Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ccc9faba-f32f-30e1-bdf4-f0a283aa23e1.roa
File:                     ccc9faba-f32f-30e1-bdf4-f0a283aa23e1.roa (raw, json)
Hash identifier:          sxl9AwBaHJSfzxnZvVMWnBlDtgmFAtrGQx4W1XK20Ec=
Subject key identifier:   B8:3B:D9:05:7D:F2:1F:20:C1:0F:86:17:98:A9:C0:49:97:5D:36:04
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F432858478CB6808403E86A7666D95BC0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ccc9faba-f32f-30e1-bdf4-f0a283aa23e1.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     13414
IP address blocks:        64.63.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:80:84:03:e8:6a:76:66:d9:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=d43ae432-a5c1-4386-bcec-dbe4cbcf446a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:10:cb:4e:62:38:ac:f5:21:8c:6c:6d:d9:bd:
                    13:24:35:69:7f:be:3c:69:77:17:fc:0d:0a:9e:e2:
                    1e:b7:4b:08:2f:98:a1:82:4d:d3:cb:b1:97:aa:05:
                    45:ee:3e:da:3d:6f:a4:4a:03:65:44:b2:81:eb:be:
                    16:31:a8:bc:4e:f0:e6:66:d0:fb:7d:57:2f:ab:a9:
                    b4:8c:8e:c5:b2:da:2a:1d:14:ad:34:f8:f2:14:ff:
                    dc:9e:5f:84:d1:82:f5:3f:3c:25:de:1f:31:49:2a:
                    c3:d8:1a:3c:69:80:fa:7d:bc:56:79:c2:9d:eb:60:
                    c7:95:7d:68:00:55:66:d7:65:82:5c:53:5b:d3:b8:
                    ba:d7:d1:0f:8c:da:2f:2e:a9:de:5d:3b:34:4e:8f:
                    39:95:82:0d:98:31:68:4b:a0:c9:7b:64:6b:f6:e7:
                    40:23:39:fa:33:73:d9:73:02:0c:d3:fc:27:85:95:
                    ce:a4:5f:08:5c:a1:96:ab:a7:bd:cc:32:d3:b7:fd:
                    c6:d5:91:13:c1:1f:66:68:ff:d4:5a:20:21:f5:12:
                    b5:0d:63:06:aa:eb:49:18:43:f8:d5:d3:61:2e:e3:
                    d4:6d:2c:71:fa:a1:df:d9:d7:6d:2d:3b:55:c1:45:
                    1c:07:e7:18:b9:5d:77:cb:e6:db:fd:4c:db:1a:9b:
                    5c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3B:D9:05:7D:F2:1F:20:C1:0F:86:17:98:A9:C0:49:97:5D:36:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ccc9faba-f32f-30e1-bdf4-f0a283aa23e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:07:0a:ea:2f:c4:76:e9:73:a9:0e:fd:73:64:15:95:a9:9c:
         55:31:42:2b:17:e8:46:bb:84:73:54:97:f9:98:d8:dc:96:c4:
         57:b0:57:bc:ca:00:43:65:99:89:a0:36:7c:b1:0a:4f:ab:35:
         72:52:9a:c4:c5:ee:89:27:b6:d4:6a:15:e1:6a:33:fc:a7:2c:
         0e:a2:e0:2c:de:5e:69:2b:c0:32:47:be:55:0a:21:85:b4:ff:
         eb:41:e1:34:d9:a0:4c:b7:26:ec:b3:35:4c:09:95:cc:90:5d:
         17:25:32:5d:e5:32:f3:8a:01:e7:2a:ef:b4:88:b6:fc:b8:70:
         ea:0e:88:3d:d2:3c:06:db:13:5f:43:ec:76:19:ef:4c:5a:17:
         e9:b0:48:2a:b5:9b:58:bc:21:87:c3:1e:9f:a2:00:ce:10:e7:
         ef:b7:da:c0:29:48:62:71:af:24:8d:c1:a2:a9:1e:3b:ff:70:
         10:a3:b4:04:c1:a5:6c:74:e9:b2:5e:a0:7e:3b:a5:90:d0:32:
         2c:6a:1c:5c:e3:36:55:53:f2:7e:f9:eb:4c:fc:53:b9:a3:c3:
         26:67:fa:32:81:13:96:9c:77:c9:28:c1:c7:c9:3a:94:af:69:
         e9:ea:3d:3f:18:3b:b4:e5:ee:36:e6:aa:47:e2:ef:2b:00:d2:
         e4:d7:90:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMtoCEA+hqdmbZW8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk
ZDQzYWU0MzItYTVjMS00Mzg2LWJjZWMtZGJlNGNiY2Y0NDZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BDLTmI4rPUhjGxt2b0TJDVpf748aXcX/A0K
nuIet0sIL5ihgk3Ty7GXqgVF7j7aPW+kSgNlRLKB674WMai8TvDmZtD7fVcvq6m0
jI7FstoqHRStNPjyFP/cnl+E0YL1Pzwl3h8xSSrD2Bo8aYD6fbxWecKd62DHlX1o
AFVm12WCXFNb07i619EPjNovLqneXTs0To85lYINmDFoS6DJe2Rr9udAIzn6M3PZ
cwIM0/wnhZXOpF8IXKGWq6e9zDLTt/3G1ZETwR9maP/UWiAh9RK1DWMGqutJGEP4
1dNhLuPUbSxx+qHf2ddtLTtVwUUcB+cYuV13y+bb/UzbGptcVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLg72QV98h8gwQ+GF5ipwEmXXTYEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvY2NjOWZhYmEtZjMyZi0z
MGUxLWJkZjQtZjBhMjgzYWEyM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAHCuovxHbpc6kO/XNkFZWpnFUxQisX6Ea7hHNUl/mY2NyWxFewV7zK
AENlmYmgNnyxCk+rNXJSmsTF7oknttRqFeFqM/ynLA6i4CzeXmkrwDJHvlUKIYW0
/+tB4TTZoEy3JuyzNUwJlcyQXRclMl3lMvOKAecq77SItvy4cOoOiD3SPAbbE19D
7HYZ70xaF+mwSCq1m1i8IYfDHp+iAM4Q5++32sApSGJxrySNwaKpHjv/cBCjtATB
pWx06bJeoH47pZDQMixqHFzjNlVT8n7560z8U7mjwyZn+jKBE5acd8kowcfJOpSv
aenqPT8YO7Tl7jbmqkfi7ysA0uTXkMQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:56 2024 by rpki-client on console-ams.rpki-client.org