Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/dd2015da-82a0-34f3-ad8f-2dcf2b012b47.roa
File:                     dd2015da-82a0-34f3-ad8f-2dcf2b012b47.roa (raw, json)
Hash identifier:          d95bLF5OqkvrZN0AQ++QRTuttzelP5yAENgkaTOhtYk=
Subject key identifier:   81:5D:9D:7A:7B:56:6C:04:3E:8A:89:ED:40:32:60:31:B3:F7:D9:83
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858473D25ECB2DB5ABCBAC7342C00
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/dd2015da-82a0-34f3-ad8f-2dcf2b012b47.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     46080
IP address blocks:        65.51.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:ec:b2:db:5a:bc:ba:c7:34:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=c2be707f-e1da-4787-ab91-42a9780c1ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:96:08:c6:cf:eb:7f:fd:4a:84:07:1d:fb:17:
                    a4:c5:17:26:7b:18:db:e6:7d:81:fc:2c:86:4a:28:
                    ad:5b:2f:ea:26:9e:35:a3:9b:a4:06:cc:1f:66:31:
                    09:4b:5d:99:2b:40:3f:05:52:18:aa:2d:41:70:d3:
                    1f:c3:9b:c1:91:42:0b:3b:57:da:ff:83:06:28:6d:
                    59:bf:4f:91:55:95:fa:1a:71:02:71:7f:7d:cd:2b:
                    0e:64:2d:9c:e5:dd:67:6f:a4:cb:dc:b2:0c:17:d3:
                    5c:d3:d1:d9:fe:9e:81:5d:cc:b3:ce:a0:c5:3b:ce:
                    24:13:01:03:cc:b1:65:5d:9f:53:98:03:e2:4e:e8:
                    d9:67:e9:e3:45:47:af:59:65:29:f0:10:70:62:41:
                    51:5a:ba:e4:d7:7b:59:9d:cd:1a:de:68:7f:87:5c:
                    5f:d7:3d:12:e5:28:60:a0:36:07:a7:50:d0:a5:38:
                    68:5f:ab:1a:d4:82:86:3f:5b:30:38:5e:8c:05:b7:
                    e5:d5:2b:a4:54:a8:4b:2a:c6:4e:86:83:2a:e6:4d:
                    38:c3:13:bd:9e:63:b2:0a:7f:c7:70:c7:24:6e:48:
                    a6:b5:ed:da:40:1e:a3:fe:3c:8c:30:12:98:81:47:
                    86:a3:27:67:07:01:44:8f:aa:83:6d:c0:47:76:e7:
                    9e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5D:9D:7A:7B:56:6C:04:3E:8A:89:ED:40:32:60:31:B3:F7:D9:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/dd2015da-82a0-34f3-ad8f-2dcf2b012b47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:f5:72:61:56:58:97:84:9d:33:e0:da:e6:92:30:93:8f:0b:
         d5:6d:8a:f8:98:cb:46:66:6e:e0:15:72:c7:7a:e2:97:77:75:
         92:37:b4:68:4d:68:82:72:f2:33:f0:0e:f9:f4:0d:de:63:b1:
         ae:de:e7:30:43:08:f5:c0:0d:e2:a8:4e:8c:25:71:fc:9e:36:
         a5:24:7f:ff:a3:5a:fb:98:99:9d:29:ed:bf:1b:5b:2d:49:11:
         91:a9:ba:bf:ef:ac:da:42:33:67:05:bf:2c:fe:4c:eb:3c:83:
         9d:06:f0:7d:ad:a8:81:70:f7:71:08:7a:e5:d0:9a:e0:e3:a0:
         f2:52:4f:52:0a:06:3a:ad:5b:01:1a:9f:46:43:15:b5:22:c4:
         59:9b:9d:f4:bb:84:2d:5b:f8:17:36:c5:4d:de:04:f2:36:d1:
         ce:1c:fc:f5:c5:05:8e:de:f2:0a:39:25:d6:cf:97:47:b9:52:
         df:76:9c:63:1b:79:36:e3:c3:ef:bb:41:76:5b:86:a9:c7:ca:
         8b:f1:26:5c:19:10:bf:cb:55:5b:bb:92:2f:8d:b0:a4:5a:2f:
         72:ed:a1:fd:a0:f6:c6:5b:3c:57:14:b9:16:6a:e7:1e:cb:c8:
         0e:7a:8d:8d:ed:18:f2:58:ac:6c:14:cc:da:34:9a:49:f4:ce:
         f8:63:e3:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc9Jeyy21q8usc0LAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI0MDkxNzAxMDAzMVoXDTI0MTIxNjAyMDAzMVowLzEtMCsGA1UEAxMk
YzJiZTcwN2YtZTFkYS00Nzg3LWFiOTEtNDJhOTc4MGMxZmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupYIxs/rf/1KhAcd+xekxRcmexjb5n2B/CyG
SiitWy/qJp41o5ukBswfZjEJS12ZK0A/BVIYqi1BcNMfw5vBkUILO1fa/4MGKG1Z
v0+RVZX6GnECcX99zSsOZC2c5d1nb6TL3LIMF9Nc09HZ/p6BXcyzzqDFO84kEwED
zLFlXZ9TmAPiTujZZ+njRUevWWUp8BBwYkFRWrrk13tZnc0a3mh/h1xf1z0S5Shg
oDYHp1DQpThoX6sa1IKGP1swOF6MBbfl1SukVKhLKsZOhoMq5k04wxO9nmOyCn/H
cMckbkimte3aQB6j/jyMMBKYgUeGoydnBwFEj6qDbcBHdueevQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIFdnXp7VmwEPoqJ7UAyYDGz99mDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvZGQyMDE1ZGEtODJhMC0z
NGYzLWFkOGYtMmRjZjJiMDEyYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTNUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANH1cmFWWJeEnTPg2uaSMJOPC9VtiviYy0ZmbuAVcsd64pd3dZI3tGhN
aIJy8jPwDvn0Dd5jsa7e5zBDCPXADeKoTowlcfyeNqUkf/+jWvuYmZ0p7b8bWy1J
EZGpur/vrNpCM2cFvyz+TOs8g50G8H2tqIFw93EIeuXQmuDjoPJST1IKBjqtWwEa
n0ZDFbUixFmbnfS7hC1b+Bc2xU3eBPI20c4c/PXFBY7e8go5JdbPl0e5Ut92nGMb
eTbjw++7QXZbhqnHyovxJlwZEL/LVVu7ki+NsKRaL3Ltof2g9sZbPFcUuRZq5x7L
yA56jY3tGPJYrGwUzNo0mkn0zvhj4+U=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:31 2024 by rpki-client on console-fra.rpki-client.org