Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/459ae7f9-47df-342e-b285-cc9f3e162814.roa
File:                     459ae7f9-47df-342e-b285-cc9f3e162814.roa (raw, json)
Hash identifier:          wu3W+b7P94qBBnWs04pGYt/GP/RL+QHbDZLlPjli5Ao=
Subject key identifier:   14:4B:8E:30:57:B3:C9:C0:7F:89:87:ED:3E:99:17:49:D5:73:4D:A5
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F43285847D0C4EA82E8D9E66AE9ACC8A0
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/459ae7f9-47df-342e-b285-cc9f3e162814.roa
Signing time:             Fri 08 Nov 2024 22:04:51 +0000
ROA not before:           Fri 08 Nov 2024 22:04:51 +0000
ROA not after:            Thu 06 Feb 2025 22:04:51 +0000
asID:                     396422
IP address blocks:        64.112.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d0:c4:ea:82:e8:d9:e6:6a:e9:ac:c8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Nov  8 22:04:51 2024 GMT
            Not After : Feb  6 22:04:51 2025 GMT
        Subject: CN=170e5203-5b70-44ac-b938-f3a6a079f9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a7:3b:f4:c3:f4:f4:66:6b:8d:15:2d:9c:7d:
                    a6:12:df:c4:06:0b:55:6f:d3:bf:08:e3:a5:f4:15:
                    ae:1e:d6:78:df:78:1a:5e:27:5d:47:d7:35:c5:70:
                    33:e3:23:ed:af:b5:ee:a1:b9:83:6b:67:42:a8:5e:
                    d6:d5:58:a0:1b:e5:03:93:42:f6:a9:04:b8:34:cb:
                    b3:a2:00:e0:14:7e:7b:54:64:36:c0:88:bf:cc:1d:
                    26:36:4a:d7:93:f8:6f:74:6a:c0:65:5b:9e:06:06:
                    1f:19:32:c7:fc:77:c8:3b:16:d6:3f:d5:d6:b1:81:
                    18:28:e5:09:e6:f5:46:8b:5c:e1:9f:1f:73:4a:34:
                    be:d7:1f:06:a9:35:ef:9a:65:0a:bb:3e:f9:fd:78:
                    66:e6:bb:04:7b:ea:46:b7:94:ab:01:72:8d:09:06:
                    5d:c2:90:31:41:86:9b:05:53:32:b7:65:dc:4b:af:
                    7b:68:30:79:2c:6a:26:1d:77:83:f1:9a:30:89:d5:
                    c3:15:a9:a2:0c:85:a9:49:a2:45:37:c0:56:7c:6f:
                    24:e7:95:16:df:98:39:7e:8f:a1:7f:c9:2c:4f:f8:
                    b7:eb:b2:9a:f6:bb:09:72:ac:00:64:2d:57:32:31:
                    d6:08:25:36:fb:5e:1c:00:5c:8b:c6:66:b1:a6:e4:
                    b1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4B:8E:30:57:B3:C9:C0:7F:89:87:ED:3E:99:17:49:D5:73:4D:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/459ae7f9-47df-342e-b285-cc9f3e162814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:3a:81:e6:dd:b6:74:b4:bc:30:27:03:cb:7e:46:2b:56:1c:
         2c:03:2a:81:67:15:f2:4e:4d:41:9a:95:55:03:89:80:5a:25:
