Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/45110784-3654-348c-8d00-cb012d90eb3f.roa
File:                     45110784-3654-348c-8d00-cb012d90eb3f.roa (raw, json)
Hash identifier:          DrFnT2kf3jsCJnxGH8xq/AhrJd1jihxzQXxdcmXXRXM=
Subject key identifier:   A3:CD:B8:E9:11:FE:B6:9C:ED:EE:6D:1B:41:C1:59:16:51:41:85:8C
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F4328584511B58C4AC767486B128B3F80
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/45110784-3654-348c-8d00-cb012d90eb3f.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     396319
IP address blocks:        64.140.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:8c:4a:c7:67:48:6b:12:8b:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=65979fb5-9712-4797-9fdd-a7c03079c64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dd:84:55:a9:0d:bd:a0:f8:bd:46:48:39:c2:
                    69:d1:f3:1f:cd:92:4c:6b:7e:67:7c:d9:da:e4:74:
                    54:95:fe:7f:63:71:e7:1c:8e:af:d3:75:e8:7c:10:
                    45:75:24:cc:ff:11:c9:de:9e:ee:29:a4:bb:09:1c:
                    58:62:43:72:cf:76:23:e1:31:66:14:de:a8:ab:1c:
                    27:69:27:00:d7:08:78:ed:db:91:bc:16:7e:5d:04:
                    aa:04:15:6d:b4:c2:c8:62:9c:f8:51:77:b0:af:3d:
                    a5:50:8c:b1:03:a2:c6:83:10:fc:80:39:96:57:4a:
                    e3:ee:69:8f:63:be:9d:1e:9c:56:ef:ab:fd:81:f0:
                    b9:cd:16:b3:d7:a5:40:12:59:86:e9:39:4a:06:df:
                    cf:23:94:45:e0:bc:d8:59:22:f8:d1:f2:2e:3b:05:
                    87:44:e6:94:db:9f:e5:3b:b7:67:5d:1d:8c:a5:45:
                    85:06:aa:fd:e5:d3:24:b3:16:1f:3c:1d:03:9a:56:
                    42:0e:f6:e8:57:ef:58:06:53:30:5f:cc:a8:0b:5c:
                    a9:8a:31:d8:ed:f5:51:92:b2:c9:06:80:b5:8f:90:
                    25:f2:af:37:37:30:26:e0:cd:19:fe:15:33:32:5b:
                    75:8f:7b:aa:2c:d6:cb:1e:c6:8e:16:17:3d:73:7b:
                    62:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CD:B8:E9:11:FE:B6:9C:ED:EE:6D:1B:41:C1:59:16:51:41:85:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/45110784-3654-348c-8d00-cb012d90eb3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.140.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:2f:98:43:c0:89:b2:c3:a0:07:cf:43:f6:b7:74:7f:7e:cf:
         86:71:a7:4a:36:6a:e5:a0:25:4c:12:ba:6b:c9:d6:43:11:69:
         1e:63:f2:14:ec:85:a7:3d:85:02:45:b3:cb:78:75:45:46:d7:
         bf:d8:a3:a8:f8:c0:ba:ec:eb:52:1a:f6:fd:f9:e4:a1:d8:d3:
         aa:88:a8:90:be:03:01:cb:49:1e:75:0b:f4:8a:ec:83:b0:fa:
         a2:36:da:bd:36:bf:9f:58:66:22:a8:f0:4d:3e:00:e9:74:dc:
         6a:f3:94:ec:aa:c5:f4:d7:4b:10:c9:f5:f4:61:2a:76:c7:30:
         ba:82:1b:8d:ac:29:3f:fc:a6:7e:44:fb:1f:d5:a9:6b:36:ce:
         f7:50:ce:e3:b4:a7:09:42:f2:0d:b3:f2:07:b1:c4:bb:90:48:
         bf:11:90:e3:85:c5:f6:74:96:e7:26:49:2a:1d:8d:4c:8e:0a:
         9c:57:62:7b:c3:fa:9a:57:41:32:f8:90:8c:3a:03:0a:63:ea:
         11:35:35:e1:36:ed:2d:ed:eb:0e:04:6e:91:6c:3d:d3:ba:a5:
         f7:92:0c:b5:65:18:e2:97:ae:14:68:15:55:47:f2:24:66:4f:
         7d:68:aa:bb:a4:a8:b2:59:27:25:51:77:db:07:74:95:7b:50:
         f5:b3:28:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEURtYxKx2dIaxKLP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjODViYTQtOGQ3Mi00OGVkLWExNjYtYTc2ZGMyZjA0
Mjg3MB4XDTI0MDMwMjAyMDAyNloXDTI0MDUzMTAxMDAyNlowLzEtMCsGA1UEAxMk
NjU5NzlmYjUtOTcxMi00Nzk3LTlmZGQtYTdjMDMwNzljNjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN2EVakNvaD4vUZIOcJp0fMfzZJMa35nfNna
5HRUlf5/Y3HnHI6v03XofBBFdSTM/xHJ3p7uKaS7CRxYYkNyz3Yj4TFmFN6oqxwn
aScA1wh47duRvBZ+XQSqBBVttMLIYpz4UXewrz2lUIyxA6LGgxD8gDmWV0rj7mmP
Y76dHpxW76v9gfC5zRaz16VAElmG6TlKBt/PI5RF4LzYWSL40fIuOwWHROaU25/l
O7dnXR2MpUWFBqr95dMksxYfPB0DmlZCDvboV+9YBlMwX8yoC1ypijHY7fVRkrLJ
BoC1j5Al8q83NzAm4M0Z/hUzMlt1j3uqLNbLHsaOFhc9c3tiBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKPNuOkR/rac7e5tG0HBWRZRQYWMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4
NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZkYzJmMDQyODcvNDUxMTA3ODQtMzY1NC0z
NDhjLThkMDAtY2IwMTJkOTBlYjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWZjODViYTQtOGQ3Mi00OGVkLWEx
NjYtYTc2ZGMyZjA0Mjg3LzFmYzg1YmE0LThkNzItNDhlZC1hMTY2LWE3NmRjMmYw
NDI4Ny5jcmwwHwYDVR0jBBgwFoAUEbxdAebJG/t/I+XSIpHWtCikkgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZk
YzJmMDQyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQIyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABYvmEPAibLDoAfPQ/a3dH9+z4Zxp0o2auWgJUwSumvJ1kMRaR5j8hTs
hac9hQJFs8t4dUVG17/Yo6j4wLrs61Ia9v355KHY06qIqJC+AwHLSR51C/SK7IOw
+qI22r02v59YZiKo8E0+AOl03GrzlOyqxfTXSxDJ9fRhKnbHMLqCG42sKT/8pn5E
+x/VqWs2zvdQzuO0pwlC8g2z8gexxLuQSL8RkOOFxfZ0lucmSSodjUyOCpxXYnvD
+ppXQTL4kIw6Awpj6hE1NeE27S3t6w4EbpFsPdO6pfeSDLVlGOKXrhRoFVVH8iRm
T31oqrukqLJZJyVRd9sHdJV7UPWzKD0=
-----END CERTIFICATE-----
Generated at Thu May 2 04:27:46 2024 by rpki-client on console-fra.rpki-client.org