Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a48c4031-9001-3dda-aefc-539842bcaa83.roa
File:                     a48c4031-9001-3dda-aefc-539842bcaa83.roa (raw, json)
Hash identifier:          qb6xpM8QzQIm/kIr12N6M3/RvoCVum3jpeMlIABAnrc=
Subject key identifier:   86:CA:FA:2F:50:2A:94:F8:F4:62:6E:BF:F8:34:F3:0E:76:90:43:B1
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858463289F5B2CD6368CD1CFD5AC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a48c4031-9001-3dda-aefc-539842bcaa83.roa
Signing time:             Thu 13 Jun 2024 13:00:34 +0000
ROA not before:           Thu 13 Jun 2024 13:00:34 +0000
ROA not after:            Wed 11 Sep 2024 13:00:34 +0000
asID:                     54120
IP address blocks:        64.206.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:32:89:f5:b2:cd:63:68:cd:1c:fd:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun 13 13:00:34 2024 GMT
            Not After : Sep 11 13:00:34 2024 GMT
        Subject: CN=58a057eb-cc0d-471b-a6de-a6fbe5dae6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:96:85:29:3a:b0:21:c5:45:d8:19:c3:37:
                    83:bb:9f:e0:c0:a7:08:d3:a5:42:1b:8b:1e:c4:03:
                    ed:af:13:ba:66:f1:54:77:81:3d:e2:51:4b:ef:44:
                    fb:fe:57:ad:a2:3f:f0:f9:b0:ad:c6:94:27:fc:9b:
                    02:38:78:5b:3f:d1:3d:1c:71:48:9d:3f:9b:de:69:
                    6d:eb:14:17:dc:30:2f:90:f3:1d:8a:ef:01:b8:f4:
                    79:4d:f7:00:7e:63:a7:a2:f4:f3:4f:7f:0a:41:d0:
                    54:0d:bd:db:71:14:32:8e:a6:0d:b7:1e:1c:ab:f0:
                    e0:8b:73:77:46:6a:47:98:a9:03:1a:f7:5a:98:a7:
                    ef:40:a4:65:5e:e4:44:c1:e8:d7:e0:d8:8f:84:df:
                    a6:0e:86:cd:7d:3a:43:bf:63:66:2c:b4:be:fb:e9:
                    45:05:7c:a9:6e:7c:b6:d1:84:24:fe:05:f3:d4:6e:
                    5b:c6:c1:ac:81:73:e0:c1:84:81:db:2d:32:bf:85:
                    8b:01:2e:e0:84:3e:5c:c8:77:12:26:9b:88:8d:52:
                    d2:fb:49:f4:53:69:da:51:72:52:83:dd:2a:cb:b6:
                    c3:4a:3f:af:1a:64:ee:5c:5a:e0:26:38:23:c5:89:
                    a7:e2:9a:18:3d:24:10:c4:eb:e0:b0:4c:7c:ef:93:
                    49:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CA:FA:2F:50:2A:94:F8:F4:62:6E:BF:F8:34:F3:0E:76:90:43:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a48c4031-9001-3dda-aefc-539842bcaa83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.206.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e1:7b:6d:c9:4d:e3:31:5c:b0:f8:bb:46:ac:13:6c:32:53:
         4a:0f:69:75:d4:eb:1f:af:64:79:11:e0:0e:57:0b:37:0b:23:
         a4:55:24:a2:05:f1:29:36:58:49:98:6d:22:36:cf:46:d4:2b:
         d2:b2:37:91:55:eb:d7:a9:27:83:2a:e2:19:fb:1a:bc:cd:12:
         e9:09:37:0e:38:b9:28:29:5e:22:ba:5e:46:96:f3:18:24:95:
         9f:c5:53:6c:67:25:27:73:ec:b1:64:e1:9b:36:0b:00:c8:02:
         f7:ff:c9:13:47:62:0a:d8:7d:f1:0f:59:e8:44:7e:be:da:5b:
         00:74:1f:f0:c7:14:48:48:2b:c9:4f:4a:90:70:32:c4:32:d5:
         6d:cc:18:1b:5b:cf:48:2d:7b:81:76:70:72:b6:99:79:df:3f:
         89:67:f4:10:45:20:99:46:eb:ac:fa:0a:41:b9:d0:35:4c:98:
         31:7d:99:ba:92:26:6b:2f:4c:82:eb:e5:a5:47:a9:fd:25:a2:
         d6:d5:fc:21:8f:50:61:07:89:3b:ba:a6:68:fe:7c:31:e6:fc:
         64:ad:57:5f:89:57:e3:17:b8:90:7e:20:ae:ba:89:ba:1c:48:
         7e:96:f2:ce:a4:1f:5d:df:00:cf:31:f5:a5:1a:1e:38:0d:8d:
         57:f3:ec:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYyifWyzWNozRz9WsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDYxMzEzMDAzNFoXDTI0MDkxMTEzMDAzNFowLzEtMCsGA1UEAxMk
NThhMDU3ZWItY2MwZC00NzFiLWE2ZGUtYTZmYmU1ZGFlNmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxGWhSk6sCHFRdgZwzeDu5/gwKcI06VCG4se
xAPtrxO6ZvFUd4E94lFL70T7/letoj/w+bCtxpQn/JsCOHhbP9E9HHFInT+b3mlt
6xQX3DAvkPMdiu8BuPR5TfcAfmOnovTzT38KQdBUDb3bcRQyjqYNtx4cq/Dgi3N3
RmpHmKkDGvdamKfvQKRlXuREwejX4NiPhN+mDobNfTpDv2NmLLS+++lFBXypbny2
0YQk/gXz1G5bxsGsgXPgwYSB2y0yv4WLAS7ghD5cyHcSJpuIjVLS+0n0U2naUXJS
g90qy7bDSj+vGmTuXFrgJjgjxYmn4poYPSQQxOvgsEx875NJxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIbK+i9QKpT49GJuv/g08w52kEOxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTQ4YzQwMzEtOTAwMS0z
ZGRhLWFlZmMtNTM5ODQyYmNhYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM4nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3he23JTeMxXLD4u0asE2wyU0oPaXXU6x+vZHkR4A5XCzcLI6RVJKIF
8Sk2WEmYbSI2z0bUK9KyN5FV69epJ4Mq4hn7GrzNEukJNw44uSgpXiK6XkaW8xgk
lZ/FU2xnJSdz7LFk4Zs2CwDIAvf/yRNHYgrYffEPWehEfr7aWwB0H/DHFEhIK8lP
SpBwMsQy1W3MGBtbz0gte4F2cHK2mXnfP4ln9BBFIJlG66z6CkG50DVMmDF9mbqS
JmsvTILr5aVHqf0lotbV/CGPUGEHiTu6pmj+fDHm/GStV1+JV+MXuJB+IK66iboc
SH6W8s6kH13fAM8x9aUaHjgNjVfz7M8=
-----END CERTIFICATE-----
Generated at Wed Jun 26 03:03:49 2024 by rpki-client on console-fra.rpki-client.org