Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/87672430-cbec-3e81-a0dc-97dcc656fa58.roa
File:                     87672430-cbec-3e81-a0dc-97dcc656fa58.roa (raw, json)
Hash identifier:          dd1YH05ZNIA4z5pe1Oj84d0PAKOrwRlGX3Mfjpwfe8Y=
Subject key identifier:   DA:3A:87:C7:BB:A9:CE:44:87:82:20:D6:14:2A:29:0E:17:76:4A:CB
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F43285847F2BA29DF21299F9E58D81900
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/87672430-cbec-3e81-a0dc-97dcc656fa58.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     396253
IP address blocks:        163.120.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:29:df:21:29:9f:9e:58:d8:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=bf2dc46e-abc4-47ff-9c6e-a76914172967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e1:29:48:0c:10:5b:a7:9e:8f:db:49:6a:17:
                    d0:cc:b7:9c:cb:e5:73:83:7a:ff:26:f2:6a:c8:c4:
                    98:d2:fb:d4:78:4e:4f:b0:7c:e7:c0:52:e6:9b:80:
                    d6:4b:8c:b4:19:39:79:d8:cd:05:9b:00:70:14:ea:
                    03:3f:ae:1d:06:76:f1:0d:88:d6:ec:aa:27:f6:3b:
                    5c:00:ee:c0:30:2c:6d:58:d0:f2:6d:12:58:4d:5a:
                    b1:bb:1b:ed:2f:50:d9:3f:27:31:77:ef:47:4e:42:
                    a6:db:e2:a1:51:89:bd:f6:91:9b:e2:0e:49:3f:3c:
                    d2:58:d2:20:16:54:40:61:f1:85:4b:d0:89:1b:5d:
                    d4:d7:b2:6d:16:db:d7:ba:87:88:0c:aa:9c:5d:f9:
                    f0:53:12:9d:4e:df:89:e4:7d:a0:26:98:11:0e:d7:
                    60:0d:a4:c0:ba:4c:70:78:b5:35:fb:2a:ec:2e:e4:
                    1b:7e:93:e4:83:da:72:db:3a:76:84:10:6f:f1:c4:
                    4e:7e:b4:3b:08:41:31:66:9f:d1:9c:20:5f:92:1d:
                    8c:06:36:ad:93:13:f1:89:a6:f6:57:30:9c:97:ae:
                    79:5d:d1:e4:3e:b2:70:80:fb:e7:28:ff:24:10:73:
                    b4:89:b3:d9:4b:cb:84:08:dc:56:e2:45:3a:cd:63:
                    bc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3A:87:C7:BB:A9:CE:44:87:82:20:D6:14:2A:29:0E:17:76:4A:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/87672430-cbec-3e81-a0dc-97dcc656fa58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.120.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:5b:4c:70:0a:63:35:6c:42:7f:3f:d9:de:5d:37:99:8d:ae:
         49:0e:08:44:2c:31:be:40:c9:fb:f1:7d:68:2f:7e:d8:68:d3:
         df:c5:6c:4f:e3:c6:58:56:9c:47:bc:4f:33:8b:8d:85:1f:b7:
         de:1a:97:37:d3:16:c8:31:61:e2:0f:7a:1d:43:fe:87:9e:85:
         48:30:e3:f9:49:c5:21:9d:31:da:55:df:94:af:c6:a9:be:09:
         29:da:7a:68:11:94:0f:01:50:8b:ba:23:8e:fd:7a:4a:c8:48:
         4d:2c:47:9f:6a:0a:ac:ae:d4:99:53:58:32:58:f6:53:57:42:
         9e:0b:d6:6c:2c:69:17:e0:45:ff:4b:17:21:f1:f4:aa:ba:f1:
         1d:a0:42:11:2b:b6:21:ed:52:50:97:61:de:28:69:90:0f:dd:
         ba:df:d8:2d:a1:30:8b:93:ab:5a:24:97:3d:b2:9a:c4:3f:a6:
         51:26:c9:6d:ed:2a:a2:9d:0b:cd:9e:02:15:29:ae:0e:27:0e:
         fd:30:b8:79:83:51:58:0d:9c:7e:30:6f:04:63:5f:4d:5e:5b:
         11:3d:77:7c:57:74:66:68:1f:05:27:91:86:86:9b:3c:6e:48:
         66:3b:43:35:d7:c0:ea:62:82:b7:ea:af:0e:80:d3:9c:f4:2c:
         de:4f:a4:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfyuinfISmfnljYGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI0MTEyMTAyMDAzOFoXDTI1MDIxOTAyMDAzOFowLzEtMCsGA1UEAxMk
YmYyZGM0NmUtYWJjNC00N2ZmLTljNmUtYTc2OTE0MTcyOTY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOEpSAwQW6eej9tJahfQzLecy+Vzg3r/JvJq
yMSY0vvUeE5PsHznwFLmm4DWS4y0GTl52M0FmwBwFOoDP64dBnbxDYjW7Kon9jtc
AO7AMCxtWNDybRJYTVqxuxvtL1DZPycxd+9HTkKm2+KhUYm99pGb4g5JPzzSWNIg
FlRAYfGFS9CJG13U17JtFtvXuoeIDKqcXfnwUxKdTt+J5H2gJpgRDtdgDaTAukxw
eLU1+yrsLuQbfpPkg9py2zp2hBBv8cROfrQ7CEExZp/RnCBfkh2MBjatkxPxiab2
VzCcl655XdHkPrJwgPvnKP8kEHO0ibPZS8uECNxW4kU6zWO81wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNo6h8e7qc5Eh4Ig1hQqKQ4XdkrLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvODc2NzI0MzAtY2JlYy0z
ZTgxLWEwZGMtOTdkY2M2NTZmYTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBo3hAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADhbTHAKYzVsQn8/2d5dN5mNrkkOCEQsMb5AyfvxfWgvftho09/FbE/j
xlhWnEe8TzOLjYUft94alzfTFsgxYeIPeh1D/oeehUgw4/lJxSGdMdpV35Svxqm+
CSnaemgRlA8BUIu6I479ekrISE0sR59qCqyu1JlTWDJY9lNXQp4L1mwsaRfgRf9L
FyHx9Kq68R2gQhErtiHtUlCXYd4oaZAP3brf2C2hMIuTq1oklz2ymsQ/plEmyW3t
KqKdC82eAhUprg4nDv0wuHmDUVgNnH4wbwRjX01eWxE9d3xXdGZoHwUnkYaGmzxu
SGY7QzXXwOpigrfqrw6A05z0LN5PpCY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:01 2024 by rpki-client on console-fra.rpki-client.org