Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a9872aef-9503-3b41-82b2-ac88f334dc71.roa
File:                     a9872aef-9503-3b41-82b2-ac88f334dc71.roa (raw, json)
Hash identifier:          DyLUQf0l40Ge9mHP57V9DWzXwMjbhNZe37bMZFLVSOg=
Subject key identifier:   3D:FC:CA:56:EF:F4:A0:EC:54:AB:9B:13:72:C7:CF:3D:44:7D:CC:58
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E8F53631E1319A5170086D80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a9872aef-9503-3b41-82b2-ac88f334dc71.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     36492
IP address blocks:        64.9.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:36:31:e1:31:9a:51:70:08:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=d4972029-532f-4840-b7c2-e3fa261a777b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:95:a9:be:58:dd:4b:17:f6:95:e2:14:51:a0:
                    a5:68:2e:5b:6f:74:6b:3d:a2:39:22:83:a8:94:b0:
                    0e:50:69:9c:55:13:68:f4:0a:d3:7f:6d:d4:6d:cf:
                    db:5a:56:95:ae:58:7d:40:d3:18:7a:fc:16:81:af:
                    01:84:b8:9d:c4:be:12:db:7b:79:52:c2:a7:14:1c:
                    c6:6f:4a:92:2f:9e:8c:f5:01:2f:ee:c9:82:ce:dd:
                    88:73:6a:5d:ca:1b:a3:ea:ff:d2:0a:e9:f8:9a:0d:
                    12:3c:2a:a3:d2:ca:35:5f:31:23:1d:8d:1e:dc:75:
                    11:d4:a0:6d:d2:65:cb:1c:b0:fd:2f:b0:34:43:d7:
                    94:50:5c:13:f6:79:83:92:81:dd:9d:d7:f7:f7:d9:
                    99:5d:65:31:33:67:60:1d:07:eb:c7:b0:2e:71:d5:
                    5c:44:2a:49:c9:13:62:52:81:50:47:e1:32:8a:c7:
                    28:69:ed:3f:a7:0f:ca:88:75:f0:d1:a3:cd:85:56:
                    27:66:e6:d6:14:78:4b:cc:73:c3:7b:ff:b5:3f:a8:
                    3b:1b:73:dd:88:52:21:d0:7d:42:46:30:60:83:aa:
                    54:2c:c0:10:cb:ba:f2:c2:53:9a:df:f8:86:c8:f4:
                    ba:0a:a7:43:48:57:50:b0:da:2b:0d:cc:61:38:67:
                    44:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FC:CA:56:EF:F4:A0:EC:54:AB:9B:13:72:C7:CF:3D:44:7D:CC:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a9872aef-9503-3b41-82b2-ac88f334dc71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:2b:78:06:37:e4:ca:db:f9:a2:47:df:04:f4:52:96:81:5b:
         fa:ab:f5:da:97:a1:cd:89:56:c9:51:13:7d:79:2d:61:af:27:
         37:3b:6e:e8:fd:c2:fb:01:1c:97:34:69:ab:2b:e4:12:91:30:
         ce:41:17:70:7c:01:78:64:3c:dc:9a:20:c6:80:5c:48:38:30:
         16:50:00:62:e0:bf:b7:65:ba:d8:d6:5e:0d:2f:35:5d:b4:b3:
         53:61:d2:ee:61:15:8f:fa:e9:25:9a:f8:a5:83:6f:39:4a:b1:
         5f:8a:2f:1a:65:73:65:18:08:fa:69:60:71:ca:7b:17:66:6f:
         4c:81:00:3b:f1:c7:ae:b2:22:bf:26:cf:7c:10:34:d4:aa:9b:
         85:e7:d7:37:a7:bc:74:7b:e2:22:97:24:cd:05:a3:e0:97:b2:
         94:09:3f:3c:70:c0:c5:96:1d:ff:df:82:98:cf:59:f8:90:63:
         7e:9f:90:1d:cb:60:34:ab:63:76:cc:51:1b:59:ee:50:71:68:
         a4:5a:06:57:70:7a:55:cf:fa:60:52:9d:24:b8:34:19:5e:8d:
         bf:2a:04:bf:a4:67:62:02:b1:80:6a:18:cc:d9:b9:84:b7:cf:
         da:e5:ed:01:d5:04:f6:fa:ef:1a:ec:45:e2:99:6c:05:78:88:
         1e:73:de:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9TYx4TGaUXAIbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZDQ5NzIwMjktNTMyZi00ODQwLWI3YzItZTNmYTI2MWE3NzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5WpvljdSxf2leIUUaClaC5bb3RrPaI5IoOo
lLAOUGmcVRNo9ArTf23Ubc/bWlaVrlh9QNMYevwWga8BhLidxL4S23t5UsKnFBzG
b0qSL56M9QEv7smCzt2Ic2pdyhuj6v/SCun4mg0SPCqj0so1XzEjHY0e3HUR1KBt
0mXLHLD9L7A0Q9eUUFwT9nmDkoHdndf399mZXWUxM2dgHQfrx7AucdVcRCpJyRNi
UoFQR+Eyiscoae0/pw/KiHXw0aPNhVYnZubWFHhLzHPDe/+1P6g7G3PdiFIh0H1C
RjBgg6pULMAQy7rywlOa3/iGyPS6CqdDSFdQsNorDcxhOGdEIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD38ylbv9KDsVKubE3LHzz1EfcxYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYTk4NzJhZWYtOTUwMy0z
YjQxLTgyYjItYWM4OGYzMzRkYzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQAn0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAreAY35Mrb+aJH3wT0UpaBW/qr9dqXoc2JVslRE315LWGvJzc7buj9
wvsBHJc0aasr5BKRMM5BF3B8AXhkPNyaIMaAXEg4MBZQAGLgv7dlutjWXg0vNV20
s1Nh0u5hFY/66SWa+KWDbzlKsV+KLxplc2UYCPppYHHKexdmb0yBADvxx66yIr8m
z3wQNNSqm4Xn1zenvHR74iKXJM0Fo+CXspQJPzxwwMWWHf/fgpjPWfiQY36fkB3L
YDSrY3bMURtZ7lBxaKRaBldwelXP+mBSnSS4NBlejb8qBL+kZ2ICsYBqGMzZuYS3
z9rl7QHVBPb67xrsReKZbAV4iB5z3iI=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:54 2024 by rpki-client on console-fra.rpki-client.org