Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ed04427f-e3df-36d5-94ff-c19f59bf49a0.roa
File:                     ed04427f-e3df-36d5-94ff-c19f59bf49a0.roa (raw, json)
Hash identifier:          Q+vNV2vk1LgEzu3evQZnQRvj52+557BokJsBDR6EUsE=
Subject key identifier:   C1:E1:0C:AA:1E:A5:5D:92:D8:79:CD:00:48:F1:62:6E:7C:CA:9D:4E
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858475A76345E3EDB036E893C50C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ed04427f-e3df-36d5-94ff-c19f59bf49a0.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     19112
IP address blocks:        64.184.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:34:5e:3e:db:03:6e:89:3c:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=e1dcf37f-c7c2-452e-b67e-459e37c6acc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4d:7a:b6:cb:e9:ef:10:0b:0d:16:52:37:d0:
                    cf:94:b3:82:b7:05:c0:15:bf:b0:63:87:aa:d4:02:
                    67:2d:04:38:90:40:d2:36:ba:79:81:4a:b4:d8:25:
                    10:60:eb:85:5f:52:ff:ad:bd:74:15:94:57:30:30:
                    ac:02:96:2e:66:df:cc:02:a9:49:06:60:43:44:d5:
                    ee:ea:31:82:d2:34:84:5e:84:83:ef:45:9e:c1:3e:
                    60:3b:0e:b3:31:a6:ab:93:66:6b:9e:4d:8b:62:dc:
                    de:db:1f:25:ce:48:0c:82:5f:e1:3b:c3:a8:8e:8d:
                    5b:88:76:95:be:2b:16:d0:c1:01:f7:fe:3d:5b:3c:
                    04:ab:1c:54:da:56:65:46:b0:b2:96:ed:84:98:bd:
                    be:2c:b6:c8:3b:30:2e:5e:93:ba:98:a1:5f:6b:e9:
                    57:91:f9:39:ee:8c:63:8c:2b:93:4b:66:fc:82:5b:
                    c8:9c:c9:0a:d8:d8:df:49:05:1a:c8:6a:e0:d5:6a:
                    d8:7c:3e:04:76:70:07:30:8e:32:e2:20:ed:a5:89:
                    04:aa:89:68:6d:3b:b4:bc:24:3d:04:24:ca:25:2b:
                    7e:98:0b:2d:eb:12:29:4a:8b:b1:fd:5a:ca:47:d4:
                    2f:d1:05:d9:b6:73:da:64:46:8f:f9:e5:c7:5d:8b:
                    40:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E1:0C:AA:1E:A5:5D:92:D8:79:CD:00:48:F1:62:6E:7C:CA:9D:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ed04427f-e3df-36d5-94ff-c19f59bf49a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:76:78:4b:29:2f:af:24:09:ff:a2:5a:f2:bb:d9:d7:30:35:
         d4:25:42:10:2c:f9:4c:ab:47:f5:97:d7:f0:04:6e:75:ca:76:
         40:94:c2:42:ff:92:0e:6c:4f:a0:65:dc:d2:9a:94:08:2c:86:
         a7:ac:51:e7:f4:0f:78:c6:8c:0b:0a:15:1a:71:07:59:09:34:
         58:53:e6:ac:ca:f3:80:da:2c:48:1a:c5:64:d1:7a:d3:60:03:
         e8:3e:ab:15:e3:2f:15:22:63:a6:66:68:9a:77:7b:60:f4:02:
         97:dd:ea:ce:1b:e9:f5:67:2c:6d:af:d2:94:23:d9:fc:57:ec:
         95:01:c0:c4:6b:4e:5c:55:46:3e:09:6a:b7:36:e6:42:d1:7f:
         e4:74:b3:7f:6f:60:2a:ce:4c:7d:19:10:97:11:36:ec:5e:a6:
         52:63:b1:df:ae:1a:72:48:2f:62:c7:78:47:3a:45:93:1c:d8:
         ea:39:5d:15:e9:41:ec:73:c7:02:5a:c0:07:e7:33:b2:9a:a7:
         eb:ff:c3:e2:ce:0b:0e:5e:58:c8:76:76:82:84:d7:5f:1b:ec:
         4f:36:2f:26:cb:5c:20:44:5f:58:c3:ff:17:89:65:33:b7:27:
         66:a7:7d:65:1a:fd:21:66:59:02:e2:45:5e:f1:e9:5b:c0:f6:
         a3:f0:ff:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdadjRePtsDbok8UMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDkyNzEzMDA0MVoXDTI0MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk
ZTFkY2YzN2YtYzdjMi00NTJlLWI2N2UtNDU5ZTM3YzZhY2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE16tsvp7xALDRZSN9DPlLOCtwXAFb+wY4eq
1AJnLQQ4kEDSNrp5gUq02CUQYOuFX1L/rb10FZRXMDCsApYuZt/MAqlJBmBDRNXu
6jGC0jSEXoSD70WewT5gOw6zMaark2Zrnk2LYtze2x8lzkgMgl/hO8Oojo1biHaV
visW0MEB9/49WzwEqxxU2lZlRrCylu2EmL2+LLbIOzAuXpO6mKFfa+lXkfk57oxj
jCuTS2b8glvInMkK2NjfSQUayGrg1WrYfD4EdnAHMI4y4iDtpYkEqolobTu0vCQ9
BCTKJSt+mAst6xIpSoux/VrKR9Qv0QXZtnPaZEaP+eXHXYtASwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMHhDKoepV2S2HnNAEjxYm58yp1OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvZWQwNDQyN2YtZTNkZi0z
NmQ1LTk0ZmYtYzE5ZjU5YmY0OWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLhgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEp2eEspL68kCf+iWvK72dcwNdQlQhAs+UyrR/WX1/AEbnXKdkCUwkL/
kg5sT6Bl3NKalAgshqesUef0D3jGjAsKFRpxB1kJNFhT5qzK84DaLEgaxWTRetNg
A+g+qxXjLxUiY6ZmaJp3e2D0Apfd6s4b6fVnLG2v0pQj2fxX7JUBwMRrTlxVRj4J
arc25kLRf+R0s39vYCrOTH0ZEJcRNuxeplJjsd+uGnJIL2LHeEc6RZMc2Oo5XRXp
QexzxwJawAfnM7Kap+v/w+LOCw5eWMh2doKE118b7E82LybLXCBEX1jD/xeJZTO3
J2anfWUa/SFmWQLiRV7x6VvA9qPw/zM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:59 2024 by rpki-client on console-fra.rpki-client.org