Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/f1acd556-0bb5-3822-b2fc-4a2f303acf52.roa
File:                     f1acd556-0bb5-3822-b2fc-4a2f303acf52.roa (raw, json)
Hash identifier:          D1NNiTLJB1hE+zHf/1EynNfoQPiOzNDDxmO+L+1WgWM=
Subject key identifier:   4E:AB:E1:5C:3D:EC:05:80:76:E6:2C:68:9A:58:53:FC:59:AE:61:4E
Certificate issuer:       /CN=ebee18c5-4e70-47ae-a5d0-702b8fb2916b
Certificate serial:       010D0C9F4328584779A5F83466C2CF944B131440
Authority key identifier: 08:BA:10:3B:00:83:2A:3C:49:0B:6B:D6:F6:7F:30:16:C0:CC:C2:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/f1acd556-0bb5-3822-b2fc-4a2f303acf52.roa
Signing time:             Tue 08 Oct 2024 17:07:10 +0000
ROA not before:           Tue 08 Oct 2024 17:07:10 +0000
ROA not after:            Mon 06 Jan 2025 18:07:10 +0000
asID:                     2698
IP address blocks:        64.113.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:a5:f8:34:66:c2:cf:94:4b:13:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebee18c5-4e70-47ae-a5d0-702b8fb2916b
        Validity
            Not Before: Oct  8 17:07:10 2024 GMT
            Not After : Jan  6 18:07:10 2025 GMT
        Subject: CN=6edb124a-2f83-42c8-b922-dce3ab7fbbc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e7:92:c0:c8:79:3b:06:31:f8:ff:90:48:5c:
                    f8:25:02:5c:e8:2f:99:f0:ca:9e:30:90:42:35:eb:
                    92:ad:e7:f0:fd:1b:52:f9:00:92:17:c6:ce:e3:9c:
                    75:1b:ec:6c:49:81:d0:67:c7:a9:08:0c:fe:c8:44:
                    14:13:18:38:c2:a7:c5:ad:c6:6d:d0:48:96:c6:73:
                    93:68:99:e6:93:76:15:f8:58:5e:02:6d:a7:d6:60:
                    b4:c2:b5:e9:4d:23:80:74:52:51:46:01:16:d9:47:
                    16:51:78:40:4e:56:db:44:8f:5f:af:20:c3:84:31:
                    68:cd:88:65:2d:f7:b7:fb:87:90:7b:92:8c:7c:00:
                    40:51:ff:1f:97:b0:92:bf:ac:7b:2c:10:01:74:ea:
                    63:28:02:ad:e6:ca:fa:09:b0:7b:bd:d4:1c:03:26:
                    e7:09:5b:41:d5:ce:a6:5d:b9:43:93:ab:ab:49:b9:
                    12:33:d2:df:a0:08:40:0a:c9:04:80:19:7a:43:38:
                    8c:23:ab:93:d7:89:1e:69:65:72:16:ac:3e:be:10:
                    f1:31:2d:d0:be:92:7a:18:dc:f4:b6:22:ba:65:f6:
                    b1:da:19:e8:5e:81:b8:ca:5a:41:67:54:8a:f0:5d:
                    26:94:d6:00:41:f3:f2:c6:ee:2e:53:8d:30:f5:39:
                    e9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AB:E1:5C:3D:EC:05:80:76:E6:2C:68:9A:58:53:FC:59:AE:61:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/f1acd556-0bb5-3822-b2fc-4a2f303acf52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.crl

            X509v3 Authority Key Identifier:
                keyid:08:BA:10:3B:00:83:2A:3C:49:0B:6B:D6:F6:7F:30:16:C0:CC:C2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:29:b7:a0:f1:9f:c1:77:1a:eb:fe:f8:16:be:e9:e4:f8:6f:
         95:95:62:33:27:3e:d7:00:cf:87:3f:ce:80:e0:87:58:44:7b:
         c6:cf:d0:59:dc:97:23:4b:51:50:dd:ed:b6:12:7f:79:dd:ad:
         0b:51:e2:90:af:85:c2:98:7f:4e:02:ce:24:b0:ac:6d:92:25:
         67:0d:7e:ab:dc:a6:2e:02:7e:f3:0e:5a:51:3a:e4:9a:23:6d:
         40:c7:41:d2:83:2a:8d:bf:4a:7f:d7:ce:a0:82:64:f2:2e:8a:
         ee:c2:17:61:70:2b:23:de:39:f6:1e:c2:3a:7b:70:26:aa:e2:
         01:a3:c1:85:35:89:c1:d7:6e:78:49:da:30:c9:67:25:65:d0:
         51:3d:04:b8:33:92:a8:e5:60:e3:98:be:6e:8b:b2:4f:c8:fc:
         99:86:3c:0e:46:fc:35:a4:b3:13:49:26:5e:9d:8b:91:c4:50:
         eb:d4:77:d9:60:22:eb:a4:09:93:95:52:d9:dd:e9:cb:b0:3d:
         40:c3:ce:5f:1a:1a:e2:49:8a:9d:f4:43:82:84:7a:54:09:f0:
         52:c0:58:42:36:98:14:39:5e:56:91:81:d9:94:92:39:89:37:
         22:fa:30:7b:46:39:b4:31:57:9c:1b:09:89:76:6b:f7:18:19:
         89:b4:a5:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd5pfg0ZsLPlEsTFEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJlZTE4YzUtNGU3MC00N2FlLWE1ZDAtNzAyYjhmYjI5
MTZiMB4XDTI0MTAwODE3MDcxMFoXDTI1MDEwNjE4MDcxMFowLzEtMCsGA1UEAxMk
NmVkYjEyNGEtMmY4My00MmM4LWI5MjItZGNlM2FiN2ZiYmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlueSwMh5OwYx+P+QSFz4JQJc6C+Z8MqeMJBC
NeuSrefw/RtS+QCSF8bO45x1G+xsSYHQZ8epCAz+yEQUExg4wqfFrcZt0EiWxnOT
aJnmk3YV+FheAm2n1mC0wrXpTSOAdFJRRgEW2UcWUXhATlbbRI9fryDDhDFozYhl
Lfe3+4eQe5KMfABAUf8fl7CSv6x7LBABdOpjKAKt5sr6CbB7vdQcAybnCVtB1c6m
XblDk6urSbkSM9LfoAhACskEgBl6QziMI6uT14keaWVyFqw+vhDxMS3QvpJ6GNz0
tiK6Zfax2hnoXoG4ylpBZ1SK8F0mlNYAQfPyxu4uU40w9Tnp1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE6r4Vw97AWAduYsaJpYU/xZrmFOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lYmVl
MThjNS00ZTcwLTQ3YWUtYTVkMC03MDJiOGZiMjkxNmIvZjFhY2Q1NTYtMGJiNS0z
ODIyLWIyZmMtNGEyZjMwM2FjZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWJlZTE4YzUtNGU3MC00N2FlLWE1
ZDAtNzAyYjhmYjI5MTZiL2ViZWUxOGM1LTRlNzAtNDdhZS1hNWQwLTcwMmI4ZmIy
OTE2Yi5jcmwwHwYDVR0jBBgwFoAUCLoQOwCDKjxJC2vW9n8wFsDMwp0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lYmVlMThjNS00ZTcwLTQ3YWUtYTVkMC03MDJi
OGZiMjkxNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQHFAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQpt6Dxn8F3Guv++Ba+6eT4b5WVYjMnPtcAz4c/zoDgh1hEe8bP0Fnc
lyNLUVDd7bYSf3ndrQtR4pCvhcKYf04CziSwrG2SJWcNfqvcpi4CfvMOWlE65Joj
bUDHQdKDKo2/Sn/XzqCCZPIuiu7CF2FwKyPeOfYewjp7cCaq4gGjwYU1icHXbnhJ
2jDJZyVl0FE9BLgzkqjlYOOYvm6Lsk/I/JmGPA5G/DWksxNJJl6di5HEUOvUd9lg
IuukCZOVUtnd6cuwPUDDzl8aGuJJip30Q4KEelQJ8FLAWEI2mBQ5XlaRgdmUkjmJ
NyL6MHtGObQxV5wbCYl2a/cYGYm0paY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:14 2024 by rpki-client on console-ams.rpki-client.org