Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa
File:                     d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa (raw, json)
Hash identifier:          H+Y7If2dDNAaThHPFRcUcjJjnHKi98rC4k+0TzUZnIU=
Subject key identifier:   37:B6:FE:AE:08:B7:23:EC:D5:C5:B6:A8:32:29:E7:60:F0:CC:4F:57
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584733609AFEB6FEF2E0265D2800
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     11650
IP address blocks:        64.250.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:9a:fe:b6:fe:f2:e0:26:5d:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=03278684-def1-44db-a165-317e9fde3027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:e4:44:ff:e1:ff:93:7b:76:c3:12:87:ce:
                    d9:30:88:4f:37:dd:9f:ca:16:c9:c9:61:7d:f6:ab:
                    09:fc:61:52:4c:19:c9:5a:0e:8f:6e:30:07:7d:42:
                    ed:35:d5:16:7f:4f:98:27:5f:12:d8:59:34:89:36:
                    e7:f2:74:8b:a7:31:3a:82:34:9d:51:7d:d9:d2:8a:
                    fd:bc:3b:58:67:be:fb:27:b1:32:bf:65:67:89:fc:
                    7e:29:5d:1b:38:94:ae:34:0c:2a:3d:a9:84:2e:29:
                    60:09:18:dc:04:11:d0:1f:17:7f:68:09:78:1b:ac:
                    19:ac:5a:59:0b:38:b7:eb:a4:44:e1:a0:20:16:04:
                    51:25:8a:01:4a:9d:7a:73:c7:13:73:1a:51:6b:08:
                    ed:46:4a:c1:70:77:63:de:b4:d4:f2:b0:47:ba:f8:
                    de:a0:10:7f:9b:7d:2c:58:d5:de:67:ef:09:7d:ac:
                    45:91:0e:8e:71:b9:f9:54:76:df:00:a4:ec:56:64:
                    67:c5:24:77:ab:ff:cf:22:30:6b:23:29:d5:f9:f7:
                    38:7c:71:fe:a9:09:34:fd:aa:14:ff:cb:48:34:01:
                    a0:0d:d4:c2:2e:79:0c:fe:45:1c:44:01:20:ca:85:
                    59:5e:08:55:ff:2e:12:9e:1f:c3:8a:b3:b4:2f:9f:
                    12:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B6:FE:AE:08:B7:23:EC:D5:C5:B6:A8:32:29:E7:60:F0:CC:4F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.250.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:93:7d:fb:77:7f:ee:84:b5:3a:5d:db:31:43:14:d1:fe:f9:
         a0:b3:32:78:75:28:f1:ee:e4:36:10:9c:78:5a:d2:b9:2d:44:
         6a:21:f8:b0:82:26:1e:77:3f:1c:9f:38:b4:e2:bb:85:89:06:
         60:ae:ab:32:a5:64:f8:4d:d3:df:2b:e6:db:31:d5:64:46:74:
         8c:0e:b8:9b:a3:45:75:5e:a5:1c:39:eb:72:9c:76:27:fb:7c:
         d2:c3:b9:78:46:f7:dd:42:9e:61:1d:d0:53:02:07:ca:bd:64:
         22:fe:c5:6f:9e:87:07:f6:12:fe:e2:61:43:0b:76:8a:a1:84:
         7c:dd:9c:ac:e5:c2:d1:d4:89:14:51:61:9e:e6:e4:d6:72:d9:
         75:ed:41:ab:0b:e3:89:11:53:ec:50:e0:c4:74:62:d9:94:da:
         6e:26:72:2d:85:3f:3a:c4:40:ec:94:83:31:33:c0:7f:f1:f0:
         87:b8:e8:30:14:41:80:77:e1:4b:4f:8e:cb:d2:58:b3:e4:89:
         a0:83:5c:59:07:38:4e:1c:65:99:6b:55:2f:67:f5:22:25:95:
         ce:ff:76:2b:79:83:06:6a:95:83:59:05:42:d8:95:2d:aa:08:
         4c:ff:61:2a:d0:2a:a8:99:d8:f8:bc:04:96:25:97:37:5d:f3:
         5a:7e:0c:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEczYJr+tv7y4CZdKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0
OTcxMB4XDTI0MDkxMzEzMDA0MVoXDTI0MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk
MDMyNzg2ODQtZGVmMS00NGRiLWExNjUtMzE3ZTlmZGUzMDI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxLkRP/h/5N7dsMSh87ZMIhPN92fyhbJyWF9
9qsJ/GFSTBnJWg6PbjAHfULtNdUWf0+YJ18S2Fk0iTbn8nSLpzE6gjSdUX3Z0or9
vDtYZ777J7Eyv2Vnifx+KV0bOJSuNAwqPamELilgCRjcBBHQHxd/aAl4G6wZrFpZ
Czi366RE4aAgFgRRJYoBSp16c8cTcxpRawjtRkrBcHdj3rTU8rBHuvjeoBB/m30s
WNXeZ+8JfaxFkQ6Ocbn5VHbfAKTsVmRnxSR3q//PIjBrIynV+fc4fHH+qQk0/aoU
/8tINAGgDdTCLnkM/kUcRAEgyoVZXghV/y4Snh/DirO0L58SEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDe2/q4ItyPs1cW2qDIp52DwzE9XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl
ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvZDY2ZWQ2OGYtMGNhYS0z
ZjRlLTg3ZDEtMzYyMDQwYmVjN2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh
MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi
NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj
NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQPrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMGTfft3f+6EtTpd2zFDFNH++aCzMnh1KPHu5DYQnHha0rktRGoh+LCC
Jh53PxyfOLTiu4WJBmCuqzKlZPhN098r5tsx1WRGdIwOuJujRXVepRw563Kcdif7
fNLDuXhG991CnmEd0FMCB8q9ZCL+xW+ehwf2Ev7iYUMLdoqhhHzdnKzlwtHUiRRR
YZ7m5NZy2XXtQasL44kRU+xQ4MR0YtmU2m4mci2FPzrEQOyUgzEzwH/x8Ie46DAU
QYB34UtPjsvSWLPkiaCDXFkHOE4cZZlrVS9n9SIllc7/dit5gwZqlYNZBULYlS2q
CEz/YSrQKqiZ2Pi8BJYllzdd81p+DGQ=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:27:03 2024 by rpki-client on console-fra.rpki-client.org