Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3968f910-af41-3783-af18-bdf2a9af734d.roa
File:                     3968f910-af41-3783-af18-bdf2a9af734d.roa (raw, json)
Hash identifier:          2rjgDEfQwyzFN6eBLbh0JvAe/CTjXpevYl/jM/F0y74=
Subject key identifier:   0B:0E:B6:7D:D0:9A:06:E2:96:E3:37:DA:77:A7:15:CD:40:5D:12:CB
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285845490375385BC863FD51521240
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3968f910-af41-3783-af18-bdf2a9af734d.roa
Signing time:             Thu 21 Mar 2024 21:27:03 +0000
ROA not before:           Thu 21 Mar 2024 21:27:03 +0000
ROA not after:            Wed 19 Jun 2024 21:27:03 +0000
asID:                     36492
IP address blocks:        64.9.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:03:75:38:5b:c8:63:fd:51:52:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 21 21:27:03 2024 GMT
            Not After : Jun 19 21:27:03 2024 GMT
        Subject: CN=5abc86c5-dd74-4c7d-b284-6def2f3202ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b4:f5:cb:6c:87:b4:70:65:35:4b:9c:7f:29:
                    af:ee:ae:48:3d:ca:3e:e6:e4:3f:85:b1:9e:f1:aa:
                    2d:97:d3:06:de:13:9c:72:2e:7d:21:89:16:f5:78:
                    eb:f6:82:6b:c9:cd:24:5c:90:63:04:a4:91:63:4a:
                    0e:35:2f:4a:94:f7:9c:97:31:83:f2:41:02:8c:20:
                    a3:7b:2c:db:e8:0b:2d:8b:42:7a:2d:45:7d:bd:c0:
                    02:b0:78:34:ed:9b:73:5b:a0:3c:ac:dc:7a:eb:f4:
                    f6:34:18:c5:3f:84:a5:da:5e:e3:dd:e8:f8:f8:80:
                    f2:54:75:f2:5b:69:df:61:33:f8:e6:e1:5c:a6:8e:
                    82:7d:b4:5d:3a:7c:f0:44:c3:d7:f1:c5:db:97:ae:
                    61:c2:22:ff:3b:3b:23:a9:bf:93:d9:2e:43:3a:0d:
                    15:7c:e5:db:1e:04:60:6d:0a:a3:37:6d:35:0d:40:
                    c8:f6:4c:e2:be:05:43:c2:bd:22:6f:a4:c2:0f:f3:
                    c8:e5:fb:dc:8b:a8:38:72:f6:74:15:7c:8b:27:04:
                    34:9b:d5:e9:a5:22:54:c6:e4:09:b1:f1:f5:f6:b1:
                    9b:75:25:76:c2:32:3a:e9:2c:f6:31:76:8b:5a:ea:
                    b3:ce:0f:3e:6a:1a:c0:6b:4f:11:c3:d3:ca:b1:e2:
                    7d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0E:B6:7D:D0:9A:06:E2:96:E3:37:DA:77:A7:15:CD:40:5D:12:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3968f910-af41-3783-af18-bdf2a9af734d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c8:62:03:4d:ca:47:3d:8b:dd:ad:be:92:18:4f:8a:28:ad:
         52:2e:cd:bc:20:71:c6:45:d4:5f:c6:44:06:79:50:e1:4b:43:
         f2:5b:64:75:d3:17:a6:8b:c0:a5:44:3d:71:a0:43:0b:8b:29:
         e8:39:30:f7:33:6c:0e:b5:41:93:da:3e:9e:a6:cc:55:2d:8d:
         ea:d6:ef:1e:ee:62:61:79:2f:db:16:18:d9:ff:49:6f:6a:01:
         7d:14:8d:da:b8:e1:77:1e:1b:f6:76:15:f7:d2:53:2f:31:53:
         a1:64:85:1d:4f:82:a1:68:32:75:a6:6d:59:01:e7:de:5e:1e:
         61:41:85:cd:fe:3d:3d:57:cb:1d:1f:0a:38:e4:14:b3:b4:35:
         80:2d:bc:e1:5a:d6:f1:2f:f2:75:21:d2:eb:3b:71:f0:a7:7d:
         f3:0a:10:38:da:33:af:03:17:5f:1a:89:ea:20:0f:7e:dc:ad:
         dd:ba:16:56:34:a0:59:3e:2b:31:36:27:e0:41:ab:e3:90:93:
         7f:ae:4f:d0:be:a5:9e:54:82:a9:4a:41:28:8f:11:99:af:2e:
         16:d0:38:db:30:23:36:5a:36:48:d7:bd:9d:d3:96:0e:bf:05:
         13:a6:f7:e1:44:9b:f5:8f:a9:a9:05:eb:79:0f:cf:be:83:4f:
         e6:2d:02:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJA3U4W8hj/VFSEkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MDMyMTIxMjcwM1oXDTI0MDYxOTIxMjcwM1owLzEtMCsGA1UEAxMk
NWFiYzg2YzUtZGQ3NC00YzdkLWIyODQtNmRlZjJmMzIwMmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbT1y2yHtHBlNUucfymv7q5IPco+5uQ/hbGe
8aotl9MG3hOcci59IYkW9Xjr9oJryc0kXJBjBKSRY0oONS9KlPeclzGD8kECjCCj
eyzb6Asti0J6LUV9vcACsHg07ZtzW6A8rNx66/T2NBjFP4Sl2l7j3ej4+IDyVHXy
W2nfYTP45uFcpo6CfbRdOnzwRMPX8cXbl65hwiL/Ozsjqb+T2S5DOg0VfOXbHgRg
bQqjN201DUDI9kzivgVDwr0ib6TCD/PI5fvci6g4cvZ0FXyLJwQ0m9XppSJUxuQJ
sfH19rGbdSV2wjI66Sz2MXaLWuqzzg8+ahrAa08Rw9PKseJ9kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAsOtn3QmgbiluM32nenFc1AXRLLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMzk2OGY5MTAtYWY0MS0z
NzgzLWFmMTgtYmRmMmE5YWY3MzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAnhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfIYgNNykc9i92tvpIYT4oorVIuzbwgccZF1F/GRAZ5UOFLQ/JbZHXT
F6aLwKVEPXGgQwuLKeg5MPczbA61QZPaPp6mzFUtjerW7x7uYmF5L9sWGNn/SW9q
AX0Ujdq44XceG/Z2FffSUy8xU6FkhR1PgqFoMnWmbVkB595eHmFBhc3+PT1Xyx0f
CjjkFLO0NYAtvOFa1vEv8nUh0us7cfCnffMKEDjaM68DF18aieogD37crd26FlY0
oFk+KzE2J+BBq+OQk3+uT9C+pZ5UgqlKQSiPEZmvLhbQONswIzZaNkjXvZ3Tlg6/
BROm9+FEm/WPqakF63kPz76DT+YtAvU=
-----END CERTIFICATE-----
Generated at Thu May 2 08:04:35 2024 by rpki-client on console-ams.rpki-client.org