Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/474da930-a22c-3f0a-9b3a-d4121825bf95.roa
File:                     474da930-a22c-3f0a-9b3a-d4121825bf95.roa (raw, json)
Hash identifier:          jGY/qutNE0BOxRD1oIAVSB/cFnOa2rpBwFT12D6B+o0=
Subject key identifier:   D7:A3:84:B1:61:74:EB:C5:AE:95:8D:60:DE:35:50:80:14:86:40:14
Certificate issuer:       /CN=260078ce-082d-4ff4-9558-d1a0f0d1ecdd
Certificate serial:       010D0C9F43285847898D1934FEAD681D293F5D00
Authority key identifier: 8E:7C:54:ED:F1:F8:A9:28:D2:4A:B4:AB:87:79:D8:43:18:4B:A9:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/474da930-a22c-3f0a-9b3a-d4121825bf95.roa
Signing time:             Mon 14 Oct 2024 09:49:59 +0000
ROA not before:           Mon 14 Oct 2024 09:49:59 +0000
ROA not after:            Sun 12 Jan 2025 10:49:59 +0000
asID:                     199610
IP address blocks:        64.64.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:8d:19:34:fe:ad:68:1d:29:3f:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260078ce-082d-4ff4-9558-d1a0f0d1ecdd
        Validity
            Not Before: Oct 14 09:49:59 2024 GMT
            Not After : Jan 12 10:49:59 2025 GMT
        Subject: CN=d06f6edd-2c50-4691-b217-d7514c12429a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:4b:a0:ef:a4:25:f2:8d:d0:6b:fb:67:fb:
                    1a:46:5e:b1:0a:69:8e:c0:5c:d5:24:71:61:ad:b2:
                    d8:7f:13:e1:f3:59:a5:65:bd:a4:ac:d7:12:56:ce:
                    42:7e:79:76:51:33:ee:72:21:64:4f:0f:4b:96:58:
                    2b:c3:3e:54:c1:17:0a:d0:fe:31:be:2d:b7:88:02:
                    e1:7d:d3:1b:ac:aa:88:de:02:fa:0d:be:37:10:9e:
                    96:6c:42:4c:8d:6f:43:14:9f:0b:ce:87:ee:8a:b1:
                    0b:ce:b0:bc:7d:05:dd:75:9a:e7:f2:8b:67:03:da:
                    f6:68:54:d3:5d:e8:77:33:e5:93:a8:d2:b0:61:e0:
                    d6:41:c1:17:a0:8a:eb:e3:a3:b0:46:63:2b:89:8c:
                    ee:3d:c0:a5:8b:06:d4:56:e4:bc:d6:7c:17:d2:90:
                    08:c8:c8:62:d2:d0:5c:35:98:07:ee:01:d7:ff:be:
                    5b:28:e8:f5:71:44:39:77:3a:b8:8b:2d:4c:41:4b:
                    db:da:ea:97:ef:65:25:aa:8d:62:da:15:b7:d7:59:
                    6b:fa:4a:fd:7d:05:8a:9e:3b:e1:c4:b0:24:b5:6e:
                    3b:a8:d0:b3:67:ee:9a:a2:53:4b:51:da:ab:81:0e:
                    2a:14:e8:b5:14:d7:8e:e4:6f:27:83:fa:88:72:52:
                    fe:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A3:84:B1:61:74:EB:C5:AE:95:8D:60:DE:35:50:80:14:86:40:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/474da930-a22c-3f0a-9b3a-d4121825bf95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.crl

            X509v3 Authority Key Identifier:
                keyid:8E:7C:54:ED:F1:F8:A9:28:D2:4A:B4:AB:87:79:D8:43:18:4B:A9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e4:05:77:f7:0b:10:74:ab:4d:b9:30:84:6e:e6:31:9a:d7:
         7e:0b:de:a6:e1:7a:13:dd:67:64:8b:d4:4e:ea:19:dc:37:19:
         c8:61:72:17:0f:cc:f1:26:cf:39:a2:7e:ee:5d:dd:8e:f7:25:
         fa:5a:d9:3a:97:2b:80:0a:4a:c8:e8:be:99:8a:3c:c0:e5:1e:
         21:bc:4d:60:08:f7:b1:b1:c1:4f:e8:9a:f4:9c:7c:14:ea:56:
         9e:51:d7:3a:c1:11:b1:a8:79:88:9f:55:36:b8:f2:bb:63:4e:
         59:b7:5e:65:17:22:20:ef:d7:09:f6:c3:cb:90:32:ea:3a:31:
         c7:ba:53:5d:50:75:e2:3f:eb:80:25:97:19:f1:97:cb:09:59:
         24:27:0e:21:2e:b9:25:66:5b:03:87:75:9c:1b:83:d6:e3:a9:
         6f:a1:be:2e:ca:9e:37:74:46:50:d9:d7:df:ba:02:f7:30:22:
         d0:81:3b:fa:0f:9d:16:06:83:5b:81:20:d8:ad:95:06:2d:bb:
         d1:cc:b1:b4:d8:24:6e:31:b6:01:b3:c3:63:55:dd:b9:44:d4:
         9a:0f:db:a8:2b:1b:48:b8:d4:ae:15:eb:9d:d0:2a:d2:99:21:
         c7:ba:ce:32:dc:6f:db:c7:75:86:68:77:c6:50:c8:71:6e:a6:
         8f:95:23:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeJjRk0/q1oHSk/XQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjYwMDc4Y2UtMDgyZC00ZmY0LTk1NTgtZDFhMGYwZDFl
Y2RkMB4XDTI0MTAxNDA5NDk1OVoXDTI1MDExMjEwNDk1OVowLzEtMCsGA1UEAxMk
ZDA2ZjZlZGQtMmM1MC00NjkxLWIyMTctZDc1MTRjMTI0MjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7BLoO+kJfKN0Gv7Z/saRl6xCmmOwFzVJHFh
rbLYfxPh81mlZb2krNcSVs5Cfnl2UTPuciFkTw9Lllgrwz5UwRcK0P4xvi23iALh
fdMbrKqI3gL6Db43EJ6WbEJMjW9DFJ8LzofuirELzrC8fQXddZrn8otnA9r2aFTT
Xeh3M+WTqNKwYeDWQcEXoIrr46OwRmMriYzuPcCliwbUVuS81nwX0pAIyMhi0tBc
NZgH7gHX/75bKOj1cUQ5dzq4iy1MQUvb2uqX72Ulqo1i2hW311lr+kr9fQWKnjvh
xLAktW47qNCzZ+6aolNLUdqrgQ4qFOi1FNeO5G8ng/qIclL+IQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNejhLFhdOvFrpWNYN41UIAUhkAUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNjAw
NzhjZS0wODJkLTRmZjQtOTU1OC1kMWEwZjBkMWVjZGQvNDc0ZGE5MzAtYTIyYy0z
ZjBhLTliM2EtZDQxMjE4MjViZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjYwMDc4Y2UtMDgyZC00ZmY0LTk1
NTgtZDFhMGYwZDFlY2RkLzI2MDA3OGNlLTA4MmQtNGZmNC05NTU4LWQxYTBmMGQx
ZWNkZC5jcmwwHwYDVR0jBBgwFoAUjnxU7fH4qSjSSrSrh3nYQxhLqeUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNjAwNzhjZS0wODJkLTRmZjQtOTU1OC1kMWEw
ZjBkMWVjZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQECcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrkBXf3CxB0q025MIRu5jGa134L3qbhehPdZ2SL1E7qGdw3GchhchcP
zPEmzzmifu5d3Y73Jfpa2TqXK4AKSsjovpmKPMDlHiG8TWAI97GxwU/omvScfBTq
Vp5R1zrBEbGoeYifVTa48rtjTlm3XmUXIiDv1wn2w8uQMuo6Mce6U11QdeI/64Al
lxnxl8sJWSQnDiEuuSVmWwOHdZwbg9bjqW+hvi7Knjd0RlDZ19+6AvcwItCBO/oP
nRYGg1uBINitlQYtu9HMsbTYJG4xtgGzw2NV3blE1JoP26grG0i41K4V653QKtKZ
Ice6zjLcb9vHdYZod8ZQyHFupo+VIyc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:16 2024 by rpki-client on console-ams.rpki-client.org