Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/3a8a5cd5-fc22-32c1-a861-e67ea30c1882.roa
File:                     3a8a5cd5-fc22-32c1-a861-e67ea30c1882.roa (raw, json)
Hash identifier:          qmO99cEZA+EpITwoWJBPVZLI0heeZzPthAHEqORgbIU=
Subject key identifier:   AF:E6:1C:0E:9B:87:10:25:05:87:AF:0B:9B:B7:DF:C5:4C:34:82:FA
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F43285846B88A8BB00CB12AF5935ED480
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/3a8a5cd5-fc22-32c1-a861-e67ea30c1882.roa
Signing time:             Wed 31 Jul 2024 13:00:38 +0000
ROA not before:           Wed 31 Jul 2024 13:00:38 +0000
ROA not after:            Tue 29 Oct 2024 13:00:38 +0000
asID:                     63086
IP address blocks:        69.48.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b8:8a:8b:b0:0c:b1:2a:f5:93:5e:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Jul 31 13:00:38 2024 GMT
            Not After : Oct 29 13:00:38 2024 GMT
        Subject: CN=25bc2705-de3f-4364-a327-aad0f4f4f7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:c8:e9:b5:3a:16:e6:94:bf:b8:06:f7:f8:
                    30:33:25:95:c4:16:59:2b:f0:a7:10:b4:55:30:a5:
                    3e:e2:8f:ec:ec:41:b5:ab:39:4d:88:3b:2c:46:4b:
                    6e:50:39:5e:0a:ef:b4:0f:aa:cc:ba:a9:57:70:d6:
                    8e:28:39:72:5f:9a:76:15:4c:d2:b0:ca:9c:ff:2e:
                    3a:62:53:da:5c:6b:82:a5:48:fa:bd:40:b3:f7:52:
                    2d:df:e9:4a:d2:e2:5a:76:86:f2:04:92:a0:9c:c1:
                    91:84:0c:bc:91:37:50:fd:a3:f6:00:ae:a9:40:95:
                    79:f5:da:de:99:dd:a2:03:9c:fb:b1:5c:44:99:aa:
                    1a:4b:ea:97:5e:d8:71:d3:f1:48:87:2b:50:73:5d:
                    cf:00:8b:50:ec:9e:3a:e4:85:12:c9:8a:f4:49:d9:
                    9f:65:39:94:12:70:8a:ae:a5:04:52:f6:9d:87:20:
                    2f:3e:b0:c4:40:a4:98:75:78:82:9a:d8:99:b2:ce:
                    49:88:76:cb:34:e8:73:eb:68:36:72:83:dd:09:48:
                    59:7a:76:2d:66:8b:c3:0f:b9:13:ae:d0:83:c7:58:
                    47:8b:5b:ba:39:a4:eb:1d:f8:0a:a8:6c:04:ce:85:
                    16:35:f0:4c:86:52:77:05:12:2d:42:32:5c:9e:71:
                    bc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E6:1C:0E:9B:87:10:25:05:87:AF:0B:9B:B7:DF:C5:4C:34:82:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/3a8a5cd5-fc22-32c1-a861-e67ea30c1882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e0:55:01:9f:a8:1b:aa:9e:6b:f4:8b:13:44:d5:46:10:bc:
         5b:0a:a2:1d:79:d1:30:30:75:e9:ed:3a:16:b3:b5:5e:29:b5:
