Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/64f594bd-27ac-32ef-9cb7-ba2a7a4a4e74.roa
File:                     64f594bd-27ac-32ef-9cb7-ba2a7a4a4e74.roa (raw, json)
Hash identifier:          fyNZYZr84KIoGfkCAtzd6ZE+4OPICwthXg1Vqikekec=
Subject key identifier:   FB:C0:D1:42:0B:7C:C3:86:F0:2B:39:64:89:E8:24:9E:AC:43:23:B2
Certificate issuer:       /CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
Certificate serial:       010D0C9F4328584572791458E3D35CCA9446E240
Authority key identifier: FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/64f594bd-27ac-32ef-9cb7-ba2a7a4a4e74.roa
Signing time:             Fri 05 Apr 2024 17:52:11 +0000
ROA not before:           Fri 05 Apr 2024 17:52:11 +0000
ROA not after:            Thu 04 Jul 2024 17:52:11 +0000
asID:                     40801
IP address blocks:        209.65.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:72:79:14:58:e3:d3:5c:ca:94:46:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
        Validity
            Not Before: Apr  5 17:52:11 2024 GMT
            Not After : Jul  4 17:52:11 2024 GMT
        Subject: CN=038843aa-470c-4bd6-9133-9947b59bc1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:34:9a:92:d4:fd:de:c2:b7:5a:b9:cc:7b:34:
                    02:d1:7a:46:29:97:68:1c:33:f1:c9:60:c0:67:37:
                    b4:3a:48:31:e5:cf:bd:6e:02:c6:87:8f:4a:21:91:
                    fd:9d:2e:5d:1c:74:f9:7e:c8:d6:5c:3e:d9:39:77:
                    fe:b8:f6:f6:89:78:0b:4c:25:e4:5f:2d:ed:8b:01:
                    2c:24:87:95:9c:97:38:01:55:c6:89:9f:31:6e:0c:
                    91:d8:22:b0:82:a9:84:05:4d:48:c8:65:14:13:03:
                    ef:c3:5c:75:19:36:09:16:4d:7c:b5:86:89:64:6b:
                    b2:95:00:44:a4:48:39:c1:ec:fb:8c:af:10:a3:38:
                    26:6e:89:07:f4:da:39:38:63:06:79:63:4a:c8:66:
                    1e:8f:ba:df:d6:7c:b0:b0:12:09:a2:a8:9a:e9:fb:
                    17:13:ce:24:3b:35:c3:92:f8:d4:34:4c:9d:bf:14:
                    e5:21:c1:7e:47:d4:56:f8:74:40:31:11:8f:03:0f:
                    38:04:e9:3d:4e:a8:0c:3e:87:bf:8b:51:82:08:77:
                    96:bc:4c:b4:f5:ef:f0:e6:51:4a:43:fa:9a:ca:cd:
                    58:41:6e:9d:09:1b:b0:ce:99:32:58:f1:45:4c:d7:
                    b0:37:1a:d1:9d:de:22:97:73:d4:e1:dd:de:14:e5:
                    9f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C0:D1:42:0B:7C:C3:86:F0:2B:39:64:89:E8:24:9E:AC:43:23:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/64f594bd-27ac-32ef-9cb7-ba2a7a4a4e74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.crl

            X509v3 Authority Key Identifier:
                keyid:FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.65.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:7a:4b:a1:1b:4d:d0:e1:0e:04:3e:4d:bf:b9:5a:e3:eb:18:
