Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88cfe400-afec-3911-a9c9-e559e02badd0.roa
File:                     88cfe400-afec-3911-a9c9-e559e02badd0.roa (raw, json)
Hash identifier:          mk78x2Tj0qzQq6o3uH4/QruFoW5da4euPqDNqhnoV24=
Subject key identifier:   39:D2:92:6E:67:B8:82:CC:62:0C:44:E9:68:6B:3B:C2:43:A0:A1:7B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBCCF92C78F2E298C9C100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88cfe400-afec-3911-a9c9-e559e02badd0.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        63.41.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:cc:f9:2c:78:f2:e2:98:c9:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=17444011-3c08-4d6a-ae07-35ac569faba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fa:ad:99:01:93:e5:05:48:d4:3f:e9:10:51:
                    a6:7b:50:06:8f:e0:11:81:2c:6d:4f:cf:e2:1c:67:
                    df:26:1e:e4:8b:7b:41:84:e1:25:c2:23:0a:25:66:
                    54:26:6a:b7:8c:38:23:d5:42:9b:82:a3:a9:ed:0c:
                    8d:42:10:1a:59:22:47:d2:99:08:25:15:0d:c6:5a:
                    47:d7:bf:ca:b3:2f:ca:68:65:bd:d4:d0:69:17:75:
                    12:a4:ec:6f:82:e5:68:30:96:c2:d2:19:57:07:54:
                    28:33:f5:a5:19:e8:85:22:aa:1a:68:10:45:06:43:
                    ba:2c:01:be:77:6d:81:38:86:80:6d:24:6b:7c:3b:
                    9a:93:57:da:8e:13:38:a8:e5:5b:ab:22:0e:f5:7b:
                    8d:0e:09:c6:b8:9f:ed:eb:43:68:0f:06:87:68:8f:
                    2f:fa:6a:58:36:30:46:62:ec:8c:c0:88:6f:90:40:
                    63:84:3f:d8:11:46:a6:b5:56:58:e6:5b:c6:d5:0a:
                    3c:7e:64:46:e7:8a:d4:fd:78:e4:f5:57:c2:34:33:
                    8f:21:9a:6e:27:87:84:0a:44:0b:3b:e1:a9:97:99:
                    dc:59:5b:8c:3e:a6:4b:c7:cd:00:e0:84:04:44:97:
                    ba:77:3d:98:a9:87:19:10:88:5b:f6:7b:8d:55:59:
                    21:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D2:92:6E:67:B8:82:CC:62:0C:44:E9:68:6B:3B:C2:43:A0:A1:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88cfe400-afec-3911-a9c9-e559e02badd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:0c:59:b6:36:23:a9:ef:97:6c:7c:0c:63:e0:4e:c4:8e:45:
         34:a7:18:85:a0:b6:bb:fd:d0:e3:e9:ab:6a:62:ea:ea:98:97:
         dc:78:18:6f:8c:bb:72:f2:3c:62:f0:94:31:5c:73:bf:59:6b:
         33:40:c4:a8:91:63:37:54:0e:5a:a4:07:76:a6:e2:94:c4:33:
         8a:39:22:d3:f9:8b:4f:a2:79:70:fe:58:09:47:ee:f6:66:7e:
         8f:35:55:20:5d:28:42:53:43:11:8f:3e:ca:a1:a6:6e:16:cb:
         25:b8:ef:31:ab:a0:84:70:53:83:da:d4:48:49:ce:02:67:ac:
         5b:32:d0:2e:1f:7d:e7:3a:ce:73:3a:1d:b9:96:80:d3:0c:3c:
         3e:d6:96:d6:5b:a7:b1:22:02:48:70:9c:96:c7:1f:bb:06:2d:
         04:a6:16:75:05:b9:35:fd:53:2e:ea:52:7f:2d:07:42:4a:4c:
         aa:dc:fe:4d:72:85:7c:d7:60:ba:a8:af:99:51:f2:aa:f6:dc:
         6c:f1:5e:11:41:38:5c:40:99:72:23:1f:48:bd:14:ae:38:37:
         58:ae:1e:a3:45:64:9d:aa:04:46:cb:0d:fe:77:57:19:ed:7e:
         79:30:13:cf:85:f6:ff:a7:2c:fd:8b:b8:c4:dc:f0:3c:36:ba:
         83:6c:aa:5f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEeJ68z5LHjy4pjJwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAxNDEzMDA0N1oXDTI1MDExMjE0MDA0N1owLzEtMCsGA1UEAxMk
MTc0NDQwMTEtM2MwOC00ZDZhLWFlMDctMzVhYzU2OWZhYmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvqtmQGT5QVI1D/pEFGme1AGj+ARgSxtT8/i
HGffJh7ki3tBhOElwiMKJWZUJmq3jDgj1UKbgqOp7QyNQhAaWSJH0pkIJRUNxlpH
17/Ksy/KaGW91NBpF3USpOxvguVoMJbC0hlXB1QoM/WlGeiFIqoaaBBFBkO6LAG+
d22BOIaAbSRrfDuak1fajhM4qOVbqyIO9XuNDgnGuJ/t60NoDwaHaI8v+mpYNjBG
YuyMwIhvkEBjhD/YEUamtVZY5lvG1Qo8fmRG54rU/Xjk9VfCNDOPIZpuJ4eECkQL
O+Gpl5ncWVuMPqZLx80A4IQERJe6dz2YqYcZEIhb9nuNVVkh+QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDnSkm5nuILMYgxE6WhrO8JDoKF7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODhjZmU0MDAtYWZlYy0z
OTExLWE5YzktZTU1OWUwMmJhZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAPykwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAewxZtjYjqe+XbHwMY+BOxI5FNKcYhaC2u/3Q4+mramLq6piX3HgYb4y7
cvI8YvCUMVxzv1lrM0DEqJFjN1QOWqQHdqbilMQzijki0/mLT6J5cP5YCUfu9mZ+
jzVVIF0oQlNDEY8+yqGmbhbLJbjvMaughHBTg9rUSEnOAmesWzLQLh995zrOczod
uZaA0ww8PtaW1lunsSICSHCclscfuwYtBKYWdQW5Nf1TLupSfy0HQkpMqtz+TXKF
fNdguqivmVHyqvbcbPFeEUE4XECZciMfSL0Urjg3WK4eo0VknaoERssN/ndXGe1+
eTATz4X2/6cs/Yu4xNzwPDa6g2yqXw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:41 2024 by rpki-client on console-fra.rpki-client.org