         29:3e:6f:ef:7a:92:5f:76:9e:9d:d0:43:ac:a4:12:0c:7d:c3:
         19:f1:65:bb:da:d1:86:a0:f9:88:46:1f:ac:17:08:5e:57:b3:
         74:4e:cc:59:e8:f9:27:34:49:ae:de:ea:70:05:d9:d3:ab:13:
         91:23:5f:45:df:02:c7:5f:be:c2:2d:45:5a:78:b0:30:e6:90:
         cc:b2:f3:2c:52:c1:15:f1:97:d6:54:ed:4a:55:3c:e5:63:cc:
         4d:3e:c5:f0:1e:93:4b:77:ce:96:9d:e8:51:3d:35:5c:3f:d9:
         a5:48:4c:44:c6:df:17:f7:8f:e8:fa:ca:39:05:89:98:9c:32:
         20:78:46:3a:f5:ec:7b:65:f0:97:83:28:32:e4:f4:ba:70:dc:
         8c:1d:e8:44:03:11:ad:35:bd:e0:31:e7:96:1e:c0:e1:2b:f8:
         69:3e:cf:63:5c:2e:26:c2:45:1c:ec:26:c8:58:49:8d:ea:7f:
         9d:79:e5:d9:23:5a:b4:16:37:9f:38:aa:bc:52:7d:8c:a3:a2:
         c3:c6:aa:5f:b0:3c:cc:04:52:8d:2b:48:9a:46:95:e4:0c:4d:
         45:36:d5:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEa4iouwDLEq9ZNe1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmRkMDgyOTItOGRmZC00M2I4LWEwOGMtMjJjYjMxZWQy
MDBmMB4XDTI0MDczMTEzMDAzOFoXDTI0MTAyOTEzMDAzOFowLzEtMCsGA1UEAxMk
MjViYzI3MDUtZGUzZi00MzY0LWEzMjctYWFkMGY0ZjRmN2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCrI6bU6FuaUv7gG9/gwMyWVxBZZK/CnELRV
MKU+4o/s7EG1qzlNiDssRktuUDleCu+0D6rMuqlXcNaOKDlyX5p2FUzSsMqc/y46
YlPaXGuCpUj6vUCz91It3+lK0uJadobyBJKgnMGRhAy8kTdQ/aP2AK6pQJV59dre
md2iA5z7sVxEmaoaS+qXXthx0/FIhytQc13PAItQ7J465IUSyYr0SdmfZTmUEnCK
rqUEUvadhyAvPrDEQKSYdXiCmtiZss5JiHbLNOhz62g2coPdCUhZenYtZovDD7kT
rtCDx1hHi1u6OaTrHfgKqGwEzoUWNfBMhlJ3BRItQjJcnnG8nwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK/mHA6bhxAlBYevC5u338VMNIL6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZGQw
ODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNiMzFlZDIwMGYvM2E4YTVjZDUtZmMyMi0z
MmMxLWE4NjEtZTY3ZWEzMGMxODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmRkMDgyOTItOGRmZC00M2I4LWEw
OGMtMjJjYjMxZWQyMDBmLzZkZDA4MjkyLThkZmQtNDNiOC1hMDhjLTIyY2IzMWVk
MjAwZi5jcmwwHwYDVR0jBBgwFoAUsDu+INGuzPtX0T1i6kyZ2kHR6zwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82ZGQwODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNi
MzFlZDIwMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTDZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADPgVQGfqBuqnmv0ixNE1UYQvFsKoh150TAwdentOhaztV4ptSk+b+96
kl92np3QQ6ykEgx9wxnxZbva0Yag+YhGH6wXCF5Xs3ROzFno+Sc0Sa7e6nAF2dOr
E5EjX0XfAsdfvsItRVp4sDDmkMyy8yxSwRXxl9ZU7UpVPOVjzE0+xfAek0t3zpad
6FE9NVw/2aVITETG3xf3j+j6yjkFiZicMiB4Rjr17Htl8JeDKDLk9Lpw3Iwd6EQD
Ea01veAx55YewOEr+Gk+z2NcLibCRRzsJshYSY3qf5155dkjWrQWN584qrxSfYyj
osPGql+wPMwEUo0rSJpGleQMTUU21S4=
-----END CERTIFICATE-----
Generated at Fri Sep 20 20:32:57 2024 by rpki-client on console-fra.rpki-client.org