Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/4646c58c-7f13-3a17-940a-37378358232c.roa
File:                     4646c58c-7f13-3a17-940a-37378358232c.roa (raw, json)
Hash identifier:          6/akgEJQ0GZ00jhuDpxPZ5vNi1luCiaC6tM/+CV4Ghg=
Subject key identifier:   F4:EC:0E:EB:93:9C:3F:97:7E:C0:0E:19:95:F2:04:BE:D5:00:8D:F1
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F43285847A0414F9676B0503358186E00
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/4646c58c-7f13-3a17-940a-37378358232c.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     10506
IP address blocks:        168.99.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:4f:96:76:b0:50:33:58:18:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=b0bcc984-35b8-47d4-a9c4-bd92d4c7bdf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:4c:9a:78:29:0d:86:4f:8f:5f:9b:23:cf:
                    f6:ec:8d:d3:84:59:a8:2d:5d:80:b7:ae:63:f7:fa:
                    e4:1d:2d:a9:5b:7a:62:55:a2:39:13:8a:58:3b:0e:
                    29:d6:a9:12:60:4e:20:e4:eb:f2:bf:e0:5e:ff:cc:
                    77:50:3a:40:1b:b3:e1:6c:34:b3:c3:1c:c4:73:86:
                    f4:a8:45:66:ce:d7:95:c4:3e:9c:d3:22:ce:53:2c:
                    b3:26:9b:af:7b:27:b9:bc:b7:9a:72:39:b6:60:74:
                    52:f0:82:93:a7:ef:f8:ae:51:21:f9:b9:31:4d:ed:
                    fe:f6:a8:38:70:64:4f:d1:9c:21:76:9e:4c:1d:70:
                    6a:78:57:dc:8d:77:9f:e7:2a:67:38:17:ef:3f:98:
                    0e:2b:1e:93:a6:ea:c1:31:40:93:46:69:17:44:5e:
                    c3:05:18:ca:d1:3b:29:ff:4c:20:da:25:8b:50:2b:
                    b3:97:86:80:95:0a:40:71:8a:d4:e0:76:08:1f:b4:
                    04:71:c4:7b:77:d0:d4:92:e1:ea:9e:9e:08:8d:2a:
                    24:bf:7f:60:d0:6f:94:71:c0:1f:4a:1f:3c:7a:86:
                    e8:00:83:7f:1d:0c:a8:e7:50:d8:2f:14:5f:74:3f:
                    fe:68:67:a0:ba:fd:95:ce:dd:6d:32:1f:92:c5:5d:
                    89:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EC:0E:EB:93:9C:3F:97:7E:C0:0E:19:95:F2:04:BE:D5:00:8D:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/4646c58c-7f13-3a17-940a-37378358232c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.99.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:da:bb:07:cb:7c:14:94:9a:c5:df:f0:5c:92:c2:9a:32:39:
         76:38:db:4c:37:38:4d:79:ca:b7:8d:33:5e:84:2d:2e:8b:b9:
         5e:37:5e:ad:e9:aa:2e:e7:e0:46:c0:32:21:f6:0f:99:ae:fd:
         f7:5c:c0:f7:8a:5e:26:2b:00:f1:4d:db:cf:79:26:67:83:04:
         83:4e:ce:21:11:f7:e3:da:2f:53:06:b1:7d:8a:84:0d:a2:b9:
         d5:e0:d2:fb:e6:27:07:0f:8b:d7:84:3c:b9:6a:17:75:1f:37:
         fb:fb:da:7a:c2:00:8c:b2:d0:cb:77:cd:55:68:97:f5:36:bb:
         37:e0:0a:21:7f:4c:b8:a2:59:0c:7a:2d:9c:cb:26:1b:86:d8:
         04:90:7e:65:f9:1e:3e:f3:ea:1a:12:b7:e8:75:f2:79:ac:d2:
         09:96:4d:46:58:05:c6:fa:e6:51:a2:0f:bd:6b:ee:08:59:65:
         f6:49:62:fe:4f:fd:2d:54:b4:97:0f:21:b4:fe:8e:69:de:5f:
         a0:6e:b4:08:9a:49:2a:84:e9:01:ed:75:10:4c:e6:f7:61:8d:
         23:7c:92:b0:fb:87:2f:2e:dc:26:ca:a3:ec:f8:62:18:f9:bb:
         b1:ce:e3:7c:41:df:41:98:6c:39:24:2a:ae:5d:c6:50:b8:4b:
         11:33:65:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQU+WdrBQM1gYbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk
ODE2MB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk
YjBiY2M5ODQtMzViOC00N2Q0LWE5YzQtYmQ5MmQ0YzdiZGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFRMmngpDYZPj1+bI8/27I3ThFmoLV2At65j
9/rkHS2pW3piVaI5E4pYOw4p1qkSYE4g5Ovyv+Be/8x3UDpAG7PhbDSzwxzEc4b0
qEVmzteVxD6c0yLOUyyzJpuveye5vLeacjm2YHRS8IKTp+/4rlEh+bkxTe3+9qg4
cGRP0Zwhdp5MHXBqeFfcjXef5ypnOBfvP5gOKx6TpurBMUCTRmkXRF7DBRjK0Tsp
/0wg2iWLUCuzl4aAlQpAcYrU4HYIH7QEccR7d9DUkuHqnp4IjSokv39g0G+UccAf
Sh88eoboAIN/HQyo51DYLxRfdD/+aGeguv2Vzt1tMh+SxV2J3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPTsDuuTnD+XfsAOGZXyBL7VAI3xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5
OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvNDY0NmM1OGMtN2YxMy0z
YTE3LTk0MGEtMzczNzgzNTgyMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj
YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh
ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx
NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqGMgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPauwfLfBSUmsXf8FySwpoyOXY420w3OE15yreNM16ELS6LuV43Xq3p
qi7n4EbAMiH2D5mu/fdcwPeKXiYrAPFN2895JmeDBINOziER9+PaL1MGsX2KhA2i
udXg0vvmJwcPi9eEPLlqF3UfN/v72nrCAIyy0Mt3zVVol/U2uzfgCiF/TLiiWQx6
LZzLJhuG2ASQfmX5Hj7z6hoSt+h18nms0gmWTUZYBcb65lGiD71r7ghZZfZJYv5P
/S1UtJcPIbT+jmneX6ButAiaSSqE6QHtdRBM5vdhjSN8krD7hy8u3CbKo+z4Yhj5
u7HO43xB30GYbDkkKq5dxlC4SxEzZWs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:26 2024 by rpki-client on console-fra.rpki-client.org