Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/f1a66537-cdc4-36f4-b5d9-a541e7831ff2.roa
File:                     f1a66537-cdc4-36f4-b5d9-a541e7831ff2.roa (raw, json)
Hash identifier:          Cr7ivkWXuDNJV9CCgi9Y1yEEMssYjSFzxH6k+Ud+xDs=
Subject key identifier:   1E:97:F1:49:11:98:D0:47:95:35:1F:2E:E9:89:95:DC:83:1D:5F:B7
Certificate issuer:       /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial:       010D0C9F43285847CE6F3CCD8564B7B957832180
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/f1a66537-cdc4-36f4-b5d9-a541e7831ff2.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     11878
IP address blocks:        64.112.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:3c:cd:85:64:b7:b9:57:83:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=eb3f7853-9187-4d51-9f42-97aeb8948942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:07:7c:78:00:12:1d:67:9a:ae:65:83:8f:cd:
                    3b:01:93:be:0d:12:26:fb:a9:91:1a:d7:33:f0:65:
                    3d:37:9a:2b:86:81:59:33:24:09:54:3a:e2:e6:91:
                    5a:95:f6:71:23:da:87:7f:8a:38:2f:ea:43:be:47:
                    44:0d:b3:f1:38:94:ad:cc:7e:42:02:c9:f9:c7:38:
                    1d:fc:ab:d9:21:56:23:21:1b:5a:e8:f6:a0:e1:31:
                    34:c9:31:63:c5:52:93:24:32:f7:a6:44:ae:5d:be:
                    f5:89:ba:1e:c8:fd:6a:46:46:80:23:36:e6:e6:a9:
                    22:5a:d6:30:07:a3:0b:8a:de:fa:b0:cd:cd:ad:e9:
                    b5:1a:98:8e:4c:ce:ed:c1:ad:97:36:0b:7f:3b:1c:
                    10:08:be:e8:e0:c5:73:61:82:26:a3:21:d9:18:b7:
                    bb:42:50:14:0f:c6:c5:ec:aa:18:02:68:3e:9b:0e:
                    9d:36:45:e7:e6:3d:e5:bc:b2:fe:1c:4f:a5:1c:6b:
                    73:f7:1d:37:8b:c0:1a:05:97:b8:44:a2:fa:68:18:
                    b9:01:8a:d6:bc:0d:f7:0f:b3:5c:47:3b:c1:33:46:
                    fc:ba:14:30:fd:4e:ba:f2:25:fc:a1:ab:7a:c2:71:
                    34:12:f8:fe:3b:3e:94:eb:a0:e3:32:35:88:ad:0c:
                    9d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:97:F1:49:11:98:D0:47:95:35:1F:2E:E9:89:95:DC:83:1D:5F:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/f1a66537-cdc4-36f4-b5d9-a541e7831ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ac:61:f4:07:f3:cc:d7:22:22:af:00:21:d3:72:64:59:f0:
         2a:d7:0d:12:98:ba:e0:b6:f3:3b:aa:98:a2:9b:ce:e3:af:7a:
         73:ac:36:42:6f:c8:d7:8b:b3:81:66:7d:0b:18:29:64:1b:2a:
         db:20:1a:fd:39:18:82:1a:1b:85:e3:fa:a9:2d:3d:35:b1:ee:
         e1:f5:d0:8f:b3:d2:a6:fc:15:49:11:c0:1c:8d:ce:db:8a:c4:
         2d:d6:f0:df:f0:f8:8d:b9:28:88:a0:05:5c:cd:9a:11:67:c7:
         08:06:e1:d6:7f:a5:24:b7:4f:64:65:d9:0c:a7:50:6c:19:89:
         21:94:49:d8:54:98:4b:d6:d0:3c:87:8c:61:03:17:d4:48:b7:
         40:0f:c5:98:0f:77:83:17:94:d5:73:d5:42:d5:57:cb:7f:f6:
         0f:13:66:2f:2d:b9:50:77:e5:91:64:01:b9:1b:32:83:f3:f2:
         82:86:e4:4f:04:ea:b6:82:1a:6a:8c:82:22:bf:f4:33:e1:89:
         e9:83:e4:fb:ca:95:57:66:ca:8a:4c:a4:fc:c5:1e:fe:3c:9f:
         d6:d6:d4:13:77:42:e7:fe:46:cf:47:8c:61:1f:9e:c3:b4:86:
         f9:a2:b5:93:bd:41:33:38:c1:00:43:d5:ed:ca:63:f4:6b:03:
         bb:23:7f:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfObzzNhWS3uVeDIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3
ZTRmMB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk
ZWIzZjc4NTMtOTE4Ny00ZDUxLTlmNDItOTdhZWI4OTQ4OTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gd8eAASHWearmWDj807AZO+DRIm+6mRGtcz
8GU9N5orhoFZMyQJVDri5pFalfZxI9qHf4o4L+pDvkdEDbPxOJStzH5CAsn5xzgd
/KvZIVYjIRta6Pag4TE0yTFjxVKTJDL3pkSuXb71iboeyP1qRkaAIzbm5qkiWtYw
B6MLit76sM3Nrem1GpiOTM7twa2XNgt/OxwQCL7o4MVzYYImoyHZGLe7QlAUD8bF
7KoYAmg+mw6dNkXn5j3lvLL+HE+lHGtz9x03i8AaBZe4RKL6aBi5AYrWvA33D7Nc
RzvBM0b8uhQw/U668iX8oat6wnE0Evj+Oz6U66DjMjWIrQydnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB6X8UkRmNBHlTUfLumJldyDHV+3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2
ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvZjFhNjY1MzctY2RjNC0z
NmY0LWI1ZDktYTU0MWU3ODMxZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz
YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz
N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz
ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACasYfQH88zXIiKvACHTcmRZ8CrXDRKYuuC28zuqmKKbzuOvenOsNkJv
yNeLs4FmfQsYKWQbKtsgGv05GIIaG4Xj+qktPTWx7uH10I+z0qb8FUkRwByNztuK
xC3W8N/w+I25KIigBVzNmhFnxwgG4dZ/pSS3T2Rl2QynUGwZiSGUSdhUmEvW0DyH
jGEDF9RIt0APxZgPd4MXlNVz1ULVV8t/9g8TZi8tuVB35ZFkAbkbMoPz8oKG5E8E
6raCGmqMgiK/9DPhiemD5PvKlVdmyopMpPzFHv48n9bW1BN3Quf+Rs9HjGEfnsO0
hvmitZO9QTM4wQBD1e3KY/RrA7sjfyY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:17 2024 by rpki-client on console-fra.rpki-client.org