Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4407b653-04bb-4149-bf8f-aec8d907332c/47ce1956-0473-3206-9251-67a49ef99b6b.roa
File:                     47ce1956-0473-3206-9251-67a49ef99b6b.roa (raw, json)
Hash identifier:          PF+FZEnspWWk2kiCG385jjzxQ8F4yBSlGYqc9Pqqsqc=
Subject key identifier:   3C:AE:B1:4A:B5:44:BF:32:09:41:9C:8E:27:5A:65:40:F1:7B:39:F8
Certificate issuer:       /CN=4407b653-04bb-4149-bf8f-aec8d907332c
Certificate serial:       010D0C9F432858474F4B70C732FCEE3B2700CD70
Authority key identifier: EC:80:EF:6D:BE:94:94:A1:89:75:76:D1:65:EE:F4:92:94:36:10:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4407b653-04bb-4149-bf8f-aec8d907332c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4407b653-04bb-4149-bf8f-aec8d907332c/47ce1956-0473-3206-9251-67a49ef99b6b.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     7922
IP address blocks:        64.136.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4407b653-04bb-4149-bf8f-aec8d907332c/4407b653-04bb-4149-bf8f-aec8d907332c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4407b653-04bb-4149-bf8f-aec8d907332c/4407b653-04bb-4149-bf8f-aec8d907332c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4407b653-04bb-4149-bf8f-aec8d907332c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:70:c7:32:fc:ee:3b:27:00:cd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4407b653-04bb-4149-bf8f-aec8d907332c
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=63ae2f8d-de64-4de6-9dd6-c0f34ce23ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ee:e2:f0:65:0b:b5:6c:e9:19:36:02:d3:36:
                    02:ba:51:88:07:8f:65:32:e9:8b:74:ab:5b:f9:b9:
                    2b:c3:19:a1:44:0a:54:95:9d:e6:d7:81:d0:b9:43:
                    50:8d:ad:d0:0b:61:03:ca:4a:ce:d2:eb:18:98:51:
                    99:4f:b9:50:d7:38:de:6c:6d:ce:fa:2b:c8:1a:01:
                    46:34:3c:cf:04:d4:db:05:b5:35:de:26:51:05:fd:
                    b2:14:f4:db:38:ee:14:ec:9e:98:17:4f:83:af:ac:
                    28:12:20:12:d3:b0:33:ef:14:46:52:ec:46:75:d5:
                    35:a0:27:52:b4:3d:2b:99:f9:ed:9f:c6:09:98:d8:
                    15:0b:93:b9:a4:41:e2:90:4b:bf:50:84:8f:6e:c2:
                    93:a7:41:28:9e:d8:60:e2:5b:df:19:bf:b3:12:7c:
                    73:70:af:a5:7f:77:66:10:a9:36:4e:36:0f:20:a4:
                    a8:1f:03:24:2e:87:11:22:2e:e9:ba:58:f2:d5:04:
                    54:b8:cf:bc:79:37:98:44:0e:74:d2:98:ef:62:32:
                    51:3a:42:3d:18:15:ce:b2:6d:c5:da:df:09:07:68:
                    6c:66:fb:8b:ec:3f:ff:b4:e3:08:86:6c:2f:f2:9d:
                    ab:60:14:ce:55:93:29:8a:bf:ed:e0:20:e6:78:00:
                    3b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AE:B1:4A:B5:44:BF:32:09:41:9C:8E:27:5A:65:40:F1:7B:39:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4407b653-04bb-4149-bf8f-aec8d907332c/47ce1956-0473-3206-9251-67a49ef99b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4407b653-04bb-4149-bf8f-aec8d907332c/4407b653-04bb-4149-bf8f-aec8d907332c.crl

