Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1b479152-b096-3335-94ad-9f045f087ebc.roa
File:                     1b479152-b096-3335-94ad-9f045f087ebc.roa (raw, json)
Hash identifier:          3p6vc863/7TmYDm6xTyoSFYcltqOfets77LRhbY3kG4=
Subject key identifier:   87:96:8F:E0:4E:10:28:5F:E6:19:E1:92:CA:59:87:65:BF:FA:0B:81
Certificate issuer:       /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Certificate serial:       010D0C9F43285847EBBF81830E05596678A71F00
Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1b479152-b096-3335-94ad-9f045f087ebc.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        149.72.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:81:83:0e:05:59:66:78:a7:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=f6408019-b035-497a-8fff-03c0b5748e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b5:49:8f:5d:be:dd:5e:7c:60:b1:8f:97:84:
                    05:41:87:5a:98:ce:36:77:b3:ef:d8:79:ab:c8:d5:
                    71:b0:fb:96:40:8f:60:ff:44:3a:ec:30:20:81:16:
                    9c:ec:c6:47:8b:1c:69:4f:06:0d:12:ea:3f:f9:9a:
                    82:3e:77:c2:28:0b:e9:35:5d:0a:c2:7b:1a:59:86:
                    10:47:02:f1:53:65:55:a3:36:5a:85:12:dc:65:37:
                    66:7a:e5:21:b0:bb:9e:99:c6:36:57:19:66:ff:35:
                    40:df:e3:18:d1:ad:6a:e6:12:c3:b6:1e:d3:6f:e2:
                    d5:71:02:c1:f9:a2:2f:76:cd:64:45:1a:26:1f:a2:
                    74:fb:94:3e:2b:1f:4b:c0:26:e4:6d:88:1b:42:6a:
                    00:b2:41:a1:e6:e0:94:0b:ee:72:eb:44:34:0d:28:
                    f7:f0:c8:45:15:c1:1c:2a:9f:9c:79:94:65:c1:6d:
                    c3:54:dc:0c:80:b1:2d:1e:ce:2e:2a:2c:33:df:2f:
                    99:3a:97:f3:d9:8f:a2:71:72:a7:8d:95:80:88:7e:
                    81:fa:b9:e4:55:70:ed:0a:a5:00:3a:80:2d:a7:da:
                    57:d2:f0:3d:27:9a:27:45:27:57:69:51:f8:3f:86:
                    60:cb:03:92:f5:30:44:c9:b7:fa:00:32:12:e7:40:
                    51:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:96:8F:E0:4E:10:28:5F:E6:19:E1:92:CA:59:87:65:BF:FA:0B:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1b479152-b096-3335-94ad-9f045f087ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl

            X509v3 Authority Key Identifier:
                keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.72.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:be:d4:c3:d5:33:df:f9:43:3e:a7:76:3a:30:de:42:6b:2d:
         83:e1:62:1f:2d:7c:93:77:3e:d5:f2:50:64:dc:28:72:01:f3:
         20:f6:b1:90:bd:58:69:d4:66:0b:f4:64:6c:7c:af:3a:96:71:
         e2:ff:13:d6:d3:ab:c9:80:33:c3:88:00:55:a4:bb:6f:73:a1:
         c2:a7:a3:31:e1:90:fb:b3:41:72:bb:55:2e:36:d0:4e:4d:53:
         fc:54:9a:50:6b:a0:0f:04:a1:1f:02:42:90:28:b9:73:4e:4e:
         9f:fa:3f:70:ad:8b:5a:47:32:4a:a2:69:51:ac:d9:60:2f:6e:
         6f:9c:40:4d:2f:9f:d4:02:f3:2a:ff:4b:ed:7c:34:2c:cf:9d:
         75:4f:d2:4e:da:9a:d7:16:28:5e:de:63:19:26:e5:06:4f:f4:
         a8:c0:db:b6:fd:54:d1:a6:da:47:d6:f8:8b:87:89:ef:6f:b4:
         93:e6:a9:9d:35:79:7f:c3:e1:eb:d4:28:da:b2:a0:45:3d:fa:
         af:8c:48:5a:ee:de:2c:47:80:73:58:6c:89:97:9b:1b:1b:0e:
         fa:ee:6a:2a:22:0a:7a:bf:91:63:59:08:21:ba:c1:e6:36:2e:
         58:84:2a:b6:43:a7:d5:e0:f9:ef:57:ad:fb:6b:d0:8a:86:35:
         64:93:2d:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrv4GDDgVZZninHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3
YzBiMB4XDTI0MTExODE0MDA0MFoXDTI1MDIxNjE0MDA0MFowLzEtMCsGA1UEAxMk
ZjY0MDgwMTktYjAzNS00OTdhLThmZmYtMDNjMGI1NzQ4ZTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbVJj12+3V58YLGPl4QFQYdamM42d7Pv2Hmr
yNVxsPuWQI9g/0Q67DAggRac7MZHixxpTwYNEuo/+ZqCPnfCKAvpNV0KwnsaWYYQ
RwLxU2VVozZahRLcZTdmeuUhsLuemcY2Vxlm/zVA3+MY0a1q5hLDth7Tb+LVcQLB
+aIvds1kRRomH6J0+5Q+Kx9LwCbkbYgbQmoAskGh5uCUC+5y60Q0DSj38MhFFcEc
Kp+ceZRlwW3DVNwMgLEtHs4uKiwz3y+ZOpfz2Y+icXKnjZWAiH6B+rnkVXDtCqUA
OoAtp9pX0vA9J5onRSdXaVH4P4ZgywOS9TBEybf6ADIS50BRrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIeWj+BOEChf5hnhkspZh2W/+guBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl
MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvMWI0NzkxNTItYjA5Ni0z
MzM1LTk0YWQtOWYwNDVmMDg3ZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3
OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli
N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy
MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlUgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKe+1MPVM9/5Qz6ndjow3kJrLYPhYh8tfJN3PtXyUGTcKHIB8yD2sZC9
WGnUZgv0ZGx8rzqWceL/E9bTq8mAM8OIAFWku29zocKnozHhkPuzQXK7VS420E5N
U/xUmlBroA8EoR8CQpAouXNOTp/6P3Cti1pHMkqiaVGs2WAvbm+cQE0vn9QC8yr/
S+18NCzPnXVP0k7amtcWKF7eYxkm5QZP9KjA27b9VNGm2kfW+IuHie9vtJPmqZ01
eX/D4evUKNqyoEU9+q+MSFru3ixHgHNYbImXmxsbDvruaioiCnq/kWNZCCG6weY2
LliEKrZDp9Xg+e9Xrftr0IqGNWSTLVY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:51 2024 by rpki-client on console-ams.rpki-client.org