Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29ff3ae9-c8c9-37a2-9eee-e03ef175cac1.roa
File:                     29ff3ae9-c8c9-37a2-9eee-e03ef175cac1.roa (raw, json)
Hash identifier:          WKsbZk1wxPSGr4RcYrzk8+W+eHqvnz7XqZMUUlPWM+s=
Subject key identifier:   49:7B:C8:7D:14:AA:2F:0B:62:AF:72:E1:43:B9:1C:7B:30:2C:D9:8D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76BFDA9421E633AD7B9300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29ff3ae9-c8c9-37a2-9eee-e03ef175cac1.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     14717
IP address blocks:        65.249.184.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:bf:da:94:21:e6:33:ad:7b:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=6f3f64de-c0f2-44d1-82ae-aa0766329414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:20:65:04:84:9f:b5:5d:a4:94:62:8f:50:a1:
                    f6:b3:b2:2d:9d:0f:b6:2c:90:79:b5:dc:2a:89:6f:
                    79:3d:84:44:a4:a0:18:9c:ce:c0:8b:90:dc:74:64:
                    44:89:12:ab:d8:56:4b:f2:f8:41:83:16:e2:43:18:
                    1c:4a:cb:12:b9:fe:a4:8b:2e:22:0b:b6:ca:ea:ad:
                    c0:be:94:1a:a3:15:3b:10:d4:bf:1f:c3:1c:bf:d1:
                    0b:02:8f:9c:57:fb:39:be:e2:8d:34:ad:eb:b1:09:
                    aa:ab:26:db:01:99:26:dc:c2:3a:49:a4:e5:0b:fa:
                    44:a7:50:1a:6a:a7:af:d7:29:2d:f0:7f:6b:6e:c2:
                    96:f8:4c:90:c5:34:da:a9:80:f6:0a:7b:0f:d2:7b:
                    f3:b8:c0:93:62:aa:75:81:70:1a:ca:ba:68:54:e2:
                    2a:96:9f:13:52:3e:68:33:ca:69:97:cd:d1:89:09:
                    45:e6:b0:11:32:fa:c5:87:f6:ca:fd:d4:0d:67:21:
                    6c:24:bd:df:5c:99:d8:cd:67:f4:35:9e:f5:42:99:
                    fd:49:aa:f1:64:e6:59:74:a4:77:6d:dc:fd:0c:f3:
                    5d:7a:23:fd:2b:07:ca:55:cc:bc:31:d7:28:43:ce:
                    ef:18:17:cc:a9:d5:74:a2:27:a9:18:59:38:c9:db:
                    2e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7B:C8:7D:14:AA:2F:0B:62:AF:72:E1:43:B9:1C:7B:30:2C:D9:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29ff3ae9-c8c9-37a2-9eee-e03ef175cac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.249.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:89:1d:a8:2d:0d:47:85:4f:8c:fd:df:c5:e9:73:12:cd:07:
         b8:da:07:ad:4b:f3:c9:49:5e:e0:c0:b2:76:1c:72:50:6f:04:
         02:ab:c3:26:9a:c5:7d:71:b8:6c:60:1e:95:f7:2b:10:80:2e:
         81:03:d3:38:b6:3c:23:ba:6c:ec:33:2c:fd:5c:47:e1:48:61:
         57:68:77:a8:5a:e5:51:79:e7:1d:51:73:08:c8:b8:c9:47:09:
         6b:26:19:dc:84:a3:3c:cf:15:bc:56:92:32:6e:2e:a9:9f:17:
         f7:44:d4:72:2a:6b:44:10:b9:a7:b8:95:36:d3:b2:bc:33:ec:
         e9:3c:b6:a6:95:04:4c:37:ea:a7:85:53:9e:31:f6:87:b5:e1:
         c3:9d:3f:d3:5e:e7:e8:66:d5:66:ed:b4:f5:15:89:35:2a:1a:
         26:53:35:84:df:9a:23:3c:e5:b9:b0:ea:e4:5a:26:92:c4:79:
         e2:8e:5c:18:37:fc:f5:53:01:26:e4:43:c0:32:4b:af:91:35:
         cb:3b:e2:7e:84:d8:51:08:41:3a:b9:ad:c2:df:51:42:8d:17:
         56:e7:f6:5f:7c:98:8f:37:ed:3f:79:00:4a:d0:3c:54:7a:1c:
         2f:de:f4:20:8a:0c:08:04:9b:bf:b9:4a:2f:cc:4b:97:89:e9:
         a2:5f:b9:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddr/alCHmM617kwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
NmYzZjY0ZGUtYzBmMi00NGQxLTgyYWUtYWEwNzY2MzI5NDE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiBlBISftV2klGKPUKH2s7ItnQ+2LJB5tdwq
iW95PYREpKAYnM7Ai5DcdGREiRKr2FZL8vhBgxbiQxgcSssSuf6kiy4iC7bK6q3A
vpQaoxU7ENS/H8Mcv9ELAo+cV/s5vuKNNK3rsQmqqybbAZkm3MI6SaTlC/pEp1Aa
aqev1ykt8H9rbsKW+EyQxTTaqYD2CnsP0nvzuMCTYqp1gXAayrpoVOIqlp8TUj5o
M8ppl83RiQlF5rARMvrFh/bK/dQNZyFsJL3fXJnYzWf0NZ71Qpn9SarxZOZZdKR3
bdz9DPNdeiP9KwfKVcy8MdcoQ87vGBfMqdV0oiepGFk4ydsu3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEl7yH0Uqi8LYq9y4UO5HHswLNmNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjlmZjNhZTktYzhjOS0z
N2EyLTllZWUtZTAzZWYxNzVjYWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQfm4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIaJHagtDUeFT4z938XpcxLNB7jaB61L88lJXuDAsnYcclBvBAKrwyaa
xX1xuGxgHpX3KxCALoED0zi2PCO6bOwzLP1cR+FIYVdod6ha5VF55x1RcwjIuMlH
CWsmGdyEozzPFbxWkjJuLqmfF/dE1HIqa0QQuae4lTbTsrwz7Ok8tqaVBEw36qeF
U54x9oe14cOdP9Ne5+hm1WbttPUViTUqGiZTNYTfmiM85bmw6uRaJpLEeeKOXBg3
/PVTASbkQ8AyS6+RNcs74n6E2FEIQTq5rcLfUUKNF1bn9l98mI837T95AErQPFR6
HC/e9CCKDAgEm7+5Si/MS5eJ6aJfuTQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:17 2024 by rpki-client on console-ams.rpki-client.org