Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/6140ba38-d138-33fa-85cf-2c082c0eedf8.roa
File:                     6140ba38-d138-33fa-85cf-2c082c0eedf8.roa (raw, json)
Hash identifier:          NcRCCbmoBDoSpmAZxzZHio/I0d+BSwlGL4Ptg12OYXk=
Subject key identifier:   31:B7:BB:78:DF:AB:89:1B:7A:29:3E:A9:8B:FF:FA:B0:AA:C3:14:0D
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F432858474850B8E8CC95669B8EAE3700
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/6140ba38-d138-33fa-85cf-2c082c0eedf8.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     20454
IP address blocks:        64.38.252.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:b8:e8:cc:95:66:9b:8e:ae:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=5449266c-3ab5-491d-99c1-798b6263fe34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:47:a6:a5:79:c3:ea:ad:41:46:5c:85:17:
                    f0:8c:bb:11:9c:7b:11:c6:5c:3f:d5:0a:5a:44:a1:
                    12:c8:89:f7:82:ad:d2:ce:95:d7:9a:93:0e:ab:9d:
                    95:b8:b7:cb:45:3a:a0:ac:04:4f:dd:36:0e:a7:87:
                    64:39:ed:12:b8:be:2f:a9:07:60:7e:54:fb:86:67:
                    6a:6c:70:97:da:32:1f:1b:42:94:c9:48:72:71:8e:
                    63:06:32:78:67:86:19:bf:c1:52:95:d4:ed:ef:81:
                    66:55:ec:bd:f8:72:53:6b:bb:95:bd:e7:42:a0:4b:
                    77:f4:aa:a3:cf:22:a4:12:23:18:fe:44:40:f6:60:
                    a1:dc:aa:01:54:85:00:6a:b8:dd:5a:da:ef:9a:ab:
                    bc:24:19:17:b3:34:be:ab:f4:f0:15:83:3a:fe:bd:
                    4d:40:dd:61:70:02:a0:b3:d7:3b:05:53:62:f9:d0:
                    32:cc:8a:65:a8:00:bb:79:cc:17:50:a0:e3:4f:38:
                    ac:71:8b:dd:0b:e8:38:c9:32:b9:ff:1e:63:20:99:
                    3d:34:6c:7c:7a:6d:10:b9:e5:08:c1:87:59:05:45:
                    9b:ca:55:09:25:33:16:42:8f:1a:48:c5:f5:d5:ef:
                    f2:84:d3:e3:be:e8:9a:24:62:71:6f:d4:2d:21:8f:
                    2e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B7:BB:78:DF:AB:89:1B:7A:29:3E:A9:8B:FF:FA:B0:AA:C3:14:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/6140ba38-d138-33fa-85cf-2c082c0eedf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:19:6e:c8:1f:26:18:b0:70:dd:01:08:2d:43:32:8f:50:0a:
         6d:14:42:d9:07:80:aa:a0:d1:20:a7:2c:4e:e5:e1:00:3d:74:
         c2:f4:f7:ee:25:15:d1:7e:29:6d:e5:a0:1e:48:ed:6a:0a:4f:
         61:8d:70:d1:ea:c8:e0:e2:8d:7d:3c:21:db:8f:c2:d7:3e:59:
         66:55:ef:d8:be:5e:8d:1e:27:9f:63:da:82:d9:f5:6a:68:7a:
         f3:2a:d9:84:ee:b1:57:1a:c7:64:1c:7b:6d:ad:75:b9:65:5c:
         be:df:c3:a1:28:ec:89:d7:67:25:b8:ba:c0:36:3e:57:1a:79:
         11:26:11:e9:6d:f5:d8:02:02:d8:da:62:8c:a3:b7:42:02:16:
         41:fd:01:d5:94:f3:ce:0c:27:a9:52:f4:56:04:af:9a:59:c8:
         fb:ed:cb:2f:b8:6f:d2:72:92:f8:53:b0:88:20:7b:50:ee:a3:
         e3:8f:26:f3:90:7b:1a:68:6b:4b:35:1e:64:bf:26:c4:63:52:
         f9:56:44:f5:d6:58:df:d5:df:d5:22:63:34:d5:dd:6d:88:33:
         d1:ce:9f:ad:1b:b8:aa:73:9e:22:1d:d2:3d:c3:af:4a:f3:8c:
         a9:38:74:60:b6:59:83:ed:7c:f5:3f:8a:f3:99:8a:b5:47:c6:
         76:e6:70:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdIULjozJVmm46uNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi
Mzk4MB4XDTI0MDkyMTAxMDAzM1oXDTI0MTIyMDAyMDAzM1owLzEtMCsGA1UEAxMk
NTQ0OTI2NmMtM2FiNS00OTFkLTk5YzEtNzk4YjYyNjNmZTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaVHpqV5w+qtQUZchRfwjLsRnHsRxlw/1Qpa
RKESyIn3gq3SzpXXmpMOq52VuLfLRTqgrARP3TYOp4dkOe0SuL4vqQdgflT7hmdq
bHCX2jIfG0KUyUhycY5jBjJ4Z4YZv8FSldTt74FmVey9+HJTa7uVvedCoEt39Kqj
zyKkEiMY/kRA9mCh3KoBVIUAarjdWtrvmqu8JBkXszS+q/TwFYM6/r1NQN1hcAKg
s9c7BVNi+dAyzIplqAC7ecwXUKDjTziscYvdC+g4yTK5/x5jIJk9NGx8em0QueUI
wYdZBUWbylUJJTMWQo8aSMX11e/yhNPjvuiaJGJxb9QtIY8uowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDG3u3jfq4kbeik+qYv/+rCqwxQNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz
MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvNjE0MGJhMzgtZDEzOC0z
M2ZhLTg1Y2YtMmMwODJjMGVlZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl
MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz
YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw
NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCb8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQZbsgfJhiwcN0BCC1DMo9QCm0UQtkHgKqg0SCnLE7l4QA9dML09+4l
FdF+KW3loB5I7WoKT2GNcNHqyODijX08IduPwtc+WWZV79i+Xo0eJ59j2oLZ9Wpo
evMq2YTusVcax2Qce22tdbllXL7fw6Eo7InXZyW4usA2PlcaeREmEelt9dgCAtja
Yoyjt0ICFkH9AdWU884MJ6lS9FYEr5pZyPvtyy+4b9JykvhTsIgge1Duo+OPJvOQ
expoa0s1HmS/JsRjUvlWRPXWWN/V39UiYzTV3W2IM9HOn60buKpzniId0j3Dr0rz
jKk4dGC2WYPtfPU/ivOZirVHxnbmcG8=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:39 2024 by rpki-client on console-ams.rpki-client.org