Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5db0a6c-feea-4d41-89dc-89538e2083f2/56fdf99d-fad3-3214-9530-5be9a0a00f8b.roa
File:                     56fdf99d-fad3-3214-9530-5be9a0a00f8b.roa (raw, json)
Hash identifier:          Cz2cXkE4801v1Q+0arZe03or/8fnWJiSw21JJM+IIHo=
Subject key identifier:   78:D0:DF:0E:46:BF:3C:F8:F5:5F:C3:CC:24:DC:C1:41:CC:C2:D5:DB
Certificate issuer:       /CN=d5db0a6c-feea-4d41-89dc-89538e2083f2
Certificate serial:       010D0C9F4328584507F024363A13C39242573200
Authority key identifier: 43:1E:8E:50:0B:7A:A4:5B:78:B1:B0:59:B5:A8:D1:7D:F8:E7:49:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5db0a6c-feea-4d41-89dc-89538e2083f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5db0a6c-feea-4d41-89dc-89538e2083f2/56fdf99d-fad3-3214-9530-5be9a0a00f8b.roa
Signing time:             Tue 27 Feb 2024 14:00:31 +0000
ROA not before:           Tue 27 Feb 2024 14:00:31 +0000
ROA not after:            Mon 27 May 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        64.39.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5db0a6c-feea-4d41-89dc-89538e2083f2/d5db0a6c-feea-4d41-89dc-89538e2083f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5db0a6c-feea-4d41-89dc-89538e2083f2/d5db0a6c-feea-4d41-89dc-89538e2083f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5db0a6c-feea-4d41-89dc-89538e2083f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:07:f0:24:36:3a:13:c3:92:42:57:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5db0a6c-feea-4d41-89dc-89538e2083f2
        Validity
            Not Before: Feb 27 14:00:31 2024 GMT
            Not After : May 27 13:00:31 2024 GMT
        Subject: CN=2516e1aa-26b6-4df3-8c6e-77357f611ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:02:0a:67:0d:9f:2f:38:3e:49:f1:ab:ef:9f:
                    6c:1c:df:8c:ac:e8:81:ec:4b:b0:88:10:10:90:cf:
                    01:29:60:74:70:bf:97:fc:cb:0b:36:7d:39:a9:19:
                    7f:86:88:5c:22:0a:4b:35:c8:22:c7:06:48:31:67:
                    f3:b8:73:53:fa:b3:98:33:81:da:13:45:22:f7:70:
                    e9:91:3e:a0:46:2f:80:be:28:44:3f:03:0f:78:29:
                    da:98:28:0c:34:50:d2:3b:78:2c:3f:9f:fe:bc:4b:
                    37:29:7d:78:43:34:2d:8b:d8:1d:8a:fe:bf:2d:74:
                    06:2d:d7:a6:ed:db:92:16:0d:47:0d:2a:16:de:e2:
                    71:26:8c:ab:c3:82:bb:83:29:75:53:de:54:de:84:
                    89:64:72:56:21:3e:9f:bd:47:6e:90:fd:de:0d:34:
                    e9:f8:62:a0:b0:75:dd:31:69:8d:0d:03:3a:2b:81:
                    8f:20:50:75:a4:17:8b:b0:cd:0a:da:79:12:ef:e1:
                    76:21:ba:a3:94:86:3f:78:7c:04:a0:dc:c8:fa:6a:
                    42:d4:82:b1:49:f7:39:74:74:a2:c8:5f:2d:1d:5d:
                    42:9c:be:02:a6:91:e0:d7:36:b3:d5:a9:bb:68:38:
                    03:ef:1b:ef:1a:3b:c1:79:59:4b:5c:6c:c5:36:1d:
                    4e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D0:DF:0E:46:BF:3C:F8:F5:5F:C3:CC:24:DC:C1:41:CC:C2:D5:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5db0a6c-feea-4d41-89dc-89538e2083f2/56fdf99d-fad3-3214-9530-5be9a0a00f8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5db0a6c-feea-4d41-89dc-89538e2083f2/d5db0a6c-feea-4d41-89dc-89538e2083f2.crl

