Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/96ff3873-db62-363d-9266-eb3debfc44a5.roa
File:                     96ff3873-db62-363d-9266-eb3debfc44a5.roa (raw, json)
Hash identifier:          YCNWlkEeRoHwAbfuIoFCMZT4Zhdb7V8HOO0j3wTcDhI=
Subject key identifier:   95:C0:43:1B:E6:E6:7E:1E:56:28:50:8F:FC:D5:AE:15:DF:EC:C1:63
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F43285847E1F6578850417E4675444038
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/96ff3873-db62-363d-9266-eb3debfc44a5.roa
Signing time:             Fri 15 Nov 2024 01:53:11 +0000
ROA not before:           Fri 15 Nov 2024 01:53:11 +0000
ROA not after:            Thu 13 Feb 2025 01:53:11 +0000
asID:                     213122
IP address blocks:        64.112.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:f6:57:88:50:41:7e:46:75:44:40:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Nov 15 01:53:11 2024 GMT
            Not After : Feb 13 01:53:11 2025 GMT
        Subject: CN=e27b5952-ea6d-4251-851a-461890002986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:2a:cd:9c:c9:fc:e7:55:89:30:79:bb:43:
                    15:ec:7a:46:ee:25:1b:cb:db:96:86:5d:ed:31:1f:
                    f5:a6:ea:fa:fb:02:51:11:fd:56:df:4c:78:81:d0:
                    00:4a:b1:fb:95:a7:00:c8:7a:da:e8:99:8b:68:c2:
                    41:eb:b9:7f:13:39:66:61:da:d5:43:2c:50:b8:60:
                    58:11:32:18:8c:43:61:15:1d:a1:c4:c5:76:13:f3:
                    0d:d5:b0:38:aa:ce:ca:c1:f4:3a:bc:97:61:a1:ed:
                    16:20:ea:b0:30:de:9f:9b:fd:38:3c:b2:bb:a7:8a:
                    5e:f2:d0:87:86:c3:62:77:98:fd:74:61:6c:87:04:
                    10:fb:3e:f7:75:75:22:96:e3:13:ec:15:b3:3a:03:
                    65:c1:fb:61:87:5f:82:87:b3:e0:ab:1d:d1:f3:c2:
                    96:86:05:7d:d1:83:87:f0:fe:2d:88:6a:67:74:db:
                    c1:ed:71:93:68:3e:4b:11:36:63:54:e1:aa:f7:31:
                    5c:ff:23:6a:88:de:11:7f:40:5a:49:ca:eb:6a:f4:
                    5f:78:74:5f:93:f1:ab:cc:7c:1b:d2:14:46:d3:bf:
                    29:24:84:11:c5:19:34:5d:86:7b:11:35:c8:1f:51:
                    84:d7:42:bf:13:b1:7b:39:4e:e4:3c:9e:ba:ca:d1:
                    0a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C0:43:1B:E6:E6:7E:1E:56:28:50:8F:FC:D5:AE:15:DF:EC:C1:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/96ff3873-db62-363d-9266-eb3debfc44a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a3:96:a5:f6:e0:35:52:f5:a4:36:81:dd:92:e2:9c:85:3f:
         74:39:64:71:33:fe:c2:89:47:50:29:fd:91:be:20:cf:f3:f8:
         16:aa:73:94:b5:5b:a0:54:7d:04:aa:51:8b:9f:fa:df:32:9f:
         c8:b4:e3:81:2c:26:3c:55:b4:ff:1a:9b:f0:78:16:e0:12:0b:
         01:9e:e5:33:0a:bb:2e:d8:1c:a5:2b:eb:3a:f9:2e:ea:f1:2f:
         63:25:2c:c0:0d:a3:e3:44:2d:6e:c5:16:fe:87:75:61:c6:4d:
         9a:00:cc:87:b2:01:bc:6c:4f:70:bb:3f:60:c8:f5:7e:64:62:
         4f:01:f4:f5:44:5e:08:86:dc:af:13:7c:34:49:c8:8f:da:ef:
         48:3f:75:3a:7a:94:54:d1:1b:bd:52:0e:af:a3:b7:34:fe:f6:
         89:51:f6:7d:fd:2b:97:f4:7c:4f:0a:35:91:5c:7d:43:f7:be:
         45:dd:96:28:78:3e:a5:90:e2:ef:1e:27:fd:86:a8:7c:a1:95:
         68:e5:76:f3:11:d8:3f:38:c7:16:b4:ec:ed:e9:e0:84:14:18:
         86:49:ce:24:3c:76:a7:02:12:ec:3d:14:0e:84:64:7d:71:4f:
         7b:07:27:e7:0b:74:8c:66:af:bd:f5:fc:17:93:96:2d:c3:c6:
         bb:96:16:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh9leIUEF+RnVEQDgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0
YjY1MB4XDTI0MTExNTAxNTMxMVoXDTI1MDIxMzAxNTMxMVowLzEtMCsGA1UEAxMk
ZTI3YjU5NTItZWE2ZC00MjUxLTg1MWEtNDYxODkwMDAyOTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJoqzZzJ/OdViTB5u0MV7HpG7iUby9uWhl3t
MR/1pur6+wJREf1W30x4gdAASrH7lacAyHra6JmLaMJB67l/EzlmYdrVQyxQuGBY
ETIYjENhFR2hxMV2E/MN1bA4qs7KwfQ6vJdhoe0WIOqwMN6fm/04PLK7p4pe8tCH
hsNid5j9dGFshwQQ+z73dXUiluMT7BWzOgNlwfthh1+Ch7Pgqx3R88KWhgV90YOH
8P4tiGpndNvB7XGTaD5LETZjVOGq9zFc/yNqiN4Rf0BaScrravRfeHRfk/GrzHwb
0hRG078pJIQRxRk0XYZ7ETXIH1GE10K/E7F7OU7kPJ66ytEKUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJXAQxvm5n4eVihQj/zVrhXf7MFjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0
NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvOTZmZjM4NzMtZGI2Mi0z
NjNkLTkyNjYtZWIzZGViZmM0NGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0
NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4
NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3
YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmjlqX24DVS9aQ2gd2S4pyFP3Q5ZHEz/sKJR1Ap/ZG+IM/z+Baqc5S1
W6BUfQSqUYuf+t8yn8i044EsJjxVtP8am/B4FuASCwGe5TMKuy7YHKUr6zr5Lurx
L2MlLMANo+NELW7FFv6HdWHGTZoAzIeyAbxsT3C7P2DI9X5kYk8B9PVEXgiG3K8T
fDRJyI/a70g/dTp6lFTRG71SDq+jtzT+9olR9n39K5f0fE8KNZFcfUP3vkXdlih4
PqWQ4u8eJ/2GqHyhlWjldvMR2D84xxa07O3p4IQUGIZJziQ8dqcCEuw9FA6EZH1x
T3sHJ+cLdIxmr731/BeTli3DxruWFvw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:32 2024 by rpki-client on console-fra.rpki-client.org