Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa
File:                     fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa (raw, json)
Hash identifier:          gvLxk+eHPF+zc4ZvmHbq8rUl9dx0TFfV18oBeC2n2vg=
Subject key identifier:   C8:49:BC:FA:EA:62:C1:58:7B:68:B5:C3:1F:5C:19:D3:7E:9B:AF:58
Certificate issuer:       /CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
Certificate serial:       010D0C9F43285847BAC6AC36884C46D1F951F040
Authority key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     64227
IP address blocks:        64.237.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:ac:36:88:4c:46:d1:f9:51:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=1007732e-1d5a-4cb1-a700-7fa19edff155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e6:37:16:ef:83:c2:a2:69:a6:ff:dc:4d:60:
                    9c:7b:14:72:23:3b:08:95:90:e6:93:a4:84:15:a2:
                    96:f7:99:6f:cf:87:4c:4a:3e:76:d4:45:8f:99:6a:
                    5a:cc:64:53:7a:bb:6f:e1:4e:26:77:e5:f3:2b:b3:
                    e8:b3:b3:2a:53:f4:1e:bb:9a:75:eb:3c:3b:d6:63:
                    d1:c0:4b:34:92:c2:a9:94:82:9a:fe:cd:55:cb:0c:
                    06:15:d3:58:e1:b8:20:21:3f:99:82:27:f1:06:77:
                    04:1d:7f:d1:64:1c:c0:cc:05:2e:ea:02:ac:3f:93:
                    99:ac:f6:6c:d2:27:b6:da:4c:88:53:6a:79:b4:ec:
                    29:19:d8:e9:d1:48:8f:26:bd:2f:af:a8:1e:48:b2:
                    ed:89:00:e8:e1:ae:49:aa:18:b8:a6:5b:6f:2c:ae:
                    d7:f4:4a:be:73:42:6c:10:d3:ab:10:cc:97:4f:0e:
                    67:20:bb:e9:85:e9:70:de:02:a5:a7:60:e9:09:dc:
                    0c:7d:34:d5:73:52:c9:2f:fe:cc:6f:93:ac:81:9a:
                    97:f7:33:2e:97:c2:01:f0:66:95:75:71:0d:85:06:
                    cf:ec:d3:c3:1c:ea:bb:3c:cb:88:45:84:12:99:0f:
                    ba:c0:a4:85:0f:27:36:c5:8c:35:d6:46:d6:af:bc:
                    b6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:49:BC:FA:EA:62:C1:58:7B:68:B5:C3:1F:5C:19:D3:7E:9B:AF:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl

            X509v3 Authority Key Identifier:
                keyid:2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:0a:d1:1c:a7:58:40:8b:55:44:36:ac:a8:66:91:c8:e3:79:
         25:7f:2f:60:29:89:d9:ed:db:44:ff:6f:71:5c:91:99:51:5c:
         bd:ec:e2:e8:c1:2e:ea:08:77:19:9a:e7:75:dc:37:c1:ba:42:
         e5:91:4e:52:87:97:03:72:a8:bb:83:fc:04:8c:52:fd:4b:92:
         62:39:3c:f3:a2:22:ac:0d:2b:6d:78:af:42:c1:e2:e7:45:1c:
         14:7a:b3:b2:fb:1d:b5:13:0e:4e:76:1a:43:33:78:76:d1:1f:
         9a:bb:3d:57:57:b6:b6:3c:b6:07:50:8b:1b:48:4b:e9:88:17:
         56:b8:ca:d1:0b:bb:12:d6:b1:08:f1:df:dc:df:fb:92:f1:35:
         46:60:47:a6:43:32:90:17:83:ff:9d:e7:34:c7:76:cb:8b:6e:
         00:35:63:52:70:12:13:d1:7e:db:e7:f5:bf:30:4d:6d:42:57:
         a7:58:92:7d:d3:7a:61:a1:ac:e8:64:f9:e9:e8:6e:ad:81:88:
         d8:1a:bd:93:25:6a:a5:a8:89:b6:68:59:9d:71:99:4c:34:e4:
         5e:89:3d:84:e4:b9:6d:a8:1d:b0:4f:49:de:12:b2:df:ff:8b:
         17:b3:cf:fe:56:69:27:df:f2:9d:b3:85:54:27:f8:ea:cb:29:
         cf:cf:3f:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xqw2iExG0flR8EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzcwYjg2ZjUtMGFlNy00ZTZjLWEzMmUtMDgzMTAxNTZk
ZjNmMB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk
MTAwNzczMmUtMWQ1YS00Y2IxLWE3MDAtN2ZhMTllZGZmMTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uY3Fu+DwqJppv/cTWCcexRyIzsIlZDmk6SE
FaKW95lvz4dMSj521EWPmWpazGRTertv4U4md+XzK7Pos7MqU/Qeu5p16zw71mPR
wEs0ksKplIKa/s1VywwGFdNY4bggIT+ZgifxBncEHX/RZBzAzAUu6gKsP5OZrPZs
0ie22kyIU2p5tOwpGdjp0UiPJr0vr6geSLLtiQDo4a5Jqhi4pltvLK7X9Eq+c0Js
ENOrEMyXTw5nILvphelw3gKlp2DpCdwMfTTVc1LJL/7Mb5OsgZqX9zMul8IB8GaV
dXENhQbP7NPDHOq7PMuIRYQSmQ+6wKSFDyc2xYw11kbWr7y2ZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMhJvPrqYsFYe2i1wx9cGdN+m69YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzBi
ODZmNS0wYWU3LTRlNmMtYTMyZS0wODMxMDE1NmRmM2YvZmM2MDFiZGEtNmRkMC0z
YzY2LWJjNjQtNjgyYzljMGRmZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzcwYjg2ZjUtMGFlNy00ZTZjLWEz
MmUtMDgzMTAxNTZkZjNmLzM3MGI4NmY1LTBhZTctNGU2Yy1hMzJlLTA4MzEwMTU2
ZGYzZi5jcmwwHwYDVR0jBBgwFoAUKnBuVYRj4+5yYJDqTSbO8pwumNAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzBiODZmNS0wYWU3LTRlNmMtYTMyZS0wODMx
MDE1NmRmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQO1oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHUK0RynWECLVUQ2rKhmkcjjeSV/L2Apidnt20T/b3FckZlRXL3s4ujB
LuoIdxma53XcN8G6QuWRTlKHlwNyqLuD/ASMUv1LkmI5PPOiIqwNK214r0LB4udF
HBR6s7L7HbUTDk52GkMzeHbRH5q7PVdXtrY8tgdQixtIS+mIF1a4ytELuxLWsQjx
39zf+5LxNUZgR6ZDMpAXg/+d5zTHdsuLbgA1Y1JwEhPRftvn9b8wTW1CV6dYkn3T
emGhrOhk+enobq2BiNgavZMlaqWoibZoWZ1xmUw05F6JPYTkuW2oHbBPSd4Sst//
ixezz/5WaSff8p2zhVQn+OrLKc/PP7M=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:33 2024 by rpki-client on console-ams.rpki-client.org