            X509v3 Authority Key Identifier:
                keyid:EC:80:EF:6D:BE:94:94:A1:89:75:76:D1:65:EE:F4:92:94:36:10:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4407b653-04bb-4149-bf8f-aec8d907332c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.136.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:da:8e:b7:06:64:4d:c2:fb:dc:b9:48:49:db:b8:e0:fb:c3:
         a3:b2:35:cb:bb:02:09:f6:36:ab:3c:cf:90:01:c3:60:bc:86:
         e7:80:81:2c:f9:5d:8d:fb:d6:c0:07:2d:5f:ca:ce:0a:fb:03:
         08:f2:a9:d6:ce:65:ac:fb:e9:b5:3e:de:3b:bb:80:20:20:59:
         78:54:91:45:cf:fb:b5:51:33:83:3b:ed:5e:c3:fd:89:c2:96:
         c5:25:e0:bb:fc:28:5b:57:5d:13:7a:5a:0a:37:c5:b5:f8:f2:
         cf:0b:da:85:d4:27:19:f8:d1:cc:e3:1d:50:cb:aa:e4:ea:47:
         29:3e:e4:e1:b4:9b:fa:2d:4c:9b:8a:45:84:e1:fd:0b:7c:0f:
         0c:95:1b:68:a5:cb:b3:80:9e:db:9f:eb:9e:77:7e:26:b9:f1:
         63:76:ab:cb:d4:b0:2b:dd:37:d6:c9:26:85:9f:25:8a:90:2b:
         7b:c2:fd:24:0e:47:90:d5:5d:88:ee:c4:f5:36:4a:d4:4a:3f:
         e3:e7:c0:97:73:86:55:2c:f9:b4:89:2f:5e:2b:b4:70:1e:24:
         67:3d:5c:2d:56:02:c2:bb:3f:6b:c8:79:dc:62:c8:39:1a:e5:
         88:5d:e4:0a:de:b6:73:90:b9:b9:78:34:ab:07:bc:5d:41:d3:
         3a:bc:17:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdPS3DHMvzuOycAzXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDQwN2I2NTMtMDRiYi00MTQ5LWJmOGYtYWVjOGQ5MDcz
MzJjMB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk
NjNhZTJmOGQtZGU2NC00ZGU2LTlkZDYtYzBmMzRjZTIzYWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO7i8GULtWzpGTYC0zYCulGIB49lMumLdKtb
+bkrwxmhRApUlZ3m14HQuUNQja3QC2EDykrO0usYmFGZT7lQ1zjebG3O+ivIGgFG
NDzPBNTbBbU13iZRBf2yFPTbOO4U7J6YF0+Dr6woEiAS07Az7xRGUuxGddU1oCdS
tD0rmfntn8YJmNgVC5O5pEHikEu/UISPbsKTp0Eonthg4lvfGb+zEnxzcK+lf3dm
EKk2TjYPIKSoHwMkLocRIi7puljy1QRUuM+8eTeYRA500pjvYjJROkI9GBXOsm3F
2t8JB2hsZvuL7D//tOMIhmwv8p2rYBTOVZMpir/t4CDmeAA7pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDyusUq1RL8yCUGcjidaZUDxezn4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NDA3
YjY1My0wNGJiLTQxNDktYmY4Zi1hZWM4ZDkwNzMzMmMvNDdjZTE5NTYtMDQ3My0z
MjA2LTkyNTEtNjdhNDllZjk5YjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDQwN2I2NTMtMDRiYi00MTQ5LWJm
OGYtYWVjOGQ5MDczMzJjLzQ0MDdiNjUzLTA0YmItNDE0OS1iZjhmLWFlYzhkOTA3
MzMyYy5jcmwwHwYDVR0jBBgwFoAU7IDvbb6UlKGJdXbRZe70kpQ2EE8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NDA3YjY1My0wNGJiLTQxNDktYmY4Zi1hZWM4
ZDkwNzMzMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIhrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbajrcGZE3C+9y5SEnbuOD7w6OyNcu7Agn2Nqs8z5ABw2C8hueAgSz5
XY371sAHLV/Kzgr7AwjyqdbOZaz76bU+3ju7gCAgWXhUkUXP+7VRM4M77V7D/YnC
lsUl4Lv8KFtXXRN6Wgo3xbX48s8L2oXUJxn40czjHVDLquTqRyk+5OG0m/otTJuK
RYTh/Qt8DwyVG2ily7OAntuf6553fia58WN2q8vUsCvdN9bJJoWfJYqQK3vC/SQO
R5DVXYjuxPU2StRKP+PnwJdzhlUs+bSJL14rtHAeJGc9XC1WAsK7P2vIedxiyDka
5Yhd5AretnOQubl4NKsHvF1B0zq8F1A=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:29 2024 by rpki-client on console-ams.rpki-client.org