Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/67997ea0-d09c-3c09-826b-b8693975ef81.roa
File:                     67997ea0-d09c-3c09-826b-b8693975ef81.roa (raw, json)
Hash identifier:          Oaa+zFyl7ljweNc5B/emvCg1mizATe5JCcZCqwpEJrw=
Subject key identifier:   9E:12:10:70:48:6B:B7:FF:65:4B:D2:44:02:B7:4E:6E:38:01:84:B8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285847D834C34BBE34E279DB466880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/67997ea0-d09c-3c09-826b-b8693975ef81.roa
Signing time:             Mon 11 Nov 2024 14:00:39 +0000
ROA not before:           Mon 11 Nov 2024 14:00:39 +0000
ROA not after:            Sun 09 Feb 2025 14:00:39 +0000
asID:                     125
IP address blocks:        2001:470:33a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:34:c3:4b:be:34:e2:79:db:46:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 11 14:00:39 2024 GMT
            Not After : Feb  9 14:00:39 2025 GMT
        Subject: CN=b264ad45-9001-4904-bb90-d7e2f2a92f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:92:e6:dd:d6:72:16:7d:a3:8d:b2:9d:1f:
                    ee:10:b4:1c:6d:de:5c:8e:1b:af:4d:5a:df:c5:b1:
                    94:60:d1:76:77:a2:04:e7:fb:11:a0:60:20:72:3c:
                    e5:1b:f7:6d:2b:52:8d:90:b7:de:44:68:8e:6f:a8:
                    e1:be:e8:fb:cc:6f:db:08:0d:33:da:66:66:aa:35:
                    d4:ef:c8:8c:63:d5:3e:59:52:36:4d:21:66:08:0b:
                    c5:0b:d3:62:26:ad:11:7b:fc:cc:fc:3d:d5:9b:39:
                    84:99:01:b1:df:1d:7b:36:53:4d:2c:1e:99:0e:c2:
                    98:91:ab:3e:5f:dc:4b:97:14:6b:47:bc:d1:f7:5a:
                    fe:85:ad:4a:6c:a0:b6:25:c9:31:23:d1:78:0d:0a:
                    60:c7:48:12:be:71:da:1f:11:70:e8:ac:0c:da:f6:
                    db:52:e0:ce:49:84:cd:14:71:67:92:ee:02:16:76:
                    22:64:c8:95:33:f6:4b:45:4d:fc:b9:ca:da:7e:88:
                    66:70:e3:9e:36:a8:05:fb:81:b4:af:4a:2c:0e:39:
                    98:38:dd:07:4b:c2:17:d0:62:a0:22:10:06:96:ca:
                    60:0c:d6:6c:9c:f2:82:96:00:9c:4a:82:c1:85:e1:
                    ae:e9:de:25:60:24:fa:06:09:e9:11:d7:55:e0:32:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:12:10:70:48:6B:B7:FF:65:4B:D2:44:02:B7:4E:6E:38:01:84:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/67997ea0-d09c-3c09-826b-b8693975ef81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:33a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:70:8c:e7:5b:c9:fa:1f:73:07:70:a1:2d:34:7a:3f:13:f5:
         2a:3e:6e:36:f9:32:35:0e:d5:32:10:d4:04:b8:9e:3e:59:51:
         68:a2:2e:4f:e2:19:91:ea:e7:ee:4f:51:cc:23:57:ad:fe:d2:
         b0:fc:38:40:c1:5e:bc:0f:37:9e:f4:2e:c7:fb:f9:b5:70:3b:
         47:9b:58:83:45:0a:fd:d9:ef:71:09:e0:69:d0:61:f7:77:0d:
         24:de:26:1f:ab:b7:a8:ce:82:95:09:ba:6b:58:7a:7e:8b:59:
         33:ab:e0:14:b1:89:6b:ce:cc:99:e1:21:77:78:1f:1b:47:b5:
         af:06:f1:5a:35:85:6e:c1:cc:93:2a:01:86:ff:8e:f7:26:8b:
         4b:06:eb:ff:cc:9f:c1:ce:94:7b:47:18:b0:44:6c:75:69:f2:
         d7:bc:20:54:79:4d:63:81:17:88:65:35:8a:d6:49:68:70:20:
         54:81:64:f4:5b:34:8b:75:1e:cd:08:8e:2e:a4:22:f4:7a:cd:
         91:d6:36:b9:ba:b0:8d:b6:b6:2d:ee:a0:dc:1e:94:4e:51:0d:
         e6:5c:2e:1e:95:80:ee:73:eb:b1:bd:97:b6:4a:7c:a9:4a:6b:
         da:53:84:5f:06:63:0c:7b:95:91:52:f3:60:fe:7c:f6:9d:36:
         45:da:ec:b3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfYNMNLvjTiedtGaIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTExMTE0MDAzOVoXDTI1MDIwOTE0MDAzOVowLzEtMCsGA1UEAxMk
YjI2NGFkNDUtOTAwMS00OTA0LWJiOTAtZDdlMmYyYTkyZjAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOeS5t3WchZ9o42ynR/uELQcbd5cjhuvTVrf
xbGUYNF2d6IE5/sRoGAgcjzlG/dtK1KNkLfeRGiOb6jhvuj7zG/bCA0z2mZmqjXU
78iMY9U+WVI2TSFmCAvFC9NiJq0Re/zM/D3VmzmEmQGx3x17NlNNLB6ZDsKYkas+
X9xLlxRrR7zR91r+ha1KbKC2JckxI9F4DQpgx0gSvnHaHxFw6KwM2vbbUuDOSYTN
FHFnku4CFnYiZMiVM/ZLRU38ucrafohmcOOeNqgF+4G0r0osDjmYON0HS8IX0GKg
IhAGlspgDNZsnPKClgCcSoLBheGu6d4lYCT6BgnpEddV4DJqPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ4SEHBIa7f/ZUvSRAK3Tm44AYS4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjc5OTdlYTAtZDA5Yy0z
YzA5LTgyNmItYjg2OTM5NzVlZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM6
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACVwjOdbyfofcwdwoS00ej8T9So+bjb5MjUO1TIQ1AS4nj5ZUWii
Lk/iGZHq5+5PUcwjV63+0rD8OEDBXrwPN570Lsf7+bVwO0ebWINFCv3Z73EJ4GnQ
Yfd3DSTeJh+rt6jOgpUJumtYen6LWTOr4BSxiWvOzJnhIXd4HxtHta8G8Vo1hW7B
zJMqAYb/jvcmi0sG6//Mn8HOlHtHGLBEbHVp8te8IFR5TWOBF4hlNYrWSWhwIFSB
ZPRbNIt1Hs0Iji6kIvR6zZHWNrm6sI22ti3uoNwelE5RDeZcLh6VgO5z67G9l7ZK
fKlKa9pThF8GYwx7lZFS82D+fPadNkXa7LM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:36 2024 by rpki-client on console-fra.rpki-client.org