Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/d3face62-98f6-3bc7-a5e8-ceddd4425a84.roa
File:                     d3face62-98f6-3bc7-a5e8-ceddd4425a84.roa (raw, json)
Hash identifier:          9d6n1cXOqoFnXtt/wRnYIIhyL4AmUw2nDabf9AcZGks=
Subject key identifier:   FC:56:14:9A:3D:AB:63:90:CE:FC:4F:BB:C5:DA:A9:0C:C0:96:23:8E
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584777C6436E2FF8E360E8A4D440
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/d3face62-98f6-3bc7-a5e8-ceddd4425a84.roa
Signing time:             Tue 08 Oct 2024 01:00:31 +0000
ROA not before:           Tue 08 Oct 2024 01:00:31 +0000
ROA not after:            Mon 06 Jan 2025 02:00:31 +0000
asID:                     46450
IP address blocks:        198.145.96.0/24 maxlen: 24
                          198.145.101.0/24 maxlen: 24
                          198.145.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:c6:43:6e:2f:f8:e3:60:e8:a4:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Oct  8 01:00:31 2024 GMT
            Not After : Jan  6 02:00:31 2025 GMT
        Subject: CN=0d077e59-f026-4c76-92ae-06850126670c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d3:c2:22:03:7a:79:14:ee:f1:f1:03:38:03:
                    7a:e8:99:9b:9c:f3:3d:92:56:56:2a:88:de:6f:62:
                    dc:62:fc:96:4f:2f:e4:0b:04:0c:99:f9:65:4e:7f:
                    37:ef:e0:36:3b:ce:2b:7b:2c:16:b0:f6:d2:4d:d0:
                    18:dc:74:de:e3:df:74:6f:0a:31:5f:be:a2:8e:f4:
                    1e:08:37:8d:0f:db:03:52:fd:90:39:94:da:a9:fc:
                    52:ca:b8:92:da:ff:60:e0:7a:91:1e:ef:37:fd:23:
                    af:8d:bb:78:88:91:80:9c:ea:89:65:99:83:02:20:
                    5f:c7:29:74:aa:ac:ca:59:b7:3f:34:1d:07:59:38:
                    b4:50:3b:0d:e4:bc:b8:ec:70:fd:cd:ed:28:a3:a6:
                    fd:ef:8f:32:1b:f8:bb:14:4e:dc:0e:f1:3f:93:86:
                    fd:40:32:82:66:b3:2c:58:9f:5e:33:c8:31:4a:ea:
                    cc:a4:9e:d5:fe:4f:fc:0e:31:e7:d4:a2:f3:2b:a0:
                    37:01:60:6a:87:8e:2c:a3:69:a2:22:f2:c9:d0:53:
                    5a:fb:00:3a:81:08:97:44:de:1e:f9:41:4a:de:1a:
                    17:a7:28:7b:ce:f0:e4:3f:52:fb:e8:0f:d1:37:fe:
                    43:92:5a:69:7d:e3:4d:4c:13:ce:c8:91:3e:4b:9d:
                    89:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:56:14:9A:3D:AB:63:90:CE:FC:4F:BB:C5:DA:A9:0C:C0:96:23:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/d3face62-98f6-3bc7-a5e8-ceddd4425a84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.96.0/24
                  198.145.101.0/24
                  198.145.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:32:e2:05:21:83:b5:4b:bd:ed:ff:12:79:14:fc:d8:e1:8b:
         f6:c8:93:3c:b0:a9:b7:b3:db:41:bd:2b:f8:50:b2:7e:e6:0c:
         4c:d5:12:b0:23:5e:9e:f7:b4:80:a2:05:ee:d2:d9:e7:25:48:
         44:47:b2:94:f8:cc:8d:8e:84:da:57:ac:93:5d:97:5f:0e:50:
         c3:f6:9a:11:a4:07:ae:27:19:b8:53:f3:a0:eb:f8:82:27:41:
         93:ad:88:24:27:d2:eb:aa:e4:a6:5b:e9:48:b5:54:ef:ae:77:
         08:10:f7:59:03:0c:1e:99:70:3f:3c:0d:fb:eb:94:e2:48:7a:
         f5:89:a9:97:82:c6:50:46:6f:cc:04:ae:8d:93:b1:50:17:fe:
         e3:af:91:e5:3b:aa:2a:ac:d8:8b:31:4d:f1:34:9f:67:cb:da:
         f1:41:7c:38:46:c6:d8:e8:9e:7b:dc:e7:a1:e5:ed:a0:3c:65:
         1f:12:fa:a0:c4:42:ad:0a:ca:c6:db:5e:fd:42:37:7a:c6:35:
         db:bf:2c:e4:44:af:36:4a:c8:6e:5f:3d:8a:99:db:18:7d:fd:
         f0:4c:c1:39:46:3e:fd:e1:ba:8b:30:13:e1:3d:01:4d:f1:d7:
         b1:76:5b:18:d9:cd:c8:95:fa:0f:6d:d5:20:c9:d9:49:de:0d:
         71:8b:09:b8
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEd3xkNuL/jjYOik1EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI0MTAwODAxMDAzMVoXDTI1MDEwNjAyMDAzMVowLzEtMCsGA1UEAxMk
MGQwNzdlNTktZjAyNi00Yzc2LTkyYWUtMDY4NTAxMjY2NzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39PCIgN6eRTu8fEDOAN66JmbnPM9klZWKoje
b2LcYvyWTy/kCwQMmfllTn837+A2O84reywWsPbSTdAY3HTe4990bwoxX76ijvQe
CDeND9sDUv2QOZTaqfxSyriS2v9g4HqRHu83/SOvjbt4iJGAnOqJZZmDAiBfxyl0
qqzKWbc/NB0HWTi0UDsN5Ly47HD9ze0oo6b9748yG/i7FE7cDvE/k4b9QDKCZrMs
WJ9eM8gxSurMpJ7V/k/8DjHn1KLzK6A3AWBqh44so2miIvLJ0FNa+wA6gQiXRN4e
+UFK3hoXpyh7zvDkP1L76A/RN/5DklppfeNNTBPOyJE+S52J9wIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFPxWFJo9q2OQzvxPu8XaqQzAliOOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvZDNmYWNlNjItOThmNi0z
YmM3LWE1ZTgtY2VkZGQ0NDI1YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAxpFgAwQA
xpFlAwQAxpFvMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAEoy4gUhg7VLve3/EnkU/Njhi/bIkzywqbez20G9
K/hQsn7mDEzVErAjXp73tICiBe7S2eclSERHspT4zI2OhNpXrJNdl18OUMP2mhGk
B64nGbhT86Dr+IInQZOtiCQn0uuq5KZb6Ui1VO+udwgQ91kDDB6ZcD88DfvrlOJI
evWJqZeCxlBGb8wEro2TsVAX/uOvkeU7qiqs2IsxTfE0n2fL2vFBfDhGxtjonnvc
56Hl7aA8ZR8S+qDEQq0KysbbXv1CN3rGNdu/LORErzZKyG5fPYqZ2xh9/fBMwTlG
Pv3huoswE+E9AU3x17F2WxjZzciV+g9t1SDJ2UneDXGLCbg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:39 2024 by rpki-client on console-fra.rpki-client.org