Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/e7c2f987-15ce-3c09-93da-30643520c614.roa
File:                     e7c2f987-15ce-3c09-93da-30643520c614.roa (raw, json)
Hash identifier:          y6/Qg64kkaIAAITsZGZLurqpgdHKMH3GYHGKCNVUDqg=
Subject key identifier:   C1:90:29:10:FD:24:54:85:77:0E:A1:ED:8B:97:3B:22:FA:E9:11:28
Certificate issuer:       /CN=0b883aa7-bd4f-4703-b044-59552058f266
Certificate serial:       010D0C9F4328584598FDF6883EC3DD6C0E736A60
Authority key identifier: 83:A9:D3:49:01:EB:18:49:AF:28:59:BC:2C:FE:2D:7B:B4:A3:1F:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/e7c2f987-15ce-3c09-93da-30643520c614.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     3257
IP address blocks:        64.112.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fd:f6:88:3e:c3:dd:6c:0e:73:6a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b883aa7-bd4f-4703-b044-59552058f266
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=7c564407-f25d-493a-bd05-cb69559cd61b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b1:90:a7:25:82:78:7f:b3:8a:26:d2:ea:54:
                    e3:8e:bd:bc:bc:d7:4f:3a:59:02:1d:0d:68:e5:4a:
                    38:16:75:2f:54:7d:89:ac:35:60:aa:20:01:bb:71:
                    ba:b1:25:63:9a:ac:fa:30:d1:24:06:57:ce:33:0a:
                    ce:d4:b8:c0:05:0c:e4:36:fa:19:0e:63:c6:ea:9f:
                    3a:61:f3:c3:48:df:5a:7f:62:7f:07:71:83:e7:9f:
                    e9:c9:86:f8:0c:1f:a7:b4:27:d4:1c:01:53:d2:a1:
                    c6:ab:4a:ea:10:30:a2:c0:3f:4a:67:89:e4:04:f2:
                    30:a7:40:4e:b6:12:68:15:01:c4:9d:6f:ff:01:04:
                    2d:bb:6a:43:84:5c:99:52:0d:fe:7c:36:ef:a5:59:
                    7e:eb:d6:58:b0:19:9e:da:f5:9d:49:14:23:82:fe:
                    37:62:70:2f:4c:44:09:c4:ca:56:68:84:e6:9b:46:
                    9a:4e:8b:5b:30:09:8e:38:9e:36:da:7f:21:10:f4:
                    39:8b:b6:74:52:ae:bf:7c:ab:3f:83:01:c7:43:5b:
                    1f:04:1a:67:64:bb:55:a1:22:d8:bc:93:b3:74:66:
                    10:98:fe:f9:43:28:05:4d:43:bc:98:bd:5e:00:65:
                    a8:1c:55:ea:e0:19:80:67:91:e4:b9:f1:ff:9f:d1:
                    6a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:90:29:10:FD:24:54:85:77:0E:A1:ED:8B:97:3B:22:FA:E9:11:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/e7c2f987-15ce-3c09-93da-30643520c614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.crl

            X509v3 Authority Key Identifier:
                keyid:83:A9:D3:49:01:EB:18:49:AF:28:59:BC:2C:FE:2D:7B:B4:A3:1F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:0c:e6:41:a5:b9:4c:ae:60:3a:dc:1c:70:b9:e2:0e:2a:36:
