Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa
File:                     0ea66b86-5648-3598-868f-d655bca90280.roa (raw, json)
Hash identifier:          y+uuDzhw294TNGSGPXy0ZkSxTvp0z4r/He4NynBfU7k=
Subject key identifier:   96:B4:34:28:00:DF:5B:80:17:38:0E:33:7B:55:A7:5B:E9:17:E0:B3
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584734C73ABD8CD58A618734C580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7029
IP address blocks:        64.24.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:3a:bd:8c:d5:8a:61:87:34:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=125853df-ba09-48aa-a1aa-639c2175ef80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:ad:f6:5d:48:64:1f:3a:d9:62:b7:24:13:
                    13:fe:c6:a3:3a:88:17:55:15:1b:f1:1c:c7:25:76:
                    c3:80:29:0f:53:f9:b4:d8:00:11:d5:ca:f0:04:06:
                    a1:e7:41:64:00:41:da:c3:1a:1d:5e:c3:cf:87:9d:
                    70:97:2f:d3:6a:e9:74:ed:80:c1:66:ff:68:f4:91:
                    4a:ff:cf:75:ab:24:b3:2d:8b:90:b8:01:51:44:03:
                    41:02:04:ee:66:49:ea:8d:05:5d:05:86:ab:fd:b2:
                    be:01:82:29:f6:86:3d:ca:c0:73:e3:86:bd:b7:57:
                    ef:64:be:0a:19:8e:fb:ed:7e:d2:6f:b6:ef:3c:2c:
                    d9:dd:5c:a1:b8:f2:d2:d1:1f:ad:2b:d7:8d:10:dd:
                    c3:c8:1f:cf:7b:bb:fc:33:0f:ed:9b:49:fc:6e:da:
                    57:f7:14:b0:e4:4c:59:e3:9b:d3:0f:3c:ff:34:c1:
                    c3:b5:36:84:3c:ad:3a:ab:70:0f:0b:34:c2:82:26:
                    05:37:97:fe:46:d2:ae:6e:71:60:1c:25:86:1b:cd:
                    9d:b2:9e:7f:9b:64:a1:57:cf:f0:4e:76:26:53:b4:
                    ae:d7:64:55:a7:ad:db:c7:af:72:83:29:f6:0b:db:
                    d0:07:e3:26:57:f7:0d:da:8f:50:7b:cc:9c:9e:64:
                    d3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B4:34:28:00:DF:5B:80:17:38:0E:33:7B:55:A7:5B:E9:17:E0:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.24.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:6d:70:f9:68:f8:e3:93:93:ea:22:7f:69:c8:27:bc:74:68:
         df:bc:02:01:5c:40:3d:c9:53:53:aa:71:b2:10:c2:25:7e:54:
         3e:04:83:69:30:c3:44:97:54:13:e9:b3:06:e7:31:ee:42:b1:
         67:7c:be:e3:3a:9c:12:49:4e:7b:4c:fd:a1:1e:d8:8f:ed:a1:
         77:c0:7c:66:98:73:af:cd:1e:c2:01:e9:86:a4:94:b9:a0:cc:
         3f:7c:fb:18:53:db:44:04:da:54:ed:db:2d:03:33:68:77:8c:
         89:ba:5d:1f:e9:58:2c:c9:c4:f6:47:99:9c:35:62:17:3a:77:
         be:2a:29:43:63:a4:97:a8:5d:54:8b:85:07:8c:ae:8b:59:68:
         bf:29:05:9a:47:00:c2:6a:6b:0a:df:61:d8:98:25:ec:53:d7:
         92:f5:b0:13:f6:e1:e0:74:ee:d0:ba:34:33:87:9b:60:27:4c:
         63:57:fe:58:3e:e9:62:97:98:dd:49:7a:b9:a5:fe:7d:d3:e6:
         c1:d1:c9:33:5a:b4:1d:60:7e:6a:21:8f:e4:ec:65:42:17:55:
         c6:f2:b9:98:9a:8d:f2:2b:47:b5:3e:7d:80:69:00:fc:42:e6:
         c4:60:b1:75:ce:06:95:70:21:de:8b:7e:80:e1:01:fa:af:a2:
         54:08:30:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0xzq9jNWKYYc0xYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
MTI1ODUzZGYtYmEwOS00OGFhLWExYWEtNjM5YzIxNzVlZjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri+t9l1IZB862WK3JBMT/sajOogXVRUb8RzH
JXbDgCkPU/m02AAR1crwBAah50FkAEHawxodXsPPh51wly/Taul07YDBZv9o9JFK
/891qySzLYuQuAFRRANBAgTuZknqjQVdBYar/bK+AYIp9oY9ysBz44a9t1fvZL4K
GY777X7Sb7bvPCzZ3VyhuPLS0R+tK9eNEN3DyB/Pe7v8Mw/tm0n8btpX9xSw5ExZ
45vTDzz/NMHDtTaEPK06q3APCzTCgiYFN5f+RtKubnFgHCWGG82dsp5/m2ShV8/w
TnYmU7Su12RVp63bx69ygyn2C9vQB+MmV/cN2o9Qe8ycnmTTIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJa0NCgA31uAFzgOM3tVp1vpF+CzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGVhNjZiODYtNTY0OC0z
NTk4LTg2OGYtZDY1NWJjYTkwMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQBgIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIBtcPlo+OOTk+oif2nIJ7x0aN+8AgFcQD3JU1OqcbIQwiV+VD4Eg2kw
w0SXVBPpswbnMe5CsWd8vuM6nBJJTntM/aEe2I/toXfAfGaYc6/NHsIB6YaklLmg
zD98+xhT20QE2lTt2y0DM2h3jIm6XR/pWCzJxPZHmZw1Yhc6d74qKUNjpJeoXVSL
hQeMrotZaL8pBZpHAMJqawrfYdiYJexT15L1sBP24eB07tC6NDOHm2AnTGNX/lg+
6WKXmN1Jerml/n3T5sHRyTNatB1gfmohj+TsZUIXVcbyuZiajfIrR7U+fYBpAPxC
5sRgsXXOBpVwId6LfoDhAfqvolQIMIM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:50 2024 by rpki-client on console-fra.rpki-client.org