Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/141291a2-0ed7-3337-b072-e0411a6bdf5c.roa
File:                     141291a2-0ed7-3337-b072-e0411a6bdf5c.roa (raw, json)
Hash identifier:          prjYJ8tDUdcQqGEBTPRbZ/ZvfOfKsHdWRdIVQrkNpJs=
Subject key identifier:   F6:52:88:71:6A:94:40:56:71:C2:D9:AA:DB:FA:42:9C:9E:99:51:5C
Certificate issuer:       /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
Certificate serial:       010D0C9F43285847A0414402CAC44C8D19DA4D00
Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/141291a2-0ed7-3337-b072-e0411a6bdf5c.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     30029
IP address blocks:        64.137.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:44:02:ca:c4:4c:8d:19:da:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=86227e92-b505-4cb9-9574-631fe6c6b577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cf:99:06:2f:f7:a5:0f:dc:b3:72:01:e8:6b:
                    3e:e1:07:d3:70:b4:72:0d:2b:29:e4:c1:51:fc:c4:
                    5f:16:83:01:53:88:2f:84:3b:a4:61:4a:ed:4c:ec:
                    ab:64:27:48:1b:8b:f4:43:36:b9:1c:a8:69:37:ab:
                    86:5c:65:f5:5f:39:97:6a:e7:35:25:ce:f3:60:95:
                    02:dc:64:ea:1c:5d:1d:08:a2:ae:18:07:d7:c7:33:
                    01:42:37:07:da:18:33:0c:b3:f0:5a:50:29:68:e2:
                    0f:c3:08:fa:65:59:6f:75:44:b9:15:c6:40:f3:0d:
                    8c:45:c6:23:5c:a1:06:16:e0:84:00:88:5e:78:70:
                    15:6a:b6:b2:d5:30:91:2b:8d:8b:aa:1a:0d:22:83:
                    6a:f6:ba:ee:d1:96:7f:8b:00:ff:7d:6b:a4:fd:e7:
                    f8:af:d6:04:89:6d:fc:b3:f5:18:ca:a6:c3:68:68:
                    e5:2c:0a:f8:ad:90:f0:67:57:c8:6f:9e:c6:bd:14:
                    16:33:27:ae:dd:38:15:05:01:13:80:33:88:c2:28:
                    44:65:b7:a9:96:10:59:1d:06:1d:cb:51:f3:64:6a:
                    84:10:11:44:c8:1b:f5:22:b1:e8:10:e8:ee:e5:00:
                    f7:fb:39:bf:7f:9d:e7:ce:25:ed:22:11:ab:b6:0e:
                    78:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:52:88:71:6A:94:40:56:71:C2:D9:AA:DB:FA:42:9C:9E:99:51:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/141291a2-0ed7-3337-b072-e0411a6bdf5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl

            X509v3 Authority Key Identifier:
                keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.137.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:65:de:91:9e:34:a7:4a:f1:dd:29:97:c4:76:ed:be:47:f8:
         a5:b0:a1:18:ac:ad:cc:1d:3e:0c:61:ab:1b:24:82:28:52:9c:
         51:bd:3d:38:f8:e1:68:da:87:fa:54:b3:fa:dc:e5:69:84:f9:
         98:87:06:0f:5e:0d:94:cc:49:2b:0c:de:1c:40:d4:19:53:d5:
         37:ad:b5:c2:02:3d:71:e7:72:9e:b6:86:52:37:b9:81:f6:39:
         c5:b6:5f:e7:4d:cb:66:38:2f:47:e5:3a:c7:5b:44:c4:74:c9:
         52:82:1b:29:2e:9d:f6:e2:3a:f9:b9:26:26:37:8d:8b:24:08:
         39:c7:dd:f2:cf:42:40:35:e9:12:9f:f7:bf:83:3e:95:16:42:
         2d:a2:d2:37:83:cd:6b:0c:eb:8a:e0:54:79:39:6e:bf:90:4f:
         e9:d2:04:fb:75:20:83:9e:6c:3f:9e:96:11:89:fe:13:9e:ea:
         09:11:71:e7:f8:47:16:79:fd:b8:a3:f2:a3:51:5c:39:b5:93:
         db:66:c5:40:64:7d:8b:df:cd:ca:0b:a8:b7:d9:fc:f3:07:cb:
         2f:80:92:a3:1b:44:12:37:7d:e6:a4:d2:e4:e0:ea:c0:9b:63:
         2a:1e:e3:0b:e2:5e:9d:4c:4c:c0:82:20:b6:8e:0d:ff:e8:7b:
         9a:9d:96:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQUQCysRMjRnaTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm
YTFhMB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk
ODYyMjdlOTItYjUwNS00Y2I5LTk1NzQtNjMxZmU2YzZiNTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c+ZBi/3pQ/cs3IB6Gs+4QfTcLRyDSsp5MFR
/MRfFoMBU4gvhDukYUrtTOyrZCdIG4v0Qza5HKhpN6uGXGX1XzmXauc1Jc7zYJUC
3GTqHF0dCKKuGAfXxzMBQjcH2hgzDLPwWlApaOIPwwj6ZVlvdUS5FcZA8w2MRcYj
XKEGFuCEAIheeHAVaray1TCRK42LqhoNIoNq9rru0ZZ/iwD/fWuk/ef4r9YEiW38
s/UYyqbDaGjlLAr4rZDwZ1fIb57GvRQWMyeu3TgVBQETgDOIwihEZbeplhBZHQYd
y1HzZGqEEBFEyBv1IrHoEOju5QD3+zm/f53nziXtIhGrtg54BQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPZSiHFqlEBWccLZqtv6QpyemVFcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx
YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvMTQxMjkxYTItMGVkNy0z
MzM3LWIwNzItZTA0MTFhNmJkZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj
ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh
ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2
MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQImgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKdl3pGeNKdK8d0pl8R27b5H+KWwoRisrcwdPgxhqxskgihSnFG9PTj4
4Wjah/pUs/rc5WmE+ZiHBg9eDZTMSSsM3hxA1BlT1TettcICPXHncp62hlI3uYH2
OcW2X+dNy2Y4L0flOsdbRMR0yVKCGykunfbiOvm5JiY3jYskCDnH3fLPQkA16RKf
97+DPpUWQi2i0jeDzWsM64rgVHk5br+QT+nSBPt1IIOebD+elhGJ/hOe6gkRcef4
RxZ5/bij8qNRXDm1k9tmxUBkfYvfzcoLqLfZ/PMHyy+AkqMbRBI3feak0uTg6sCb
Yyoe4wviXp1MTMCCILaODf/oe5qdlmc=
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:54:07 2024 by rpki-client on console-fra.rpki-client.org