Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/875aebfb-12ca-3518-8fb5-da8aa746b43f.roa
File:                     875aebfb-12ca-3518-8fb5-da8aa746b43f.roa (raw, json)
Hash identifier:          mq0jVbBH7dcoIQzsCjsUrN+FAXmJUQeGaTqVWckciEc=
Subject key identifier:   B3:AF:67:F6:FC:7D:EA:6F:A2:BA:AF:5F:C2:A4:FD:69:B2:C8:B7:FA
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F432858484647BD444D6A84B8BDA56200
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/875aebfb-12ca-3518-8fb5-da8aa746b43f.roa
Signing time:             Sat 21 Dec 2024 00:18:01 +0000
ROA not before:           Sat 21 Dec 2024 00:18:01 +0000
ROA not after:            Thu 20 Mar 2025 23:18:01 +0000
asID:                     16509
IP address blocks:        65.62.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:46:47:bd:44:4d:6a:84:b8:bd:a5:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: Dec 21 00:18:01 2024 GMT
            Not After : Mar 20 23:18:01 2025 GMT
        Subject: CN=798bf094-53e2-4723-8a2a-0a369e39ab75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:d8:5b:27:33:14:b3:5f:42:41:64:ae:fb:
                    56:42:b0:7e:c6:e3:0e:ad:28:66:99:56:c7:e1:65:
                    18:e5:15:4b:a9:2b:7b:1c:b2:84:b5:52:13:dc:1f:
                    f5:cb:7c:c6:07:46:46:80:85:ff:4f:40:d1:c5:d8:
                    80:bf:4f:55:76:70:ef:e3:e5:46:b3:b9:f6:38:7e:
                    74:1e:ac:9c:72:d5:b1:2b:7d:a7:59:bc:16:c6:95:
                    95:af:7e:81:2d:5b:a6:b6:39:8b:3f:68:ad:ee:0e:
                    20:bf:06:2c:5c:00:31:0b:a4:40:70:4d:31:3e:d4:
                    30:ff:0c:c3:41:1f:aa:78:82:e7:0e:d6:83:3e:08:
                    ec:35:96:a2:18:c7:1d:9a:a1:30:28:05:80:33:04:
                    82:79:cc:7b:23:af:61:2c:ff:f7:d0:15:af:e2:76:
                    15:1a:34:db:9b:3c:13:29:c3:38:a7:00:7a:99:ec:
                    2e:21:a1:97:05:d0:e1:38:41:89:bf:f9:af:c5:ee:
                    bf:5f:ea:31:22:8c:8d:34:e7:70:65:a5:95:29:0e:
                    73:fe:32:3a:ea:fe:ee:71:48:26:59:4e:36:f6:85:
                    40:34:18:07:6a:04:a5:6f:c2:37:aa:9d:aa:4c:2f:
                    0a:27:89:e1:45:db:15:11:a1:e4:1d:10:6d:e6:73:
                    75:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AF:67:F6:FC:7D:EA:6F:A2:BA:AF:5F:C2:A4:FD:69:B2:C8:B7:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/875aebfb-12ca-3518-8fb5-da8aa746b43f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.62.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:0d:ad:84:44:d9:ca:82:43:4d:bd:fa:4a:68:dd:2f:cd:d1:
         4b:75:eb:70:91:4c:44:5d:6c:11:6a:09:fe:54:ff:62:a8:73:
         f1:8f:63:77:13:2f:eb:82:40:2c:af:21:6a:41:c8:34:39:4a:
         c4:09:ed:ed:95:f5:e0:0b:af:3a:10:57:f3:06:9f:cd:0c:7d:
         0a:95:c8:b2:54:b2:3b:0a:52:cc:ae:8b:2e:41:01:7a:45:ee:
         08:5f:57:c0:67:39:5d:e5:87:74:31:cd:f8:a4:f2:9a:3c:b6:
         ba:28:4d:cd:55:28:80:e2:6a:65:80:2f:cc:e5:f9:60:6d:5f:
         cf:b1:cd:50:7e:2e:7d:01:3b:a7:16:c5:9d:e7:09:f4:73:f1:
         98:6f:23:7e:c7:41:00:f3:61:c6:1d:97:da:16:66:41:3a:a7:
         fd:b3:88:52:3a:55:c6:5c:c1:a4:dc:57:6a:1d:13:b3:99:cd:
         e1:a7:c5:b5:b8:b7:75:5e:e7:91:62:4a:48:48:58:8c:bf:31:
         ca:c4:83:cc:63:66:a8:01:a8:d4:33:f7:94:b2:44:70:f3:b3:
         21:c1:f8:0c:31:79:52:5c:fb:c8:77:19:48:d7:70:06:aa:07:
         05:3e:c0:dc:82:0d:87:43:df:94:bf:18:e8:e6:e5:43:3e:a3:
         2b:78:e9:aa
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhGR71ETWqEuL2lYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz
NWExMB4XDTI0MTIyMTAwMTgwMVoXDTI1MDMyMDIzMTgwMVowLzEtMCsGA1UEAxMk
Nzk4YmYwOTQtNTNlMi00NzIzLThhMmEtMGEzNjllMzlhYjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpXYWyczFLNfQkFkrvtWQrB+xuMOrShmmVbH
4WUY5RVLqSt7HLKEtVIT3B/1y3zGB0ZGgIX/T0DRxdiAv09VdnDv4+VGs7n2OH50
HqycctWxK32nWbwWxpWVr36BLVumtjmLP2it7g4gvwYsXAAxC6RAcE0xPtQw/wzD
QR+qeILnDtaDPgjsNZaiGMcdmqEwKAWAMwSCecx7I69hLP/30BWv4nYVGjTbmzwT
KcM4pwB6mewuIaGXBdDhOEGJv/mvxe6/X+oxIoyNNOdwZaWVKQ5z/jI66v7ucUgm
WU429oVANBgHagSlb8I3qp2qTC8KJ4nhRdsVEaHkHRBt5nN1wQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLOvZ/b8fepvorqvX8Kk/WmyyLf6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk
MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvODc1YWViZmItMTJjYS0z
NTE4LThmYjUtZGE4YWE3NDZiNDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2
YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4
MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5
YjQyODM1YTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBQT4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEANA2thETZyoJDTb36SmjdL83RS3XrcJFMRF1sEWoJ/lT/Yqhz8Y9jdxMv
64JALK8hakHINDlKxAnt7ZX14AuvOhBX8wafzQx9CpXIslSyOwpSzK6LLkEBekXu
CF9XwGc5XeWHdDHN+KTymjy2uihNzVUogOJqZYAvzOX5YG1fz7HNUH4ufQE7pxbF
necJ9HPxmG8jfsdBAPNhxh2X2hZmQTqn/bOIUjpVxlzBpNxXah0Ts5nN4afFtbi3
dV7nkWJKSEhYjL8xysSDzGNmqAGo1DP3lLJEcPOzIcH4DDF5Ulz7yHcZSNdwBqoH
BT7A3IINh0PflL8Y6OblQz6jK3jpqg==
-----END CERTIFICATE-----
Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org