            X509v3 Authority Key Identifier:
                keyid:43:1E:8E:50:0B:7A:A4:5B:78:B1:B0:59:B5:A8:D1:7D:F8:E7:49:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5db0a6c-feea-4d41-89dc-89538e2083f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:e3:fa:b3:75:60:7c:08:a1:bd:a7:0d:77:1c:74:6a:b4:ae:
         46:e7:4e:d5:4c:b2:93:6e:5f:1d:08:b6:1d:92:7c:52:de:ab:
         61:37:f6:b3:23:cc:b0:58:15:30:ba:98:8a:b4:86:7d:7e:fe:
         27:c6:76:b8:30:1d:f0:28:a0:d3:c0:16:dd:c2:47:40:eb:f6:
         09:eb:12:52:74:f3:97:a8:cb:ff:4a:af:f8:e4:4e:69:8a:65:
         8a:4c:82:a9:4d:e2:d2:36:53:c0:1f:ea:d5:7f:31:a1:31:44:
         6c:b1:6f:41:7c:42:fb:44:2f:39:8e:1a:48:d2:18:cc:8e:29:
         61:f2:4e:53:f6:e0:c1:6d:19:84:61:91:2a:1e:18:8b:5c:ef:
         04:00:4d:25:bb:15:c3:9c:db:e1:1b:22:06:3e:37:d1:86:04:
         af:1f:c8:10:9e:16:bd:88:9b:29:c6:6b:41:59:66:52:c8:e0:
         36:97:42:e1:87:1e:25:0f:b3:f0:7f:03:0e:88:13:30:c0:3c:
         f7:4e:18:b3:5f:63:4e:0d:29:31:f7:51:e4:a0:ab:f5:23:6b:
         e3:87:99:7d:2e:0e:13:7b:d3:7c:cd:97:44:09:98:3c:c0:a1:
         37:c8:78:c7:b8:b9:5c:6c:b1:d6:81:d2:74:92:45:c2:76:17:
         42:03:ce:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUH8CQ2OhPDkkJXMgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVkYjBhNmMtZmVlYS00ZDQxLTg5ZGMtODk1MzhlMjA4
M2YyMB4XDTI0MDIyNzE0MDAzMVoXDTI0MDUyNzEzMDAzMVowLzEtMCsGA1UEAxMk
MjUxNmUxYWEtMjZiNi00ZGYzLThjNmUtNzczNTdmNjExYWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgIKZw2fLzg+SfGr759sHN+MrOiB7EuwiBAQ
kM8BKWB0cL+X/MsLNn05qRl/hohcIgpLNcgixwZIMWfzuHNT+rOYM4HaE0Ui93Dp
kT6gRi+AvihEPwMPeCnamCgMNFDSO3gsP5/+vEs3KX14QzQti9gdiv6/LXQGLdem
7duSFg1HDSoW3uJxJoyrw4K7gyl1U95U3oSJZHJWIT6fvUdukP3eDTTp+GKgsHXd
MWmNDQM6K4GPIFB1pBeLsM0K2nkS7+F2IbqjlIY/eHwEoNzI+mpC1IKxSfc5dHSi
yF8tHV1CnL4CppHg1zaz1am7aDgD7xvvGjvBeVlLXGzFNh1OPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHjQ3w5Gvzz49V/DzCTcwUHMwtXbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWRi
MGE2Yy1mZWVhLTRkNDEtODlkYy04OTUzOGUyMDgzZjIvNTZmZGY5OWQtZmFkMy0z
MjE0LTk1MzAtNWJlOWEwYTAwZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkYjBhNmMtZmVlYS00ZDQxLTg5
ZGMtODk1MzhlMjA4M2YyL2Q1ZGIwYTZjLWZlZWEtNGQ0MS04OWRjLTg5NTM4ZTIw
ODNmMi5jcmwwHwYDVR0jBBgwFoAUQx6OUAt6pFt4sbBZtajRffjnSQEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWRiMGE2Yy1mZWVhLTRkNDEtODlkYy04OTUz
OGUyMDgzZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCfrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILj+rN1YHwIob2nDXccdGq0rkbnTtVMspNuXx0Ith2SfFLeq2E39rMj
zLBYFTC6mIq0hn1+/ifGdrgwHfAooNPAFt3CR0Dr9gnrElJ085eoy/9Kr/jkTmmK
ZYpMgqlN4tI2U8Af6tV/MaExRGyxb0F8QvtELzmOGkjSGMyOKWHyTlP24MFtGYRh
kSoeGItc7wQATSW7FcOc2+EbIgY+N9GGBK8fyBCeFr2ImynGa0FZZlLI4DaXQuGH
HiUPs/B/Aw6IEzDAPPdOGLNfY04NKTH3UeSgq/Uja+OHmX0uDhN703zNl0QJmDzA
oTfIeMe4uVxssdaB0nSSRcJ2F0IDznI=
-----END CERTIFICATE-----
Generated at Thu Apr 25 02:06:15 2024 by rpki-client on console-fra.rpki-client.org