Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/9f85156e-f2d4-37b3-a63c-5c56e20c9f65.roa
File:                     9f85156e-f2d4-37b3-a63c-5c56e20c9f65.roa (raw, json)
Hash identifier:          mvG9xVEf+jIDFvsUw5lsFZ2TaqkiJtKO+Yt3TFWqmz4=
Subject key identifier:   B5:9C:D1:19:EB:36:46:94:EE:78:67:2E:CC:A4:FC:CF:50:BB:A2:6A
Certificate issuer:       /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial:       010D0C9F432858487595DFBBCE00295A7877CA80
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/9f85156e-f2d4-37b3-a63c-5c56e20c9f65.roa
Signing time:             Mon 06 Jan 2025 22:58:26 +0000
ROA not before:           Mon 06 Jan 2025 22:58:26 +0000
ROA not after:            Sun 06 Apr 2025 21:58:26 +0000
asID:                     33651
IP address blocks:        64.84.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:75:95:df:bb:ce:00:29:5a:78:77:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
        Validity
            Not Before: Jan  6 22:58:26 2025 GMT
            Not After : Apr  6 21:58:26 2025 GMT
        Subject: CN=610c2ba3-3ff9-4060-b147-75ffebc14c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:47:fd:24:a5:d5:82:12:21:32:75:5c:da:66:
                    53:65:4c:9e:6d:79:5c:b1:a3:2a:75:8e:a7:99:30:
                    34:a1:08:7f:49:fc:0e:29:e1:eb:a7:4c:60:4b:cc:
                    82:68:d5:a9:81:e0:59:ec:e0:6c:a7:d2:95:fa:dc:
                    1a:91:28:51:24:11:69:77:40:0b:46:5d:5c:cb:80:
                    dc:89:1f:9a:e6:32:64:16:b2:35:ed:27:dd:17:e3:
                    51:b1:3b:c6:42:53:92:37:ab:2b:cd:0c:1b:4a:76:
                    5d:29:92:81:8a:cd:7e:9e:8a:3c:1b:49:be:e3:ff:
                    8c:89:f4:31:0c:23:f2:d3:1e:3e:08:01:eb:b8:85:
                    06:5c:61:aa:ba:fa:6a:75:ca:03:f3:34:58:2b:44:
                    1a:57:98:bb:e5:d4:f6:66:c4:a0:3d:eb:fb:c9:77:
                    ed:16:85:67:34:45:e0:91:be:fe:32:97:82:30:c9:
                    4a:ad:18:b8:cc:62:e5:f6:64:c2:48:bb:4c:de:1b:
                    86:c6:88:00:c7:a0:f0:31:69:b2:c6:f4:a4:a0:4a:
                    95:91:2e:ac:eb:a8:f6:5e:3b:75:30:1d:d9:aa:f5:
                    fe:59:c6:d7:5b:2e:12:c7:56:a2:68:7c:32:c4:8f:
                    d4:f3:b5:27:73:6b:0f:16:d4:b7:60:a6:0e:46:3d:
                    1f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9C:D1:19:EB:36:46:94:EE:78:67:2E:CC:A4:FC:CF:50:BB:A2:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/9f85156e-f2d4-37b3-a63c-5c56e20c9f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl

            X509v3 Authority Key Identifier:
                keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:5f:c8:bf:40:32:51:b4:63:b1:3f:d5:79:86:04:cf:8b:8f:
         99:89:b6:d5:1b:e1:07:47:75:bf:52:73:74:5a:e2:ef:21:1d:
         b6:00:6f:e3:3a:b2:8f:4e:9e:95:8a:23:d4:49:45:e7:a5:6a:
         7a:55:8c:26:fe:64:74:f5:7e:42:52:bf:f4:2f:5b:4e:de:83:
         ed:1b:10:66:a8:c1:96:f7:e2:c5:51:8d:90:de:a8:d4:5f:55:
         6e:61:a3:84:d3:9f:c2:53:ea:64:27:47:6c:d4:cb:6c:e0:44:
         48:42:e7:08:c0:2e:9d:e4:f9:8d:bd:6f:33:40:8e:fc:77:6e:
         da:6c:0a:6d:98:18:3a:4a:30:89:1f:f3:89:d6:d5:97:14:ec:
         41:8c:a4:11:3c:d3:da:ec:77:8c:61:d7:15:a3:ef:29:1c:fb:
         93:42:3f:7c:93:7d:3b:a6:62:e0:42:10:5f:1e:b8:04:d0:c6:
         3a:37:37:e5:5a:ff:2b:fb:ab:6f:b4:d1:07:0e:b6:f2:de:04:
         26:71:ae:81:77:02:0a:88:75:b8:ac:35:0c:0a:68:d6:a6:6b:
         d3:3d:5a:df:69:26:aa:ce:4b:ce:0c:91:d5:cc:7e:4d:f2:09:
         53:fb:44:05:31:18:2b:21:90:dd:e5:f1:bf:11:de:0a:c3:ec:
         3a:36:e8:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh1ld+7zgApWnh3yoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYwZjQ2ZGItYzllNi00ZDQ3LTkxMzQtMjA5NjNlYjFk
YmJmMB4XDTI1MDEwNjIyNTgyNloXDTI1MDQwNjIxNTgyNlowLzEtMCsGA1UEAxMk
NjEwYzJiYTMtM2ZmOS00MDYwLWIxNDctNzVmZmViYzE0YzdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkf9JKXVghIhMnVc2mZTZUyebXlcsaMqdY6n
mTA0oQh/SfwOKeHrp0xgS8yCaNWpgeBZ7OBsp9KV+twakShRJBFpd0ALRl1cy4Dc
iR+a5jJkFrI17SfdF+NRsTvGQlOSN6srzQwbSnZdKZKBis1+noo8G0m+4/+MifQx
DCPy0x4+CAHruIUGXGGquvpqdcoD8zRYK0QaV5i75dT2ZsSgPev7yXftFoVnNEXg
kb7+MpeCMMlKrRi4zGLl9mTCSLtM3huGxogAx6DwMWmyxvSkoEqVkS6s66j2Xjt1
MB3ZqvX+WcbXWy4Sx1aiaHwyxI/U87Unc2sPFtS3YKYORj0f5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWc0RnrNkaU7nhnLsyk/M9Qu6JqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBm
NDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2M2ViMWRiYmYvOWY4NTE1NmUtZjJkNC0z
N2IzLWE2M2MtNWM1NmUyMGM5ZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGYwZjQ2ZGItYzllNi00ZDQ3LTkx
MzQtMjA5NjNlYjFkYmJmLzRmMGY0NmRiLWM5ZTYtNGQ0Ny05MTM0LTIwOTYzZWIx
ZGJiZi5jcmwwHwYDVR0jBBgwFoAUcvOoLgEYY/Isv9tY40D3O4Z6l6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBmNDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2
M2ViMWRiYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQFRgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACBfyL9AMlG0Y7E/1XmGBM+Lj5mJttUb4QdHdb9Sc3Ra4u8hHbYAb+M6
so9OnpWKI9RJReelanpVjCb+ZHT1fkJSv/QvW07eg+0bEGaowZb34sVRjZDeqNRf
VW5ho4TTn8JT6mQnR2zUy2zgREhC5wjALp3k+Y29bzNAjvx3btpsCm2YGDpKMIkf
84nW1ZcU7EGMpBE809rsd4xh1xWj7ykc+5NCP3yTfTumYuBCEF8euATQxjo3N+Va
/yv7q2+00QcOtvLeBCZxroF3AgqIdbisNQwKaNama9M9Wt9pJqrOS84MkdXMfk3y
CVP7RAUxGCshkN3l8b8R3grD7Do26Pc=
-----END CERTIFICATE-----
Generated at Wed Feb 5 17:08:27 2025 by rpki-client