Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5458923e-560c-3f9f-9ea6-54cfe1b74678.roa
File:                     5458923e-560c-3f9f-9ea6-54cfe1b74678.roa (raw, json)
Hash identifier:          68cstf6oy+JthUuBU6Ay09oRq/5iW7YGdmf3M8V2RIw=
Subject key identifier:   1A:62:4B:5F:52:4C:CF:84:75:C5:00:84:CF:2C:E4:25:E2:24:76:C6
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E8F4F38AB524D5CBA08A7C00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5458923e-560c-3f9f-9ea6-54cfe1b74678.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     36492
IP address blocks:        64.9.248.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:f3:8a:b5:24:d5:cb:a0:8a:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=0a8d0588-040e-4d56-8659-a5fe4c164635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:90:dd:81:31:3f:77:35:ff:b0:aa:0c:99:d7:
                    40:b7:0f:84:0f:ac:e2:0f:60:bd:de:40:3e:b5:6e:
                    4c:d3:62:c0:84:e6:ea:71:a7:eb:7d:fd:2e:ab:66:
                    be:71:ae:69:71:69:2c:37:2c:24:9e:fb:4c:2c:e0:
                    2b:fc:25:13:40:57:ec:5b:59:89:51:60:0e:38:ec:
                    90:a4:27:9b:89:ce:b9:2f:32:31:29:e3:bc:c5:34:
                    ba:fc:b9:38:d0:d9:7e:6b:58:fc:2b:c8:ea:e7:a8:
                    b8:bd:9f:1b:07:34:c9:16:2a:8e:ad:66:0b:ab:a1:
                    72:31:29:e2:33:16:2c:bc:69:f7:46:f8:40:4b:ce:
                    33:5b:24:1e:ea:9e:21:a3:a4:e1:5b:df:4c:4a:c4:
                    0e:05:16:9c:d8:7b:65:4c:f2:5d:3d:48:9d:2f:46:
                    7a:8c:cb:16:f5:a3:4d:e3:17:de:e4:f8:78:e5:88:
                    5a:4b:e4:e5:16:83:44:e4:9a:a1:17:0e:f2:56:15:
                    00:00:70:bd:4f:42:6d:33:ab:98:53:83:77:44:aa:
                    62:48:ae:e0:ea:6b:0c:26:d8:5e:ba:90:b0:eb:7b:
                    50:e9:5b:01:31:a2:ad:16:8f:c2:69:98:3a:2b:01:
                    c9:f3:1c:2b:42:55:77:e9:f4:cb:fc:3b:6c:c3:41:
                    b4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:62:4B:5F:52:4C:CF:84:75:C5:00:84:CF:2C:E4:25:E2:24:76:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5458923e-560c-3f9f-9ea6-54cfe1b74678.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:49:27:09:92:4d:38:2a:7f:73:4c:0e:f1:7a:9d:03:2f:c8:
         3d:9d:20:08:04:49:09:bc:07:6c:c5:51:7a:8a:95:67:f0:3d:
         9e:94:13:0b:9d:76:8b:16:5b:2e:58:62:10:3f:4e:c3:4e:a4:
         30:ca:54:6d:41:aa:fd:a2:99:89:92:1b:ca:1d:c5:3d:f2:e4:
         44:40:9d:35:92:24:c6:9f:75:2c:1c:d9:8f:37:b0:12:a3:38:
         1c:bc:0a:06:d0:b7:f7:5e:64:4b:67:dd:a0:77:c8:6d:83:65:
         53:81:c9:04:ff:19:59:60:eb:ae:06:74:77:51:45:b3:a2:c0:
         c7:45:df:b3:15:ba:24:13:ca:22:e3:83:0d:4c:0f:08:6c:15:
         4c:9e:1f:ec:60:1c:44:f3:f1:6f:49:23:96:85:71:ef:92:6b:
         cb:34:f9:fe:4b:0b:9a:b3:bd:64:b7:50:3f:76:02:e5:4b:d6:
         de:5d:8e:37:ab:16:6f:9a:ed:eb:cf:3a:08:6e:52:26:00:02:
         47:5f:06:cf:7e:9d:12:29:4a:d3:4e:06:b6:18:ce:0b:bd:7f:
         f1:f5:f2:10:76:54:3f:19:1e:54:c7:c6:8c:a1:4a:ee:a2:ef:
         90:a3:db:64:8d:a1:81:28:b4:ec:43:40:01:15:93:ba:7b:e2:
         c7:94:f8:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9POKtSTVy6CKfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
MGE4ZDA1ODgtMDQwZS00ZDU2LTg2NTktYTVmZTRjMTY0NjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpDdgTE/dzX/sKoMmddAtw+ED6ziD2C93kA+
tW5M02LAhObqcafrff0uq2a+ca5pcWksNywknvtMLOAr/CUTQFfsW1mJUWAOOOyQ
pCebic65LzIxKeO8xTS6/Lk40Nl+a1j8K8jq56i4vZ8bBzTJFiqOrWYLq6FyMSni
MxYsvGn3RvhAS84zWyQe6p4ho6ThW99MSsQOBRac2HtlTPJdPUidL0Z6jMsW9aNN
4xfe5Ph45YhaS+TlFoNE5JqhFw7yVhUAAHC9T0JtM6uYU4N3RKpiSK7g6msMJthe
upCw63tQ6VsBMaKtFo/CaZg6KwHJ8xwrQlV36fTL/Dtsw0G0bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBpiS19STM+EdcUAhM8s5CXiJHbGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNTQ1ODkyM2UtNTYwYy0z
ZjlmLTllYTYtNTRjZmUxYjc0Njc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAn4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtJJwmSTTgqf3NMDvF6nQMvyD2dIAgESQm8B2zFUXqKlWfwPZ6UEwud
dosWWy5YYhA/TsNOpDDKVG1Bqv2imYmSG8odxT3y5ERAnTWSJMafdSwc2Y83sBKj
OBy8CgbQt/deZEtn3aB3yG2DZVOByQT/GVlg664GdHdRRbOiwMdF37MVuiQTyiLj
gw1MDwhsFUyeH+xgHETz8W9JI5aFce+Sa8s0+f5LC5qzvWS3UD92AuVL1t5djjer
Fm+a7evPOghuUiYAAkdfBs9+nRIpStNOBrYYzgu9f/H18hB2VD8ZHlTHxoyhSu6i
75Cj22SNoYEotOxDQAEVk7p74seU+GI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:14 2024 by rpki-client on console-ams.rpki-client.org