Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/acd2785b-7c86-3093-83c8-1646794147c2.roa
File:                     acd2785b-7c86-3093-83c8-1646794147c2.roa (raw, json)
Hash identifier:          thg3LeHiSOx3bivaxRI3Y/5oOITbjtwsNy94ycAiF3w=
Subject key identifier:   86:4A:2F:CE:E4:11:0D:77:B4:9C:43:9A:82:D6:30:35:EE:B0:3D:49
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F43285846F48353DFFC66F202EC3FAE00
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/acd2785b-7c86-3093-83c8-1646794147c2.roa
Signing time:             Thu 22 Aug 2024 00:34:51 +0000
ROA not before:           Thu 22 Aug 2024 00:34:51 +0000
ROA not after:            Wed 20 Nov 2024 01:34:51 +0000
asID:                     46488
IP address blocks:        65.87.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f4:83:53:df:fc:66:f2:02:ec:3f:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Aug 22 00:34:51 2024 GMT
            Not After : Nov 20 01:34:51 2024 GMT
        Subject: CN=311a90aa-89f8-41e2-9009-944a7d869ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c5:81:03:8d:93:2f:72:d7:2a:4e:7d:09:21:
                    26:93:ee:af:0b:87:0c:96:c7:5e:1e:d9:45:88:ce:
                    c8:dc:fa:1c:b6:15:34:b7:ae:59:bb:2e:52:af:29:
                    ad:6f:29:51:d9:3b:7f:d9:16:b2:3c:f3:a2:eb:d6:
                    2a:a4:ca:0d:a7:f5:98:3b:57:80:73:99:59:68:76:
                    5a:47:c0:f8:42:78:0b:96:6c:fd:e4:d2:2a:76:cd:
                    fa:48:a4:f2:06:88:14:e9:36:ac:8a:a2:cc:9f:41:
                    63:d6:36:56:fd:d5:e4:5e:50:de:8b:c9:ea:5d:2f:
                    9d:58:11:e5:52:ce:e3:cc:7e:3f:55:e4:47:a2:38:
                    64:d3:49:31:89:af:b2:5d:95:4d:f5:7c:79:66:46:
                    64:32:10:6e:df:d2:68:b3:99:c0:ca:0d:20:ff:d6:
                    0a:ae:68:ff:85:35:4b:75:10:1a:46:0d:35:cc:87:
                    eb:bc:2e:e8:a0:cd:fc:af:7e:a8:e2:38:e5:28:dc:
                    2d:66:e4:ba:5e:1f:a1:15:ba:ad:3f:c8:73:c8:15:
                    3c:e8:9f:26:a6:58:17:a0:8a:ff:e1:4b:c4:d5:13:
                    34:2f:83:44:42:b5:4a:dc:00:df:07:88:8a:94:fa:
                    8d:a6:29:fd:71:a2:15:b2:38:23:fd:4a:07:7d:5b:
                    26:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4A:2F:CE:E4:11:0D:77:B4:9C:43:9A:82:D6:30:35:EE:B0:3D:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/acd2785b-7c86-3093-83c8-1646794147c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:53:31:7b:32:4d:dd:bb:6c:7c:38:c0:18:57:3c:27:49:9b:
         90:52:d7:a3:37:ab:75:da:20:e3:3d:e8:1c:ef:6c:d8:fc:75:
         1a:9d:ef:ef:59:3d:57:7b:9c:df:63:bb:a8:0a:f4:c9:b9:01:
         9c:b5:d6:95:7d:66:9d:87:11:01:1c:f6:66:3a:0f:25:ae:f5:
         6c:49:91:ed:91:5c:bf:bf:05:7a:7a:59:19:47:16:5c:d8:35:
         63:57:9c:7f:90:a8:af:db:69:c1:e8:98:7f:12:ed:df:5e:20:
         16:e3:f7:84:ae:a7:ec:a8:2e:ab:cc:fb:9f:61:78:51:df:d1:
         4a:68:d5:b5:4b:68:c1:e3:67:2e:df:89:fa:40:f0:ec:ad:9e:
         1b:20:02:35:18:e6:4f:a4:20:68:ba:5e:a3:6e:f0:31:f6:0b:
         07:f4:83:32:0a:2a:c0:a8:37:ce:45:a0:40:fa:9a:4f:50:dc:
         80:84:fb:4f:80:9d:c7:39:e7:b6:77:82:89:97:d2:5f:20:94:
         a7:ef:bb:31:14:9e:87:f2:5c:c6:b4:f8:b7:32:02:5e:c9:75:
         c0:9c:77:10:d8:bd:5f:84:6e:f9:11:9e:b7:ba:93:48:2e:67:
         42:4a:44:21:14:6f:74:71:e2:e2:4f:46:53:77:21:be:f6:10:
         60:5f:a7:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEb0g1Pf/GbyAuw/rgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk
NWYzMB4XDTI0MDgyMjAwMzQ1MVoXDTI0MTEyMDAxMzQ1MVowLzEtMCsGA1UEAxMk
MzExYTkwYWEtODlmOC00MWUyLTkwMDktOTQ0YTdkODY5YWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMWBA42TL3LXKk59CSEmk+6vC4cMlsdeHtlF
iM7I3PocthU0t65Zuy5SrymtbylR2Tt/2RayPPOi69YqpMoNp/WYO1eAc5lZaHZa
R8D4QngLlmz95NIqds36SKTyBogU6TasiqLMn0Fj1jZW/dXkXlDei8nqXS+dWBHl
Us7jzH4/VeRHojhk00kxia+yXZVN9Xx5ZkZkMhBu39Jos5nAyg0g/9YKrmj/hTVL
dRAaRg01zIfrvC7ooM38r36o4jjlKNwtZuS6Xh+hFbqtP8hzyBU86J8mplgXoIr/
4UvE1RM0L4NEQrVK3ADfB4iKlPqNpin9caIVsjgj/UoHfVsmGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIZKL87kEQ13tJxDmoLWMDXusD1JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl
Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvYWNkMjc4NWItN2M4Ni0z
MDkzLTgzYzgtMTY0Njc5NDE0N2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky
ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi
ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk
M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxTMXsyTd27bHw4wBhXPCdJm5BS16M3q3XaIOM96BzvbNj8dRqd7+9Z
PVd7nN9ju6gK9Mm5AZy11pV9Zp2HEQEc9mY6DyWu9WxJke2RXL+/BXp6WRlHFlzY
NWNXnH+QqK/bacHomH8S7d9eIBbj94Sup+yoLqvM+59heFHf0Upo1bVLaMHjZy7f
ifpA8OytnhsgAjUY5k+kIGi6XqNu8DH2Cwf0gzIKKsCoN85FoED6mk9Q3ICE+0+A
ncc557Z3gomX0l8glKfvuzEUnofyXMa0+LcyAl7JdcCcdxDYvV+EbvkRnre6k0gu
Z0JKRCEUb3Rx4uJPRlN3Ib72EGBfp5o=
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:44:18 2024 by rpki-client on console-fra.rpki-client.org