Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/a2b21db6-eaa6-338d-9a0c-498e8bb096cb.roa
File:                     a2b21db6-eaa6-338d-9a0c-498e8bb096cb.roa (raw, json)
Hash identifier:          +RsbOipYqhLeBDpzKxwbfW1JKq+um0xMIssZWkZKZ6A=
Subject key identifier:   15:FB:41:6A:62:91:AD:B9:F6:6B:AB:BF:92:D6:06:D7:75:23:A5:AF
Certificate issuer:       /CN=654fbbab-11f5-4ada-bd8c-77eec4615c91
Certificate serial:       010D0C9F43285845D0D3A6C648898176CE1BC800
Authority key identifier: A2:E1:81:0E:2E:B5:14:6A:80:75:C4:0B:2E:F9:56:3C:30:D2:39:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/a2b21db6-eaa6-338d-9a0c-498e8bb096cb.roa
Signing time:             Thu 09 May 2024 13:00:33 +0000
ROA not before:           Thu 09 May 2024 13:00:33 +0000
ROA not after:            Wed 07 Aug 2024 13:00:33 +0000
asID:                     136258
IP address blocks:        64.31.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d0:d3:a6:c6:48:89:81:76:ce:1b:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=654fbbab-11f5-4ada-bd8c-77eec4615c91
        Validity
            Not Before: May  9 13:00:33 2024 GMT
            Not After : Aug  7 13:00:33 2024 GMT
        Subject: CN=29cfe1ad-73c6-468e-a4c3-da85c21ebde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:48:36:ac:a6:37:1b:ba:f6:ce:36:d8:7a:56:
                    ca:93:4e:2d:dc:c6:87:aa:ca:73:a8:04:12:04:dc:
                    87:e7:22:c8:68:b9:d8:60:c2:30:81:43:22:58:b4:
                    b5:b3:2c:ae:1c:3f:a6:9e:8e:60:18:55:2b:76:1a:
                    d7:96:a9:c8:e5:f5:f0:ac:a0:09:63:a2:20:4e:93:
                    3a:1f:49:c1:62:b2:41:10:05:24:ca:b4:46:a8:6a:
                    0c:65:51:2b:0e:14:9f:1c:0b:f5:dc:46:74:81:99:
                    dc:f4:3b:d7:14:0d:6c:5d:d5:5c:99:bd:96:6a:17:
                    a9:0a:35:13:bb:bf:f1:79:25:d6:9a:ba:27:e4:5e:
                    ad:fb:fe:ce:ff:2a:6f:fa:b4:3d:7c:5e:b8:24:db:
                    0e:10:5e:d0:8d:a0:d9:68:14:59:a9:d1:fc:26:94:
                    6d:6c:54:46:b3:68:df:2e:a2:c2:f4:c8:65:6d:89:
                    0f:c8:73:d3:20:71:4d:ee:6d:8c:b5:f6:d1:47:ce:
                    6e:d3:f6:7d:d9:e7:ef:df:0f:ea:03:8f:6a:c0:6d:
                    a4:ae:94:08:a7:2b:55:12:1c:7d:20:47:e4:66:9a:
                    3f:76:63:fa:62:e7:5e:a7:17:ab:44:55:c4:99:66:
                    e6:8f:67:cc:81:fb:67:0a:9b:c4:55:01:54:07:17:
                    9e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FB:41:6A:62:91:AD:B9:F6:6B:AB:BF:92:D6:06:D7:75:23:A5:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/a2b21db6-eaa6-338d-9a0c-498e8bb096cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.crl

            X509v3 Authority Key Identifier:
