Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/d8ffe295-eba3-3fc4-b6e3-632bb2fd0dbf.roa
File:                     d8ffe295-eba3-3fc4-b6e3-632bb2fd0dbf.roa (raw, json)
Hash identifier:          9lvHgggZiygX3bDH/aDoMGzccnZICO9vz/kJP6os40g=
Subject key identifier:   DE:23:D0:20:D5:F3:D3:E7:F2:78:4B:28:D6:8D:86:9C:8A:71:88:66
Certificate issuer:       /CN=1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c
Certificate serial:       010D0C9F432858479AABF4357E9AB7F6A434076C
Authority key identifier: 8D:29:3D:2E:77:CE:0D:E4:95:7E:AB:B8:73:87:1E:31:C0:32:FC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/d8ffe295-eba3-3fc4-b6e3-632bb2fd0dbf.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     396504
IP address blocks:        199.175.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:f4:35:7e:9a:b7:f6:a4:34:07:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=efab940b-dbe3-4d1a-b1e3-687ff37b6989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:71:77:8d:09:99:65:39:26:c5:5e:a5:21:17:
                    79:20:cb:16:96:7c:54:03:a7:57:aa:df:b5:d7:da:
                    89:83:32:68:eb:0a:aa:1f:0d:f7:e5:40:1c:04:4b:
                    e7:e6:56:d2:1d:89:d1:35:2b:74:4a:10:f2:29:54:
                    6e:80:8a:85:4e:e5:92:98:ba:32:08:08:45:97:92:
                    d6:4f:5a:05:f9:08:e6:93:6b:6b:b6:38:2b:6d:ed:
                    73:f9:a4:91:c9:00:d1:df:db:9f:2b:f3:07:a7:d9:
                    86:0d:fc:ce:31:b9:87:7f:30:cc:e9:cb:e6:31:0d:
                    e4:54:51:f5:a6:b2:ce:20:a0:54:45:6b:6d:e3:72:
                    a5:0c:ca:b1:79:bc:26:a2:07:e1:32:11:be:56:18:
                    8f:b1:dd:04:20:f5:91:3c:fd:65:05:f1:3d:f1:c4:
                    c6:75:d3:42:8c:2d:df:b3:a3:34:51:be:56:68:bf:
                    60:10:02:71:aa:9c:ff:21:ce:00:0d:0c:09:b5:55:
                    89:37:96:51:05:3c:4e:3e:0e:ff:ff:e5:01:43:6b:
                    11:45:6f:0b:44:3d:6f:5b:69:3c:ed:e7:de:7f:bd:
                    cb:e9:9e:db:92:93:42:04:57:98:77:d6:53:80:43:
                    aa:34:81:d7:59:f3:c0:0b:e1:17:49:fb:4c:fa:78:
                    9a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:23:D0:20:D5:F3:D3:E7:F2:78:4B:28:D6:8D:86:9C:8A:71:88:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/d8ffe295-eba3-3fc4-b6e3-632bb2fd0dbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.crl

            X509v3 Authority Key Identifier:
                keyid:8D:29:3D:2E:77:CE:0D:E4:95:7E:AB:B8:73:87:1E:31:C0:32:FC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.175.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:10:c2:d4:5a:23:0a:43:60:74:04:1f:1b:5f:27:fc:f1:2e:
