Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/d00129db-d5ad-33be-afac-2e76df39b2b2.roa
File:                     d00129db-d5ad-33be-afac-2e76df39b2b2.roa (raw, json)
Hash identifier:          wb/cTkki4Z5KFdHY7++3YccMKTyj03k5NSFarynzmhQ=
Subject key identifier:   E3:FD:33:FD:92:39:5D:B9:B0:87:67:E4:5E:18:3E:DC:6B:A7:08:47
Certificate issuer:       /CN=0a4ce5e6-29f4-4552-bf3b-5510aa3b5052
Certificate serial:       010D0C9F4328584774FBA297BF514352F8BEB280
Authority key identifier: 6F:D9:11:69:B9:73:1F:5C:48:7D:CE:11:8A:21:CE:B1:3F:F5:F9:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/d00129db-d5ad-33be-afac-2e76df39b2b2.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     6095
IP address blocks:        204.89.58.0/24 maxlen: 24
                          204.89.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:a2:97:bf:51:43:52:f8:be:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a4ce5e6-29f4-4552-bf3b-5510aa3b5052
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=af8026c1-7102-4b39-a4fb-bc23c9581f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:18:f7:db:e3:e4:7a:c4:91:49:94:51:b5:83:
                    45:07:ab:ac:87:a9:0c:25:8d:f6:f4:4a:15:c2:7f:
                    03:ea:9c:83:02:bf:83:dc:f7:7c:bd:4d:be:0a:b3:
                    20:d2:2d:63:5b:89:cf:f2:31:70:23:d3:6a:41:33:
                    61:b2:98:e7:42:55:22:7f:05:43:fe:75:9c:84:9b:
                    77:40:00:e3:47:ec:88:61:db:e5:2d:0b:8f:4d:58:
                    9b:6a:69:1c:35:af:d9:07:f7:aa:a0:c5:6a:df:89:
                    cb:3c:87:71:0e:b6:c4:74:ff:af:10:e9:f5:cd:a6:
                    91:0c:f9:4c:95:58:09:4a:eb:45:91:b4:92:bf:84:
                    99:e7:66:e9:71:82:a1:54:4c:b1:13:1d:db:a1:99:
                    d0:f3:71:60:ad:0d:c1:25:d5:c1:9f:df:b3:8c:03:
                    19:46:5b:88:44:0b:88:0c:d7:9b:ec:7a:1f:45:ba:
                    17:b0:76:42:e6:51:03:b5:3c:99:c6:c7:b5:d7:30:
                    d1:fa:73:30:d1:86:9b:39:01:fe:d7:d7:05:43:64:
                    9a:bf:e2:37:22:84:14:94:a2:82:1f:46:d5:cf:5d:
                    41:67:ad:f2:c7:ae:25:5e:4e:33:6b:d9:f3:97:61:
                    84:dd:c2:5b:12:68:84:68:fb:d2:71:9e:ab:1d:f7:
                    25:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FD:33:FD:92:39:5D:B9:B0:87:67:E4:5E:18:3E:DC:6B:A7:08:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/d00129db-d5ad-33be-afac-2e76df39b2b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D9:11:69:B9:73:1F:5C:48:7D:CE:11:8A:21:CE:B1:3F:F5:F9:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.89.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:26:77:7f:c4:b0:2a:e6:bc:fa:67:92:4f:4d:a8:07:bd:26:
         fa:9f:a1:b2:dd:b1:4e:2e:65:7c:73:a4:db:b4:38:c2:37:ee:
         6d:1a:8a:15:a2:b6:91:e6:c8:a9:ea:64:1d:33:87:f7:a5:ae:
         e7:60:20:9e:80:88:28:7d:90:8d:0f:c3:1e:7b:f6:dc:b8:43:
         b0:35:f4:f4:b5:46:8f:de:36:3e:93:dc:90:fe:12:14:c3:6a:
         fa:36:eb:74:d2:b7:75:88:fd:15:64:18:e1:84:3d:98:e5:e1:
         de:ea:14:1a:71:41:4d:be:b8:60:16:11:f5:b7:9f:6b:8e:dc:
         43:95:80:39:7b:69:b0:a6:68:47:8c:c8:5e:9a:6f:af:57:82:
         da:a7:17:d2:55:88:01:df:73:cb:ab:48:05:c9:11:b0:98:d6:
         20:93:ad:38:a1:3e:67:30:33:60:c4:14:21:d9:04:43:6b:be:
         a0:ef:87:63:4c:46:44:21:ac:40:90:10:61:60:f2:c4:92:24:
         4f:a0:77:63:f3:8f:ec:7c:b0:61:8c:74:89:32:72:9c:0a:f5:
         9f:6d:f7:28:ae:16:03:aa:42:15:56:46:81:e1:e2:05:25:26:
         f1:3c:96:4e:25:01:9f:6d:b1:e7:30:92:f9:20:d6:12:51:be:
         e9:49:29:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd0+6KXv1FDUvi+soAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE0Y2U1ZTYtMjlmNC00NTUyLWJmM2ItNTUxMGFhM2I1
MDUyMB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk
YWY4MDI2YzEtNzEwMi00YjM5LWE0ZmItYmMyM2M5NTgxZjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxj32+PkesSRSZRRtYNFB6ush6kMJY329EoV
wn8D6pyDAr+D3Pd8vU2+CrMg0i1jW4nP8jFwI9NqQTNhspjnQlUifwVD/nWchJt3
QADjR+yIYdvlLQuPTVibamkcNa/ZB/eqoMVq34nLPIdxDrbEdP+vEOn1zaaRDPlM
lVgJSutFkbSSv4SZ52bpcYKhVEyxEx3boZnQ83FgrQ3BJdXBn9+zjAMZRluIRAuI
DNeb7HofRboXsHZC5lEDtTyZxse11zDR+nMw0YabOQH+19cFQ2Sav+I3IoQUlKKC
H0bVz11BZ63yx64lXk4za9nzl2GE3cJbEmiEaPvScZ6rHfcleQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOP9M/2SOV25sIdn5F4YPtxrpwhHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYTRj
ZTVlNi0yOWY0LTQ1NTItYmYzYi01NTEwYWEzYjUwNTIvZDAwMTI5ZGItZDVhZC0z
M2JlLWFmYWMtMmU3NmRmMzliMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGE0Y2U1ZTYtMjlmNC00NTUyLWJm
M2ItNTUxMGFhM2I1MDUyLzBhNGNlNWU2LTI5ZjQtNDU1Mi1iZjNiLTU1MTBhYTNi
NTA1Mi5jcmwwHwYDVR0jBBgwFoAUb9kRablzH1xIfc4RiiHOsT/1+SUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYTRjZTVlNi0yOWY0LTQ1NTItYmYzYi01NTEw
YWEzYjUwNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzFk6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQmd3/EsCrmvPpnkk9NqAe9JvqfobLdsU4uZXxzpNu0OMI37m0aihWi
tpHmyKnqZB0zh/elrudgIJ6AiCh9kI0Pwx579ty4Q7A19PS1Ro/eNj6T3JD+EhTD
avo263TSt3WI/RVkGOGEPZjl4d7qFBpxQU2+uGAWEfW3n2uO3EOVgDl7abCmaEeM
yF6ab69XgtqnF9JViAHfc8urSAXJEbCY1iCTrTihPmcwM2DEFCHZBENrvqDvh2NM
RkQhrECQEGFg8sSSJE+gd2Pzj+x8sGGMdIkycpwK9Z9t9yiuFgOqQhVWRoHh4gUl
JvE8lk4lAZ9tsecwkvkg1hJRvulJKUQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:43 2024 by rpki-client on console-ams.rpki-client.org