Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/6a042e6f-c547-3776-92a8-d4dcc2041ace.roa
File:                     6a042e6f-c547-3776-92a8-d4dcc2041ace.roa (raw, json)
Hash identifier:          8RztqYXH0GRzortH1tnPmfKPA6t3NaY5WzZhuHx0E8s=
Subject key identifier:   32:5A:2C:7A:AA:61:98:87:D1:75:5F:C9:B4:DA:FB:FE:54:FF:B7:83
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285847EBBF8086FACAF29A80413800
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/6a042e6f-c547-3776-92a8-d4dcc2041ace.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     55293
IP address blocks:        209.124.64.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:80:86:fa:ca:f2:9a:80:41:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=d82c938e-9fc3-4a86-b420-30502a58cb64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:51:14:c0:02:b5:17:b0:34:53:90:68:54:
                    73:e4:b0:61:1d:4d:4a:84:07:61:88:88:20:c2:7a:
                    6f:04:88:6b:06:6c:94:83:45:ad:0e:ca:cf:36:04:
                    b3:44:03:82:b1:39:de:dc:16:3e:01:c7:80:2f:8c:
                    45:88:16:cd:1b:b4:4e:1b:1f:29:ec:65:20:6d:fc:
                    01:94:e0:f9:a8:d5:53:4f:e8:10:9c:f9:21:58:d3:
                    92:bc:a8:57:8b:d5:35:4b:88:03:61:f6:3c:79:b6:
                    ab:60:92:ed:16:6a:bf:de:0b:c5:55:70:98:30:88:
                    2d:c0:bb:e3:68:86:77:6d:30:44:8f:45:2e:72:95:
                    56:91:17:8b:48:e1:11:1b:10:3e:26:88:26:4d:af:
                    83:0e:30:2c:73:a6:a8:b1:8b:a7:80:a7:7a:ca:e7:
                    ac:5b:d2:c2:54:66:2b:c7:58:76:c2:36:6b:01:18:
                    4d:5c:a4:8e:c0:aa:af:9e:35:b0:c7:42:1f:91:11:
                    ad:60:90:e5:86:81:ad:44:42:4f:a4:da:76:0f:ad:
                    0b:df:3f:8a:d9:15:f2:8c:f0:59:10:ca:9b:85:38:
                    4d:cf:98:ad:5e:2b:0b:a9:d1:12:a0:1a:5a:cd:6a:
                    44:05:d0:6c:ec:3f:26:41:9f:96:01:39:25:ff:02:
                    9f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5A:2C:7A:AA:61:98:87:D1:75:5F:C9:B4:DA:FB:FE:54:FF:B7:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/6a042e6f-c547-3776-92a8-d4dcc2041ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:10:ff:76:47:f3:6d:f9:2b:d4:c4:c1:88:a5:45:6d:31:8b:
         aa:f3:39:a4:d9:fd:77:9d:bc:5e:96:15:74:3e:9b:87:07:bb:
         40:b8:40:ca:ce:9d:49:55:b8:3d:65:fd:86:67:c4:13:0e:bd:
         cf:10:e8:87:71:39:ec:05:c5:fc:8b:ad:78:1e:a4:d9:4b:cf:
         cc:3f:f9:52:b6:37:67:a2:cb:f2:12:22:94:3b:82:e1:3e:8c:
         b3:ba:2c:15:b4:98:20:65:42:db:90:34:e3:73:c2:b8:be:86:
         3d:d8:b4:bd:61:64:3e:66:6c:ca:8b:fa:84:17:31:ab:7f:57:
         d8:96:b8:81:15:d1:9f:2d:ac:0c:ff:41:46:dc:57:28:92:af:
         7f:29:1f:e8:42:82:ce:2e:ca:a6:f5:05:fb:34:f4:71:44:be:
         47:b9:12:13:83:84:15:f2:81:59:a0:f2:0a:8c:21:11:78:93:
         08:ac:2c:46:4c:35:13:eb:05:69:08:69:0a:e8:dc:98:cf:49:
         d9:8b:30:0a:49:06:78:3e:7b:e1:9d:42:49:d8:5a:31:b6:cc:
         fb:9f:13:3d:f4:c6:09:21:75:9c:d5:04:80:23:1e:8d:97:97:
         a4:a7:12:68:da:27:9e:c2:aa:d0:95:ef:4f:74:00:10:3d:8e:
         fa:21:88:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrv4CG+srymoBBOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTI0MTExODE0MDA0MFoXDTI1MDIxNjE0MDA0MFowLzEtMCsGA1UEAxMk
ZDgyYzkzOGUtOWZjMy00YTg2LWI0MjAtMzA1MDJhNThjYjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3VRFMACtRewNFOQaFRz5LBhHU1KhAdhiIgg
wnpvBIhrBmyUg0WtDsrPNgSzRAOCsTne3BY+AceAL4xFiBbNG7ROGx8p7GUgbfwB
lOD5qNVTT+gQnPkhWNOSvKhXi9U1S4gDYfY8ebarYJLtFmq/3gvFVXCYMIgtwLvj
aIZ3bTBEj0UucpVWkReLSOERGxA+JogmTa+DDjAsc6aosYungKd6yuesW9LCVGYr
x1h2wjZrARhNXKSOwKqvnjWwx0IfkRGtYJDlhoGtREJPpNp2D60L3z+K2RXyjPBZ
EMqbhThNz5itXisLqdESoBpazWpEBdBs7D8mQZ+WATkl/wKf9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJaLHqqYZiH0XVfybTa+/5U/7eDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvNmEwNDJlNmYtYzU0Ny0z
Nzc2LTkyYTgtZDRkY2MyMDQxYWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0XxAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ0Q/3ZH8235K9TEwYilRW0xi6rzOaTZ/XedvF6WFXQ+m4cHu0C4QMrO
nUlVuD1l/YZnxBMOvc8Q6IdxOewFxfyLrXgepNlLz8w/+VK2N2eiy/ISIpQ7guE+
jLO6LBW0mCBlQtuQNONzwri+hj3YtL1hZD5mbMqL+oQXMat/V9iWuIEV0Z8trAz/
QUbcVyiSr38pH+hCgs4uyqb1Bfs09HFEvke5EhODhBXygVmg8gqMIRF4kwisLEZM
NRPrBWkIaQro3JjPSdmLMApJBng+e+GdQknYWjG2zPufEz30xgkhdZzVBIAjHo2X
l6SnEmjaJ57CqtCV7090ABA9jvohiEY=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:48 2024 by rpki-client on console-fra.rpki-client.org