         ad:db:04:71:5d:46:56:f8:68:e6:f8:f1:5e:7f:8a:10:d5:62:
         bc:c4:84:83:4d:ec:fc:4e:ad:32:39:3e:6a:3a:49:09:93:74:
         03:c8:f4:d6:9f:d8:97:02:db:70:d0:5e:cc:53:67:15:e8:df:
         ca:04:f4:cd:cc:bf:8d:f9:9f:1f:58:00:18:07:f7:b1:a4:33:
         a8:ad:93:9b:c1:a8:51:1b:da:19:42:5a:da:04:59:d0:fa:e0:
         30:20:ef:ce:77:dc:e4:7c:8a:20:5a:5f:68:6c:cd:53:1d:fe:
         4b:1f:0d:ac:27:14:6a:dd:2a:52:0c:ee:b2:7f:42:19:43:a2:
         79:b5:05:a4:b3:90:6b:ba:75:52:8e:27:f9:d3:01:0d:c5:f5:
         7b:e2:ce:c5:f1:3d:e5:9c:46:fb:51:7e:54:e9:39:6c:a2:44:
         11:27:c2:c6:24:67:a4:a8:4f:9e:b4:3b:95:12:23:4e:de:10:
         39:62:96:66:18:52:76:47:fd:5a:4d:ea:26:80:3d:4a:b9:6f:
         52:4a:03:93:f4:00:e9:a8:43:f9:d8:61:88:97:aa:7a:4a:6c:
         c6:f4:ba:03:bf:96:85:23:bf:59:28:e2:07:b8:ac:bd:0b:68:
         5a:aa:20:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq/Q1fpq39qQ0B2wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQwZTY4ZTUtMGMwZS00ZmYyLTgyOWYtNmY1Y2RjNzdh
MzljMB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk
ZWZhYjk0MGItZGJlMy00ZDFhLWIxZTMtNjg3ZmYzN2I2OTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnF3jQmZZTkmxV6lIRd5IMsWlnxUA6dXqt+1
19qJgzJo6wqqHw335UAcBEvn5lbSHYnRNSt0ShDyKVRugIqFTuWSmLoyCAhFl5LW
T1oF+Qjmk2trtjgrbe1z+aSRyQDR39ufK/MHp9mGDfzOMbmHfzDM6cvmMQ3kVFH1
prLOIKBURWtt43KlDMqxebwmogfhMhG+VhiPsd0EIPWRPP1lBfE98cTGddNCjC3f
s6M0Ub5WaL9gEAJxqpz/Ic4ADQwJtVWJN5ZRBTxOPg7//+UBQ2sRRW8LRD1vW2k8
7efef73L6Z7bkpNCBFeYd9ZTgEOqNIHXWfPAC+EXSftM+nia0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4j0CDV89Pn8nhLKNaNhpyKcYhmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDBl
NjhlNS0wYzBlLTRmZjItODI5Zi02ZjVjZGM3N2EzOWMvZDhmZmUyOTUtZWJhMy0z
ZmM0LWI2ZTMtNjMyYmIyZmQwZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQwZTY4ZTUtMGMwZS00ZmYyLTgy
OWYtNmY1Y2RjNzdhMzljLzFkMGU2OGU1LTBjMGUtNGZmMi04MjlmLTZmNWNkYzc3
YTM5Yy5jcmwwHwYDVR0jBBgwFoAUjSk9LnfODeSVfqu4c4ceMcAy/MkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDBlNjhlNS0wYzBlLTRmZjItODI5Zi02ZjVj
ZGM3N2EzOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFx69AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQQwtRaIwpDYHQEHxtfJ/zxLq3bBHFdRlb4aOb48V5/ihDVYrzEhINN
7PxOrTI5Pmo6SQmTdAPI9Naf2JcC23DQXsxTZxXo38oE9M3Mv435nx9YABgH97Gk
M6itk5vBqFEb2hlCWtoEWdD64DAg78533OR8iiBaX2hszVMd/ksfDawnFGrdKlIM
7rJ/QhlDonm1BaSzkGu6dVKOJ/nTAQ3F9XvizsXxPeWcRvtRflTpOWyiRBEnwsYk
Z6SoT560O5USI07eEDlilmYYUnZH/VpN6iaAPUq5b1JKA5P0AOmoQ/nYYYiXqnpK
bMb0ugO/loUjv1ko4ge4rL0LaFqqIO0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:25 2024 by rpki-client on console-fra.rpki-client.org