Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/fb067586-180b-31bb-9e56-5603dfecf409.roa
File:                     fb067586-180b-31bb-9e56-5603dfecf409.roa (raw, json)
Hash identifier:          jB9T+nCBIYnvmly2kbCatPsOct7ZY5MKay53XjlRq0E=
Subject key identifier:   F5:D6:45:24:C3:D2:03:B7:75:C7:62:8E:35:F0:00:C5:27:3A:6C:19
Certificate issuer:       /CN=3be78fcc-c9b8-439e-ad7c-f03e1ec7a147
Certificate serial:       010D0C9F43285847EF7AB0BC0D516D6BD6361000
Authority key identifier: 10:73:8B:3D:05:8A:EF:0A:25:25:80:26:59:13:8D:A9:13:A7:49:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/fb067586-180b-31bb-9e56-5603dfecf409.roa
Signing time:             Tue 19 Nov 2024 22:05:21 +0000
ROA not before:           Tue 19 Nov 2024 22:05:21 +0000
ROA not after:            Mon 17 Feb 2025 22:05:21 +0000
asID:                     401408
IP address blocks:        216.181.130.0/24 maxlen: 24
                          2602:f7c8::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:7a:b0:bc:0d:51:6d:6b:d6:36:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3be78fcc-c9b8-439e-ad7c-f03e1ec7a147
        Validity
            Not Before: Nov 19 22:05:21 2024 GMT
            Not After : Feb 17 22:05:21 2025 GMT
        Subject: CN=b16e072d-6b71-4f22-b8f4-ede4bd040cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:43:a2:2f:a9:3c:fa:f1:b3:25:e3:6f:60:6c:
                    da:15:5e:38:f5:a0:5b:a7:d8:74:17:36:3c:bb:14:
                    99:4a:6d:5f:98:70:3a:e5:de:45:78:5d:39:66:e3:
                    10:0f:0f:8a:29:94:b3:fa:5c:bd:ee:c0:5d:5b:0a:
                    a8:a1:7b:99:4a:72:23:2a:de:bc:76:67:b8:2c:bd:
                    a4:89:6c:21:e1:79:b1:e8:6f:f3:d1:a7:50:78:27:
                    a0:ce:1f:44:64:d5:bd:84:9c:33:99:0e:60:79:7b:
                    f7:67:9b:01:32:c3:23:37:d6:f2:c8:20:e1:99:d6:
                    f0:d1:cf:27:da:f1:c8:8b:cb:d4:09:d3:e4:bb:60:
                    00:6e:fa:72:74:4f:0e:9f:3f:40:36:c8:90:1e:a1:
                    b1:81:67:cc:c6:e1:33:64:b0:94:97:27:0c:d1:7c:
                    5a:e9:fc:5b:d2:03:37:ed:ba:fc:8c:78:68:e7:e1:
                    ad:57:12:9d:97:d7:81:7c:27:27:fb:eb:fc:b1:6a:
                    8f:bb:db:a1:8c:68:3a:aa:7d:a1:3a:b7:61:6e:bb:
                    4a:15:8f:7d:03:7a:8c:20:66:86:04:4f:55:50:a9:
                    26:d8:19:1a:53:dc:df:e9:b4:b0:67:86:30:28:7a:
                    0d:b1:81:88:ea:ad:6f:07:f6:47:fd:99:46:4a:c3:
                    20:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D6:45:24:C3:D2:03:B7:75:C7:62:8E:35:F0:00:C5:27:3A:6C:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/fb067586-180b-31bb-9e56-5603dfecf409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.crl

            X509v3 Authority Key Identifier:
                keyid:10:73:8B:3D:05:8A:EF:0A:25:25:80:26:59:13:8D:A9:13:A7:49:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.181.130.0/24
