Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/3f9daaf7-9fd4-3628-95b0-400426a5dd7f.roa
File:                     3f9daaf7-9fd4-3628-95b0-400426a5dd7f.roa (raw, json)
Hash identifier:          ddpQ8x2p7JQhWgk+tay09REpRYQyO5KYg59CA09laJI=
Subject key identifier:   86:C0:C2:D6:6E:30:52:1B:F4:FB:F6:34:E7:08:16:D1:74:2E:E7:5E
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584640330B0FFAB56E6C55C8BE00
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/3f9daaf7-9fd4-3628-95b0-400426a5dd7f.roa
Signing time:             Tue 18 Jun 2024 10:27:36 +0000
ROA not before:           Tue 18 Jun 2024 10:27:36 +0000
ROA not after:            Mon 16 Sep 2024 10:27:36 +0000
asID:                     397041
IP address blocks:        64.112.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:40:33:0b:0f:fa:b5:6e:6c:55:c8:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Jun 18 10:27:36 2024 GMT
            Not After : Sep 16 10:27:36 2024 GMT
        Subject: CN=fa752dc6-e378-4f01-8dfc-b06bdc4398ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:12:6c:5c:cc:a3:63:5b:79:ed:e6:dd:19:8d:
                    b2:ca:ab:5d:de:40:d9:68:05:0c:bc:c0:dc:9f:74:
                    27:9a:37:ae:5c:52:26:b4:0d:07:58:fb:3e:43:4d:
                    e5:44:1a:be:20:cc:f7:d3:53:70:a8:01:07:4a:9c:
                    6a:30:02:3e:51:c3:4e:0f:f8:7d:42:37:a1:50:32:
                    65:79:75:fd:b3:92:38:e8:0b:6c:73:67:d4:40:be:
                    61:4e:79:df:20:97:33:56:74:1f:5c:ca:9d:d6:17:
                    bc:2d:54:1e:dc:9e:c8:c8:dc:b4:2c:3b:62:48:26:
                    0f:24:07:de:85:42:5b:9e:e8:85:0a:e2:49:3c:c6:
                    46:c1:6d:99:b2:9e:67:f1:e2:48:67:3c:78:c7:89:
                    22:b4:dc:39:2a:46:df:3e:46:fd:5d:d2:91:3a:99:
                    f8:be:51:0f:64:6b:99:f2:e1:ba:3f:da:b7:db:45:
                    ea:88:4c:e3:da:d0:f2:6b:7d:fe:96:8e:d8:07:61:
                    70:27:b6:b0:44:5a:e0:48:91:5a:13:15:33:d5:72:
                    a9:5f:46:98:92:17:c9:35:98:e2:7f:3f:8e:20:ae:
                    1d:d3:07:e6:9f:b7:34:ac:54:21:d9:fc:b9:e9:93:
                    81:88:88:98:ef:fe:f7:a5:3a:38:ca:21:86:a1:fe:
                    cb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C0:C2:D6:6E:30:52:1B:F4:FB:F6:34:E7:08:16:D1:74:2E:E7:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/3f9daaf7-9fd4-3628-95b0-400426a5dd7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:bd:19:cc:3a:b3:d4:a3:b1:9a:15:6b:b0:59:32:c6:9a:2f:
         15:6f:9e:af:5d:fb:b9:32:70:8c:b8:44:13:ec:b4:d9:03:c8:
         57:05:7f:b5:d1:13:50:25:95:15:8d:df:b0:df:4c:a0:c9:0a:
         b3:df:71:9c:21:23:a1:10:d8:91:37:1f:a0:f4:08:ad:dd:4f:
         50:dc:b5:fb:cc:71:10:3e:26:f9:db:72:ab:a6:7f:39:74:8f:
         f5:58:77:ed:30:46:a7:bd:0a:5a:61:d0:48:2a:34:57:69:95:
         e8:d2:93:20:54:3a:94:1b:16:aa:0a:8e:19:ae:66:23:60:df:
         83:6e:84:1e:d1:a4:48:14:5e:69:26:09:70:23:93:3c:70:52:
         cb:ff:cb:ba:88:41:31:e3:3e:5d:b2:86:d4:63:72:d9:ec:e8:
         14:0c:a0:10:5b:b5:25:1f:d7:4b:e6:5e:96:c9:dd:d9:8e:5e:
         54:66:58:a6:a7:ba:c9:c9:14:8c:62:87:b2:9e:91:f8:a5:12:
         0f:19:95:8a:90:b6:5c:d8:cc:51:6f:ec:7a:eb:df:53:2e:8c:
         a2:4a:65:b5:8c:98:80:f8:5f:8d:07:e8:db:f3:3c:44:81:b9:
         db:d3:9a:d6:0d:38:19:3e:72:f4:57:86:12:1a:53:ab:c2:70:
         dc:5f:6f:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZAMwsP+rVubFXIvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTJiNzllYzAtZGMzYi00YWUwLWFjOWEtYmU1ZTQ0MGNm
M2JmMB4XDTI0MDYxODEwMjczNloXDTI0MDkxNjEwMjczNlowLzEtMCsGA1UEAxMk
ZmE3NTJkYzYtZTM3OC00ZjAxLThkZmMtYjA2YmRjNDM5OGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBJsXMyjY1t57ebdGY2yyqtd3kDZaAUMvMDc
n3QnmjeuXFImtA0HWPs+Q03lRBq+IMz301NwqAEHSpxqMAI+UcNOD/h9QjehUDJl
eXX9s5I46Atsc2fUQL5hTnnfIJczVnQfXMqd1he8LVQe3J7IyNy0LDtiSCYPJAfe
hUJbnuiFCuJJPMZGwW2Zsp5n8eJIZzx4x4kitNw5KkbfPkb9XdKROpn4vlEPZGuZ
8uG6P9q320XqiEzj2tDya33+lo7YB2FwJ7awRFrgSJFaExUz1XKpX0aYkhfJNZji
fz+OIK4d0wfmn7c0rFQh2fy56ZOBiIiY7/73pTo4yiGGof7LJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIbAwtZuMFIb9Pv2NOcIFtF0LudeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMmI3
OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVlNDQwY2YzYmYvM2Y5ZGFhZjctOWZkNC0z
NjI4LTk1YjAtNDAwNDI2YTVkZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTJiNzllYzAtZGMzYi00YWUwLWFj
OWEtYmU1ZTQ0MGNmM2JmLzEyYjc5ZWMwLWRjM2ItNGFlMC1hYzlhLWJlNWU0NDBj
ZjNiZi5jcmwwHwYDVR0jBBgwFoAUCSgDghQhqZyoQ+WjADdHhNEkZ1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMmI3OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVl
NDQwY2YzYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHB4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJO9Gcw6s9SjsZoVa7BZMsaaLxVvnq9d+7kycIy4RBPstNkDyFcFf7XR
E1AllRWN37DfTKDJCrPfcZwhI6EQ2JE3H6D0CK3dT1DctfvMcRA+Jvnbcqumfzl0
j/VYd+0wRqe9Clph0EgqNFdplejSkyBUOpQbFqoKjhmuZiNg34NuhB7RpEgUXmkm
CXAjkzxwUsv/y7qIQTHjPl2yhtRjctns6BQMoBBbtSUf10vmXpbJ3dmOXlRmWKan
usnJFIxih7KekfilEg8ZlYqQtlzYzFFv7Hrr31MujKJKZbWMmID4X40H6NvzPESB
udvTmtYNOBk+cvRXhhIaU6vCcNxfb08=
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:36:53 2024 by rpki-client on console-fra.rpki-client.org