Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/89ef3538-cbbf-37c1-9d17-f583f622832a.roa
File:                     89ef3538-cbbf-37c1-9d17-f583f622832a.roa (raw, json)
Hash identifier:          vGsgBuMa2NQZkGPNtNy18OyCvlgEF07sZA2RSN25iGk=
Subject key identifier:   01:8B:AD:4D:5A:3A:E7:84:24:2D:51:4F:F3:4D:97:36:18:32:BB:A6
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285847643B6F1C63ADFC8859C59388
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/89ef3538-cbbf-37c1-9d17-f583f622832a.roa
Signing time:             Tue 01 Oct 2024 01:00:31 +0000
ROA not before:           Tue 01 Oct 2024 01:00:31 +0000
ROA not after:            Mon 30 Dec 2024 02:00:31 +0000
asID:                     174
IP address blocks:        64.40.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:64:3b:6f:1c:63:ad:fc:88:59:c5:93:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Oct  1 01:00:31 2024 GMT
            Not After : Dec 30 02:00:31 2024 GMT
        Subject: CN=a9ed6356-eed1-482d-b8d9-5ec53e9310d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c4:1e:d7:bf:53:2e:e1:9e:65:97:70:80:c3:
                    ab:a9:d3:e2:bb:3b:9a:96:14:f3:9b:89:18:99:01:
                    39:3a:97:7e:a3:46:d2:1d:bb:dc:ca:27:cf:44:17:
                    e3:df:cc:21:8e:44:b5:17:69:5d:82:e7:ce:39:00:
                    99:37:b0:cd:51:5f:de:8b:ef:bd:5f:e6:fe:ae:0a:
                    8d:0e:9a:b8:44:c0:18:c5:ab:46:e0:91:d0:79:33:
                    8b:e7:ab:a3:1f:bb:f2:62:e1:53:dd:0b:69:cf:b4:
                    1d:a9:25:e9:b2:83:0e:e1:09:24:9d:29:64:db:4a:
                    5e:bb:b7:43:0e:13:88:f7:63:7e:a3:5a:ae:3e:f0:
                    de:49:5d:98:93:4d:ab:35:17:9a:9c:5e:e6:e9:de:
                    c7:60:9f:25:d8:ea:2d:cd:83:f8:6b:1f:ab:ac:a9:
                    a4:ae:c1:81:94:cb:ba:65:f0:e5:68:74:89:16:13:
                    1e:36:91:04:77:a1:b1:d5:cc:a9:39:ec:b5:e4:d1:
                    c6:99:ef:0f:3e:81:15:b4:28:57:5f:98:c6:3e:2c:
                    b0:77:bd:0a:8b:d9:50:9e:11:a7:d5:a6:26:d5:c2:
                    5c:00:84:c3:ac:70:ca:52:57:d9:6d:86:82:0f:f3:
                    96:a8:ed:42:05:d6:09:a6:e6:b4:ea:d0:b9:c2:ad:
                    c6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8B:AD:4D:5A:3A:E7:84:24:2D:51:4F:F3:4D:97:36:18:32:BB:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/89ef3538-cbbf-37c1-9d17-f583f622832a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:87:3c:58:55:9a:54:44:be:ec:6d:68:ba:8f:c8:87:d5:70:
         1d:37:45:52:65:7e:37:3d:e2:a1:27:ac:ad:68:28:30:d4:0d:
         60:13:e3:b9:8c:5d:79:e1:e0:48:a8:2b:1d:c1:16:5b:2c:36:
         b0:0f:97:8e:98:21:22:fc:7b:93:2d:0c:52:a1:09:8f:b0:93:
         31:f8:3f:17:db:41:48:98:48:8d:13:9d:5b:84:e5:d2:cf:27:
         4d:35:1c:87:b6:77:75:a4:82:97:0d:9b:e3:0e:ee:ce:90:ed:
         82:9e:bc:5d:55:df:cf:5c:be:81:09:d0:3c:ab:66:da:7e:87:
         99:41:04:71:b9:56:03:62:0f:e2:11:63:f4:da:db:6f:21:73:
         a3:b2:30:4b:ca:6f:9c:37:9d:dd:57:67:6c:60:ef:51:13:de:
         3b:a9:87:d6:99:c2:e9:16:c3:2b:15:84:3d:cc:47:d8:ab:73:
         ca:d7:1a:b5:36:68:24:c9:bd:b0:2d:5c:d2:28:e5:62:f0:fc:
         a8:40:e9:1a:d1:f7:85:df:47:80:35:c1:9d:5d:97:19:4d:1b:
         02:2e:4c:4a:fe:92:b9:5f:ae:cc:c1:a7:52:0c:54:15:00:41:
         4d:60:bb:95:c7:53:fa:1f:23:b0:45:99:9f:34:c7:55:b2:9a:
         9b:3e:f2:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdkO28cY638iFnFk4gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTI0MTAwMTAxMDAzMVoXDTI0MTIzMDAyMDAzMVowLzEtMCsGA1UEAxMk
YTllZDYzNTYtZWVkMS00ODJkLWI4ZDktNWVjNTNlOTMxMGQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28Qe179TLuGeZZdwgMOrqdPiuzualhTzm4kY
mQE5Opd+o0bSHbvcyifPRBfj38whjkS1F2ldgufOOQCZN7DNUV/ei++9X+b+rgqN
Dpq4RMAYxatG4JHQeTOL56ujH7vyYuFT3Qtpz7QdqSXpsoMO4QkknSlk20peu7dD
DhOI92N+o1quPvDeSV2Yk02rNReanF7m6d7HYJ8l2OotzYP4ax+rrKmkrsGBlMu6
ZfDlaHSJFhMeNpEEd6Gx1cypOey15NHGme8PPoEVtChXX5jGPiywd70Ki9lQnhGn
1aYm1cJcAITDrHDKUlfZbYaCD/OWqO1CBdYJpua06tC5wq3GswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAGLrU1aOueEJC1RT/NNlzYYMrumMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvODllZjM1MzgtY2JiZi0z
N2MxLTlkMTctZjU4M2Y2MjI4MzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCiXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFmHPFhVmlREvuxtaLqPyIfVcB03RVJlfjc94qEnrK1oKDDUDWAT47mM
XXnh4EioKx3BFlssNrAPl46YISL8e5MtDFKhCY+wkzH4PxfbQUiYSI0TnVuE5dLP
J001HIe2d3WkgpcNm+MO7s6Q7YKevF1V389cvoEJ0DyrZtp+h5lBBHG5VgNiD+IR
Y/Ta228hc6OyMEvKb5w3nd1XZ2xg71ET3juph9aZwukWwysVhD3MR9irc8rXGrU2
aCTJvbAtXNIo5WLw/KhA6RrR94XfR4A1wZ1dlxlNGwIuTEr+krlfrszBp1IMVBUA
QU1gu5XHU/ofI7BFmZ80x1Wymps+8qM=
-----END CERTIFICATE-----
Generated at Tue Oct 22 18:50:12 2024 by rpki-client on console-ams.rpki-client.org