         d7:f4:21:69:27:22:44:d0:dd:8c:1d:f1:f7:aa:55:11:35:93:
         63:df:58:cd:34:c0:b2:84:5d:84:48:05:65:3a:ce:8a:f4:e5:
         61:fe:70:cf:41:ac:b7:31:f9:7c:ef:a5:fb:ce:47:36:38:a9:
         a2:71:a3:0e:2c:7b:d8:9a:d4:6e:d0:7e:9c:e5:e5:5b:46:ae:
         74:63:22:73:b0:fc:62:da:c0:23:76:0b:f7:d9:4d:a3:c5:47:
         d8:3a:90:d7:3c:7a:00:60:02:47:2c:01:e0:cd:7e:b3:eb:99:
         06:fe:15:a5:48:7c:fc:d9:34:69:a5:77:af:4e:2c:65:0e:c2:
         5f:2b:a2:9b:22:55:07:8e:3d:fb:b4:3b:16:fb:88:fc:c1:b4:
         75:da:5f:4b:bb:04:06:27:45:cc:d8:61:29:59:a0:cf:c5:15:
         48:df:81:2a:41:86:6a:a9:e0:3f:8b:76:be:fa:20:00:20:b6:
         77:fc:2a:cd:6d:db:95:49:b4:d2:0e:68:03:87:64:82:69:a6:
         6e:c0:34:ae:7b:ae:e5:56:f3:d4:41:ce:d1:f4:e1:90:e0:e5:
         be:e6:0c:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfQxOqC6NnmaumsyKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU2MzQ2ZjItNjZmYi00YWM5LThiMGMtMWY4YmJiZmM4
NTkzMB4XDTI0MTEwODIyMDQ1MVoXDTI1MDIwNjIyMDQ1MVowLzEtMCsGA1UEAxMk
MTcwZTUyMDMtNWI3MC00NGFjLWI5MzgtZjNhNmEwNzlmOWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Kc79MP09GZrjRUtnH2mEt/EBgtVb9O/COOl
9BWuHtZ433gaXiddR9c1xXAz4yPtr7XuobmDa2dCqF7W1VigG+UDk0L2qQS4NMuz
ogDgFH57VGQ2wIi/zB0mNkrXk/hvdGrAZVueBgYfGTLH/HfIOxbWP9XWsYEYKOUJ
5vVGi1zhnx9zSjS+1x8GqTXvmmUKuz75/Xhm5rsEe+pGt5SrAXKNCQZdwpAxQYab
BVMyt2XcS697aDB5LGomHXeD8ZowidXDFamiDIWpSaJFN8BWfG8k55UW35g5fo+h
f8ksT/i367Ka9rsJcqwAZC1XMjHWCCU2+14cAFyLxmaxpuSxqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBRLjjBXs8nAf4mH7T6ZF0nVc02lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZTYz
NDZmMi02NmZiLTRhYzktOGIwYy0xZjhiYmJmYzg1OTMvNDU5YWU3ZjktNDdkZi0z
NDJlLWIyODUtY2M5ZjNlMTYyODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWU2MzQ2ZjItNjZmYi00YWM5LThi
MGMtMWY4YmJiZmM4NTkzLzVlNjM0NmYyLTY2ZmItNGFjOS04YjBjLTFmOGJiYmZj
ODU5My5jcmwwHwYDVR0jBBgwFoAUJkCK/RbbhxHG2cZwZUqe3PK7k2YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZTYzNDZmMi02NmZiLTRhYzktOGIwYy0xZjhi
YmJmYzg1OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHAsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF46gebdtnS0vDAnA8t+RitWHCwDKoFnFfJOTUGalVUDiYBaJdf0IWkn
IkTQ3Ywd8feqVRE1k2PfWM00wLKEXYRIBWU6zor05WH+cM9BrLcx+XzvpfvORzY4
qaJxow4se9ia1G7Qfpzl5VtGrnRjInOw/GLawCN2C/fZTaPFR9g6kNc8egBgAkcs
AeDNfrPrmQb+FaVIfPzZNGmld69OLGUOwl8ropsiVQeOPfu0Oxb7iPzBtHXaX0u7
BAYnRczYYSlZoM/FFUjfgSpBhmqp4D+Ldr76IAAgtnf8Ks1t25VJtNIOaAOHZIJp
pm7ANK57ruVW89RBztH04ZDg5b7mDHk=
-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:53 2024 by rpki-client on console-fra.rpki-client.org