Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/93309eab-242f-3071-8cfb-8f8117adca76.roa
File:                     93309eab-242f-3071-8cfb-8f8117adca76.roa (raw, json)
Hash identifier:          cY5Z5olFHYSAGeC0+lVu+0KfPq9gdgJYLDzKed0smk0=
Subject key identifier:   A0:28:BD:AD:F6:F5:73:12:60:D5:60:D4:39:77:C1:92:4A:CE:84:AA
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584738F5FD40F4DFAE4D2A5A4400
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/93309eab-242f-3071-8cfb-8f8117adca76.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     398391
IP address blocks:        64.226.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f5:fd:40:f4:df:ae:4d:2a:5a:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=f5406e6b-2e1c-4ac1-a646-5aa333eb491b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:76:e8:62:89:1a:3a:01:bd:24:be:73:19:
                    b0:62:57:5d:7e:a1:c1:bc:f9:28:11:55:15:d4:fb:
                    7b:b7:e2:ff:78:ed:58:86:9a:ed:29:8c:73:83:07:
                    c1:59:e3:bb:bf:56:b6:80:f5:a1:d8:8d:18:d2:05:
                    6c:e0:c8:8e:52:e6:d7:6b:aa:28:42:0b:1b:d5:32:
                    63:1e:ae:0f:4f:6b:0b:e1:77:c5:08:fc:f6:02:8c:
                    6c:9d:0a:89:bf:1b:c0:92:5d:09:bc:47:b3:35:30:
                    f9:2e:4e:9a:bb:7f:04:12:08:f3:09:57:1e:ea:3c:
                    a1:42:62:6d:8a:9f:6a:47:44:90:89:2f:74:79:ab:
                    24:50:89:e6:e2:c9:cd:3f:56:45:d6:07:fe:0b:28:
                    15:c2:75:2a:ae:19:ea:a2:a4:9b:b2:49:85:1b:b0:
                    bb:16:f9:e8:a5:b4:7f:bc:c3:59:11:7f:a2:90:ae:
                    d0:23:16:fe:44:6e:72:62:09:b6:7c:59:7e:d3:58:
                    10:f1:9d:6a:79:3f:a2:c2:b2:73:b7:a4:70:60:75:
                    34:0a:aa:5a:77:5e:d3:ea:a8:bf:59:d4:22:5c:03:
                    9c:4e:f2:c0:13:b6:0c:37:73:d4:f0:58:b7:75:a1:
                    66:2d:6c:59:c2:53:9c:e7:14:92:09:21:a5:97:a3:
                    08:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:28:BD:AD:F6:F5:73:12:60:D5:60:D4:39:77:C1:92:4A:CE:84:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/93309eab-242f-3071-8cfb-8f8117adca76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2c:b2:3b:ca:b5:55:fa:96:de:be:a9:a8:d0:b7:4c:c7:7e:
         c9:d8:20:76:57:a8:c6:b8:c0:a8:b9:05:44:f8:50:72:76:d8:
         5d:c8:83:cd:97:1f:ce:74:83:7f:7b:f8:b9:cf:d8:74:86:c4:
         21:1a:14:ec:67:8c:74:b4:bc:3d:24:6d:da:93:bf:d9:a8:4f:
         9f:99:32:c9:04:c9:eb:21:63:91:ca:e3:5d:2d:e7:ce:c7:f2:
         39:b3:d6:8a:a6:04:77:08:66:b0:79:2a:4d:1b:6c:fa:0b:af:
         06:29:ac:5d:d0:82:54:42:e3:eb:3b:20:c8:49:dc:79:6f:2e:
         80:a2:64:e4:c0:98:f8:36:ed:eb:7a:0f:92:df:46:d4:37:b9:
         2d:a1:e5:7d:0f:71:8d:79:45:c4:f7:8d:dc:df:7d:ca:45:ec:
         9f:f3:50:e9:82:33:fd:9e:53:29:e9:da:1e:a8:e6:10:ce:ad:
         3d:50:2c:56:c3:57:ce:b1:a7:12:4e:01:c5:9f:da:b7:3f:f6:
         a4:f6:9f:a0:21:3f:6c:11:91:66:43:d2:ed:19:79:83:be:a4:
         af:7b:1f:e0:66:de:19:44:25:85:6e:4e:d4:81:f7:d8:76:67:
         db:7d:27:37:8a:fc:b0:28:56:5c:0c:51:b2:c4:0e:bd:af:c2:
         3e:c3:52:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc49f1A9N+uTSpaRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQyMzk4MjUtZDNlNi00YjFmLWEzMzktZjczZjJkYjg5
ZWU5MB4XDTI0MDkxNTEzMDA0MloXDTI0MTIxNDE0MDA0MlowLzEtMCsGA1UEAxMk
ZjU0MDZlNmItMmUxYy00YWMxLWE2NDYtNWFhMzMzZWI0OTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc526GKJGjoBvSS+cxmwYlddfqHBvPkoEVUV
1Pt7t+L/eO1YhprtKYxzgwfBWeO7v1a2gPWh2I0Y0gVs4MiOUubXa6ooQgsb1TJj
Hq4PT2sL4XfFCPz2AoxsnQqJvxvAkl0JvEezNTD5Lk6au38EEgjzCVce6jyhQmJt
ip9qR0SQiS90easkUInm4snNP1ZF1gf+CygVwnUqrhnqoqSbskmFG7C7FvnopbR/
vMNZEX+ikK7QIxb+RG5yYgm2fFl+01gQ8Z1qeT+iwrJzt6RwYHU0Cqpad17T6qi/
WdQiXAOcTvLAE7YMN3PU8Fi3daFmLWxZwlOc5xSSCSGll6MIWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKAova329XMSYNVg1Dl3wZJKzoSqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDIz
OTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNmMmRiODllZTkvOTMzMDllYWItMjQyZi0z
MDcxLThjZmItOGY4MTE3YWRjYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQyMzk4MjUtZDNlNi00YjFmLWEz
MzktZjczZjJkYjg5ZWU5LzY0MjM5ODI1LWQzZTYtNGIxZi1hMzM5LWY3M2YyZGI4
OWVlOS5jcmwwHwYDVR0jBBgwFoAUiYq+4lrGIGWwmxKaCUUuy2q5rIMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDIzOTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNm
MmRiODllZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOKLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEossjvKtVX6lt6+qajQt0zHfsnYIHZXqMa4wKi5BUT4UHJ22F3Ig82X
H850g397+LnP2HSGxCEaFOxnjHS0vD0kbdqTv9moT5+ZMskEyeshY5HK410t587H
8jmz1oqmBHcIZrB5Kk0bbPoLrwYprF3QglRC4+s7IMhJ3HlvLoCiZOTAmPg27et6
D5LfRtQ3uS2h5X0PcY15RcT3jdzffcpF7J/zUOmCM/2eUynp2h6o5hDOrT1QLFbD
V86xpxJOAcWf2rc/9qT2n6AhP2wRkWZD0u0ZeYO+pK97H+Bm3hlEJYVuTtSB99h2
Z9t9JzeK/LAoVlwMUbLEDr2vwj7DUmo=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:57 2024 by rpki-client on console-fra.rpki-client.org