                IPv6:
                  2602:f7c8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:d7:29:b3:ca:95:3a:4c:a1:30:72:2e:b0:02:0d:35:37:95:
         2b:9d:99:c4:4e:d0:0e:6f:5e:80:b5:6a:08:29:aa:02:b0:24:
         8d:26:ce:d3:2f:5c:25:02:3c:19:ad:ab:9a:1e:98:5a:ba:fd:
         e7:2f:4d:44:ab:8d:cb:4c:de:9f:16:31:15:f1:77:41:4a:a1:
         79:c1:64:fb:ed:0b:0d:3b:b6:c0:f9:b9:95:db:6f:ea:55:5e:
         f8:ea:cb:e2:0e:94:ea:07:45:68:57:f6:1a:43:58:ac:95:d2:
         cc:75:53:45:b7:c7:75:62:bb:3e:c1:17:8e:df:bb:33:3e:66:
         90:aa:18:14:45:33:92:6e:5f:af:73:a8:b9:66:e6:ac:76:93:
         6f:15:e3:44:c5:d7:23:47:1b:54:ac:46:2f:67:0f:c4:1e:ee:
         44:f9:d6:1a:ba:35:d9:04:96:b2:6e:2c:16:0f:1c:4d:c7:ca:
         f0:9c:cb:05:a4:68:85:90:c7:09:32:c2:3d:32:a5:0c:79:d5:
         b0:c2:b4:91:ad:3b:af:6f:b9:92:36:62:20:b1:e4:fd:21:2a:
         74:f1:e4:d9:88:93:47:d7:6a:2e:4b:9e:40:02:59:fd:98:be:
         0c:06:5a:a6:31:a7:3a:bf:f5:00:d3:48:50:75:69:37:d6:c5:
         9f:35:3a:aa
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEfverC8DVFta9Y2EAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2JlNzhmY2MtYzliOC00MzllLWFkN2MtZjAzZTFlYzdh
MTQ3MB4XDTI0MTExOTIyMDUyMVoXDTI1MDIxNzIyMDUyMVowLzEtMCsGA1UEAxMk
YjE2ZTA3MmQtNmI3MS00ZjIyLWI4ZjQtZWRlNGJkMDQwY2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUOiL6k8+vGzJeNvYGzaFV449aBbp9h0FzY8
uxSZSm1fmHA65d5FeF05ZuMQDw+KKZSz+ly97sBdWwqooXuZSnIjKt68dme4LL2k
iWwh4Xmx6G/z0adQeCegzh9EZNW9hJwzmQ5geXv3Z5sBMsMjN9byyCDhmdbw0c8n
2vHIi8vUCdPku2AAbvpydE8Onz9ANsiQHqGxgWfMxuEzZLCUlycM0Xxa6fxb0gM3
7br8jHho5+GtVxKdl9eBfCcn++v8sWqPu9uhjGg6qn2hOrdhbrtKFY99A3qMIGaG
BE9VUKkm2BkaU9zf6bSwZ4YwKHoNsYGI6q1vB/ZH/ZlGSsMgUQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFPXWRSTD0gO3dcdijjXwAMUnOmwZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmU3
OGZjYy1jOWI4LTQzOWUtYWQ3Yy1mMDNlMWVjN2ExNDcvZmIwNjc1ODYtMTgwYi0z
MWJiLTllNTYtNTYwM2RmZWNmNDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JlNzhmY2MtYzliOC00MzllLWFk
N2MtZjAzZTFlYzdhMTQ3LzNiZTc4ZmNjLWM5YjgtNDM5ZS1hZDdjLWYwM2UxZWM3
YTE0Ny5jcmwwHwYDVR0jBBgwFoAUEHOLPQWK7wolJYAmWRONqROnSRMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmU3OGZjYy1jOWI4LTQzOWUtYWQ3Yy1mMDNl
MWVjN2ExNDcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA2LWCMA4E
AgACMAgDBgAmAvfIADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAa1ymzypU6TKEwci6wAg01N5UrnZnETtAO
b16AtWoIKaoCsCSNJs7TL1wlAjwZrauaHphauv3nL01Eq43LTN6fFjEV8XdBSqF5
wWT77QsNO7bA+bmV22/qVV746sviDpTqB0VoV/YaQ1isldLMdVNFt8d1Yrs+wReO
37szPmaQqhgURTOSbl+vc6i5ZuasdpNvFeNExdcjRxtUrEYvZw/EHu5E+dYaujXZ
BJaybiwWDxxNx8rwnMsFpGiFkMcJMsI9MqUMedWwwrSRrTuvb7mSNmIgseT9ISp0
8eTZiJNH12ouS55AAln9mL4MBlqmMac6v/UA00hQdWk31sWfNTqq
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:19 2024 by rpki-client on console-ams.rpki-client.org