Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/fe7c055b-07a6-3a18-a29a-d2ff56c4a593.roa
File:                     fe7c055b-07a6-3a18-a29a-d2ff56c4a593.roa (raw, json)
Hash identifier:          HqRWNf0IhaGzMd8qSxN/ZyhLEhIABagxXdyCN+YiYzo=
Subject key identifier:   FD:0A:0D:92:9C:1A:13:03:E7:47:CB:7C:E0:F4:45:04:44:21:56:93
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F432858486EF5BE7CCF54026901B96780
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/fe7c055b-07a6-3a18-a29a-d2ff56c4a593.roa
Signing time:             Sat 04 Jan 2025 14:00:51 +0000
ROA not before:           Sat 04 Jan 2025 14:00:51 +0000
ROA not after:            Fri 04 Apr 2025 13:00:51 +0000
asID:                     26863
IP address blocks:        64.40.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6e:f5:be:7c:cf:54:02:69:01:b9:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Jan  4 14:00:51 2025 GMT
            Not After : Apr  4 13:00:51 2025 GMT
        Subject: CN=4dad0b04-0e73-45bb-b5fc-232bb9c88ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:db:5d:9d:3f:1a:5e:75:92:52:96:c4:b3:b2:
                    07:53:67:85:02:fa:a4:c0:71:2c:02:84:99:e6:99:
                    f4:67:7c:87:64:36:73:6e:ba:fd:b5:d1:00:88:b1:
                    5a:89:49:82:84:c9:b1:17:33:27:7e:c7:fd:8a:65:
                    e5:1b:71:2b:96:61:26:e0:e4:23:22:1f:76:2c:2d:
                    34:fc:89:b0:4b:e9:c1:ff:7c:35:b6:31:9b:52:6f:
                    a6:30:8d:55:33:90:fa:c7:a7:16:c6:86:a1:e4:22:
                    61:5c:db:4c:25:35:c2:4d:80:54:3b:c2:cc:e2:eb:
                    4d:c3:bb:de:af:4e:fb:e9:67:e7:35:1f:83:68:af:
                    e1:c8:e6:d2:cc:e5:32:c9:aa:7d:af:5a:03:40:27:
                    aa:28:ca:f0:ef:c1:72:96:00:78:a1:f4:67:58:cc:
                    ac:90:d9:bd:ff:3d:4c:fc:83:35:d8:58:8c:52:7d:
                    fe:a0:c3:2c:3a:27:f0:c2:6d:2b:ff:ee:93:8b:5b:
                    14:69:80:e0:4d:d1:6f:59:00:bd:e6:3a:df:3b:fa:
                    ac:b0:b5:16:92:8f:2e:4f:d6:86:56:39:76:e6:df:
                    ad:7f:b9:38:96:32:3d:bd:c4:93:cb:a7:1e:8b:1c:
                    55:36:14:99:44:d3:c2:b3:bd:b1:d2:0d:4e:6c:10:
                    bd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0A:0D:92:9C:1A:13:03:E7:47:CB:7C:E0:F4:45:04:44:21:56:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/fe7c055b-07a6-3a18-a29a-d2ff56c4a593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:75:d0:b1:88:31:d8:91:b8:d8:40:bb:5e:1a:6f:db:93:0c:
         cb:11:13:f7:a2:90:07:eb:c7:c3:10:62:4c:cd:61:e4:fa:3d:
         50:18:8b:04:35:ed:80:e8:b7:f5:a7:10:01:f0:51:4b:2d:47:
         51:54:fe:d9:68:d5:01:fe:ed:48:cb:9c:de:13:00:21:8f:e4:
         c6:de:7d:87:d2:70:ec:7c:7a:07:89:89:ea:f1:69:6b:e3:10:
         50:34:85:d5:d2:ad:0a:8a:5a:f2:05:fd:e1:71:cb:4b:61:2a:
         e6:16:1b:30:72:76:f1:a5:e7:2a:61:15:66:08:e8:d8:13:fa:
         d1:c5:84:6d:19:aa:19:37:e5:7a:14:8a:a6:3b:90:7d:7d:6c:
         ba:06:77:6d:7f:de:40:40:cd:2c:0e:b0:18:70:4c:43:76:e3:
         d2:96:fb:73:c5:b2:5c:61:9f:2a:1b:65:df:26:c6:6f:74:3e:
         1f:1d:10:98:86:d2:2c:33:bf:ad:6b:6a:64:ed:4f:93:2c:71:
         22:35:57:46:98:ec:a7:c1:a3:c0:d9:06:5c:f1:56:81:81:67:
         6b:4a:1e:88:b9:2a:16:cc:99:c5:7f:25:a5:22:76:b0:93:80:
         b7:fd:40:bb:a8:5b:16:f6:99:5c:be:59:ac:e7:df:d2:f1:7b:
         12:eb:a9:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhu9b58z1QCaQG5Z4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFjMTllNTctYTZmNS00YzQ4LWI0ZGYtYjhkNDJkN2I3
NDgzMB4XDTI1MDEwNDE0MDA1MVoXDTI1MDQwNDEzMDA1MVowLzEtMCsGA1UEAxMk
NGRhZDBiMDQtMGU3My00NWJiLWI1ZmMtMjMyYmI5Yzg4YWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9tdnT8aXnWSUpbEs7IHU2eFAvqkwHEsAoSZ
5pn0Z3yHZDZzbrr9tdEAiLFaiUmChMmxFzMnfsf9imXlG3ErlmEm4OQjIh92LC00
/ImwS+nB/3w1tjGbUm+mMI1VM5D6x6cWxoah5CJhXNtMJTXCTYBUO8LM4utNw7ve
r0776WfnNR+DaK/hyObSzOUyyap9r1oDQCeqKMrw78FylgB4ofRnWMyskNm9/z1M
/IM12FiMUn3+oMMsOifwwm0r/+6Ti1sUaYDgTdFvWQC95jrfO/qssLUWko8uT9aG
Vjl25t+tf7k4ljI9vcSTy6ceixxVNhSZRNPCs72x0g1ObBC99QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP0KDZKcGhMD50fLfOD0RQREIVaTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMx
OWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0MmQ3Yjc0ODMvZmU3YzA1NWItMDdhNi0z
YTE4LWEyOWEtZDJmZjU2YzRhNTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzFjMTllNTctYTZmNS00YzQ4LWI0
ZGYtYjhkNDJkN2I3NDgzLzMxYzE5ZTU3LWE2ZjUtNGM0OC1iNGRmLWI4ZDQyZDdi
NzQ4My5jcmwwHwYDVR0jBBgwFoAU/pJi5eJ2pwPKSRroNOSF02JXoFgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMxOWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0
MmQ3Yjc0ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCgIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA110LGIMdiRuNhAu14ab9uTDMsRE/eikAfrx8MQYkzNYeT6PVAYiwQ1
7YDot/WnEAHwUUstR1FU/tlo1QH+7UjLnN4TACGP5MbefYfScOx8egeJierxaWvj
EFA0hdXSrQqKWvIF/eFxy0thKuYWGzBydvGl5yphFWYI6NgT+tHFhG0Zqhk35XoU
iqY7kH19bLoGd21/3kBAzSwOsBhwTEN249KW+3PFslxhnyobZd8mxm90Ph8dEJiG
0iwzv61ramTtT5MscSI1V0aY7KfBo8DZBlzxVoGBZ2tKHoi5KhbMmcV/JaUidrCT
gLf9QLuoWxb2mVy+Wazn39LxexLrqd4=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:42:54 2025 by rpki-client