Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/9bb59be7-0b44-33d9-a9d6-b806d4424238.roa
File:                     9bb59be7-0b44-33d9-a9d6-b806d4424238.roa (raw, json)
Hash identifier:          zZnHfKQ0NuUot16ABMJ3OB2kIIyQQIvfl/muUPcjBdY=
Subject key identifier:   FC:75:C8:F0:13:31:DB:54:5F:A7:3B:F2:D1:2C:69:F6:7A:7E:31:E1
Certificate issuer:       /CN=cff3cca1-6cd4-4230-92d3-20abf4db7312
Certificate serial:       010D0C9F432858473A5B8A98299DB1EC21813E80
Authority key identifier: 77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/9bb59be7-0b44-33d9-a9d6-b806d4424238.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     14618
IP address blocks:        65.20.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:8a:98:29:9d:b1:ec:21:81:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cff3cca1-6cd4-4230-92d3-20abf4db7312
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=b88c6e54-0529-4a22-8c49-e8a85e0ff25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:07:3b:40:70:44:c9:64:1c:db:06:26:85:
                    3a:3e:57:8c:d7:21:68:ee:f9:1b:77:34:65:da:c3:
                    49:be:6a:4d:32:8d:93:f1:9c:80:45:16:6d:d0:b8:
                    f8:85:d5:10:78:e3:f3:1d:aa:ce:35:13:92:79:2b:
                    49:fd:04:2e:68:c3:a7:9f:c5:64:92:e5:6d:61:18:
                    2e:fe:9b:95:fe:ac:d7:c7:0e:84:f3:7c:f2:84:6e:
                    56:fc:dd:a3:2d:87:31:77:74:75:b4:2a:1e:4f:90:
                    cd:ae:d2:2f:94:a3:3d:e5:8f:8b:c4:96:24:15:fa:
                    86:4c:a8:30:98:10:c2:0a:81:c0:d0:a7:15:6d:a1:
                    2d:46:2b:2e:9e:b7:5f:27:83:0d:90:39:c6:e6:db:
                    9c:72:e6:e1:19:96:4d:ec:4b:94:ea:f4:44:be:51:
                    ef:63:a5:be:24:3a:1d:dd:8c:8c:b2:69:f7:1e:d4:
                    c6:49:20:88:6c:f3:16:26:ba:36:07:6f:ec:63:f0:
                    0a:b7:9e:32:b4:52:72:31:a1:65:97:09:13:e2:33:
                    71:68:53:21:c4:ed:8a:cd:ab:fc:f9:85:d3:d0:82:
                    94:35:ea:c1:40:ae:2a:8d:2b:89:48:fd:4b:a3:ed:
                    8e:82:91:9b:1b:93:98:90:e1:f6:0e:a4:3a:7a:70:
                    28:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:75:C8:F0:13:31:DB:54:5F:A7:3B:F2:D1:2C:69:F6:7A:7E:31:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/9bb59be7-0b44-33d9-a9d6-b806d4424238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl

            X509v3 Authority Key Identifier:
                keyid:77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.20.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:94:92:59:22:b8:f3:27:6e:9e:31:a6:2f:91:1e:c8:8c:11:
         90:c3:c4:ed:4b:95:f5:1b:1c:dd:d9:98:7c:a1:19:10:ab:e0:
         a4:74:f0:76:e6:5b:e1:06:26:12:ca:13:3a:96:d6:c3:93:6a:
         b2:f3:08:55:f7:f5:46:e9:5d:da:d9:da:b4:5a:9e:ca:b0:73:
         c6:be:06:fb:aa:3a:73:3e:59:32:94:d5:3d:ee:a4:8f:0f:93:
         6e:6e:04:2a:c9:b4:2b:7c:4d:e8:43:81:ca:79:5c:2b:15:a4:
         9e:59:c3:53:9d:90:5a:47:30:8f:b2:05:9b:60:55:e2:a2:82:
         28:fb:99:47:10:9a:2c:ad:00:70:4b:6b:ed:d8:21:a9:33:1d:
         e6:3c:45:ec:51:4e:00:0e:cc:15:2b:46:e5:14:56:49:aa:33:
         00:5f:65:8e:c9:01:fe:2c:5b:73:64:9f:eb:9a:92:7a:de:a5:
         e0:05:b3:28:87:dc:ca:47:dd:02:ea:9c:46:eb:f0:24:ce:c3:
         d0:1b:f4:b6:6e:91:64:af:c9:58:e8:97:2f:24:b4:26:8c:38:
         08:80:c5:79:f5:d6:3b:46:5d:bc:91:62:5e:16:83:fb:d8:cf:
         a5:0d:2b:f9:54:98:41:85:db:5a:10:76:a5:f7:52:3d:24:4b:
         e7:78:f7:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6W4qYKZ2x7CGBPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2ZmM2NjYTEtNmNkNC00MjMwLTkyZDMtMjBhYmY0ZGI3
MzEyMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
Yjg4YzZlNTQtMDUyOS00YTIyLThjNDktZThhODVlMGZmMjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps4HO0BwRMlkHNsGJoU6PleM1yFo7vkbdzRl
2sNJvmpNMo2T8ZyARRZt0Lj4hdUQeOPzHarONROSeStJ/QQuaMOnn8VkkuVtYRgu
/puV/qzXxw6E83zyhG5W/N2jLYcxd3R1tCoeT5DNrtIvlKM95Y+LxJYkFfqGTKgw
mBDCCoHA0KcVbaEtRisunrdfJ4MNkDnG5tuccubhGZZN7EuU6vREvlHvY6W+JDod
3YyMsmn3HtTGSSCIbPMWJro2B2/sY/AKt54ytFJyMaFllwkT4jNxaFMhxO2Kzav8
+YXT0IKUNerBQK4qjSuJSP1Lo+2OgpGbG5OYkOH2DqQ6enAocwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPx1yPATMdtUX6c78tEsafZ6fjHhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jZmYz
Y2NhMS02Y2Q0LTQyMzAtOTJkMy0yMGFiZjRkYjczMTIvOWJiNTliZTctMGI0NC0z
M2Q5LWE5ZDYtYjgwNmQ0NDI0MjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2ZmM2NjYTEtNmNkNC00MjMwLTky
ZDMtMjBhYmY0ZGI3MzEyL2NmZjNjY2ExLTZjZDQtNDIzMC05MmQzLTIwYWJmNGRi
NzMxMi5jcmwwHwYDVR0jBBgwFoAUd+NEOHMzmN13phfC24B3cczjtZcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jZmYzY2NhMS02Y2Q0LTQyMzAtOTJkMy0yMGFi
ZjRkYjczMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRQwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqUklkiuPMnbp4xpi+RHsiMEZDDxO1LlfUbHN3ZmHyhGRCr4KR08Hbm
W+EGJhLKEzqW1sOTarLzCFX39UbpXdrZ2rRansqwc8a+BvuqOnM+WTKU1T3upI8P
k25uBCrJtCt8TehDgcp5XCsVpJ5Zw1OdkFpHMI+yBZtgVeKigij7mUcQmiytAHBL
a+3YIakzHeY8RexRTgAOzBUrRuUUVkmqMwBfZY7JAf4sW3Nkn+uaknrepeAFsyiH
3MpH3QLqnEbr8CTOw9Ab9LZukWSvyVjoly8ktCaMOAiAxXn11jtGXbyRYl4Wg/vY
z6UNK/lUmEGF21oQdqX3Uj0kS+d49/8=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:48 2024 by rpki-client on console-ams.rpki-client.org