Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5965c79d-7b9b-35b0-9805-6b37fe3241a6.roa
File:                     5965c79d-7b9b-35b0-9805-6b37fe3241a6.roa (raw, json)
Hash identifier:          wO51L1fFYEC6WoGNzuk4xMiLgQt1QkoOQJNRv8ANeYI=
Subject key identifier:   BA:3F:F5:3A:DF:ED:0D:9C:C2:19:80:EA:49:8A:83:CB:D4:DD:5A:0D
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F43285845840DBEB504A37D6707D3BE40
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5965c79d-7b9b-35b0-9805-6b37fe3241a6.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     207709
IP address blocks:        64.113.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:be:b5:04:a3:7d:67:07:d3:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=c1dac91d-a1d2-4753-91ec-13b647a5c98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:12:4b:d8:4e:41:41:28:0c:63:75:0d:c4:c2:
                    d9:9b:9f:12:f0:e9:30:75:a1:25:33:46:60:61:5e:
                    65:79:83:ce:c8:fa:9f:95:56:7b:68:33:d7:e3:2d:
                    66:8b:d0:9e:b5:33:38:99:95:5d:eb:4c:6a:9e:79:
                    59:7c:72:ed:f3:0f:51:fb:d2:a5:1a:2a:56:0a:b1:
                    37:04:4c:e0:22:f9:2e:94:99:b5:9d:70:ff:a7:c2:
                    15:cf:48:27:c1:e7:a3:7e:2e:88:26:9f:85:14:80:
                    bf:16:56:96:d9:9c:54:aa:15:e0:e8:42:9b:04:c9:
                    12:9a:e0:e4:85:1a:29:ac:16:13:af:85:c9:7e:e3:
                    32:fd:9d:a8:6b:14:92:9c:36:8a:f4:1e:a0:f2:af:
                    e0:eb:73:22:4c:1e:d3:bd:31:e3:ff:06:88:55:23:
                    a3:38:c5:bd:e4:b9:aa:84:9a:81:9d:65:a0:bf:99:
                    77:14:22:f6:f2:a3:14:b0:97:57:f9:5e:70:fe:10:
                    21:76:29:ce:ed:e2:1e:06:1e:94:14:23:90:ab:e5:
                    90:21:ba:8e:e8:2c:79:9d:11:1f:96:72:1f:22:74:
                    2d:47:ae:dc:af:d1:2e:b6:d4:da:e6:61:64:d8:aa:
                    a2:e9:6d:08:49:d9:31:54:dd:f4:86:c3:d6:95:dd:
                    05:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3F:F5:3A:DF:ED:0D:9C:C2:19:80:EA:49:8A:83:CB:D4:DD:5A:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5965c79d-7b9b-35b0-9805-6b37fe3241a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:46:d3:d9:a0:22:c6:f1:33:76:46:fe:68:20:da:44:43:1d:
         e7:bb:64:a4:d9:9b:5b:cd:39:82:85:6e:22:a4:87:65:cf:e0:
         c9:0a:e1:5b:b9:6f:a5:24:1d:31:34:eb:20:57:ee:19:bc:c5:
         b0:35:8e:d5:2f:4b:eb:4f:8d:3d:98:b8:72:76:b2:da:d7:16:
         cd:52:10:42:fb:88:1e:da:3f:8b:57:7c:a2:34:01:f4:b9:93:
         4a:f1:18:09:54:07:2b:8f:df:f1:c1:57:c0:be:33:0f:c5:eb:
         d2:bf:d9:53:7f:25:34:58:2e:70:29:22:61:ac:26:9d:df:fa:
         de:aa:e9:8c:1a:04:3c:80:c6:a0:1a:ad:93:0d:94:95:b7:34:
         7c:30:d0:f0:a1:bc:db:f2:52:07:3c:09:c2:a2:05:36:1f:ba:
         da:00:60:fd:e7:a6:d0:95:bb:28:0c:cc:b8:47:25:1b:b0:e8:
         eb:2d:ac:b7:7c:74:7f:86:22:f8:2b:e2:49:94:27:69:a4:4d:
         d8:42:04:a4:c9:79:16:d5:73:c9:dd:36:0b:e5:56:28:c2:4d:
         02:cd:d5:a0:e7:fd:78:77:d2:3d:e1:c5:3a:ea:83:2a:1f:37:
         d0:79:18:02:e4:bd:09:b6:e9:a9:eb:8f:5c:f3:41:88:f1:ae:
         5a:b7:75:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWEDb61BKN9ZwfTvkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZjYxMzktNTk5My00OTQxLWE4MDMtM2ZmNDUwYTYx
NDllMB4XDTI0MDQxMjAxMDAyNloXDTI0MDcxMTAxMDAyNlowLzEtMCsGA1UEAxMk
YzFkYWM5MWQtYTFkMi00NzUzLTkxZWMtMTNiNjQ3YTVjOThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hJL2E5BQSgMY3UNxMLZm58S8OkwdaElM0Zg
YV5leYPOyPqflVZ7aDPX4y1mi9CetTM4mZVd60xqnnlZfHLt8w9R+9KlGipWCrE3
BEzgIvkulJm1nXD/p8IVz0gnweejfi6IJp+FFIC/FlaW2ZxUqhXg6EKbBMkSmuDk
hRoprBYTr4XJfuMy/Z2oaxSSnDaK9B6g8q/g63MiTB7TvTHj/waIVSOjOMW95Lmq
hJqBnWWgv5l3FCL28qMUsJdX+V5w/hAhdinO7eIeBh6UFCOQq+WQIbqO6Cx5nREf
lnIfInQtR67cr9EuttTa5mFk2Kqi6W0ISdkxVN30hsPWld0FCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLo/9Trf7Q2cwhmA6kmKg8vU3VoNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNm
NjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0NTBhNjE0OWUvNTk2NWM3OWQtN2I5Yi0z
NWIwLTk4MDUtNmIzN2ZlMzI0MWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWRjZjYxMzktNTk5My00OTQxLWE4
MDMtM2ZmNDUwYTYxNDllLzVkY2Y2MTM5LTU5OTMtNDk0MS1hODAzLTNmZjQ1MGE2
MTQ5ZS5jcmwwHwYDVR0jBBgwFoAULLflCxT6PZa8DBcX1K4/3yZtZm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNmNjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0
NTBhNjE0OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHEQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZG09mgIsbxM3ZG/mgg2kRDHee7ZKTZm1vNOYKFbiKkh2XP4MkK4Vu5
b6UkHTE06yBX7hm8xbA1jtUvS+tPjT2YuHJ2strXFs1SEEL7iB7aP4tXfKI0AfS5
k0rxGAlUByuP3/HBV8C+Mw/F69K/2VN/JTRYLnApImGsJp3f+t6q6YwaBDyAxqAa
rZMNlJW3NHww0PChvNvyUgc8CcKiBTYfutoAYP3nptCVuygMzLhHJRuw6OstrLd8
dH+GIvgr4kmUJ2mkTdhCBKTJeRbVc8ndNgvlVijCTQLN1aDn/Xh30j3hxTrqgyof
N9B5GALkvQm26anrj1zzQYjxrlq3dXw=
-----END CERTIFICATE-----
Generated at Thu May 23 02:54:43 2024 by rpki-client on console-ams.rpki-client.org