Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa
File:                     a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa (raw, json)
Hash identifier:          75mj7k42FV16TQ57XAf4RIgi4pAT4VF8BlvRFuHq87M=
Subject key identifier:   EF:14:9D:DB:E9:32:1A:EA:FD:27:28:D2:EE:2B:D1:3F:1F:6A:F6:37
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F432858454C3811D693EC64B8D8C1F200
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     11090
IP address blocks:        64.4.228.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:11:d6:93:ec:64:b8:d8:c1:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=c85545f1-c124-441d-8197-45ac641fbe31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:02:37:6d:6c:39:26:12:b9:93:50:08:08:d1:
                    e0:74:e0:26:81:4c:6c:35:0a:7a:3f:42:ad:40:a1:
                    74:e7:00:21:1e:f3:da:ac:b9:b2:56:83:19:72:df:
                    7f:81:76:0b:a0:66:35:0a:9e:50:39:ab:a4:55:d7:
                    01:7e:4d:ef:77:fa:94:73:23:a9:ce:ac:ce:65:05:
                    88:b5:49:71:04:a3:3b:11:f3:cd:e4:d2:18:44:b8:
                    7a:ac:55:dc:a6:76:95:86:40:25:14:4d:8d:64:f3:
                    37:2c:a9:20:01:79:ec:e7:63:ee:58:a1:9f:80:45:
                    8c:08:92:48:65:78:fb:57:e6:9e:fb:67:70:fa:ea:
                    53:6c:db:68:d8:03:18:b4:65:62:65:6c:98:00:9c:
                    70:3b:f0:ea:af:d1:b5:4c:25:7a:21:b2:73:07:1a:
                    d0:3d:67:5f:67:64:41:c7:4f:44:56:1e:0a:15:20:
                    7f:11:82:28:82:62:78:7d:0f:4e:28:11:4f:45:a3:
                    a9:16:a5:3f:b5:46:3d:6a:ae:58:a5:3c:d4:f1:05:
                    17:99:93:91:b8:3b:91:ed:e1:5c:28:9b:d3:9d:a6:
                    a6:a0:49:0c:31:68:23:7d:6e:aa:4c:dd:9b:61:f6:
                    1d:61:ba:1a:25:30:a6:44:40:b0:f2:7e:c0:56:2a:
                    11:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:14:9D:DB:E9:32:1A:EA:FD:27:28:D2:EE:2B:D1:3F:1F:6A:F6:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:2c:ee:7f:dc:f5:29:c4:67:a3:33:d1:e1:3a:ca:f9:48:e1:
         b6:6a:e6:db:87:ae:ec:dc:c9:6d:43:2a:77:8d:d2:48:dd:1c:
         91:fa:44:14:03:08:dc:e0:d9:62:3f:3b:f4:a3:10:aa:f1:af:
         4b:dd:eb:00:d0:db:06:bf:53:a4:c8:92:66:bb:0e:78:d2:f8:
         87:03:8d:83:83:08:d9:5d:be:ff:8a:e0:20:03:54:26:6a:f4:
         99:8a:6c:94:fa:9c:f3:f1:54:a3:36:93:d6:ec:67:3d:cc:98:
         69:8a:b0:99:aa:70:3f:92:72:dc:9a:86:18:a9:13:66:66:f7:
         5c:fb:c2:30:26:32:a8:c8:36:48:70:6b:92:f6:76:3d:4f:f9:
         ab:44:6a:6e:08:c8:91:e1:dc:36:99:9a:2d:17:55:ab:a1:76:
         c0:82:a0:26:af:01:a7:7f:7e:0b:e2:43:3d:ff:f6:10:0a:cb:
         2c:0f:cb:0c:bf:f0:0e:37:c7:80:f9:86:d9:93:82:5b:6c:59:
         d9:f2:93:24:2f:6f:39:3b:2c:5f:b3:f8:d9:23:30:14:f2:84:
         d1:56:52:31:1a:3e:e3:de:6f:35:b1:90:52:61:04:9e:10:77:
         3b:fd:4a:e3:23:ff:1b:c6:86:c4:eb:39:40:51:07:77:43:30:
         b4:42:49:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVMOBHWk+xkuNjB8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2
OWQxMB4XDTI0MDMyMzAxMDAyNFoXDTI0MDYyMTAxMDAyNFowLzEtMCsGA1UEAxMk
Yzg1NTQ1ZjEtYzEyNC00NDFkLTgxOTctNDVhYzY0MWZiZTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwI3bWw5JhK5k1AICNHgdOAmgUxsNQp6P0Kt
QKF05wAhHvParLmyVoMZct9/gXYLoGY1Cp5QOaukVdcBfk3vd/qUcyOpzqzOZQWI
tUlxBKM7EfPN5NIYRLh6rFXcpnaVhkAlFE2NZPM3LKkgAXns52PuWKGfgEWMCJJI
ZXj7V+ae+2dw+upTbNto2AMYtGViZWyYAJxwO/Dqr9G1TCV6IbJzBxrQPWdfZ2RB
x09EVh4KFSB/EYIogmJ4fQ9OKBFPRaOpFqU/tUY9aq5YpTzU8QUXmZORuDuR7eFc
KJvTnaamoEkMMWgjfW6qTN2bYfYdYboaJTCmRECw8n7AVioRWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO8UndvpMhrq/Sco0u4r0T8favY3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk
NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYTVkNjZhODctZjhhOS0z
NmNjLWI5YzAtNTA2Y2EwM2U2NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw
MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh
NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0
M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQATkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALks7n/c9SnEZ6Mz0eE6yvlI4bZq5tuHruzcyW1DKneN0kjdHJH6RBQD
CNzg2WI/O/SjEKrxr0vd6wDQ2wa/U6TIkma7DnjS+IcDjYODCNldvv+K4CADVCZq
9JmKbJT6nPPxVKM2k9bsZz3MmGmKsJmqcD+SctyahhipE2Zm91z7wjAmMqjINkhw
a5L2dj1P+atEam4IyJHh3DaZmi0XVauhdsCCoCavAad/fgviQz3/9hAKyywPywy/
8A43x4D5htmTgltsWdnykyQvbzk7LF+z+NkjMBTyhNFWUjEaPuPebzWxkFJhBJ4Q
dzv9SuMj/xvGhsTrOUBRB3dDMLRCSdI=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:45:41 2024 by rpki-client on console-fra.rpki-client.org