Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/576b1d7b-1627-3d93-915f-91e0366f9f95.roa
File:                     576b1d7b-1627-3d93-915f-91e0366f9f95.roa (raw, json)
Hash identifier:          fGoNMmNsZ7yaPWRsH7kYTDxik40HbDfpEAAQD1bYSTE=
Subject key identifier:   3C:63:F4:C4:89:98:6B:4A:AC:35:CE:4E:26:5C:48:E3:6B:6C:CE:EA
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285847A04147D4C074CA60CCDA5F40
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/576b1d7b-1627-3d93-915f-91e0366f9f95.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     26421
IP address blocks:        64.129.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:47:d4:c0:74:ca:60:cc:da:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=7a216957-58b4-40dc-b443-913115151ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:aa:c2:31:64:34:cf:b9:e6:77:1c:3b:ba:17:
                    91:54:94:16:eb:ed:72:59:6f:06:05:55:56:8a:fc:
                    74:a5:79:ba:93:80:eb:3a:76:d0:85:86:6a:26:02:
                    16:4b:ab:83:5b:e6:8a:47:23:f7:0d:52:4a:42:45:
                    57:72:97:bc:15:db:83:67:88:52:3b:b1:01:35:53:
                    a9:a8:16:3b:4b:5b:14:d6:d7:cf:3b:ea:83:e8:91:
                    bc:24:07:24:83:6c:1f:c3:ad:50:45:1c:e2:1e:0d:
                    7e:bd:86:dc:06:76:ba:4d:09:56:94:7f:98:30:2c:
                    7b:64:9b:a5:53:ce:81:ee:b0:cd:cd:25:fb:92:fd:
                    ed:15:44:2e:4f:be:66:e5:a7:3a:ec:a7:0e:2c:37:
                    d9:1f:23:d3:fa:dd:8a:59:50:c0:a5:e4:b2:11:5c:
                    ce:21:3c:36:a6:31:a2:16:a0:a9:ad:f3:00:81:d1:
                    f4:cd:e7:cb:e9:ed:eb:1b:d2:47:cb:6b:c1:4c:d2:
                    ca:f1:cb:6c:ea:8e:0f:98:2a:cb:37:27:62:bb:6b:
                    8a:77:48:65:c5:c9:54:4c:a9:70:a1:2c:95:da:6a:
                    91:40:cd:78:46:8e:bc:cc:71:f7:98:af:4f:ee:89:
                    b1:09:40:d0:39:20:0a:2a:87:ab:8b:d1:a4:c3:10:
                    ed:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:63:F4:C4:89:98:6B:4A:AC:35:CE:4E:26:5C:48:E3:6B:6C:CE:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/576b1d7b-1627-3d93-915f-91e0366f9f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.129.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:85:30:9e:08:ef:0f:b9:66:33:47:17:51:aa:04:5a:57:0b:
         70:44:27:6d:97:5a:ab:7b:9f:45:b8:6a:73:ad:dc:1e:97:40:
         cb:56:f0:ee:1c:d5:59:47:dc:a9:7d:a5:2a:ed:fe:68:18:29:
         6a:e1:cd:6f:60:16:68:ee:0e:5d:e2:72:a4:ac:57:ca:b2:17:
         44:a8:b9:84:90:93:92:92:07:f5:2e:67:fa:d3:5e:1e:71:8c:
         4d:22:65:9d:11:9e:50:0c:e1:22:1e:6c:03:dc:fb:f2:17:31:
         01:61:8a:d8:da:6b:af:84:a6:d4:4c:f5:95:0c:36:4c:4b:f8:
         48:bd:52:fe:d2:4d:af:53:a9:9d:14:ff:7f:c4:fd:e4:82:61:
         06:af:25:62:fb:eb:f6:5c:c1:bb:b9:84:52:62:a6:b2:91:59:
         75:15:07:1f:49:ea:3e:a2:71:15:ec:c6:2a:4b:89:b1:f0:6d:
         9d:ea:1a:bd:bf:ac:fa:b0:bd:52:9d:b7:28:6e:e2:1a:2d:e0:
         8a:f9:c0:a0:4e:e7:7a:86:1a:5f:96:b2:d3:b9:0e:09:1d:d7:
         09:ef:92:6c:b3:91:47:2f:13:4f:b9:d5:a9:d9:a1:21:08:ba:
         7c:a1:ff:f8:2f:3c:35:25:75:36:00:e9:3d:6f:eb:d5:51:0f:
         8c:79:84:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQUfUwHTKYMzaX0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk
N2EyMTY5NTctNThiNC00MGRjLWI0NDMtOTEzMTE1MTUxZWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKrCMWQ0z7nmdxw7uheRVJQW6+1yWW8GBVVW
ivx0pXm6k4DrOnbQhYZqJgIWS6uDW+aKRyP3DVJKQkVXcpe8FduDZ4hSO7EBNVOp
qBY7S1sU1tfPO+qD6JG8JAckg2wfw61QRRziHg1+vYbcBna6TQlWlH+YMCx7ZJul
U86B7rDNzSX7kv3tFUQuT75m5ac67KcOLDfZHyPT+t2KWVDApeSyEVzOITw2pjGi
FqCprfMAgdH0zefL6e3rG9JHy2vBTNLK8cts6o4PmCrLNydiu2uKd0hlxclUTKlw
oSyV2mqRQM14Ro68zHH3mK9P7omxCUDQOSAKKoeri9GkwxDttQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDxj9MSJmGtKrDXOTiZcSONrbM7qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNTc2YjFkN2ItMTYyNy0z
ZDkzLTkxNWYtOTFlMDM2NmY5Zjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIHkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWFMJ4I7w+5ZjNHF1GqBFpXC3BEJ22XWqt7n0W4anOt3B6XQMtW8O4c
1VlH3Kl9pSrt/mgYKWrhzW9gFmjuDl3icqSsV8qyF0SouYSQk5KSB/UuZ/rTXh5x
jE0iZZ0RnlAM4SIebAPc+/IXMQFhitjaa6+EptRM9ZUMNkxL+Ei9Uv7STa9TqZ0U
/3/E/eSCYQavJWL76/Zcwbu5hFJiprKRWXUVBx9J6j6icRXsxipLibHwbZ3qGr2/
rPqwvVKdtyhu4hot4Ir5wKBO53qGGl+WstO5Dgkd1wnvkmyzkUcvE0+51anZoSEI
unyh//gvPDUldTYA6T1v69VRD4x5hNo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:51 2024 by rpki-client on console-fra.rpki-client.org