Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d33dd04f-bbd1-3af2-8f77-f6698b994d22.roa
File:                     d33dd04f-bbd1-3af2-8f77-f6698b994d22.roa (raw, json)
Hash identifier:          qUAoRz5rQEhHT5mXYV/xF84mftMUA3kvgN6wzJ++phs=
Subject key identifier:   BE:35:C1:85:7C:AB:88:32:BE:70:84:F2:30:53:4F:78:68:2F:ED:14
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584733609C41C752ECAED3B47B40
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d33dd04f-bbd1-3af2-8f77-f6698b994d22.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     397318
IP address blocks:        64.125.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:9c:41:c7:52:ec:ae:d3:b4:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=07a8685d-3d6f-4480-86eb-4842a53560c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:50:07:19:59:93:e8:e1:f3:a1:d8:16:a6:
                    53:bc:41:41:8f:2e:18:5f:aa:2d:94:29:a5:df:fe:
                    81:07:8f:5c:5d:be:80:f7:64:ac:a6:c6:6b:0b:16:
                    dd:7d:5f:12:14:c8:a3:28:0b:fa:16:27:9b:a3:2e:
                    18:02:64:c4:12:ef:fd:13:27:22:a5:7e:25:99:01:
                    5b:35:d9:a4:41:ed:19:74:4b:b0:f7:60:d0:ed:a7:
                    6d:f0:e9:93:d7:8a:47:f4:fb:91:2b:59:59:8b:c8:
                    56:ed:a4:55:bd:d2:4f:2f:14:8d:fb:b2:2e:0d:9e:
                    d4:48:48:e7:33:87:65:30:34:dc:44:a0:5a:35:ff:
                    df:c5:b9:48:b2:fc:b8:4e:ff:df:b8:c0:16:31:82:
                    68:29:a5:45:03:0f:1c:53:f6:1f:12:83:f4:60:10:
                    3f:b3:56:d1:fe:0e:16:67:89:79:c4:3b:5a:c9:63:
                    77:db:d3:bd:62:e5:a9:e3:20:9f:0d:71:b1:37:3e:
                    a0:ce:f6:12:7a:7c:23:07:12:07:e5:9e:6a:d6:c6:
                    c4:18:13:51:ec:be:97:bf:a2:36:5c:45:3d:18:73:
                    8a:e9:63:63:ba:22:9b:51:c9:c9:6c:21:22:1b:2c:
                    cb:93:d9:b2:9c:4f:1c:6a:2c:b7:1b:5b:14:9f:ab:
                    c3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:35:C1:85:7C:AB:88:32:BE:70:84:F2:30:53:4F:78:68:2F:ED:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d33dd04f-bbd1-3af2-8f77-f6698b994d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:7f:70:b2:07:62:0c:f4:5d:84:24:88:b1:20:1c:35:d1:52:
         4b:a1:75:f4:f7:8a:bb:c1:41:ee:80:fb:2a:0d:0b:bb:38:6b:
         56:6f:fe:d1:52:a1:c1:15:e4:18:6e:3a:87:2f:73:18:fe:7e:
         e3:5a:e6:0e:03:b7:d2:74:4c:e1:5f:42:ba:c2:44:95:72:04:
         7b:c7:b6:c0:c1:8c:81:d2:6d:9f:d2:ea:79:09:c6:07:fa:e7:
         eb:9d:85:f3:8d:04:8c:96:23:ab:cf:81:2a:28:dd:b1:e9:ce:
         57:44:bc:83:2d:a7:c7:d2:46:f6:5d:b3:20:5d:2f:b6:e3:b4:
         51:1a:2e:d0:1b:b4:2d:41:83:b4:bf:ba:d0:c5:f7:92:8c:1a:
         6d:cd:75:fe:2c:ca:aa:21:d1:34:c4:71:92:e3:5a:c9:7a:19:
         ad:bd:81:61:0d:2b:41:19:2f:46:9d:5a:ca:ca:45:5b:30:70:
         60:49:af:5b:89:df:a3:0c:3e:5c:b2:de:89:95:07:b0:f4:7d:
         35:b2:76:9d:f5:da:e7:dc:29:2d:57:02:53:96:02:54:85:1e:
         79:e4:9c:03:1a:82:5d:45:86:ac:6b:1b:d5:e8:2a:ca:1b:02:
         cc:06:60:60:e9:e3:11:84:f5:88:69:df:88:ba:77:9a:26:2d:
         e0:31:ef:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEczYJxBx1LsrtO0e0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDkxMzEzMDA0MVoXDTI0MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk
MDdhODY4NWQtM2Q2Zi00NDgwLTg2ZWItNDg0MmE1MzU2MGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM9QBxlZk+jh86HYFqZTvEFBjy4YX6otlCml
3/6BB49cXb6A92SspsZrCxbdfV8SFMijKAv6Fieboy4YAmTEEu/9EycipX4lmQFb
NdmkQe0ZdEuw92DQ7adt8OmT14pH9PuRK1lZi8hW7aRVvdJPLxSN+7IuDZ7USEjn
M4dlMDTcRKBaNf/fxblIsvy4Tv/fuMAWMYJoKaVFAw8cU/YfEoP0YBA/s1bR/g4W
Z4l5xDtayWN329O9YuWp4yCfDXGxNz6gzvYSenwjBxIH5Z5q1sbEGBNR7L6Xv6I2
XEU9GHOK6WNjuiKbUcnJbCEiGyzLk9mynE8caiy3G1sUn6vDTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL41wYV8q4gyvnCE8jBTT3hoL+0UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvZDMzZGQwNGYtYmJkMS0z
YWYyLThmNzctZjY2OThiOTk0ZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQH04MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZ/cLIHYgz0XYQkiLEgHDXRUkuhdfT3irvBQe6A+yoNC7s4a1Zv/tFS
ocEV5BhuOocvcxj+fuNa5g4Dt9J0TOFfQrrCRJVyBHvHtsDBjIHSbZ/S6nkJxgf6
5+udhfONBIyWI6vPgSoo3bHpzldEvIMtp8fSRvZdsyBdL7bjtFEaLtAbtC1Bg7S/
utDF95KMGm3Ndf4syqoh0TTEcZLjWsl6Ga29gWENK0EZL0adWsrKRVswcGBJr1uJ
36MMPlyy3omVB7D0fTWydp312ufcKS1XAlOWAlSFHnnknAMagl1FhqxrG9XoKsob
AswGYGDp4xGE9Yhp34i6d5omLeAx72I=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:59 2024 by rpki-client on console-fra.rpki-client.org