Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/37c7825f-f0e6-3c91-8a84-d42b3e87cee1.roa
File:                     37c7825f-f0e6-3c91-8a84-d42b3e87cee1.roa (raw, json)
Hash identifier:          XpRSZqRPTPQe3cG/NEw+FDLr/IkCvzmAPxjncrdPA8Q=
Subject key identifier:   61:4C:32:54:2F:3A:DC:72:F9:56:3F:1B:34:FB:D3:37:35:4E:DD:2C
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F43285847E8F4CA756C917EB213DA5200
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/37c7825f-f0e6-3c91-8a84-d42b3e87cee1.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     46261
IP address blocks:        64.79.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:ca:75:6c:91:7e:b2:13:da:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=94c4c36e-eb49-4e14-a082-ab3df9d7fda6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5c:81:52:df:33:33:45:15:4a:50:d0:af:55:
                    5d:10:63:dc:19:05:8e:69:7b:a9:27:9a:29:4e:8e:
                    31:48:c5:03:e9:7c:bf:2a:75:bd:9a:3f:4d:f1:9f:
                    93:7a:4f:f0:19:90:e1:49:a6:55:64:b2:63:f0:02:
                    ae:11:fe:60:0d:0e:49:93:5b:27:a8:89:00:ea:9d:
                    84:3c:f2:a3:67:b7:72:a4:fd:5c:c6:b7:df:b0:84:
                    3f:4e:3f:87:24:0d:45:cd:81:ad:eb:6e:c9:57:63:
                    09:55:84:43:71:0f:ca:d2:f3:9d:92:c2:87:54:44:
                    5a:8f:45:e1:fb:d2:d2:bd:94:82:57:17:58:e0:33:
                    1d:28:ac:e2:0b:40:aa:e8:a8:7c:2e:48:4a:cb:53:
                    0b:6e:ff:25:84:0d:3c:11:30:db:f3:7c:2f:d7:90:
                    3b:7b:6d:5d:2d:39:8b:15:67:36:88:24:f2:ce:d8:
                    82:fb:12:5a:bd:7c:b0:6d:19:49:e4:6d:d7:7b:92:
                    98:72:30:ce:11:ad:d7:5f:3d:19:12:d8:c5:85:7e:
                    a1:ec:b5:fb:2c:f6:e4:2e:bb:39:a0:2e:5f:ec:de:
                    8b:e7:d7:3d:10:35:da:d4:ac:5e:65:34:da:03:23:
                    92:71:a1:7f:ce:bd:7c:5c:06:3c:fd:28:88:f9:0d:
                    57:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4C:32:54:2F:3A:DC:72:F9:56:3F:1B:34:FB:D3:37:35:4E:DD:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/37c7825f-f0e6-3c91-8a84-d42b3e87cee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:76:28:3b:7a:f1:62:6b:25:4e:36:5b:4d:43:04:eb:c3:29:
         89:a2:4e:97:ba:79:00:e0:c6:32:ce:56:8a:5a:c7:d5:25:eb:
         9a:3e:43:0c:fb:fa:ce:58:fc:74:54:34:3d:d3:0a:45:04:30:
         51:a5:ad:e1:36:3e:e2:8f:bf:32:75:c6:d4:75:af:5f:9f:ef:
         1d:23:2f:bf:be:d4:30:79:0d:6c:4f:46:de:cf:d3:fe:e5:76:
         f7:da:92:11:d4:32:ed:64:78:80:2e:aa:e5:1b:b6:ae:73:93:
         25:c1:41:a1:ad:ec:ef:fe:bf:94:c7:66:44:ec:b8:62:22:7d:
         6e:c7:2b:2c:e2:da:8c:ce:85:77:1d:6b:94:ad:46:88:8d:fe:
         82:cf:a0:7b:2f:85:d4:5b:1f:e6:a1:f7:59:4f:a6:c8:d6:f8:
         fb:c1:70:b9:06:01:28:c2:89:a1:f5:ac:51:76:f4:ce:c6:c1:
         42:ed:aa:f2:40:31:2b:96:c6:4b:60:57:74:e0:36:c7:1a:91:
         56:80:e1:f8:11:c6:21:79:d6:a1:0c:21:52:81:07:de:8b:6b:
         42:bf:71:6b:87:f8:d7:00:e9:b1:9f:d8:6b:fc:d8:c2:8c:14:
         25:2b:1b:79:de:4d:05:bb:64:9a:79:11:75:c9:63:cb:c3:5d:
         4a:af:f3:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9Mp1bJF+shPaUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw
ZDcwMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
OTRjNGMzNmUtZWI0OS00ZTE0LWEwODItYWIzZGY5ZDdmZGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFyBUt8zM0UVSlDQr1VdEGPcGQWOaXupJ5op
To4xSMUD6Xy/KnW9mj9N8Z+Tek/wGZDhSaZVZLJj8AKuEf5gDQ5Jk1snqIkA6p2E
PPKjZ7dypP1cxrffsIQ/Tj+HJA1FzYGt627JV2MJVYRDcQ/K0vOdksKHVERaj0Xh
+9LSvZSCVxdY4DMdKKziC0Cq6Kh8LkhKy1MLbv8lhA08ETDb83wv15A7e21dLTmL
FWc2iCTyztiC+xJavXywbRlJ5G3Xe5KYcjDOEa3XXz0ZEtjFhX6h7LX7LPbkLrs5
oC5f7N6L59c9EDXa1KxeZTTaAyOScaF/zr18XAY8/SiI+Q1XSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGFMMlQvOtxy+VY/GzT70zc1Tt0sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0
OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvMzdjNzgyNWYtZjBlNi0z
YzkxLThhODQtZDQyYjNlODdjZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl
MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1
MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk
YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQE/yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJR2KDt68WJrJU42W01DBOvDKYmiTpe6eQDgxjLOVopax9Ul65o+Qwz7
+s5Y/HRUND3TCkUEMFGlreE2PuKPvzJ1xtR1r1+f7x0jL7++1DB5DWxPRt7P0/7l
dvfakhHUMu1keIAuquUbtq5zkyXBQaGt7O/+v5THZkTsuGIifW7HKyzi2ozOhXcd
a5StRoiN/oLPoHsvhdRbH+ah91lPpsjW+PvBcLkGASjCiaH1rFF29M7GwULtqvJA
MSuWxktgV3TgNscakVaA4fgRxiF51qEMIVKBB96La0K/cWuH+NcA6bGf2Gv82MKM
FCUrG3neTQW7ZJp5EXXJY8vDXUqv87w=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:16 2024 by rpki-client on console-fra.rpki-client.org