Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa
File:                     5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa (raw, json)
Hash identifier:          UYiYmPsvS/3IrVNWiWExqMFDc2c5NY3ioNtnh3JDWlQ=
Subject key identifier:   C3:F0:DA:0A:FB:04:9F:B7:21:1A:99:E8:76:BF:A5:7B:D0:38:F4:E3
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285845B21E2C7A2D7249AE053738C0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        67.217.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:2c:7a:2d:72:49:ae:05:37:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=4179467a-fd93-4e72-9e95-6da71cacaa3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cc:93:2b:40:7d:61:3a:cd:50:d5:10:50:7c:
                    c3:37:cf:6d:ca:4c:5b:73:87:5d:fc:d5:bf:9e:47:
                    3a:5c:65:ed:47:75:e9:bd:a4:bf:bc:87:47:80:48:
                    e0:fa:34:29:cd:6e:f1:45:e0:85:41:98:bf:f5:49:
                    9e:82:b7:3d:8e:46:91:b7:63:60:2f:78:f7:47:46:
                    96:f4:a1:bf:cb:01:39:8f:de:6f:ca:92:d3:22:c1:
                    e5:f4:d9:f0:56:d3:62:c0:bd:94:71:9a:d7:c9:8f:
                    49:4a:67:81:b3:f3:16:70:c1:d3:e1:d0:80:52:a3:
                    3b:a9:d5:15:c9:96:e6:15:26:64:9c:8f:86:15:d6:
                    cc:9f:36:13:d8:b3:b4:33:83:8e:90:a9:1c:a8:74:
                    3d:d3:52:fc:3d:0a:bf:28:71:a2:3e:4a:32:5d:17:
                    3e:11:e1:09:9f:a2:82:a3:71:b7:a6:ad:38:49:74:
                    17:c1:07:36:0b:8f:90:09:7a:a2:47:b5:5f:8d:be:
                    0c:44:5a:68:aa:3f:ec:00:01:8c:57:2b:71:61:fc:
                    64:d2:78:a0:1e:d0:19:79:64:9d:9a:1f:6e:91:5c:
                    5c:22:fc:e9:99:92:f8:d9:8d:89:5f:e1:d7:85:91:
                    a6:30:65:86:09:4e:e2:65:c7:86:05:c6:f0:da:15:
                    df:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F0:DA:0A:FB:04:9F:B7:21:1A:99:E8:76:BF:A5:7B:D0:38:F4:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:38:1e:90:cd:6b:76:70:26:6c:6f:e8:32:01:68:50:7f:f4:
         04:65:03:ef:c3:e5:a5:77:03:12:e3:ae:44:96:ba:1d:39:c3:
         7f:f8:7f:0e:8b:55:05:4e:a4:eb:1b:e7:71:e8:14:fc:e5:82:
         3c:e9:f9:7d:75:b9:52:00:87:d8:b9:9a:ad:b4:cd:93:e6:c1:
         5f:7b:c5:2d:0d:a9:39:61:0f:44:0d:dd:b0:1f:a7:84:3d:0d:
         b5:26:87:3f:e5:ea:ac:f7:74:33:c3:ca:ae:0f:00:25:64:66:
         7d:4f:c9:f5:5e:35:04:58:98:ee:a6:ce:ac:f6:a8:f2:ad:d4:
         28:fe:5c:40:36:a2:3c:6d:eb:73:92:95:ba:55:1b:63:ba:eb:
         75:3c:f6:05:fa:e7:9d:31:38:99:ca:d1:d0:59:f7:ea:85:05:
         b0:cd:05:b9:89:8f:16:da:de:88:6c:58:92:43:18:31:a7:b4:
         bf:77:ec:61:36:79:80:ca:de:4a:15:9c:ce:ca:10:33:56:12:
         72:77:dc:41:74:15:cc:7f:23:b0:79:f2:ca:85:3b:79:77:18:
         45:aa:0d:c0:f1:33:f6:36:cc:ae:d6:8f:98:f7:83:27:ad:05:
         e0:14:b7:1c:0e:3d:75:52:55:1e:93:73:8a:1d:a0:58:df:0c:
         eb:2b:b2:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWyHix6LXJJrgU3OMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI0MDQyODEzMDAzNFoXDTI0MDcyNzEzMDAzNFowLzEtMCsGA1UEAxMk
NDE3OTQ2N2EtZmQ5My00ZTcyLTllOTUtNmRhNzFjYWNhYTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MyTK0B9YTrNUNUQUHzDN89tykxbc4dd/NW/
nkc6XGXtR3XpvaS/vIdHgEjg+jQpzW7xReCFQZi/9Umegrc9jkaRt2NgL3j3R0aW
9KG/ywE5j95vypLTIsHl9NnwVtNiwL2UcZrXyY9JSmeBs/MWcMHT4dCAUqM7qdUV
yZbmFSZknI+GFdbMnzYT2LO0M4OOkKkcqHQ901L8PQq/KHGiPkoyXRc+EeEJn6KC
o3G3pq04SXQXwQc2C4+QCXqiR7Vfjb4MRFpoqj/sAAGMVytxYfxk0nigHtAZeWSd
mh9ukVxcIvzpmZL42Y2JX+HXhZGmMGWGCU7iZceGBcbw2hXfWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPw2gr7BJ+3IRqZ6Ha/pXvQOPTjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNWIzZjEyOTktZTJjNS0z
YWM2LTk5N2EtMTk1MGJlNzc0YzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI84HpDNa3ZwJmxv6DIBaFB/9ARlA+/D5aV3AxLjrkSWuh05w3/4fw6L
VQVOpOsb53HoFPzlgjzp+X11uVIAh9i5mq20zZPmwV97xS0NqTlhD0QN3bAfp4Q9
DbUmhz/l6qz3dDPDyq4PACVkZn1PyfVeNQRYmO6mzqz2qPKt1Cj+XEA2ojxt63OS
lbpVG2O663U89gX6550xOJnK0dBZ9+qFBbDNBbmJjxba3ohsWJJDGDGntL937GE2
eYDK3koVnM7KEDNWEnJ33EF0Fcx/I7B58sqFO3l3GEWqDcDxM/Y2zK7Wj5j3gyet
BeAUtxwOPXVSVR6Tc4odoFjfDOsrsu4=
-----END CERTIFICATE-----
Generated at Fri May 3 01:55:50 2024 by rpki-client on console-fra.rpki-client.org