Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d3543e09-95b9-352a-b45f-8092ead1be37.roa
File:                     d3543e09-95b9-352a-b45f-8092ead1be37.roa (raw, json)
Hash identifier:          Dz5UuBuMK6sG7fgRnkTa4xTnrbVC5F4c+mpO8dHwWHQ=
Subject key identifier:   3A:8C:1A:A6:B6:C1:48:A3:AE:0F:FA:92:B8:76:D5:EC:3C:46:88:76
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F43285847CE6F500A7E024E8EB01B1AA0
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d3543e09-95b9-352a-b45f-8092ead1be37.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     6250
IP address blocks:        76.164.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:50:0a:7e:02:4e:8e:b0:1b:1a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=fdd8d5be-0c2c-47f7-9da3-0658a15ed2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:5c:6f:9f:4e:b0:1a:29:11:2b:19:86:18:
                    65:eb:67:c5:fa:64:a8:27:a1:c0:df:f1:10:7c:da:
                    0b:31:fb:d3:02:8c:0a:53:00:a2:b2:f7:f3:82:91:
                    42:df:be:a7:57:d8:22:76:2b:37:f0:87:6c:ef:6d:
                    c4:da:a7:a4:1d:d5:76:6e:cb:d0:f7:4b:fa:b0:fd:
                    93:c0:6b:a1:ec:ed:49:d9:22:d7:82:bb:bf:46:83:
                    a0:b1:7c:f7:b0:04:5b:3c:f5:f3:76:46:2e:34:2c:
                    56:ae:9c:67:ee:3a:84:2b:cc:27:23:0b:bd:66:dd:
                    79:ec:ad:b1:21:44:ab:48:45:b5:58:9c:87:5f:ac:
                    57:f2:e5:15:84:39:d4:75:20:25:8a:bf:47:5b:bc:
                    49:f1:6d:ab:1e:93:08:cf:1f:91:bf:a1:30:3c:b0:
                    8f:cb:b7:bb:f5:39:7f:0c:ef:d7:1d:78:a4:9b:ca:
                    39:40:be:8c:b9:6f:b4:ab:4b:75:c9:95:4e:05:b8:
                    08:0d:45:e5:fe:17:ad:cb:42:71:ab:c0:b7:67:e2:
                    f6:3a:01:cf:65:9d:0e:14:49:76:77:8b:af:52:dc:
                    d3:63:ec:a1:45:8d:e2:cc:3e:26:e7:77:f0:c2:24:
                    65:a1:4a:0f:c3:05:f4:f4:f3:59:a3:a9:f6:10:6b:
                    2d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8C:1A:A6:B6:C1:48:A3:AE:0F:FA:92:B8:76:D5:EC:3C:46:88:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d3543e09-95b9-352a-b45f-8092ead1be37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:89:23:ed:5a:58:ba:fc:cc:86:30:2a:92:6e:61:6f:ca:96:
         b3:7a:99:6c:29:4b:9d:23:30:b6:d7:d8:43:b9:e5:50:19:1b:
         9a:3a:6d:09:34:70:9c:ce:b3:19:87:80:ab:c9:20:a9:4c:f2:
         36:2d:dc:54:a3:fc:52:1c:c5:9a:a5:11:81:20:c1:87:6a:07:
         ba:ac:d3:58:b9:77:62:d8:c0:6b:b8:6c:dc:d8:61:f5:dd:16:
         0a:85:ba:f5:b2:2f:81:6f:4f:d6:d4:e8:de:3c:b2:50:39:ca:
         e7:4d:ca:52:e8:0e:b6:7f:1f:db:e5:97:71:88:07:31:48:f0:
         57:68:0f:14:22:84:9c:49:3f:44:c4:74:ed:49:a3:1a:19:9e:
         2e:cb:01:1d:25:c4:d0:d6:b5:5c:72:47:7b:6f:07:1b:e8:f7:
         8d:df:6a:bd:a6:b5:9b:16:24:a3:08:7a:fa:ce:f5:44:9b:fd:
         98:ec:ab:49:77:59:e7:7f:c0:56:6c:4a:53:37:a8:97:ca:a5:
         74:04:e2:6c:21:e9:cc:4b:d1:f4:9d:61:b1:ec:47:79:f8:f2:
         f1:6d:f3:89:cc:ef:0f:c0:25:b0:a0:2f:51:8e:4d:c9:89:83:
         77:52:cd:0d:a9:70:15:fd:94:66:7e:0f:c2:f1:7e:17:6f:45:
         b0:5e:76:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfOb1AKfgJOjrAbGqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi
MGY2MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk
ZmRkOGQ1YmUtMGMyYy00N2Y3LTlkYTMtMDY1OGExNWVkMmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2Jcb59OsBopESsZhhhl62fF+mSoJ6HA3/EQ
fNoLMfvTAowKUwCisvfzgpFC376nV9gidis38Ids723E2qekHdV2bsvQ90v6sP2T
wGuh7O1J2SLXgru/RoOgsXz3sARbPPXzdkYuNCxWrpxn7jqEK8wnIwu9Zt157K2x
IUSrSEW1WJyHX6xX8uUVhDnUdSAlir9HW7xJ8W2rHpMIzx+Rv6EwPLCPy7e79Tl/
DO/XHXikm8o5QL6MuW+0q0t1yZVOBbgIDUXl/hety0Jxq8C3Z+L2OgHPZZ0OFEl2
d4uvUtzTY+yhRY3izD4m53fwwiRloUoPwwX09PNZo6n2EGstDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDqMGqa2wUijrg/6krh21ew8Roh2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz
NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvZDM1NDNlMDktOTViOS0z
NTJhLWI0NWYtODA5MmVhZDFiZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2
OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3
YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx
MTVjN2IwZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATKSlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADSJI+1aWLr8zIYwKpJuYW/KlrN6mWwpS50jMLbX2EO55VAZG5o6bQk0
cJzOsxmHgKvJIKlM8jYt3FSj/FIcxZqlEYEgwYdqB7qs01i5d2LYwGu4bNzYYfXd
FgqFuvWyL4FvT9bU6N48slA5yudNylLoDrZ/H9vll3GIBzFI8FdoDxQihJxJP0TE
dO1JoxoZni7LAR0lxNDWtVxyR3tvBxvo943far2mtZsWJKMIevrO9USb/Zjsq0l3
Wed/wFZsSlM3qJfKpXQE4mwh6cxL0fSdYbHsR3n48vFt84nM7w/AJbCgL1GOTcmJ
g3dSzQ2pcBX9lGZ+D8LxfhdvRbBedvo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:09 2024 by rpki-client on console-fra.rpki-client.org