Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/060afa88-c689-36bf-8da3-d16c2159ba5c.roa
File:                     060afa88-c689-36bf-8da3-d16c2159ba5c.roa (raw, json)
Hash identifier:          +ygAD9XO9HySXl62WEzZ9JUC2VMWi//yyEVbMyBfUZc=
Subject key identifier:   AD:35:F7:7F:28:32:A8:88:2B:0E:7E:ED:9C:42:3F:14:50:D1:16:CB
Certificate issuer:       /CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
Certificate serial:       010D0C9F43285845DEC90ED007CDB4CA27D99200
Authority key identifier: B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/060afa88-c689-36bf-8da3-d16c2159ba5c.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     396982
IP address blocks:        64.6.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:0e:d0:07:cd:b4:ca:27:d9:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=63054e88-efc9-400b-8419-82e54d504c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:f7:f1:9c:bc:a6:25:e8:7b:ea:d0:67:a8:
                    f1:2c:8c:08:cd:00:2b:2c:82:bd:b7:6d:4b:df:4c:
                    5b:d5:79:f5:29:f6:c2:f7:73:fb:4e:9c:0d:66:f3:
                    a8:37:ff:9b:f7:53:3f:32:1e:95:d5:60:64:54:33:
                    1b:28:62:0b:eb:15:a1:cd:3e:8e:34:54:08:a5:9b:
                    72:f1:75:0d:6a:2d:e0:8e:e6:50:10:cc:a7:77:f0:
                    eb:f6:20:a2:aa:94:93:e5:53:d6:2b:71:dd:7e:f8:
                    95:3f:64:73:13:3f:e8:d3:f1:3a:09:76:3d:98:d8:
                    51:31:b8:a7:3c:a7:32:c7:c4:f7:1c:1c:db:32:f7:
                    6b:61:86:3d:17:42:54:9c:db:75:b9:8d:5f:c8:5f:
                    94:fb:b9:9f:2a:74:ff:da:11:0f:ea:71:16:ea:cc:
                    4e:ef:41:aa:f9:fd:d5:57:76:91:50:75:e6:4e:db:
                    af:54:6f:f8:c6:46:69:b4:8d:03:cd:9c:aa:94:6f:
                    97:36:35:b5:58:77:8e:c1:1c:07:00:d6:b5:77:c8:
                    27:17:06:e9:78:c3:0b:45:61:95:83:8c:fb:ed:45:
                    98:b9:62:20:16:f9:9f:b4:e0:42:67:82:ba:03:36:
                    c5:3e:7f:b6:ae:c4:38:54:7e:ff:31:90:1d:67:65:
                    87:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:35:F7:7F:28:32:A8:88:2B:0E:7E:ED:9C:42:3F:14:50:D1:16:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/060afa88-c689-36bf-8da3-d16c2159ba5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl

            X509v3 Authority Key Identifier:
                keyid:B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:7b:17:d6:22:1a:cc:32:c2:09:93:ce:ca:ec:5a:aa:a0:36:
         5a:98:3a:c5:d6:87:f5:79:c2:2e:7b:25:c3:14:e6:75:fa:9c:
         17:62:b0:03:4c:ee:42:77:1b:b5:7e:82:f8:c7:31:4a:73:f3:
         de:c8:52:a4:1f:10:8b:d1:c7:27:b9:30:1c:ff:f0:6a:df:b3:
         48:df:f8:a2:93:4c:bc:8e:e1:9e:4f:9c:fd:d5:d6:10:4f:ad:
         d5:52:90:bd:c7:c5:01:60:7b:a9:e4:a4:7a:b8:f3:0e:b7:19:
         0e:fe:c8:8f:8f:ed:23:cb:38:5b:72:f1:44:2e:4c:c3:2d:dc:
         6a:55:2b:bc:46:25:d6:db:05:3c:61:55:70:95:86:0f:9e:c0:
         64:de:51:ce:d4:76:c6:a2:c3:9a:5b:b0:02:6e:85:d8:86:3d:
         9d:6b:2d:70:c4:7c:9e:d5:7e:e2:23:b7:6e:37:fd:47:53:4d:
         ee:a3:04:d1:a2:1d:b9:f2:0b:8a:77:dd:e4:10:10:0d:49:51:
         d6:ae:7f:df:1c:b0:6c:38:c8:a3:b9:df:25:bf:b4:9d:9b:36:
         87:ed:df:ea:40:73:97:06:01:85:e6:41:48:d4:41:95:17:2f:
         d6:e3:85:9c:68:01:d2:92:79:be:f1:d9:ba:ca:6d:b0:d6:b5:
         84:5b:33:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXeyQ7QB820yifZkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhmZjhhNGEtNWVlMi00NzVhLWI3Y2MtYjk3MWE2Mjg4
ODg1MB4XDTI0MDUxNDEzMDAzNFoXDTI0MDgxMjEzMDAzNFowLzEtMCsGA1UEAxMk
NjMwNTRlODgtZWZjOS00MDBiLTg0MTktODJlNTRkNTA0YzRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA338Zy8piXoe+rQZ6jxLIwIzQArLIK9t21L
30xb1Xn1KfbC93P7TpwNZvOoN/+b91M/Mh6V1WBkVDMbKGIL6xWhzT6ONFQIpZty
8XUNai3gjuZQEMynd/Dr9iCiqpST5VPWK3HdfviVP2RzEz/o0/E6CXY9mNhRMbin
PKcyx8T3HBzbMvdrYYY9F0JUnNt1uY1fyF+U+7mfKnT/2hEP6nEW6sxO70Gq+f3V
V3aRUHXmTtuvVG/4xkZptI0DzZyqlG+XNjW1WHeOwRwHANa1d8gnFwbpeMMLRWGV
g4z77UWYuWIgFvmftOBCZ4K6AzbFPn+2rsQ4VH7/MZAdZ2WHKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK01938oMqiIKw5+7ZxCPxRQ0RbLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGZm
OGE0YS01ZWUyLTQ3NWEtYjdjYy1iOTcxYTYyODg4ODUvMDYwYWZhODgtYzY4OS0z
NmJmLThkYTMtZDE2YzIxNTliYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhmZjhhNGEtNWVlMi00NzVhLWI3
Y2MtYjk3MWE2Mjg4ODg1Lzc4ZmY4YTRhLTVlZTItNDc1YS1iN2NjLWI5NzFhNjI4
ODg4NS5jcmwwHwYDVR0jBBgwFoAUsOvwHmfl1VJ0djRC7mA+sUlj6kgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGZmOGE0YS01ZWUyLTQ3NWEtYjdjYy1iOTcx
YTYyODg4ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAYSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC97F9YiGswywgmTzsrsWqqgNlqYOsXWh/V5wi57JcMU5nX6nBdisANM
7kJ3G7V+gvjHMUpz897IUqQfEIvRxye5MBz/8Grfs0jf+KKTTLyO4Z5PnP3V1hBP
rdVSkL3HxQFge6nkpHq48w63GQ7+yI+P7SPLOFty8UQuTMMt3GpVK7xGJdbbBTxh
VXCVhg+ewGTeUc7Udsaiw5pbsAJuhdiGPZ1rLXDEfJ7VfuIjt243/UdTTe6jBNGi
HbnyC4p33eQQEA1JUdauf98csGw4yKO53yW/tJ2bNoft3+pAc5cGAYXmQUjUQZUX
L9bjhZxoAdKSeb7x2brKbbDWtYRbM9c=
-----END CERTIFICATE-----
Generated at Fri May 17 01:47:58 2024 by rpki-client on console-fra.rpki-client.org