Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a6b88847-a0c7-3626-975e-b5416d5337c7.roa
File:                     a6b88847-a0c7-3626-975e-b5416d5337c7.roa (raw, json)
Hash identifier:          cTcY3ipSmzLYzZluF9Cza2bxF1iXx7p+/RRqP+fwrDo=
Subject key identifier:   9C:F5:55:64:FD:56:92:82:0E:2A:15:6A:AE:8F:A1:BD:ED:99:33:9F
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285847D29F5A1E6AF976ED5DF64AF0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a6b88847-a0c7-3626-975e-b5416d5337c7.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     8075
IP address blocks:        40.47.0.0/16 maxlen: 16
                          40.146.0.0/16 maxlen: 16
                          40.148.0.0/16 maxlen: 16
                          40.155.0.0/16 maxlen: 16
                          40.159.0.0/16 maxlen: 16
                          40.212.0.0/16 maxlen: 16
                          40.253.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:5a:1e:6a:f9:76:ed:5d:f6:4a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=bd2f20d7-1142-4110-8b4c-770427ea22cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:32:7b:f1:90:07:c5:56:ef:5e:f0:c2:97:90:
                    a5:f9:24:20:00:d1:e4:2f:eb:60:fe:be:92:5e:1b:
                    28:b1:12:21:14:93:86:80:25:44:79:f1:2a:d3:3d:
                    33:40:58:cb:2a:99:32:88:c6:c4:d5:89:8d:6d:78:
                    7e:87:78:ad:01:3b:c0:93:ca:37:be:2f:ca:55:da:
                    2f:9c:41:b4:3b:7e:56:75:23:73:43:96:24:19:8e:
                    f2:01:e8:20:a1:37:ad:70:26:3f:a4:c5:cf:45:65:
                    bb:c4:fd:c0:80:d6:2a:7a:17:8b:fe:5d:0b:30:35:
                    e4:84:4a:65:bd:8e:8c:04:75:38:4a:19:6f:53:40:
                    ea:53:14:40:57:bb:30:8e:55:42:cc:4a:46:5a:93:
                    2b:bf:e8:2d:4d:cf:bd:a7:60:c9:4b:35:5c:85:38:
                    20:c0:86:4b:05:17:b1:1e:b1:4d:a1:8a:fd:24:b9:
                    59:db:ce:06:f4:bd:cd:f0:63:f4:53:7e:08:5e:82:
                    d6:95:b7:8a:fc:a7:79:88:d5:ee:46:0e:12:28:a7:
                    8f:9a:97:2b:ae:b8:d0:6b:01:35:77:ea:37:86:7a:
                    e2:54:6b:6f:31:62:ed:cc:22:c7:8e:91:ad:c3:e3:
                    8f:e3:e0:e7:59:b4:fd:50:93:0d:4e:4f:0c:ec:85:
                    4f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F5:55:64:FD:56:92:82:0E:2A:15:6A:AE:8F:A1:BD:ED:99:33:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a6b88847-a0c7-3626-975e-b5416d5337c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.47.0.0/16
                  40.146.0.0/16
                  40.148.0.0/16
                  40.155.0.0/16
                  40.159.0.0/16
                  40.212.0.0/16
                  40.253.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:4c:76:f1:a7:5f:b8:67:7e:80:57:76:bc:15:ce:27:59:3e:
         93:c0:67:fc:54:92:98:e1:32:7f:78:93:24:08:64:05:ba:d1:
         78:ce:93:a2:79:47:3c:67:a1:10:6d:20:cf:76:ec:62:62:1f:
         66:3a:af:56:69:56:ff:a2:1d:96:b6:89:b6:e9:f2:d3:11:16:
         18:28:49:15:2d:4a:11:98:10:26:8a:08:3d:69:0d:e1:0d:1d:
         cf:05:40:ea:c8:ce:f6:1d:83:28:b5:45:96:69:47:f6:86:ed:
         8d:f5:82:57:0f:2e:c7:3a:b6:d3:46:6b:73:fc:6c:46:b9:76:
         a3:1b:5b:cc:8b:d0:82:52:8a:26:f2:72:d3:ae:a3:29:49:a0:
         70:5a:89:72:23:0c:13:e7:66:7b:0c:c4:00:45:20:f9:8b:01:
         5b:42:f9:3d:fc:38:13:3c:b6:50:d7:43:79:21:ac:b1:a0:d3:
         64:6a:c2:11:e8:80:75:3b:e9:f7:78:76:d6:d6:58:25:d0:24:
         1d:58:11:ad:3f:b4:1f:99:08:ff:cc:c1:c2:28:51:cd:1e:bf:
         7b:52:4d:01:03:6c:93:3d:2a:49:6b:ff:5a:61:93:89:b2:6b:
         ea:5f:90:80:82:44:bf:b7:72:6e:16:9e:80:c1:4a:22:22:22:
         41:72:27:6f
-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgIUAQ0Mn0MoWEfSn1oeavl27V32SvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI0MTEwOTE0MDA0MFoXDTI1MDIwNzE0MDA0MFowLzEtMCsGA1UEAxMk
YmQyZjIwZDctMTE0Mi00MTEwLThiNGMtNzcwNDI3ZWEyMmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizJ78ZAHxVbvXvDCl5Cl+SQgANHkL+tg/r6S
XhsosRIhFJOGgCVEefEq0z0zQFjLKpkyiMbE1YmNbXh+h3itATvAk8o3vi/KVdov
nEG0O35WdSNzQ5YkGY7yAeggoTetcCY/pMXPRWW7xP3AgNYqeheL/l0LMDXkhEpl
vY6MBHU4ShlvU0DqUxRAV7swjlVCzEpGWpMrv+gtTc+9p2DJSzVchTggwIZLBRex
HrFNoYr9JLlZ284G9L3N8GP0U34IXoLWlbeK/Kd5iNXuRg4SKKePmpcrrrjQawE1
d+o3hnriVGtvMWLtzCLHjpGtw+OP4+DnWbT9UJMNTk8M7IVP6QIDAQABo4IDcjCC
A24wHQYDVR0OBBYEFJz1VWT9VpKCDioVaq6Pob3tmTOfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTZiODg4NDctYTBjNy0z
NjI2LTk3NWUtYjU0MTZkNTMzN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAATAjAwMAKC8DAwAo
kgMDACiUAwMAKJsDAwAonwMDACjUAwMAKP0wVAYDVR0gAQH/BEowSDBGBggrBgEF
BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj
ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEEx28adfuGd+gFd2
vBXOJ1k+k8Bn/FSSmOEyf3iTJAhkBbrReM6TonlHPGehEG0gz3bsYmIfZjqvVmlW
/6IdlraJtuny0xEWGChJFS1KEZgQJooIPWkN4Q0dzwVA6sjO9h2DKLVFlmlH9obt
jfWCVw8uxzq200Zrc/xsRrl2oxtbzIvQglKKJvJy066jKUmgcFqJciMME+dmewzE
AEUg+YsBW0L5Pfw4Ezy2UNdDeSGssaDTZGrCEeiAdTvp93h21tZYJdAkHVgRrT+0
H5kI/8zBwihRzR6/e1JNAQNskz0qSWv/WmGTibJr6l+QgIJEv7dybhaegMFKIiIi
QXInbw==
-----END CERTIFICATE-----
Generated at Sun Nov 24 22:14:50 2024 by rpki-client on console-fra.rpki-client.org