Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/1ccb170d-2fe9-38d3-858e-ab015f7b7f3f.roa
File:                     1ccb170d-2fe9-38d3-858e-ab015f7b7f3f.roa (raw, json)
Hash identifier:          +nRdT/T1WrI3IYmpovYPstfBv2l/NItDgWmTVixRkiE=
Subject key identifier:   DA:7A:2A:6C:11:93:F1:1C:2E:F0:4B:E1:E0:49:C5:1E:96:3B:20:FA
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F432858472F30849B87EA5C0C715C2380
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/1ccb170d-2fe9-38d3-858e-ab015f7b7f3f.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     31898
IP address blocks:        64.39.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:84:9b:87:ea:5c:0c:71:5c:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=a46f538b-1f46-491f-a489-f7575a990e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a4:91:2a:4a:38:07:03:cd:0d:75:82:c9:86:
                    72:3e:8e:1b:e4:3e:87:6d:b0:ad:aa:f0:85:f1:d1:
                    13:6e:f0:91:bd:e6:ed:7f:5c:b2:89:64:6f:e8:10:
                    54:1b:21:18:9e:af:a4:76:fe:75:af:c0:dc:52:ab:
                    ce:7f:2c:a0:2c:da:5a:70:9a:38:30:bc:09:47:a1:
                    81:31:57:a8:21:98:26:8f:eb:e2:1b:4e:04:7b:d3:
                    29:db:36:30:26:af:25:bc:2c:b2:48:07:e6:bf:e1:
                    56:3e:57:34:78:c2:ee:cc:b9:63:3a:6a:b1:4b:4b:
                    ba:c3:2b:7b:d0:6a:5a:82:9b:11:38:0b:31:5f:89:
                    bb:b7:bd:38:1b:9d:21:03:fc:78:c3:cc:99:42:c1:
                    65:17:08:03:5c:03:a5:f2:f4:f6:8a:e3:2f:f7:74:
                    c3:90:e3:0a:8a:b4:bc:78:3d:5f:c1:b4:b0:e9:9d:
                    79:33:60:53:d1:ac:66:c0:cf:9f:5d:12:af:42:b3:
                    cd:c3:b6:07:e0:23:9b:b3:30:26:e0:f2:a0:54:56:
                    27:28:40:f5:95:88:60:f9:a3:38:8c:0e:ce:34:04:
                    e6:ca:7f:d5:f9:33:e7:70:df:60:af:45:57:30:70:
                    ad:bc:6b:a8:f7:e5:c3:0e:36:e7:40:ef:86:e2:25:
                    22:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7A:2A:6C:11:93:F1:1C:2E:F0:4B:E1:E0:49:C5:1E:96:3B:20:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/1ccb170d-2fe9-38d3-858e-ab015f7b7f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:92:2f:3d:42:fb:1e:4e:d3:68:81:ad:c1:7f:d6:ab:34:c0:
         23:02:39:30:b9:10:6e:f5:14:7e:c6:bb:84:62:d6:19:55:58:
         9a:d4:df:f0:4f:9e:37:10:92:4d:45:42:c6:72:6f:3b:c5:16:
         3d:cd:1b:37:11:f2:be:be:b0:e3:8e:aa:87:c3:28:01:35:95:
         9c:c9:0c:35:ac:79:43:c2:d6:61:1c:09:2b:6b:3b:53:1b:16:
         56:14:e3:b1:dc:18:20:af:58:37:8e:78:e5:7d:c5:ac:93:eb:
         a2:1c:a9:c8:41:ea:7c:67:c0:f9:51:36:fc:9f:d0:3a:38:81:
         af:ff:20:74:cf:11:e4:b1:af:cd:90:f0:6a:d6:8d:21:d2:41:
         e6:61:aa:de:4f:ff:39:c7:be:5d:ea:c2:1d:6e:ad:fe:0a:df:
         79:de:d5:e2:15:23:42:ff:8b:e9:36:01:74:58:e2:4a:8b:ee:
         ae:ae:b2:d0:d7:01:a0:d3:8d:15:57:90:b6:c8:4f:75:6b:c9:
         ae:e7:c6:37:5d:91:f7:dc:9a:db:8c:31:e5:7c:42:1c:e1:cd:
         44:2b:c9:5f:93:5f:0c:10:70:e0:b6:8b:39:ff:c3:95:27:5b:
         23:8e:e4:f1:4e:b6:25:8b:bf:3c:05:3b:e9:7b:8c:30:01:d5:
         d1:18:cc:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcvMISbh+pcDHFcI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx
ZDQxMB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk
YTQ2ZjUzOGItMWY0Ni00OTFmLWE0ODktZjc1NzVhOTkwZTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaSRKko4BwPNDXWCyYZyPo4b5D6HbbCtqvCF
8dETbvCRvebtf1yyiWRv6BBUGyEYnq+kdv51r8DcUqvOfyygLNpacJo4MLwJR6GB
MVeoIZgmj+viG04Ee9Mp2zYwJq8lvCyySAfmv+FWPlc0eMLuzLljOmqxS0u6wyt7
0GpagpsROAsxX4m7t704G50hA/x4w8yZQsFlFwgDXAOl8vT2iuMv93TDkOMKirS8
eD1fwbSw6Z15M2BT0axmwM+fXRKvQrPNw7YH4CObszAm4PKgVFYnKED1lYhg+aM4
jA7ONATmyn/V+TPncN9gr0VXMHCtvGuo9+XDDjbnQO+G4iUiYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNp6KmwRk/EcLvBL4eBJxR6WOyD6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2
ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvMWNjYjE3MGQtMmZlOS0z
OGQzLTg1OGUtYWIwMTVmN2I3ZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2
NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj
MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl
OGNlYzFkNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCdkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEKSLz1C+x5O02iBrcF/1qs0wCMCOTC5EG71FH7Gu4Ri1hlVWJrU3/BP
njcQkk1FQsZybzvFFj3NGzcR8r6+sOOOqofDKAE1lZzJDDWseUPC1mEcCStrO1Mb
FlYU47HcGCCvWDeOeOV9xayT66IcqchB6nxnwPlRNvyf0Do4ga//IHTPEeSxr82Q
8GrWjSHSQeZhqt5P/znHvl3qwh1urf4K33ne1eIVI0L/i+k2AXRY4kqL7q6ustDX
AaDTjRVXkLbIT3Vrya7nxjddkffcmtuMMeV8QhzhzUQryV+TXwwQcOC2izn/w5Un
WyOO5PFOtiWLvzwFO+l7jDAB1dEYzDQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org