Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa
File:                     2f245cec-1abd-398c-a715-037e988d18d1.roa (raw, json)
Hash identifier:          yN7mNpp3OmiNe55xg/AhpvIUSGoQcha1jRpePBzQ3uU=
Subject key identifier:   EB:FB:AF:39:AE:A4:08:C2:DA:7B:DF:66:40:24:4E:4C:43:7F:64:E2
Certificate issuer:       /CN=ccb44651-5c6d-4a02-8ebf-8c2812069341
Certificate serial:       010D0C9F432858473D25E207307CEA22F1182C64
Authority key identifier: BE:D5:A3:F5:C4:39:13:0D:CE:DA:1C:EF:55:D9:CA:36:E4:8C:31:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     10584
IP address blocks:        64.237.108.0/22 maxlen: 24
                          64.237.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:e2:07:30:7c:ea:22:f1:18:2c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb44651-5c6d-4a02-8ebf-8c2812069341
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=db887a4d-a6da-44b0-87f3-8648f46e5ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e6:97:2e:06:16:68:b2:86:5d:7d:e6:f5:cd:
                    a2:a5:43:11:ec:2b:b6:6d:96:31:06:83:48:03:5a:
                    f0:c0:30:45:9b:e7:a6:43:41:2c:3d:de:8f:c9:f0:
                    a0:3b:df:29:c2:65:aa:70:7e:db:2e:c5:1e:d1:13:
                    86:d2:8a:23:44:3a:ee:8b:79:6d:e5:60:ab:33:39:
                    24:f9:44:8a:9b:dd:54:dd:37:21:f0:49:1f:1a:f3:
                    7a:29:7f:4b:64:0e:f5:40:b2:23:f1:e2:30:ef:21:
                    68:dc:97:f2:65:83:ac:c8:19:87:95:63:19:47:c9:
                    7a:2a:83:0e:bd:c1:6c:90:b1:3c:19:ea:7d:a5:aa:
                    63:74:34:23:46:85:50:38:d3:83:e2:5d:72:ec:6a:
                    0c:7f:f3:88:b2:43:8f:e2:8c:78:65:16:25:33:1f:
                    18:e2:78:bb:72:68:3c:00:fe:d8:37:04:29:ee:5f:
                    41:3e:50:9a:6e:0c:09:3e:cd:2f:b7:25:b4:8c:ee:
                    f0:14:55:45:84:df:8a:63:c3:67:98:8f:fb:55:eb:
                    b0:a1:92:64:32:68:c7:31:cf:44:8e:eb:75:54:1f:
                    18:72:85:81:ed:b5:5d:af:c6:c5:13:36:af:0d:04:
                    c8:07:dc:78:7c:ed:d8:e3:74:98:34:fc:83:ac:a5:
                    60:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FB:AF:39:AE:A4:08:C2:DA:7B:DF:66:40:24:4E:4C:43:7F:64:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.crl

            X509v3 Authority Key Identifier:
                keyid:BE:D5:A3:F5:C4:39:13:0D:CE:DA:1C:EF:55:D9:CA:36:E4:8C:31:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:59:f9:91:34:24:72:64:38:93:e2:88:0f:6a:0e:a8:e6:63:
         37:10:7e:42:f6:64:d5:22:af:9b:87:3c:02:12:47:2b:0a:c2:
