Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/0c043f59-c6a6-323f-accd-6fe59c46880d.roa
File:                     0c043f59-c6a6-323f-accd-6fe59c46880d.roa (raw, json)
Hash identifier:          WXUHyDtnr5qCzoqsAfbbu5p7eGynRltuZgkwSxU3hQc=
Subject key identifier:   08:37:0C:16:A6:17:6D:E8:06:F1:08:37:77:9F:48:A7:46:A5:38:95
Certificate issuer:       /CN=6e10601c-e280-4510-9d84-b6d2b02b8446
Certificate serial:       010D0C9F4328584774FBA4E8C4CD264D9E6BCFB0
Authority key identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/0c043f59-c6a6-323f-accd-6fe59c46880d.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     393397
IP address blocks:        66.150.64.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:a4:e8:c4:cd:26:4d:9e:6b:cf:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e10601c-e280-4510-9d84-b6d2b02b8446
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=1aedbb3b-96d5-4d08-b7a6-48ba2b71425e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:47:a5:c6:6c:2e:b5:23:15:4d:7f:ae:b8:04:
                    47:70:bd:24:ef:87:83:50:b7:70:d3:a4:53:10:6c:
                    9f:aa:d2:78:33:f4:f8:25:cc:93:ab:93:2b:b8:49:
                    b8:80:97:08:da:dd:61:d9:ff:41:ba:a5:9b:e7:f9:
                    02:92:8f:50:c4:8b:19:7a:fc:75:d4:4a:5e:93:9f:
                    44:b4:f3:45:ac:c0:da:70:ff:26:79:0e:69:0f:61:
                    c2:85:65:92:06:f5:63:fb:e8:4b:09:40:8b:20:d6:
                    b8:36:73:fc:c9:39:ab:bf:07:57:b2:18:da:99:b8:
                    1e:14:83:6f:24:06:ce:1c:cc:92:11:99:d9:a0:6a:
                    b1:e9:87:be:3c:a0:8b:30:a8:ec:fc:4c:9d:6a:84:
                    90:6b:dd:41:c1:28:c3:ef:fa:16:16:2f:0e:32:9d:
                    4a:30:26:2b:40:24:70:df:07:f4:35:08:8d:24:3c:
                    fd:58:a2:c1:9a:2f:b2:cf:68:10:b5:0c:31:c3:cd:
                    ab:e5:72:43:28:83:db:0b:95:76:a6:0b:e9:05:4e:
                    6e:c3:cb:4e:d1:18:86:ad:77:0a:37:99:45:b6:b6:
                    99:bc:c0:2e:68:bb:39:3e:a9:93:1a:b2:92:35:98:
                    9d:e3:7c:39:d2:2c:99:a2:71:d1:12:af:5e:26:73:
                    7e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:37:0C:16:A6:17:6D:E8:06:F1:08:37:77:9F:48:A7:46:A5:38:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/0c043f59-c6a6-323f-accd-6fe59c46880d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl

            X509v3 Authority Key Identifier:
                keyid:4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.150.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:2a:db:87:68:08:17:a6:4f:1b:9f:65:62:b6:7f:9e:07:b3:
         44:7e:b6:29:f2:5f:00:33:05:2c:f0:70:09:f0:5f:17:49:f0:
         56:b4:2b:38:f4:03:c8:d5:be:d7:1e:d9:e0:56:75:b5:07:d7:
         7f:17:2b:dd:7e:4c:44:b2:24:de:db:94:31:27:0e:cb:6d:63:
         ab:d3:17:54:3d:d3:d2:11:51:26:63:fc:e5:40:b5:19:50:70:
         56:5c:b1:70:0d:f0:3f:3c:1f:ea:6b:fe:02:e9:e9:39:36:6a:
         e6:af:72:f5:0e:5f:a3:63:2e:03:ca:83:70:58:6d:ec:84:4c:
         2b:e5:a1:2b:ee:55:31:fd:67:0e:58:51:cc:79:97:8d:b2:83:
         b5:6e:76:d9:23:ca:18:91:c3:a2:09:9e:66:eb:9a:be:af:b1:
         62:d1:b6:9d:fc:44:d1:22:ff:3f:a6:d2:ef:50:c2:c1:8f:89:
         4e:e8:c1:aa:a1:26:08:fd:38:61:0f:13:d5:17:be:31:e8:71:
         90:93:4c:70:9d:2b:36:69:5c:3e:30:13:8c:fa:43:40:3d:d6:
         1a:d0:2a:2a:b1:14:8a:ee:4d:73:95:79:74:97:bc:83:76:71:
         74:d2:7a:eb:26:72:09:3f:6d:01:3d:dc:c1:6b:4c:62:9d:34:
         54:22:e0:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd0+6ToxM0mTZ5rz7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmUxMDYwMWMtZTI4MC00NTEwLTlkODQtYjZkMmIwMmI4
NDQ2MB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk
MWFlZGJiM2ItOTZkNS00ZDA4LWI3YTYtNDhiYTJiNzE0MjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEelxmwutSMVTX+uuARHcL0k74eDULdw06RT
EGyfqtJ4M/T4JcyTq5MruEm4gJcI2t1h2f9BuqWb5/kCko9QxIsZevx11Epek59E
tPNFrMDacP8meQ5pD2HChWWSBvVj++hLCUCLINa4NnP8yTmrvwdXshjambgeFINv
JAbOHMySEZnZoGqx6Ye+PKCLMKjs/EydaoSQa91BwSjD7/oWFi8OMp1KMCYrQCRw
3wf0NQiNJDz9WKLBmi+yz2gQtQwxw82r5XJDKIPbC5V2pgvpBU5uw8tO0RiGrXcK
N5lFtraZvMAuaLs5PqmTGrKSNZid43w50iyZonHREq9eJnN+3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAg3DBamF23oBvEIN3efSKdGpTiVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZTEw
NjAxYy1lMjgwLTQ1MTAtOWQ4NC1iNmQyYjAyYjg0NDYvMGMwNDNmNTktYzZhNi0z
MjNmLWFjY2QtNmZlNTljNDY4ODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmUxMDYwMWMtZTI4MC00NTEwLTlk
ODQtYjZkMmIwMmI4NDQ2LzZlMTA2MDFjLWUyODAtNDUxMC05ZDg0LWI2ZDJiMDJi
ODQ0Ni5jcmwwHwYDVR0jBBgwFoAUTu1El1iaHDmaM7ilgAeW14M6ikQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82ZTEwNjAxYy1lMjgwLTQ1MTAtOWQ4NC1iNmQy
YjAyYjg0NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQpZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEgq24doCBemTxufZWK2f54Hs0R+tinyXwAzBSzwcAnwXxdJ8Fa0Kzj0
A8jVvtce2eBWdbUH138XK91+TESyJN7blDEnDsttY6vTF1Q909IRUSZj/OVAtRlQ
cFZcsXAN8D88H+pr/gLp6Tk2auavcvUOX6NjLgPKg3BYbeyETCvloSvuVTH9Zw5Y
Ucx5l42yg7VudtkjyhiRw6IJnmbrmr6vsWLRtp38RNEi/z+m0u9QwsGPiU7owaqh
Jgj9OGEPE9UXvjHocZCTTHCdKzZpXD4wE4z6Q0A91hrQKiqxFIruTXOVeXSXvIN2
cXTSeusmcgk/bQE93MFrTGKdNFQi4Ew=
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:36:43 2024 by rpki-client on console-ams.rpki-client.org