Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/52b76acb-b513-33d2-9a7e-ff09fbbd1570.roa
File:                     52b76acb-b513-33d2-9a7e-ff09fbbd1570.roa (raw, json)
Hash identifier:          vtr7EY8t0j0iTeCNDdUjn0KrEt0xLTO4WGBtzXnYd58=
Subject key identifier:   65:E5:D6:41:AE:CB:B5:33:99:34:66:EF:2E:D1:A0:76:36:EC:5D:23
Certificate issuer:       /CN=900d3223-79ad-4ee2-af23-163d305bdd0a
Certificate serial:       010D0C9F432858473A5A2133897853EEEBC24440
Authority key identifier: 7D:D6:33:9D:D2:D7:AE:48:75:4D:EE:25:DD:4E:7E:D5:65:C5:3A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/52b76acb-b513-33d2-9a7e-ff09fbbd1570.roa
Signing time:             Mon 16 Sep 2024 00:58:26 +0000
ROA not before:           Mon 16 Sep 2024 00:58:26 +0000
ROA not after:            Sun 15 Dec 2024 01:58:26 +0000
asID:                     14618
IP address blocks:        208.64.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5a:21:33:89:78:53:ee:eb:c2:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900d3223-79ad-4ee2-af23-163d305bdd0a
        Validity
            Not Before: Sep 16 00:58:26 2024 GMT
            Not After : Dec 15 01:58:26 2024 GMT
        Subject: CN=a0d0b29a-9755-4ec1-8187-f9f1fa3e1a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dc:07:d7:fa:98:0f:60:8e:82:30:e3:07:7e:
                    36:70:1c:13:71:4a:33:5b:b2:fe:e1:ed:87:b4:54:
                    71:35:ee:5d:cd:ef:91:94:a6:6e:9d:fc:4d:12:7f:
                    a8:fd:c6:99:de:81:e8:75:70:5e:e1:92:e1:90:29:
                    b8:fc:36:87:12:4f:f0:3b:69:5d:26:9e:fc:5f:53:
                    d4:96:2e:53:01:50:ee:41:16:21:d7:86:a2:ac:d0:
                    fc:31:5c:41:58:6b:25:e7:f0:38:f4:8f:f9:b5:75:
                    1d:e0:12:3f:f6:57:ab:e4:2d:bf:24:e1:39:d7:cc:
                    e5:0a:53:fa:60:f4:04:30:74:6d:9f:bd:6b:f7:7a:
                    62:3e:1f:0e:91:94:64:44:a6:e4:2e:3f:c2:de:f8:
                    27:bd:f9:ce:74:b4:bb:97:ff:f6:0d:a2:bd:8c:2d:
                    1f:02:82:bf:17:17:e5:be:da:90:0e:cd:78:56:74:
                    79:0f:1d:0e:1c:f0:c5:94:08:3c:9a:5a:84:5f:e3:
                    ec:63:de:63:16:2f:d8:ec:ac:5d:bb:55:47:78:81:
                    f9:6d:2b:ad:b8:0b:05:ac:aa:03:8e:52:1e:80:23:
                    44:e4:d4:af:ea:69:58:10:bf:c5:8c:be:3b:7d:c1:
                    3c:64:bc:3e:1e:dc:47:60:a9:83:d6:98:7f:67:25:
                    e5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E5:D6:41:AE:CB:B5:33:99:34:66:EF:2E:D1:A0:76:36:EC:5D:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/52b76acb-b513-33d2-9a7e-ff09fbbd1570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.crl

            X509v3 Authority Key Identifier:
                keyid:7D:D6:33:9D:D2:D7:AE:48:75:4D:EE:25:DD:4E:7E:D5:65:C5:3A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:27:a7:af:6d:c6:73:ac:e3:a9:83:39:e6:4f:09:61:8e:d7:
         15:38:9a:38:25:32:e1:b9:74:eb:71:8f:d4:6e:1b:77:5b:dc:
         21:11:b2:f3:8d:9f:11:d3:f7:ad:de:6c:18:56:cc:4c:48:55:
         51:24:bc:5b:c7:90:d7:c8:e4:30:8f:a5:59:fd:20:fe:a0:ba:
         2b:c8:c2:a2:61:74:d9:18:6c:33:16:c0:28:da:fc:e1:08:6a:
         7a:9e:b7:d6:7e:79:49:03:2b:15:02:69:91:b3:2c:89:5c:3f:
         c2:e5:58:ce:a0:c1:08:3c:6b:5e:7d:5c:83:a2:0f:19:3b:a2:
         e6:e7:98:f6:4d:36:35:48:1e:7a:ea:07:a5:16:79:50:5f:35:
         4b:e0:0b:ed:ed:ac:06:a2:d1:85:d2:04:6c:81:8a:e7:64:8b:
         14:4d:20:67:2f:5d:c7:9b:cf:08:15:23:c7:6d:fe:75:30:ff:
         f7:b4:43:a3:c1:45:e7:f6:7e:ad:70:45:18:05:92:29:45:74:
         64:91:72:4c:1e:e1:c0:01:e5:68:56:b9:e6:fc:f6:eb:8c:d3:
         b5:38:7b:d1:6a:a4:1b:f3:e8:3d:cd:13:f9:42:70:8b:3f:c6:
         3f:4c:fd:39:53:a1:2e:96:59:0a:be:fc:69:6c:44:f3:26:1f:
         c0:27:2e:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6WiEziXhT7uvCREAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTAwZDMyMjMtNzlhZC00ZWUyLWFmMjMtMTYzZDMwNWJk
ZDBhMB4XDTI0MDkxNjAwNTgyNloXDTI0MTIxNTAxNTgyNlowLzEtMCsGA1UEAxMk
YTBkMGIyOWEtOTc1NS00ZWMxLTgxODctZjlmMWZhM2UxYTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidwH1/qYD2COgjDjB342cBwTcUozW7L+4e2H
tFRxNe5dze+RlKZunfxNEn+o/caZ3oHodXBe4ZLhkCm4/DaHEk/wO2ldJp78X1PU
li5TAVDuQRYh14airND8MVxBWGsl5/A49I/5tXUd4BI/9ler5C2/JOE518zlClP6
YPQEMHRtn71r93piPh8OkZRkRKbkLj/C3vgnvfnOdLS7l//2DaK9jC0fAoK/Fxfl
vtqQDs14VnR5Dx0OHPDFlAg8mlqEX+PsY95jFi/Y7Kxdu1VHeIH5bSutuAsFrKoD
jlIegCNE5NSv6mlYEL/FjL47fcE8ZLw+HtxHYKmD1ph/ZyXlFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGXl1kGuy7UzmTRm7y7RoHY27F0jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85MDBk
MzIyMy03OWFkLTRlZTItYWYyMy0xNjNkMzA1YmRkMGEvNTJiNzZhY2ItYjUxMy0z
M2QyLTlhN2UtZmYwOWZiYmQxNTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTAwZDMyMjMtNzlhZC00ZWUyLWFm
MjMtMTYzZDMwNWJkZDBhLzkwMGQzMjIzLTc5YWQtNGVlMi1hZjIzLTE2M2QzMDVi
ZGQwYS5jcmwwHwYDVR0jBBgwFoAUfdYzndLXrkh1Te4l3U5+1WXFOrwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85MDBkMzIyMy03OWFkLTRlZTItYWYyMy0xNjNk
MzA1YmRkMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EAoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKcnp69txnOs46mDOeZPCWGO1xU4mjglMuG5dOtxj9RuG3db3CERsvON
nxHT963ebBhWzExIVVEkvFvHkNfI5DCPpVn9IP6guivIwqJhdNkYbDMWwCja/OEI
anqet9Z+eUkDKxUCaZGzLIlcP8LlWM6gwQg8a159XIOiDxk7oubnmPZNNjVIHnrq
B6UWeVBfNUvgC+3trAai0YXSBGyBiudkixRNIGcvXcebzwgVI8dt/nUw//e0Q6PB
Ref2fq1wRRgFkilFdGSRckwe4cAB5WhWueb89uuM07U4e9FqpBvz6D3NE/lCcIs/
xj9M/TlToS6WWQq+/GlsRPMmH8AnLuA=
-----END CERTIFICATE-----
Generated at Tue Oct 22 17:21:01 2024 by rpki-client on console-fra.rpki-client.org