         e7:e2:c0:ce:03:b7:e0:fc:46:88:b3:f9:16:19:9b:de:35:97:
         14:4d:07:9a:0b:1e:d4:f7:91:18:48:42:97:99:34:60:a7:1d:
         85:4f:23:8b:59:52:9d:09:2f:ee:25:c5:c8:1e:0f:84:10:47:
         a0:f6:df:93:d7:71:ea:a5:c5:e1:ce:5f:86:7d:c0:bd:6e:10:
         e0:bb:98:cb:4c:78:d1:9a:69:9f:fb:cb:08:b3:7f:e5:52:99:
         91:b4:2f:a5:ca:ab:a9:7e:42:a8:da:ea:be:ae:e5:aa:43:ac:
         16:b0:aa:a2:64:a1:55:a3:67:e0:7d:09:1a:04:77:49:20:5b:
         7f:05:47:52:2c:e2:8e:1a:a5:73:38:9e:8b:5e:18:70:5a:0b:
         06:d2:00:f1:90:df:08:5f:4e:25:1f:50:0b:09:d9:58:39:cf:
         91:4c:6e:88:9c:1c:de:13:84:73:a4:df:3e:0b:6d:2b:38:27:
         68:68:d6:2a:35:80:56:88:1a:eb:a7:8a:6a:c8:f7:2a:1d:94:
         3d:80:b5:16:46:bc:4e:5d:d0:e3:21:5d:2a:a0:9c:74:a1:32:
         c1:a3:3e:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc9JeIHMHzqIvEYLGQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2NiNDQ2NTEtNWM2ZC00YTAyLThlYmYtOGMyODEyMDY5
MzQxMB4XDTI0MDkxNzAxMDAzMVoXDTI0MTIxNjAyMDAzMVowLzEtMCsGA1UEAxMk
ZGI4ODdhNGQtYTZkYS00NGIwLTg3ZjMtODY0OGY0NmU1ZWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuaXLgYWaLKGXX3m9c2ipUMR7Cu2bZYxBoNI
A1rwwDBFm+emQ0EsPd6PyfCgO98pwmWqcH7bLsUe0ROG0oojRDrui3lt5WCrMzkk
+USKm91U3Tch8EkfGvN6KX9LZA71QLIj8eIw7yFo3JfyZYOsyBmHlWMZR8l6KoMO
vcFskLE8Gep9papjdDQjRoVQONOD4l1y7GoMf/OIskOP4ox4ZRYlMx8Y4ni7cmg8
AP7YNwQp7l9BPlCabgwJPs0vtyW0jO7wFFVFhN+KY8NnmI/7VeuwoZJkMmjHMc9E
jut1VB8YcoWB7bVdr8bFEzavDQTIB9x4fO3Y43SYNPyDrKVgrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOv7rzmupAjC2nvfZkAkTkxDf2TiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jY2I0
NDY1MS01YzZkLTRhMDItOGViZi04YzI4MTIwNjkzNDEvMmYyNDVjZWMtMWFiZC0z
OThjLWE3MTUtMDM3ZTk4OGQxOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2NiNDQ2NTEtNWM2ZC00YTAyLThl
YmYtOGMyODEyMDY5MzQxL2NjYjQ0NjUxLTVjNmQtNGEwMi04ZWJmLThjMjgxMjA2
OTM0MS5jcmwwHwYDVR0jBBgwFoAUvtWj9cQ5Ew3O2hzvVdnKNuSMMdswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jY2I0NDY1MS01YzZkLTRhMDItOGViZi04YzI4
MTIwNjkzNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQO1sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGBZ+ZE0JHJkOJPiiA9qDqjmYzcQfkL2ZNUir5uHPAISRysKwufiwM4D
t+D8Roiz+RYZm941lxRNB5oLHtT3kRhIQpeZNGCnHYVPI4tZUp0JL+4lxcgeD4QQ
R6D235PXceqlxeHOX4Z9wL1uEOC7mMtMeNGaaZ/7ywizf+VSmZG0L6XKq6l+Qqja
6r6u5apDrBawqqJkoVWjZ+B9CRoEd0kgW38FR1Is4o4apXM4noteGHBaCwbSAPGQ
3whfTiUfUAsJ2Vg5z5FMboicHN4ThHOk3z4LbSs4J2ho1io1gFaIGuunimrI9yod
lD2AtRZGvE5d0OMhXSqgnHShMsGjPvE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:28:11 2024 by rpki-client on console-fra.rpki-client.org