         3e:60:67:ba:e9:03:b4:30:4b:10:a7:7f:de:3e:90:b3:bc:51:
         bd:42:d8:ca:a8:aa:bd:9b:b0:57:dd:fc:74:a8:63:49:c9:3d:
         d8:d2:97:02:26:66:f9:5e:7e:03:e8:3d:1f:50:4c:ca:6b:ba:
         d1:83:47:b4:aa:04:e1:af:08:2e:c7:f5:1a:64:e7:22:ae:1a:
         f9:cb:b5:9b:24:c0:24:96:d7:ec:f3:5e:cb:06:62:28:7c:46:
         08:14:a1:3c:da:0d:51:54:71:b2:49:50:7a:72:bd:1a:30:a9:
         5a:3b:3f:48:06:81:97:fc:c0:02:8f:8a:d1:f0:80:f4:5f:d7:
         a5:af:07:9e:4e:a2:73:cd:cc:56:0f:71:83:6a:27:83:1d:76:
         fa:16:9c:58:68:c8:85:97:2d:1d:76:72:bf:c9:e7:df:81:87:
         24:ef:99:c0:76:cb:c9:8d:0e:e6:6b:55:57:20:42:a6:bf:f4:
         0f:df:da:c2:c1:d2:82:20:35:be:ed:74:08:79:04:9b:24:65:
         a7:cf:14:ea:67:c8:89:2b:a7:0e:12:15:70:a3:12:13:c8:06:
         03:f7:bb:d5:28:b5:cf:e5:e1:9a:ca:b8:c1:d5:5c:51:29:bc:
         73:df:52:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWY/faIPsPdbA5zamAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGI4ODNhYTctYmQ0Zi00NzAzLWIwNDQtNTk1NTIwNThm
MjY2MB4XDTI0MDQxOTEzMDAzNloXDTI0MDcxODEzMDAzNlowLzEtMCsGA1UEAxMk
N2M1NjQ0MDctZjI1ZC00OTNhLWJkMDUtY2I2OTU1OWNkNjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrGQpyWCeH+ziibS6lTjjr28vNdPOlkCHQ1o
5Uo4FnUvVH2JrDVgqiABu3G6sSVjmqz6MNEkBlfOMwrO1LjABQzkNvoZDmPG6p86
YfPDSN9af2J/B3GD55/pyYb4DB+ntCfUHAFT0qHGq0rqEDCiwD9KZ4nkBPIwp0BO
thJoFQHEnW//AQQtu2pDhFyZUg3+fDbvpVl+69ZYsBme2vWdSRQjgv43YnAvTEQJ
xMpWaITmm0aaTotbMAmOOJ422n8hEPQ5i7Z0Uq6/fKs/gwHHQ1sfBBpnZLtVoSLY
vJOzdGYQmP75QygFTUO8mL1eAGWoHFXq4BmAZ5HkufH/n9Fq6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMGQKRD9JFSFdw6h7YuXOyL66REoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYjg4
M2FhNy1iZDRmLTQ3MDMtYjA0NC01OTU1MjA1OGYyNjYvZTdjMmY5ODctMTVjZS0z
YzA5LTkzZGEtMzA2NDM1MjBjNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGI4ODNhYTctYmQ0Zi00NzAzLWIw
NDQtNTk1NTIwNThmMjY2LzBiODgzYWE3LWJkNGYtNDcwMy1iMDQ0LTU5NTUyMDU4
ZjI2Ni5jcmwwHwYDVR0jBBgwFoAUg6nTSQHrGEmvKFm8LP4te7SjH40wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wYjg4M2FhNy1iZDRmLTQ3MDMtYjA0NC01OTU1
MjA1OGYyNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHAIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHUM5kGluUyuYDrcHHC54g4qNj5gZ7rpA7QwSxCnf94+kLO8Ub1C2Mqo
qr2bsFfd/HSoY0nJPdjSlwImZvlefgPoPR9QTMprutGDR7SqBOGvCC7H9Rpk5yKu
GvnLtZskwCSW1+zzXssGYih8RggUoTzaDVFUcbJJUHpyvRowqVo7P0gGgZf8wAKP
itHwgPRf16WvB55OonPNzFYPcYNqJ4MddvoWnFhoyIWXLR12cr/J59+BhyTvmcB2
y8mNDuZrVVcgQqa/9A/f2sLB0oIgNb7tdAh5BJskZafPFOpnyIkrpw4SFXCjEhPI
BgP3u9Uotc/l4ZrKuMHVXFEpvHPfUmE=
-----END CERTIFICATE-----
Generated at Sat May 4 15:04:48 2024 by rpki-client on console-fra.rpki-client.org