Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a2fd55fa-a56c-3223-926e-0ad5eb85e637.roa
File:                     a2fd55fa-a56c-3223-926e-0ad5eb85e637.roa (raw, json)
Hash identifier:          1/4Ut2RN1EU3eocEYwfFzpN44XFIUELIoUAggqHJ1L0=
Subject key identifier:   38:08:66:62:92:DD:22:8B:A5:CB:68:01:A7:43:36:D8:27:BC:FF:D1
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584762D6617557D9D4292F743D40
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a2fd55fa-a56c-3223-926e-0ad5eb85e637.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6461
IP address blocks:        207.181.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:61:75:57:d9:d4:29:2f:74:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=7ffafbec-0455-4a12-86fd-774e67d3f778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:5b:29:d4:c3:1a:0b:0d:2e:ac:b6:0f:69:
                    30:2c:54:97:e5:95:a6:92:da:d9:f6:9c:6c:78:99:
                    42:bc:8c:a5:92:86:2a:e9:a2:de:6a:7f:73:ae:49:
                    9a:cf:c7:8c:be:26:b8:16:df:3d:cc:40:f4:4e:1d:
                    d8:de:87:77:58:9d:54:65:1c:38:79:7c:69:7c:5e:
                    00:87:9a:85:2d:a0:cd:4d:a0:04:92:fb:fe:ec:a6:
                    3d:0e:ea:44:08:01:26:b7:ce:cb:b4:3a:83:3f:f5:
                    80:5e:a0:34:cc:1a:dd:3d:94:9b:3a:56:a6:10:bd:
                    ab:7f:1f:4e:5b:45:9d:9d:ca:09:83:d3:04:b4:a7:
                    c3:e5:66:96:68:31:9b:b5:2f:53:1f:f5:86:bd:3a:
                    b8:af:df:fa:26:72:9b:54:9c:a4:7f:b6:75:8e:8c:
                    c7:a1:6f:0f:bc:90:99:72:ad:39:59:a1:2a:e6:a1:
                    56:48:ff:6f:29:e9:c6:d9:e9:23:80:2c:41:dc:bd:
                    d5:5d:35:3d:01:52:8e:ef:aa:99:67:0b:f6:53:4b:
                    d3:23:c4:96:28:61:f2:c2:1f:1a:15:7e:93:6c:4c:
                    78:c4:ac:62:0b:6b:8c:1e:06:1d:94:a4:d9:e6:dc:
                    7c:c5:7e:7d:bd:6e:8c:d4:e7:a2:09:9f:88:78:40:
                    d2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:08:66:62:92:DD:22:8B:A5:CB:68:01:A7:43:36:D8:27:BC:FF:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a2fd55fa-a56c-3223-926e-0ad5eb85e637.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.181.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:31:1a:e2:48:b1:17:ea:95:44:4b:48:c5:87:62:f3:9e:01:
         fc:b1:80:12:dc:0a:cf:ab:89:5d:8f:6a:79:a4:aa:53:e5:dd:
         80:e6:b1:b8:0c:b0:30:41:08:93:08:02:1a:e5:aa:bc:ad:44:
         85:c5:a5:2a:7b:0c:e4:d1:74:70:81:6c:ff:87:72:a1:d7:b7:
         5d:fa:a1:3e:f9:90:80:64:29:89:4a:db:3d:9e:9e:a4:09:d9:
         51:b6:b2:67:93:ab:b5:2a:3b:cd:f7:51:a8:81:cc:34:03:0f:
         55:94:4d:d9:3e:2a:71:06:49:7d:83:87:80:c0:1a:03:da:19:
         b3:59:d0:96:5d:b6:49:88:8b:ef:96:ff:b8:8f:db:02:c0:13:
         12:84:d4:a5:4d:08:34:69:5f:83:86:28:60:88:c6:a4:78:80:
         20:d1:2c:3c:a8:ad:e8:74:25:a0:9c:ef:1c:40:43:e2:b4:58:
         d3:05:5a:c4:f1:71:d9:e3:82:eb:eb:7e:a2:40:af:e3:d2:39:
         7c:ce:4e:11:66:85:91:a7:a1:09:39:84:ed:6c:ca:59:27:19:
         db:07:d3:93:15:dc:07:0d:34:b5:e2:19:a9:46:f8:e8:c6:81:
         94:fb:66:aa:2d:8d:2a:7e:1b:c4:f1:3d:3e:55:05:8b:b0:1b:
         94:62:0d:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdi1mF1V9nUKS90PUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk
N2ZmYWZiZWMtMDQ1NS00YTEyLTg2ZmQtNzc0ZTY3ZDNmNzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XBbKdTDGgsNLqy2D2kwLFSX5ZWmktrZ9pxs
eJlCvIylkoYq6aLean9zrkmaz8eMvia4Ft89zED0Th3Y3od3WJ1UZRw4eXxpfF4A
h5qFLaDNTaAEkvv+7KY9DupECAEmt87LtDqDP/WAXqA0zBrdPZSbOlamEL2rfx9O
W0WdncoJg9MEtKfD5WaWaDGbtS9TH/WGvTq4r9/6JnKbVJykf7Z1jozHoW8PvJCZ
cq05WaEq5qFWSP9vKenG2ekjgCxB3L3VXTU9AVKO76qZZwv2U0vTI8SWKGHywh8a
FX6TbEx4xKxiC2uMHgYdlKTZ5tx8xX59vW6M1OeiCZ+IeEDSawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDgIZmKS3SKLpctoAadDNtgnvP/RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvYTJmZDU1ZmEtYTU2Yy0z
MjIzLTkyNmUtMGFkNWViODVlNjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGz7VAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIsxGuJIsRfqlURLSMWHYvOeAfyxgBLcCs+riV2PanmkqlPl3YDmsbgM
sDBBCJMIAhrlqrytRIXFpSp7DOTRdHCBbP+HcqHXt136oT75kIBkKYlK2z2enqQJ
2VG2smeTq7UqO833UaiBzDQDD1WUTdk+KnEGSX2Dh4DAGgPaGbNZ0JZdtkmIi++W
/7iP2wLAExKE1KVNCDRpX4OGKGCIxqR4gCDRLDyoreh0JaCc7xxAQ+K0WNMFWsTx
cdnjguvrfqJAr+PSOXzOThFmhZGnoQk5hO1sylknGdsH05MV3AcNNLXiGalG+OjG
gZT7ZqotjSp+G8TxPT5VBYuwG5RiDYc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:00 2024 by rpki-client on console-ams.rpki-client.org