Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa
File:                     239c7b2a-d138-33cf-be7d-13d8071140a8.roa (raw, json)
Hash identifier:          Ru2puqGMrAtlBtCXIqfXZxg0k5HGUkbUB5XP+kOLTmc=
Subject key identifier:   3B:BF:83:8F:98:53:80:AA:D9:F2:B8:AA:76:43:0E:84:ED:C8:4D:63
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285845734DB1D31E976840362460C0
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     18563
IP address blocks:        64.86.140.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b1:d3:1e:97:68:40:36:24:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=c2f11e5d-7fe6-4ae7-b2bb-5872e942a924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bd:f3:76:ee:0c:0f:58:7a:1a:fa:de:96:36:
                    3a:ee:e6:d2:c6:d2:60:24:ff:c8:1b:1d:3f:33:a6:
                    54:2a:aa:b4:d0:00:3c:7e:e6:99:b4:27:a5:49:e4:
                    8f:98:ff:6e:5a:db:92:28:71:2e:fd:82:71:69:cc:
                    6e:bd:62:57:1a:0d:d5:c7:5b:42:d6:49:40:87:cc:
                    dc:a4:f7:0c:a8:98:b7:b2:3d:82:40:54:70:36:f9:
                    b7:26:8f:e2:94:69:82:18:52:9e:9d:e0:dd:45:52:
                    bd:75:d5:c4:df:36:25:45:5e:02:44:84:1d:a8:af:
                    8d:2c:73:d8:ad:56:3c:11:20:e8:f2:6e:31:c8:7d:
                    d6:1b:65:5d:4c:b6:38:89:38:a8:6a:60:72:f6:c6:
                    fb:8d:b1:f3:92:d8:ca:2d:7f:fd:fc:07:d0:99:e1:
                    d8:e0:f4:ae:f8:e5:f4:4c:60:43:de:67:92:58:c7:
                    e7:bb:8d:bf:1c:35:2c:64:b8:41:64:1a:5a:dc:e3:
                    7a:6a:ef:77:5c:b8:81:8d:08:d0:a7:de:b8:cf:ec:
                    ca:b3:db:06:0b:10:ae:fc:bd:54:37:eb:4f:56:67:
                    af:09:7f:e2:4d:09:27:d6:b7:74:94:a0:d4:85:57:
                    6d:c1:23:1d:d0:e0:39:0c:0e:de:e6:ad:97:5a:19:
                    98:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BF:83:8F:98:53:80:AA:D9:F2:B8:AA:76:43:0E:84:ED:C8:4D:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e5:fb:79:8b:3f:bd:b6:31:b7:3b:a5:84:10:fd:3e:94:07:
         8f:76:2c:fa:c7:83:6b:5b:01:a7:a0:e3:a9:cc:19:5d:4d:22:
         10:90:d9:ea:0f:3c:40:43:32:3f:1c:bf:33:03:34:45:22:41:
         1b:1c:df:11:16:97:8c:26:f1:36:77:2b:38:b0:01:1d:77:b9:
         5e:89:75:4f:8c:01:b0:a3:4f:19:ca:2b:7a:24:c2:dd:5d:71:
         a7:5d:57:3d:2b:5b:06:80:19:0b:b7:60:94:3a:4a:b0:32:a1:
         cb:b0:59:3a:cc:b0:60:9f:ff:69:5e:8d:94:7c:f6:c6:94:ba:
         82:7d:b6:26:c0:bb:93:a6:6a:f1:36:7a:24:38:f2:29:cf:16:
         7d:c8:d4:a9:09:ab:ae:ef:97:3e:d8:d6:6c:9d:39:98:92:a2:
         46:d9:a1:4f:82:5b:e2:20:95:e4:d7:98:4b:8f:fb:67:59:f6:
         76:6c:5a:e0:6b:ce:01:67:21:d1:92:4c:80:63:6d:a4:9d:af:
         92:f9:36:49:6e:2f:51:49:98:f9:ce:24:9b:ab:9f:21:34:e4:
         c0:62:50:1a:ce:19:bc:6e:cb:06:96:4e:a2:9a:cb:5f:85:bb:
         d0:0f:a6:8c:4a:16:ce:f2:c8:ff:15:a2:41:c6:86:c0:fa:77:
         cf:96:f6:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVzTbHTHpdoQDYkYMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm
NzU4MB4XDTI0MDQwNjAxMDAyNloXDTI0MDcwNTAxMDAyNlowLzEtMCsGA1UEAxMk
YzJmMTFlNWQtN2ZlNi00YWU3LWIyYmItNTg3MmU5NDJhOTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL3zdu4MD1h6GvreljY67ubSxtJgJP/IGx0/
M6ZUKqq00AA8fuaZtCelSeSPmP9uWtuSKHEu/YJxacxuvWJXGg3Vx1tC1klAh8zc
pPcMqJi3sj2CQFRwNvm3Jo/ilGmCGFKeneDdRVK9ddXE3zYlRV4CRIQdqK+NLHPY
rVY8ESDo8m4xyH3WG2VdTLY4iTioamBy9sb7jbHzktjKLX/9/AfQmeHY4PSu+OX0
TGBD3meSWMfnu42/HDUsZLhBZBpa3ON6au93XLiBjQjQp964z+zKs9sGCxCu/L1U
N+tPVmevCX/iTQkn1rd0lKDUhVdtwSMd0OA5DA7e5q2XWhmYYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDu/g4+YU4Cq2fK4qnZDDoTtyE1jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2
MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvMjM5YzdiMmEtZDEzOC0z
M2NmLWJlN2QtMTNkODA3MTE0MGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk
ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1
Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz
ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQFaMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGDl+3mLP722Mbc7pYQQ/T6UB492LPrHg2tbAaeg46nMGV1NIhCQ2eoP
PEBDMj8cvzMDNEUiQRsc3xEWl4wm8TZ3KziwAR13uV6JdU+MAbCjTxnKK3okwt1d
caddVz0rWwaAGQu3YJQ6SrAyocuwWTrMsGCf/2lejZR89saUuoJ9tibAu5OmavE2
eiQ48inPFn3I1KkJq67vlz7Y1mydOZiSokbZoU+CW+IgleTXmEuP+2dZ9nZsWuBr
zgFnIdGSTIBjbaSdr5L5NkluL1FJmPnOJJurnyE05MBiUBrOGbxuywaWTqKay1+F
u9APpoxKFs7yyP8VokHGhsD6d8+W9pM=
-----END CERTIFICATE-----
Generated at Thu May 16 02:02:25 2024 by rpki-client on console-ams.rpki-client.org