         8b:8d:80:2d:d1:f7:82:97:e0:6d:99:3b:52:fd:91:d4:c9:9c:
         11:ff:b2:33:c9:54:c4:70:4b:84:5b:33:66:08:e2:86:76:4e:
         e2:41:75:84:53:85:15:1a:e9:dd:46:92:e6:ee:fc:a3:71:c3:
         21:05:e9:48:d3:6b:c6:9d:3f:dd:8d:3c:f5:5d:fc:da:2a:d5:
         9a:23:20:cb:91:e7:c1:44:5c:52:a3:59:08:1f:da:c2:ff:85:
         7b:06:28:be:9c:ef:98:f7:ef:b2:7f:47:91:5e:34:06:50:9f:
         5c:47:95:14:2c:84:61:30:72:0f:8f:c8:96:30:84:0c:c2:e2:
         1f:5b:e3:fe:2c:17:bd:aa:71:e5:24:b6:d3:81:d9:77:be:bb:
         d2:ee:ef:36:77:7c:2d:0b:59:3b:b9:f4:66:92:5c:cd:79:44:
         37:ab:62:9c:7b:0a:56:69:fb:e6:46:65:26:56:d8:bc:73:b4:
         6a:3f:91:21:04:21:c3:19:a7:eb:ee:80:94:42:db:3a:9e:25:
         fe:27:28:97:62:48:93:37:1b:3b:90:57:31:21:47:8a:4c:a6:
         da:9f:1c:89:4d:cd:82:62:90:98:d9:e1:86:10:8d:6a:ed:f4:
         37:c8:bb:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVyeRRY49NcypRG4kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWJkYWFiNWQtOGNjNC00YWQ4LWE3YzQtYTM2YzY0ODhk
MTYyMB4XDTI0MDQwNTE3NTIxMVoXDTI0MDcwNDE3NTIxMVowLzEtMCsGA1UEAxMk
MDM4ODQzYWEtNDcwYy00YmQ2LTkxMzMtOTk0N2I1OWJjMWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTSaktT93sK3WrnMezQC0XpGKZdoHDPxyWDA
Zze0Okgx5c+9bgLGh49KIZH9nS5dHHT5fsjWXD7ZOXf+uPb2iXgLTCXkXy3tiwEs
JIeVnJc4AVXGiZ8xbgyR2CKwgqmEBU1IyGUUEwPvw1x1GTYJFk18tYaJZGuylQBE
pEg5wez7jK8QozgmbokH9No5OGMGeWNKyGYej7rf1nywsBIJoqia6fsXE84kOzXD
kvjUNEydvxTlIcF+R9RW+HRAMRGPAw84BOk9TqgMPoe/i1GCCHeWvEy09e/w5lFK
Q/qays1YQW6dCRuwzpkyWPFFTNewNxrRnd4il3PU4d3eFOWfSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPvA0UILfMOG8Cs5ZInoJJ6sQyOyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmRh
YWI1ZC04Y2M0LTRhZDgtYTdjNC1hMzZjNjQ4OGQxNjIvNjRmNTk0YmQtMjdhYy0z
MmVmLTljYjctYmEyYTdhNGE0ZTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWJkYWFiNWQtOGNjNC00YWQ4LWE3
YzQtYTM2YzY0ODhkMTYyLzFiZGFhYjVkLThjYzQtNGFkOC1hN2M0LWEzNmM2NDg4
ZDE2Mi5jcmwwHwYDVR0jBBgwFoAU/mUxLRIfo7qCgfXHsKzPHcvwB7cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmRhYWI1ZC04Y2M0LTRhZDgtYTdjNC1hMzZj
NjQ4OGQxNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0UFQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJx6S6EbTdDhDgQ+Tb+5WuPrGIuNgC3R94KX4G2ZO1L9kdTJnBH/sjPJ
VMRwS4RbM2YI4oZ2TuJBdYRThRUa6d1Gkubu/KNxwyEF6UjTa8adP92NPPVd/Noq
1ZojIMuR58FEXFKjWQgf2sL/hXsGKL6c75j377J/R5FeNAZQn1xHlRQshGEwcg+P
yJYwhAzC4h9b4/4sF72qceUkttOB2Xe+u9Lu7zZ3fC0LWTu59GaSXM15RDerYpx7
ClZp++ZGZSZW2LxztGo/kSEEIcMZp+vugJRC2zqeJf4nKJdiSJM3GzuQVzEhR4pM
ptqfHIlNzYJikJjZ4YYQjWrt9DfIu4M=
-----END CERTIFICATE-----
Generated at Fri May 10 03:25:33 2024 by rpki-client on console-fra.rpki-client.org