:0f:3b:63:15:f8:ae:99:e9:d6:3c:
         7f:a6:92:02:15:36:51:85:39:bc:32:a3:0b:6a:e1:e3:26:3d:
         17:03:83:01:d8:4e:9d:1f:e6:43:be:a4:22:e8:18:91:bb:f5:
         a3:bf:2b:23:b5:7c:89:e4:3f:9f:57:21:47:ea:25:78:99:d8:
         29:40:e1:64:6e:8d:2e:de:d0:20:3c:ba:d6:3b:ef:1e:61:0c:
         f1:df:59:a7:60:7e:6c:a8:76:c9:8f:4a:c2:4a:7b:2a:5c:66:
         07:13:88:b3:05:0d:6a:be:bc:29:84:9c:21:f3:fa:88:50:d7:
         90:bc:f0:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeyZp7KiqdomEHgsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQ5YzMzODgtMWYwMi00NDFjLTkxOTUtNWM0MGQ4ZmQ2
M2QyMB4XDTI0MTAyOTAxMDAzMloXDTI1MDEyNzAyMDAzMlowLzEtMCsGA1UEAxMk
ZWQ2MmI3ZDMtYjA5ZC00YjczLWJmYmQtZjI1ZjJlNDM4MTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Z7/poSIrMz2o02Xco5tiuMZczdbXgbzIb6E
4zrmfdPOLWjdorn4b2IWVd6mcsi5X+ZDEv0UJRQR1upaiMXJ12C7LRfvRodx87Dh
t4OKsha40AHfQDdibWX440CKzASmAUTlAJOoP5zKOQoG0HdiV8TkTAY0q4nDwfOX
U+Sn6GAR7jyvCf9VP6Otj+mZNAVpnhkPxKaqXJSlCma6NyXz6AJt2GTXqX5dAOBl
5geXKmhwtcvY51l6gAcsUHs9AUMCwAgt4vLNuex1WEikhfzizs5RbH0BUxPs7u8e
1J/vV4oh0Cxe4bzwMo/uZlLc2gsGeai4NOFEoPVV02HweDktwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEOZwFxTpzGZn/3thjBFzMx9L7EkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85NDlj
MzM4OC0xZjAyLTQ0MWMtOTE5NS01YzQwZDhmZDYzZDIvMWYwZjcxNTEtMWExNy0z
YzIwLWI1ZjYtNmMyMWFkMmE2NTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTQ5YzMzODgtMWYwMi00NDFjLTkx
OTUtNWM0MGQ4ZmQ2M2QyLzk0OWMzMzg4LTFmMDItNDQxYy05MTk1LTVjNDBkOGZk
NjNkMi5jcmwwHwYDVR0jBBgwFoAUaCxxzpCcX4cVDCzmk2cVx6mvEOowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85NDljMzM4OC0xZjAyLTQ0MWMtOTE5NS01YzQw
ZDhmZDYzZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARaRkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADph25Or5V92hcS5389nne3UP5o2tOShhMvyj3x/jDP7pt88tvKYrszq
ijyz+TMd0U5CUJdCT3n57IESZbTFi3KlHV5ArkEscOHRZwXQydE46uGAYm8LUKb5
5UBLqk5DA+tkpN1Ll6MwHhOH94zcqEcAWfcFNm0rGPZfg81jhG7GA2SBgcLjDztj
FfiumenWPH+mkgIVNlGFObwyowtq4eMmPRcDgwHYTp0f5kO+pCLoGJG79aO/KyO1
fInkP59XIUfqJXiZ2ClA4WRujS7e0CA8utY77x5hDPHfWadgfmyodsmPSsJKeypc
ZgcTiLMFDWq+vCmEnCHz+ohQ15C88Fc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:31 2024 by rpki-client on console-fra.rpki-client.org