Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a941ae50-7bbc-3a7a-8f8d-41421dad05cd.roa
File:                     a941ae50-7bbc-3a7a-8f8d-41421dad05cd.roa (raw, json)
Hash identifier:          0apsGL95u4q+LUxB2BDfa7iJmxjhojCoUrg6wU1ba+I=
Subject key identifier:   BD:EB:22:BF:DB:D0:27:39:ED:47:56:0A:F7:47:E0:45:7D:2C:0B:FB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F895616AEBF3F03304EC0AC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a941ae50-7bbc-3a7a-8f8d-41421dad05cd.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     11255
IP address blocks:        64.71.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:61:6a:eb:f3:f0:33:04:ec:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=930cf240-eca1-4910-b10c-8f089d8ef290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:93:c1:5d:ef:91:01:c8:69:9a:ba:6d:d0:be:
                    12:c7:f2:e3:18:46:d0:1b:6a:3e:40:bd:4a:1d:aa:
                    8c:25:ae:3e:a4:68:bd:f3:02:dd:bb:fa:d3:7b:d4:
                    5e:b9:d1:69:2c:bd:3f:4f:92:77:9b:62:4d:1d:be:
                    9f:13:f8:a0:f6:34:1d:3a:4d:1a:26:47:ce:9c:25:
                    44:fc:97:28:f2:a9:6b:af:91:1e:0c:5e:65:db:c9:
                    dd:e4:41:ca:ac:7d:39:9d:69:d2:a7:03:35:9a:c1:
                    0b:5c:e9:ad:52:5f:28:55:c7:0b:83:a5:87:79:c3:
                    ae:9b:c1:5d:68:e2:54:d2:c7:e6:08:a5:c4:db:e6:
                    ff:70:e7:85:c6:32:47:88:db:0b:27:aa:16:63:29:
                    cd:d6:bf:ab:30:9c:c5:f5:52:d6:38:78:2d:2d:5d:
                    04:ed:53:a6:51:7f:66:3f:5c:70:bd:89:e3:33:d0:
                    5a:3c:7c:ec:a3:b3:47:4d:0d:b9:14:6c:07:74:9e:
                    12:5c:3c:de:7b:b8:4d:0a:18:63:c8:7f:c9:c2:04:
                    e0:06:f1:2b:4c:4a:62:9b:09:e1:d5:c5:1f:d1:cd:
                    d9:82:4e:ee:fb:59:89:09:20:11:33:92:9b:fb:ff:
                    5d:0e:cc:d5:a8:34:ea:32:37:c7:da:9b:99:79:30:
                    39:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EB:22:BF:DB:D0:27:39:ED:47:56:0A:F7:47:E0:45:7D:2C:0B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a941ae50-7bbc-3a7a-8f8d-41421dad05cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e5:25:66:90:47:40:b0:93:2a:f9:64:4b:61:fc:db:92:b3:
         aa:2e:dd:fb:e1:cd:28:21:d8:63:f7:ff:e4:1c:d5:53:ff:0f:
         7e:42:42:d6:11:e4:40:e7:fb:09:bd:64:a0:cb:15:c3:b5:67:
         d5:a7:6e:c0:ed:b7:7f:dc:f5:05:20:fd:be:5f:5e:88:4f:70:
         8d:1f:cc:90:56:69:ed:23:0e:f1:38:f5:d9:86:3a:4a:cc:6f:
         d7:33:5a:2a:5e:d1:11:bb:31:0d:26:67:ca:c5:5b:db:b7:5d:
         a2:28:be:23:39:f2:0b:17:ad:a1:ac:85:60:70:ea:35:f9:ae:
         b1:57:ad:01:2d:41:cd:88:1c:87:9b:17:d7:15:45:60:86:21:
         7d:d3:a4:17:d3:b6:d1:fd:91:17:e1:83:c1:77:82:cf:6c:5d:
         eb:f2:7b:6e:01:66:5b:98:39:cc:1f:53:d4:00:79:10:11:e2:
         52:f3:21:6f:fa:51:e6:d7:d4:90:3d:48:11:38:f1:2f:c5:77:
         d9:b7:a6:d7:19:c1:79:79:2f:da:d0:ef:4c:39:66:4a:45:72:
         d9:ed:84:0e:e7:6d:6f:a8:1a:68:a8:d9:4c:a6:7b:55:b2:f1:
         72:c7:a9:4b:09:5a:26:d5:38:e0:5d:7a:d8:ee:02:e3:f5:ad:
         99:7d:b3:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET4lWFq6/PwMwTsCsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk
OTMwY2YyNDAtZWNhMS00OTEwLWIxMGMtOGYwODlkOGVmMjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpPBXe+RAchpmrpt0L4Sx/LjGEbQG2o+QL1K
HaqMJa4+pGi98wLdu/rTe9ReudFpLL0/T5J3m2JNHb6fE/ig9jQdOk0aJkfOnCVE
/Jco8qlrr5EeDF5l28nd5EHKrH05nWnSpwM1msELXOmtUl8oVccLg6WHecOum8Fd
aOJU0sfmCKXE2+b/cOeFxjJHiNsLJ6oWYynN1r+rMJzF9VLWOHgtLV0E7VOmUX9m
P1xwvYnjM9BaPHzso7NHTQ25FGwHdJ4SXDzee7hNChhjyH/JwgTgBvErTEpimwnh
1cUf0c3Zgk7u+1mJCSARM5Kb+/9dDszVqDTqMjfH2puZeTA5CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL3rIr/b0Cc57UdWCvdH4EV9LAv7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTk0MWFlNTAtN2JiYy0z
YTdhLThmOGQtNDE0MjFkYWQwNWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEeqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTlJWaQR0Cwkyr5ZEth/NuSs6ou3fvhzSgh2GP3/+Qc1VP/D35CQtYR
5EDn+wm9ZKDLFcO1Z9WnbsDtt3/c9QUg/b5fXohPcI0fzJBWae0jDvE49dmGOkrM
b9czWipe0RG7MQ0mZ8rFW9u3XaIoviM58gsXraGshWBw6jX5rrFXrQEtQc2IHIeb
F9cVRWCGIX3TpBfTttH9kRfhg8F3gs9sXevye24BZluYOcwfU9QAeRAR4lLzIW/6
UebX1JA9SBE48S/Fd9m3ptcZwXl5L9rQ70w5ZkpFctnthA7nbW+oGmio2Uyme1Wy
8XLHqUsJWibVOOBdetjuAuP1rZl9swg=
-----END CERTIFICATE-----
Generated at Mon May 6 22:50:43 2024 by rpki-client on console-ams.rpki-client.org