                keyid:A2:E1:81:0E:2E:B5:14:6A:80:75:C4:0B:2E:F9:56:3C:30:D2:39:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.31.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:9d:09:88:81:82:a6:e1:10:2f:31:bc:31:dc:2d:d1:99:2c:
         63:09:76:b2:7b:b0:24:76:06:84:03:37:2a:f8:86:f5:c4:26:
         45:d4:89:8a:cc:bb:d6:32:b0:30:ad:c6:4e:70:bc:45:eb:aa:
         5c:b6:52:a3:24:bc:55:9b:74:32:8e:0d:b4:8d:7c:57:c0:60:
         cc:2b:7b:42:19:8d:6c:07:84:ed:b1:6b:69:32:d6:13:67:ed:
         fb:39:76:ba:b4:92:e8:84:52:11:0c:f1:7c:15:64:92:8b:26:
         8f:3f:c9:13:8d:e1:2b:27:e0:bf:78:22:94:f5:aa:a3:95:58:
         62:02:f4:ef:26:90:86:dc:9e:1e:f9:c5:03:51:21:13:26:9c:
         c8:28:88:d7:da:f1:c5:29:4d:12:73:10:e7:c2:a5:78:39:f3:
         49:d8:4f:a3:b1:ae:52:66:db:4e:ea:e9:9d:57:ce:a5:53:08:
         73:f5:52:57:f8:b9:34:ce:98:5c:87:af:32:df:ac:7e:98:6b:
         d1:6f:b9:f4:ad:60:c8:a3:a6:5b:0c:a3:c9:47:ba:73:f9:53:
         3b:85:6f:29:e1:ae:2d:c4:05:d1:8c:dc:90:d0:11:31:5a:06:
         94:40:0e:17:31:51:79:ba:4d:90:58:30:ca:71:7c:19:b6:0e:
         27:2b:c1:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXQ06bGSImBds4byAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU0ZmJiYWItMTFmNS00YWRhLWJkOGMtNzdlZWM0NjE1
YzkxMB4XDTI0MDUwOTEzMDAzM1oXDTI0MDgwNzEzMDAzM1owLzEtMCsGA1UEAxMk
MjljZmUxYWQtNzNjNi00NjhlLWE0YzMtZGE4NWMyMWViZGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkg2rKY3G7r2zjbYelbKk04t3MaHqspzqAQS
BNyH5yLIaLnYYMIwgUMiWLS1syyuHD+mno5gGFUrdhrXlqnI5fXwrKAJY6IgTpM6
H0nBYrJBEAUkyrRGqGoMZVErDhSfHAv13EZ0gZnc9DvXFA1sXdVcmb2WahepCjUT
u7/xeSXWmron5F6t+/7O/ypv+rQ9fF64JNsOEF7QjaDZaBRZqdH8JpRtbFRGs2jf
LqLC9MhlbYkPyHPTIHFN7m2MtfbRR85u0/Z92efv3w/qA49qwG2krpQIpytVEhx9
IEfkZpo/dmP6YudepxerRFXEmWbmj2fMgftnCpvEVQFUBxeegQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBX7QWpika259murv5LWBtd1I6WvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NTRm
YmJhYi0xMWY1LTRhZGEtYmQ4Yy03N2VlYzQ2MTVjOTEvYTJiMjFkYjYtZWFhNi0z
MzhkLTlhMGMtNDk4ZThiYjA5NmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjU0ZmJiYWItMTFmNS00YWRhLWJk
OGMtNzdlZWM0NjE1YzkxLzY1NGZiYmFiLTExZjUtNGFkYS1iZDhjLTc3ZWVjNDYx
NWM5MS5jcmwwHwYDVR0jBBgwFoAUouGBDi61FGqAdcQLLvlWPDDSOVQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82NTRmYmJhYi0xMWY1LTRhZGEtYmQ4Yy03N2Vl
YzQ2MTVjOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQB8/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACidCYiBgqbhEC8xvDHcLdGZLGMJdrJ7sCR2BoQDNyr4hvXEJkXUiYrM
u9YysDCtxk5wvEXrqly2UqMkvFWbdDKODbSNfFfAYMwre0IZjWwHhO2xa2ky1hNn
7fs5drq0kuiEUhEM8XwVZJKLJo8/yRON4Ssn4L94IpT1qqOVWGIC9O8mkIbcnh75
xQNRIRMmnMgoiNfa8cUpTRJzEOfCpXg580nYT6OxrlJm207q6Z1XzqVTCHP1Ulf4
uTTOmFyHrzLfrH6Ya9FvufStYMijplsMo8lHunP5UzuFbynhri3EBdGM3JDQETFa
BpRADhcxUXm6TZBYMMpxfBm2DicrwZo=
-----END CERTIFICATE-----
Generated at Mon Jun 3 15:59:24 2024 by rpki-client on console-fra.rpki-client.org