Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb5fe603-8e6d-39ab-b0bc-d13c0b9034a3.roa
File:                     fb5fe603-8e6d-39ab-b0bc-d13c0b9034a3.roa (raw, json)
Hash identifier:          iL4Vag6aUspCZMVYI9eM+djYyw6h+SqKTXrAO6Ezaco=
Subject key identifier:   6C:13:0E:49:D8:EA:29:A8:ED:07:5A:7F:44:6E:E0:3B:85:AF:3B:D0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D188E189FB00F24702300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb5fe603-8e6d-39ab-b0bc-d13c0b9034a3.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        71.202.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:18:8e:18:9f:b0:0f:24:70:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=b05d7e98-0951-41c3-97ff-8c9c526d908b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:8e:da:c8:7a:19:ba:e9:73:70:b9:ac:b5:
                    08:27:c1:94:61:6c:d0:ba:32:94:c2:52:66:1d:2f:
                    52:2f:3f:8e:ad:91:ac:5e:07:a6:eb:8f:9b:19:80:
                    e8:1f:39:8e:ec:0e:47:48:57:0b:42:61:26:69:98:
                    3d:0e:a1:43:33:f9:da:7a:eb:26:b6:04:1e:d2:c4:
                    48:e9:c9:f8:68:71:a7:fd:21:9d:83:a5:b4:f2:a9:
                    94:03:8a:94:99:30:7c:e6:35:59:92:07:85:a5:f1:
                    d5:69:02:a1:88:f0:c4:75:c9:dd:a6:90:81:b9:54:
                    8a:7c:72:12:cf:14:b9:c2:73:d6:6b:ad:15:f1:e7:
                    de:1f:d4:79:cb:81:eb:12:76:9b:1c:d9:b1:a6:48:
                    53:a1:ad:4c:c2:cf:f8:1e:29:74:54:54:dc:3f:bb:
                    10:c6:7f:86:7c:98:49:35:66:cf:61:e9:78:4d:83:
                    8b:66:8c:7d:23:c5:41:f9:d2:2e:bf:7c:e9:18:c6:
                    d8:e7:29:cc:42:be:f4:3a:33:ab:f8:4f:75:20:7e:
                    a3:1a:31:5d:9b:54:13:ed:2c:eb:3f:03:41:28:d2:
                    48:72:d8:d2:7f:78:aa:78:7d:06:44:cf:61:b0:4a:
                    23:64:88:29:37:c6:c6:3d:1b:68:bc:c4:bb:74:c0:
                    d8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:13:0E:49:D8:EA:29:A8:ED:07:5A:7F:44:6E:E0:3B:85:AF:3B:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb5fe603-8e6d-39ab-b0bc-d13c0b9034a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.202.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:2c:49:55:32:dc:06:7e:1c:93:8b:58:cf:50:83:f4:56:2f:
         19:37:4c:e7:58:22:e7:c8:50:39:a6:8b:cf:1e:6e:72:87:fc:
         b9:e8:ed:8b:06:b1:2d:5c:5a:86:60:04:97:59:1c:f3:c7:22:
         8d:8f:cd:fc:a7:e4:0b:26:42:b8:2f:b1:e2:2c:d0:c5:38:37:
         d9:3e:94:08:05:86:0f:ec:cf:6b:57:e7:69:9c:32:09:25:ef:
         cf:7f:37:39:ad:cb:c0:84:89:37:08:c1:7e:04:c0:53:0a:fd:
         0a:e0:25:ea:26:8c:be:55:e1:d7:ce:eb:e0:f1:26:9a:ff:3f:
         fc:86:cd:07:7c:6d:83:c2:4b:d2:21:1b:46:02:21:5e:f9:80:
         4b:67:00:38:00:c2:80:d5:08:0e:e6:6b:bc:05:51:20:51:9e:
         e0:e0:0a:13:42:02:f0:63:4c:c6:2d:7e:99:f8:7f:eb:6d:4e:
         22:6a:9e:7c:d4:f4:52:a7:89:05:b4:9c:55:ef:e9:05:84:c5:
         1b:59:e5:c0:8f:a9:b0:c2:af:3e:60:86:81:b4:c2:70:87:3c:
         ea:7d:78:3b:92:98:07:1c:2e:da:59:36:de:ca:e6:c6:71:74:
         63:19:ff:19:c5:aa:2f:b6:fc:40:46:56:57:18:f7:5c:6c:5b:
         24:88:39:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnRiOGJ+wDyRwIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
YjA1ZDdlOTgtMDk1MS00MWMzLTk3ZmYtOGM5YzUyNmQ5MDhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4OO2sh6Gbrpc3C5rLUIJ8GUYWzQujKUwlJm
HS9SLz+OrZGsXgem64+bGYDoHzmO7A5HSFcLQmEmaZg9DqFDM/naeusmtgQe0sRI
6cn4aHGn/SGdg6W08qmUA4qUmTB85jVZkgeFpfHVaQKhiPDEdcndppCBuVSKfHIS
zxS5wnPWa60V8efeH9R5y4HrEnabHNmxpkhToa1Mws/4Hil0VFTcP7sQxn+GfJhJ
NWbPYel4TYOLZox9I8VB+dIuv3zpGMbY5ynMQr70OjOr+E91IH6jGjFdm1QT7Szr
PwNBKNJIctjSf3iqeH0GRM9hsEojZIgpN8bGPRtovMS7dMDY9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGwTDknY6imo7Qdaf0Ru4DuFrzvQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmI1ZmU2MDMtOGU2ZC0z
OWFiLWIwYmMtZDEzYzBiOTAzNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8pAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIksSVUy3AZ+HJOLWM9Qg/RWLxk3TOdYIufIUDmmi88ebnKH/Lno7YsG
sS1cWoZgBJdZHPPHIo2Pzfyn5AsmQrgvseIs0MU4N9k+lAgFhg/sz2tX52mcMgkl
789/Nzmty8CEiTcIwX4EwFMK/QrgJeomjL5V4dfO6+DxJpr/P/yGzQd8bYPCS9Ih
G0YCIV75gEtnADgAwoDVCA7ma7wFUSBRnuDgChNCAvBjTMYtfpn4f+ttTiJqnnzU
9FKniQW0nFXv6QWExRtZ5cCPqbDCrz5ghoG0wnCHPOp9eDuSmAccLtpZNt7K5sZx
dGMZ/xnFqi+2/EBGVlcY91xsWySIOfM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:10:09 2024 by rpki-client on console-ams.rpki-client.org