Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0084b46a-3c9a-32ba-98e3-91903b33adc9.roa
File:                     0084b46a-3c9a-32ba-98e3-91903b33adc9.roa (raw, json)
Hash identifier:          +j2vj1IWRmnNNBsnFDsqvdPwlOkFRUWtAGEbdIpguNs=
Subject key identifier:   D5:AB:05:30:12:66:1C:E9:82:FF:62:57:B3:87:98:55:A0:CE:7A:C6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858479D76D9081F97BA5011823A40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0084b46a-3c9a-32ba-98e3-91903b33adc9.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     397242
IP address blocks:        64.6.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:d9:08:1f:97:ba:50:11:82:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=70e9ffa2-eff3-4057-a8ec-fc068e202f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:25:c4:04:2b:57:c1:b5:12:2a:f6:7d:95:9b:
                    27:7f:83:3a:de:ba:b6:a2:6c:0b:c8:f6:70:30:1c:
                    a5:e0:7d:a2:76:5e:29:16:08:a6:39:d7:15:fc:39:
                    33:20:79:ad:ef:02:20:1b:44:57:71:14:41:01:c6:
                    da:a1:01:14:59:c6:53:9a:e2:48:41:82:27:f2:f9:
                    7e:b4:89:55:1a:7d:e4:97:fa:88:5c:40:c2:43:78:
                    69:82:fc:6c:2d:60:82:16:87:72:4f:d3:6f:3b:dd:
                    5a:06:ac:35:cf:9f:75:c5:b5:a2:ce:9b:a7:a8:27:
                    5a:9a:59:14:b1:6d:8f:d0:ba:fc:04:41:cc:ab:71:
                    fd:3e:27:73:0b:9e:87:9d:45:76:32:ed:c8:71:3c:
                    00:dc:94:31:e6:0a:83:02:69:a9:05:eb:44:25:d0:
                    6d:50:93:9d:a8:e7:13:f6:ce:2d:5f:88:2e:9b:91:
                    ad:e2:40:a6:2b:29:b0:f5:19:7b:a4:3a:80:35:7f:
                    bf:a6:db:18:3d:b3:36:7c:e6:ef:ae:7e:79:a7:17:
                    97:9b:89:9e:82:8d:a2:cb:68:c5:8f:3a:6e:5b:0c:
                    33:c8:9d:f0:7f:27:c7:31:36:34:43:5c:e7:c0:5c:
                    d0:98:18:bb:01:64:21:d3:ed:af:32:6e:64:2f:e6:
                    74:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AB:05:30:12:66:1C:E9:82:FF:62:57:B3:87:98:55:A0:CE:7A:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0084b46a-3c9a-32ba-98e3-91903b33adc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a5:59:37:95:c2:e4:eb:b7:f0:5b:0a:a6:38:d1:c8:91:da:
         b0:ae:1a:bf:b5:58:e7:42:91:42:1b:1a:a5:df:0a:7d:39:00:
         80:04:dd:53:81:05:b0:05:06:ce:b1:fb:49:e2:87:77:7b:0e:
         78:63:ab:b5:cf:f9:24:75:92:a8:a2:45:e7:92:2e:bb:9c:b7:
         cb:74:af:6b:25:91:c6:f2:97:3a:91:a7:69:9d:41:fc:cc:e7:
         fa:d0:4d:a7:90:2e:2e:ad:34:60:7d:dc:d9:09:cb:f3:fa:e9:
         4c:75:7b:87:80:f4:62:10:00:99:9b:d9:d4:71:7d:0e:d7:53:
         5a:cd:22:13:be:ed:cb:7f:39:6e:b3:d2:04:1d:bb:16:59:8b:
         81:71:15:68:dd:c7:4b:ba:92:cf:0d:2c:23:08:21:50:b7:ea:
         4b:0d:4f:47:d3:15:36:6f:58:2a:95:f1:59:1a:23:a0:84:5f:
         76:ea:09:b1:44:d2:b0:49:01:86:87:4c:c1:ed:14:94:b6:68:
         e6:76:2e:51:1e:7e:91:97:f5:89:1b:9a:ad:18:16:92:b6:31:
         4c:45:5c:87:b5:34:90:90:27:b5:76:90:63:ca:cc:22:4b:51:
         df:5d:63:b1:92:bc:cc:48:31:d3:a1:af:32:39:1b:21:5a:4e:
         d3:64:da:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddtkIH5e6UBGCOkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
NzBlOWZmYTItZWZmMy00MDU3LWE4ZWMtZmMwNjhlMjAyZjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyXEBCtXwbUSKvZ9lZsnf4M63rq2omwLyPZw
MByl4H2idl4pFgimOdcV/DkzIHmt7wIgG0RXcRRBAcbaoQEUWcZTmuJIQYIn8vl+
tIlVGn3kl/qIXEDCQ3hpgvxsLWCCFodyT9NvO91aBqw1z591xbWizpunqCdamlkU
sW2P0Lr8BEHMq3H9PidzC56HnUV2Mu3IcTwA3JQx5gqDAmmpBetEJdBtUJOdqOcT
9s4tX4gum5Gt4kCmKymw9Rl7pDqANX+/ptsYPbM2fObvrn55pxeXm4mego2iy2jF
jzpuWwwzyJ3wfyfHMTY0Q1znwFzQmBi7AWQh0+2vMm5kL+Z08QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWrBTASZhzpgv9iV7OHmFWgznrGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDA4NGI0NmEtM2M5YS0z
MmJhLTk4ZTMtOTE5MDNiMzNhZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAZBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADylWTeVwuTrt/BbCqY40ciR2rCuGr+1WOdCkUIbGqXfCn05AIAE3VOB
BbAFBs6x+0nih3d7Dnhjq7XP+SR1kqiiReeSLruct8t0r2slkcbylzqRp2mdQfzM
5/rQTaeQLi6tNGB93NkJy/P66Ux1e4eA9GIQAJmb2dRxfQ7XU1rNIhO+7ct/OW6z
0gQduxZZi4FxFWjdx0u6ks8NLCMIIVC36ksNT0fTFTZvWCqV8VkaI6CEX3bqCbFE
0rBJAYaHTMHtFJS2aOZ2LlEefpGX9Ykbmq0YFpK2MUxFXIe1NJCQJ7V2kGPKzCJL
Ud9dY7GSvMxIMdOhrzI5GyFaTtNk2qI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:55 2024 by rpki-client on console-fra.rpki-client.org