Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/7d5d62f1-917a-3006-971f-87b61876cacc.roa
File:                     7d5d62f1-917a-3006-971f-87b61876cacc.roa (raw, json)
Hash identifier:          hHKPhqVl7d8HZySemMLnu/rQlHck5KIfIP8KDCZA88o=
Subject key identifier:   13:40:52:A4:61:65:B0:2C:CA:E8:6B:A4:07:72:25:28:75:27:0F:F5
Certificate issuer:       /CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
Certificate serial:       010D0C9F432858479D76B140C1330074F9609920
Authority key identifier: B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/7d5d62f1-917a-3006-971f-87b61876cacc.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     23274
IP address blocks:        64.6.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:b1:40:c1:33:00:74:f9:60:99:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=18940fac-4163-4b83-b44f-c684fd965f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:81:03:fc:bc:14:dc:32:d9:02:73:4c:b2:
                    e4:05:a9:05:b9:3b:d1:8e:7d:c5:39:72:03:00:06:
                    af:68:d4:24:c1:7a:3a:27:0d:92:f1:00:a6:47:e4:
                    11:e0:4c:cb:87:fd:40:0c:2a:89:d1:0b:5d:83:ee:
                    5d:ae:2c:b3:9e:45:30:33:f2:15:70:55:be:3f:a8:
                    93:ed:ce:c1:05:1d:a3:02:a8:53:81:d5:c3:9e:60:
                    c4:45:0e:1c:d7:53:9f:67:97:af:6e:ee:6c:46:9b:
                    46:72:0d:32:4e:08:9c:c7:73:f3:2d:72:e1:f8:f0:
                    00:71:12:7e:c3:42:34:9f:07:d1:99:a1:de:c2:59:
                    a9:c6:49:be:00:ed:7b:1a:1d:c7:94:44:27:19:8c:
                    17:83:fa:41:06:68:72:6c:3c:f0:5c:2b:21:a3:1a:
                    f3:ec:be:69:be:00:18:f2:eb:3b:7e:2e:48:16:20:
                    d8:39:89:fd:79:6f:13:0f:95:9a:f4:62:4f:73:ec:
                    10:9e:93:20:30:cf:ae:81:a1:42:f4:3c:20:37:9b:
                    85:a5:ba:ae:51:a8:2e:0f:b0:31:1f:f7:a6:c0:1d:
                    60:1c:93:24:15:8c:cb:4b:d5:d4:72:5e:cd:06:dd:
                    c3:d5:5e:43:ea:70:7d:a4:d8:0c:00:83:fc:e2:0e:
                    9a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:40:52:A4:61:65:B0:2C:CA:E8:6B:A4:07:72:25:28:75:27:0F:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/7d5d62f1-917a-3006-971f-87b61876cacc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl

            X509v3 Authority Key Identifier:
                keyid:B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c9:5b:b9:b1:f6:ca:c7:62:c5:19:93:77:41:2c:f7:ad:95:
         f1:8c:f9:2c:d5:98:84:c0:72:e3:98:28:bd:4e:6d:d9:80:4e:
         79:85:88:27:6c:e8:fb:86:1a:4d:18:75:12:a1:e4:c1:2e:af:
         f5:04:1b:58:5d:d0:5d:b4:95:20:41:9a:4e:be:1c:42:d7:c3:
         df:2e:2c:02:7e:cf:b2:e4:cd:ef:94:df:9e:3a:48:a3:98:7c:
         bd:48:f1:94:dd:e6:99:9c:76:bf:0a:cf:17:ca:3f:65:c7:54:
         6d:7f:0f:9c:7e:06:ae:b1:40:70:6d:58:74:d8:f1:e4:f3:27:
         a8:ec:24:db:fd:25:0d:b3:07:3e:3f:1e:f3:57:bf:67:42:c2:
         e0:ca:88:d8:92:12:9f:28:ea:24:ef:f2:6a:d8:da:e5:8a:b9:
         6f:22:d9:66:6c:84:2b:7a:62:01:1b:24:8a:ca:1a:85:ae:40:
         65:da:40:9c:f1:a1:c0:a1:aa:12:94:e4:ba:eb:3e:b4:12:ad:
         fe:e9:1c:cc:af:42:ac:f8:89:5c:00:13:98:7b:9a:e7:74:68:
         b3:1e:62:ed:ae:ca:f4:33:16:96:3c:19:c3:85:99:ef:52:0c:
         32:6f:ac:0e:05:5e:96:b1:d8:92:e8:69:71:0f:b5:87:91:e2:
         86:ab:ac:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddrFAwTMAdPlgmSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhmZjhhNGEtNWVlMi00NzVhLWI3Y2MtYjk3MWE2Mjg4
ODg1MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
MTg5NDBmYWMtNDE2My00YjgzLWI0NGYtYzY4NGZkOTY1ZjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUyBA/y8FNwy2QJzTLLkBakFuTvRjn3FOXID
AAavaNQkwXo6Jw2S8QCmR+QR4EzLh/1ADCqJ0Qtdg+5driyznkUwM/IVcFW+P6iT
7c7BBR2jAqhTgdXDnmDERQ4c11OfZ5evbu5sRptGcg0yTgicx3PzLXLh+PAAcRJ+
w0I0nwfRmaHewlmpxkm+AO17Gh3HlEQnGYwXg/pBBmhybDzwXCshoxrz7L5pvgAY
8us7fi5IFiDYOYn9eW8TD5Wa9GJPc+wQnpMgMM+ugaFC9DwgN5uFpbquUaguD7Ax
H/emwB1gHJMkFYzLS9XUcl7NBt3D1V5D6nB9pNgMAIP84g6aKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBNAUqRhZbAsyuhrpAdyJSh1Jw/1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGZm
OGE0YS01ZWUyLTQ3NWEtYjdjYy1iOTcxYTYyODg4ODUvN2Q1ZDYyZjEtOTE3YS0z
MDA2LTk3MWYtODdiNjE4NzZjYWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhmZjhhNGEtNWVlMi00NzVhLWI3
Y2MtYjk3MWE2Mjg4ODg1Lzc4ZmY4YTRhLTVlZTItNDc1YS1iN2NjLWI5NzFhNjI4
ODg4NS5jcmwwHwYDVR0jBBgwFoAUsOvwHmfl1VJ0djRC7mA+sUlj6kgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGZmOGE0YS01ZWUyLTQ3NWEtYjdjYy1iOTcx
YTYyODg4ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAYTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFfJW7mx9srHYsUZk3dBLPetlfGM+SzVmITAcuOYKL1ObdmATnmFiCds
6PuGGk0YdRKh5MEur/UEG1hd0F20lSBBmk6+HELXw98uLAJ+z7Lkze+U3546SKOY
fL1I8ZTd5pmcdr8KzxfKP2XHVG1/D5x+Bq6xQHBtWHTY8eTzJ6jsJNv9JQ2zBz4/
HvNXv2dCwuDKiNiSEp8o6iTv8mrY2uWKuW8i2WZshCt6YgEbJIrKGoWuQGXaQJzx
ocChqhKU5LrrPrQSrf7pHMyvQqz4iVwAE5h7mud0aLMeYu2uyvQzFpY8GcOFme9S
DDJvrA4FXpax2JLoaXEPtYeR4oarrEc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:07 2024 by rpki-client on console-fra.rpki-client.org