Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/f4139484-07ff-32d5-af60-25a957fc5dbd.roa
File:                     f4139484-07ff-32d5-af60-25a957fc5dbd.roa (raw, json)
Hash identifier:          dmgGm+67tUBibXCMf+nYmO1wzMdjYZALm9XtXeYuUkE=
Subject key identifier:   86:23:6E:B0:11:E6:36:AC:DE:4F:BE:F5:AC:24:1F:34:27:FC:CA:FC
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F43285847CA3F845149397177AF3ABBC0
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/f4139484-07ff-32d5-af60-25a957fc5dbd.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     50167
IP address blocks:        65.110.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:84:51:49:39:71:77:af:3a:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=38cc2332-fecb-43b5-921e-97f60d9f357b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ab:dd:29:53:5b:c3:56:6b:6a:f4:cb:a9:b9:
                    9e:38:6a:b3:66:0b:70:de:f4:b9:61:c0:03:ac:3b:
                    17:66:52:03:1b:62:21:2c:ee:3c:b0:8b:aa:f8:98:
                    5a:b0:78:c4:5e:ac:79:93:2b:61:22:09:44:b7:1d:
                    65:94:fc:cc:eb:bc:ae:66:87:46:12:e3:e2:fa:c5:
                    21:58:8d:81:03:c4:3b:86:13:b6:2d:51:27:8c:2b:
                    11:44:cd:5f:80:8d:51:a4:db:d1:4b:60:c7:4d:63:
                    98:36:0a:4a:cd:64:41:f2:e4:e7:e3:8b:e4:2b:9e:
                    0c:bf:4e:21:d5:5a:24:bd:0a:1b:b7:19:c8:36:e0:
                    5e:79:96:c3:1b:13:61:a8:8a:20:39:e6:be:bf:23:
                    52:75:fc:a2:bc:21:54:1b:dc:34:13:a0:cc:05:c6:
                    3a:db:b5:32:c5:e9:fb:ae:6b:7d:fe:8c:dc:5a:42:
                    c1:60:dc:50:1b:31:49:92:b0:38:6a:0d:9f:3b:1a:
                    d8:1b:92:67:74:a0:c4:45:7f:3b:cc:89:bc:89:e6:
                    37:29:57:80:8a:5a:3f:4a:ec:28:91:df:2a:53:d7:
                    44:7a:65:2a:c1:55:a3:bb:6d:1f:b0:4b:42:60:d3:
                    23:a7:06:05:7b:8e:d4:5b:79:87:44:b0:d4:30:7f:
                    4a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:23:6E:B0:11:E6:36:AC:DE:4F:BE:F5:AC:24:1F:34:27:FC:CA:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/f4139484-07ff-32d5-af60-25a957fc5dbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c9:ec:51:ff:f5:ce:81:01:2d:1d:77:bb:11:13:0f:23:a3:
         a8:3c:9b:20:53:4f:b9:ab:6b:5d:aa:95:4c:fb:ec:13:94:cc:
         91:3c:44:a4:a2:b9:b6:1b:b1:fc:84:28:50:17:84:a6:36:bd:
         f8:e7:cd:27:97:89:6e:dc:bd:ca:0f:02:f3:50:23:ce:ad:17:
         2b:e6:00:c7:82:6a:7e:9a:b9:ce:3c:47:23:19:8d:11:36:4b:
         ea:d5:4d:f1:dc:3e:33:d8:2b:60:38:03:ab:fc:61:1d:3d:9f:
         4e:05:44:e5:69:34:97:1e:1d:62:23:21:27:3a:c8:54:e0:1b:
         86:20:d8:cb:9d:f6:38:4d:61:65:8b:2a:68:02:ef:0e:14:9a:
         f4:9f:7e:db:21:1a:e5:64:0d:ae:37:23:97:3e:2a:34:4f:0b:
         5e:47:1e:e9:87:c5:28:9f:15:af:bd:3a:d6:47:0d:8b:2d:dd:
         60:ff:5e:e7:42:fe:48:96:ef:3b:36:ab:14:a9:f5:33:b5:f8:
         3f:6d:ad:bd:7a:ac:04:87:7d:05:08:cc:b6:05:3a:4d:4f:a5:
         be:d3:e3:33:d8:08:19:04:24:41:a9:32:b9:e4:a2:01:64:e8:
         74:c8:32:57:67:4d:35:7c:1f:99:f6:1a:a8:b0:a5:3e:cb:57:
         a9:1d:b9:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP4RRSTlxd686u8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
MzhjYzIzMzItZmVjYi00M2I1LTkyMWUtOTdmNjBkOWYzNTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6vdKVNbw1ZravTLqbmeOGqzZgtw3vS5YcAD
rDsXZlIDG2IhLO48sIuq+JhasHjEXqx5kythIglEtx1llPzM67yuZodGEuPi+sUh
WI2BA8Q7hhO2LVEnjCsRRM1fgI1RpNvRS2DHTWOYNgpKzWRB8uTn44vkK54Mv04h
1VokvQobtxnINuBeeZbDGxNhqIogOea+vyNSdfyivCFUG9w0E6DMBcY627Uyxen7
rmt9/ozcWkLBYNxQGzFJkrA4ag2fOxrYG5JndKDERX87zIm8ieY3KVeAilo/Suwo
kd8qU9dEemUqwVWju20fsEtCYNMjpwYFe47UW3mHRLDUMH9KjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIYjbrAR5jas3k++9awkHzQn/Mr8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvZjQxMzk0ODQtMDdmZi0z
MmQ1LWFmNjAtMjVhOTU3ZmM1ZGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW4sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfJ7FH/9c6BAS0dd7sREw8jo6g8myBTT7mra12qlUz77BOUzJE8RKSi
ubYbsfyEKFAXhKY2vfjnzSeXiW7cvcoPAvNQI86tFyvmAMeCan6auc48RyMZjRE2
S+rVTfHcPjPYK2A4A6v8YR09n04FROVpNJceHWIjISc6yFTgG4Yg2Mud9jhNYWWL
KmgC7w4UmvSfftshGuVkDa43I5c+KjRPC15HHumHxSifFa+9OtZHDYst3WD/XudC
/kiW7zs2qxSp9TO1+D9trb16rASHfQUIzLYFOk1Ppb7T4zPYCBkEJEGpMrnkogFk
6HTIMldnTTV8H5n2GqiwpT7LV6kdubo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:36 2024 by rpki-client on console-fra.rpki-client.org