Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4db4586b-e2bb-3bc0-a751-372986c4f9f1.roa
File:                     4db4586b-e2bb-3bc0-a751-372986c4f9f1.roa (raw, json)
Hash identifier:          cPzapurzMhHw6GaihWhpTIK27vKSvK+ioWuCiea0Xc4=
Subject key identifier:   60:85:0F:22:82:5D:9A:12:76:68:3B:3D:D3:9F:D6:6E:6F:F9:A0:7F
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F43285844F8955395ED2FB00F9D8A7880
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4db4586b-e2bb-3bc0-a751-372986c4f9f1.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     398391
IP address blocks:        64.226.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:53:95:ed:2f:b0:0f:9d:8a:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=382770b1-08a5-4bf0-9a52-e120c6e3c8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:44:35:03:14:2e:49:90:c3:3a:34:00:df:fd:
                    b7:5b:9a:63:6f:13:c9:3f:4d:f6:b7:59:d1:9e:14:
                    b2:db:c7:a4:00:32:bb:56:c2:ea:f4:3f:f4:a0:7b:
                    18:46:29:2c:83:b8:81:66:96:00:3b:44:5b:1b:15:
                    5a:39:26:3e:b8:72:71:a9:81:64:8f:61:1e:91:1d:
                    06:ca:15:6f:bb:63:bb:bc:87:bd:78:c9:38:43:d3:
                    49:3d:69:48:57:30:0a:68:70:6d:08:0a:29:63:2d:
                    b3:b0:04:8b:55:84:37:80:fc:b8:c7:de:f6:79:9c:
                    e7:e2:a1:f9:74:5f:eb:e9:e6:19:72:6f:85:1c:63:
                    75:7a:d1:92:40:0b:c9:7b:e2:53:74:b8:5d:f9:6f:
                    a6:5a:1e:d2:d3:34:16:ed:79:df:d0:6e:f2:3a:34:
                    00:7c:35:55:b6:a7:6b:31:04:00:12:51:33:72:3b:
                    90:29:30:5e:7b:60:0d:69:90:a0:78:53:ee:14:71:
                    f7:5b:a6:8d:5f:dc:de:4f:08:75:a1:3c:56:86:41:
                    50:a7:c1:12:ce:5c:f1:74:61:3a:54:89:fb:59:3b:
                    f6:74:a7:a5:19:71:5c:01:0c:a0:7b:7f:3a:1a:eb:
                    e8:52:f4:1e:b8:51:91:4a:47:a7:77:20:3a:5c:d4:
                    c1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:85:0F:22:82:5D:9A:12:76:68:3B:3D:D3:9F:D6:6E:6F:F9:A0:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4db4586b-e2bb-3bc0-a751-372986c4f9f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c1:0c:0c:75:eb:d7:b9:81:41:39:36:dd:2d:5c:1b:49:72:
         9e:44:e8:04:a0:a0:ce:4f:06:f2:6c:c7:63:23:85:62:a9:fc:
         15:d8:cb:b3:a3:62:c8:b0:29:a1:8e:a8:8c:e1:b7:5c:6a:39:
         98:2f:57:b2:0c:89:32:5a:bd:99:4d:01:e9:c3:35:dd:08:7d:
         01:26:0b:83:fb:d0:9b:35:6b:85:49:80:59:20:93:48:b7:7e:
         3a:dd:38:bc:c1:a5:5e:ea:2f:08:a5:37:0c:36:b2:5c:e2:23:
         84:af:ed:a2:69:5a:73:bf:e6:34:cf:50:a4:13:73:70:8d:4b:
         ec:a7:d4:fe:57:ee:0c:08:fb:81:2c:d8:e0:73:66:23:31:82:
         a8:44:46:09:a7:98:34:88:7b:7e:30:5e:14:2a:1a:b4:32:2d:
         48:09:5a:01:bc:5c:95:9e:ed:df:70:d8:1b:ed:7f:63:b4:02:
         a8:73:b0:55:b3:4b:59:1f:13:95:e2:86:6e:69:c1:61:11:46:
         00:6e:5e:32:d6:47:48:d3:3b:17:2c:31:fd:ab:49:ae:d1:53:
         7e:84:41:16:f9:85:3a:a9:58:b0:70:c9:c7:46:6f:71:47:a5:
         48:6f:f2:e6:4b:21:3d:26:80:05:b3:44:ff:67:fe:ab:b1:6e:
         18:3b:4e:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET4lVOV7S+wD52KeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQyMzk4MjUtZDNlNi00YjFmLWEzMzktZjczZjJkYjg5
ZWU5MB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk
MzgyNzcwYjEtMDhhNS00YmYwLTlhNTItZTEyMGM2ZTNjOGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykQ1AxQuSZDDOjQA3/23W5pjbxPJP032t1nR
nhSy28ekADK7VsLq9D/0oHsYRiksg7iBZpYAO0RbGxVaOSY+uHJxqYFkj2EekR0G
yhVvu2O7vIe9eMk4Q9NJPWlIVzAKaHBtCAopYy2zsASLVYQ3gPy4x972eZzn4qH5
dF/r6eYZcm+FHGN1etGSQAvJe+JTdLhd+W+mWh7S0zQW7Xnf0G7yOjQAfDVVtqdr
MQQAElEzcjuQKTBee2ANaZCgeFPuFHH3W6aNX9zeTwh1oTxWhkFQp8ESzlzxdGE6
VIn7WTv2dKelGXFcAQyge386GuvoUvQeuFGRSkendyA6XNTB8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGCFDyKCXZoSdmg7PdOf1m5v+aB/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDIz
OTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNmMmRiODllZTkvNGRiNDU4NmItZTJiYi0z
YmMwLWE3NTEtMzcyOTg2YzRmOWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQyMzk4MjUtZDNlNi00YjFmLWEz
MzktZjczZjJkYjg5ZWU5LzY0MjM5ODI1LWQzZTYtNGIxZi1hMzM5LWY3M2YyZGI4
OWVlOS5jcmwwHwYDVR0jBBgwFoAUiYq+4lrGIGWwmxKaCUUuy2q5rIMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDIzOTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNm
MmRiODllZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOKDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvBDAx169e5gUE5Nt0tXBtJcp5E6ASgoM5PBvJsx2MjhWKp/BXYy7Oj
YsiwKaGOqIzht1xqOZgvV7IMiTJavZlNAenDNd0IfQEmC4P70Js1a4VJgFkgk0i3
fjrdOLzBpV7qLwilNww2slziI4Sv7aJpWnO/5jTPUKQTc3CNS+yn1P5X7gwI+4Es
2OBzZiMxgqhERgmnmDSIe34wXhQqGrQyLUgJWgG8XJWe7d9w2Bvtf2O0AqhzsFWz
S1kfE5Xihm5pwWERRgBuXjLWR0jTOxcsMf2rSa7RU36EQRb5hTqpWLBwycdGb3FH
pUhv8uZLIT0mgAWzRP9n/quxbhg7TrY=
-----END CERTIFICATE-----
Generated at Thu Mar 28 16:19:51 2024 by rpki-client on console-ams.rpki-client.org