Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ddc35b0c-8916-3da7-8372-7b9cfb3fc22b.roa
File:                     ddc35b0c-8916-3da7-8372-7b9cfb3fc22b.roa (raw, json)
Hash identifier:          SNXTTTufgGcbVrhX5Y2b7z1fbr0ubopHiTw7GZQJnM4=
Subject key identifier:   AE:46:86:49:32:4F:97:05:69:78:C6:24:F9:48:33:1B:8F:58:F2:EF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285845CE0901024D4445AD62FF7904
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ddc35b0c-8916-3da7-8372-7b9cfb3fc22b.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     397216
IP address blocks:        64.6.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:01:02:4d:44:45:ad:62:ff:79:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=5b70bb1b-8b58-4ca9-8578-98835c00dbbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6c:1d:81:23:4d:be:5b:45:b6:98:08:76:b5:
                    6a:6a:d6:75:2e:92:e0:f1:10:9e:0f:75:32:fb:5f:
                    45:29:21:cb:c4:da:6a:3f:5f:c2:f9:01:a5:fe:1f:
                    7b:57:eb:92:7a:fe:64:6c:4b:78:8b:b0:67:0a:47:
                    65:2e:e7:9e:4f:c5:8a:f0:01:36:30:e2:08:4d:2d:
                    bd:48:30:38:6e:4b:7e:77:42:c7:90:76:f8:b8:85:
                    ce:9b:f1:30:ac:ad:f3:b9:1a:42:50:94:36:85:39:
                    72:86:0b:a3:2d:de:08:db:45:f5:03:6a:a6:62:43:
                    63:1e:da:74:fe:56:eb:4b:dc:5e:f2:f0:a2:7c:42:
                    ba:6e:53:47:77:aa:39:0d:d2:14:e0:a8:b2:59:18:
                    20:2d:64:47:33:80:77:13:f2:1c:96:25:79:0f:6f:
                    a6:62:60:52:2b:30:0e:ed:c3:ae:b1:1b:f1:bd:be:
                    ad:db:76:28:d9:86:d9:6f:6c:6f:91:38:d3:ea:8f:
                    0e:29:b8:c8:97:a9:31:ae:6e:2a:10:c9:4e:1f:16:
                    54:69:d3:8f:51:99:f1:76:40:1f:2c:dd:fe:9f:ab:
                    43:e9:95:76:db:b7:ea:6e:3b:ce:e0:0d:40:fc:8b:
                    7b:2b:01:24:4c:10:3b:79:bb:bb:78:55:ae:ca:51:
                    f9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:46:86:49:32:4F:97:05:69:78:C6:24:F9:48:33:1B:8F:58:F2:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ddc35b0c-8916-3da7-8372-7b9cfb3fc22b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:4a:5c:31:05:89:53:d5:29:96:4e:7c:1c:01:a2:92:99:e1:
         d6:6b:79:01:68:a8:29:bf:d2:85:c5:6a:43:eb:40:2d:d1:ef:
         65:5e:cc:eb:6f:f2:7f:4b:6d:7f:50:e7:a5:ad:32:29:ce:8b:
         bb:1e:78:5a:a7:c4:86:9d:12:c1:4f:4a:78:c4:11:42:d6:08:
         a2:55:5c:e0:f9:b6:62:54:be:db:11:9e:e9:94:49:fb:5a:90:
         1a:f0:39:6e:83:8a:ea:3d:c6:ed:1b:95:e1:3d:c0:05:1b:07:
         e0:28:75:19:0c:cd:ac:12:86:43:a9:db:6c:e6:0b:a2:f3:16:
         eb:b2:12:34:8e:7d:a2:7e:08:d4:94:af:09:21:71:c0:b9:6b:
         7c:57:16:24:63:25:49:89:fd:02:90:7d:1c:f1:af:78:f3:0f:
         a6:11:09:84:de:7b:4a:96:75:8e:cc:6d:cf:27:aa:6c:69:62:
         53:c9:fa:40:e6:65:9d:a0:d1:9b:77:e1:2e:2e:50:51:85:ae:
         b3:ea:5e:e3:6d:04:61:09:09:0e:64:01:1c:7e:76:00:ea:13:
         e2:a8:11:97:aa:dc:47:53:82:39:cb:8e:0f:a2:93:7e:04:c1:
         38:81:6b:97:0b:1d:33:50:44:c8:f5:ba:e9:58:ee:73:2a:ff:
         57:3e:ae:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXOCQECTURFrWL/eQQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk
NWI3MGJiMWItOGI1OC00Y2E5LTg1NzgtOTg4MzVjMDBkYmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mwdgSNNvltFtpgIdrVqatZ1LpLg8RCeD3Uy
+19FKSHLxNpqP1/C+QGl/h97V+uSev5kbEt4i7BnCkdlLueeT8WK8AE2MOIITS29
SDA4bkt+d0LHkHb4uIXOm/EwrK3zuRpCUJQ2hTlyhgujLd4I20X1A2qmYkNjHtp0
/lbrS9xe8vCifEK6blNHd6o5DdIU4KiyWRggLWRHM4B3E/IcliV5D2+mYmBSKzAO
7cOusRvxvb6t23Yo2YbZb2xvkTjT6o8OKbjIl6kxrm4qEMlOHxZUadOPUZnxdkAf
LN3+n6tD6ZV227fqbjvO4A1A/It7KwEkTBA7ebu7eFWuylH5bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK5GhkkyT5cFaXjGJPlIMxuPWPLvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGRjMzViMGMtODkxNi0z
ZGE3LTgzNzItN2I5Y2ZiM2ZjMjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBKXDEFiVPVKZZOfBwBopKZ4dZreQFoqCm/0oXFakPrQC3R72VezOtv
8n9LbX9Q56WtMinOi7seeFqnxIadEsFPSnjEEULWCKJVXOD5tmJUvtsRnumUSfta
kBrwOW6Diuo9xu0bleE9wAUbB+AodRkMzawShkOp22zmC6LzFuuyEjSOfaJ+CNSU
rwkhccC5a3xXFiRjJUmJ/QKQfRzxr3jzD6YRCYTee0qWdY7Mbc8nqmxpYlPJ+kDm
ZZ2g0Zt34S4uUFGFrrPqXuNtBGEJCQ5kARx+dgDqE+KoEZeq3EdTgjnLjg+ik34E
wTiBa5cLHTNQRMj1uulY7nMq/1c+rss=
-----END CERTIFICATE-----
Generated at Wed May 15 15:09:08 2024 by rpki-client on console-fra.rpki-client.org