Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3eed6bd4-f589-42d2-9aa7-de279e9aeb04/c71cd7f1-c056-3040-8493-57a10e5d5057.roa
File:                     c71cd7f1-c056-3040-8493-57a10e5d5057.roa (raw, json)
Hash identifier:          HJcZ2bmPA+L3J6IxwXo/hqH9+kILFBHZlJak1LrsIyY=
Subject key identifier:   4B:70:A5:9D:45:B6:25:94:6B:3A:18:8D:31:01:10:25:B1:7C:6A:85
Certificate issuer:       /CN=3eed6bd4-f589-42d2-9aa7-de279e9aeb04
Certificate serial:       010D0C9F43285847F2BA37998D9D817320BC2D80
Authority key identifier: 47:E1:51:61:48:04:8D:B2:78:F2:2E:4D:3E:44:4D:AF:12:B7:55:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3eed6bd4-f589-42d2-9aa7-de279e9aeb04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3eed6bd4-f589-42d2-9aa7-de279e9aeb04/c71cd7f1-c056-3040-8493-57a10e5d5057.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     8075
IP address blocks:        64.15.23.0/24 maxlen: 24
                          64.15.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3eed6bd4-f589-42d2-9aa7-de279e9aeb04/3eed6bd4-f589-42d2-9aa7-de279e9aeb04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3eed6bd4-f589-42d2-9aa7-de279e9aeb04/3eed6bd4-f589-42d2-9aa7-de279e9aeb04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3eed6bd4-f589-42d2-9aa7-de279e9aeb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:37:99:8d:9d:81:73:20:bc:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eed6bd4-f589-42d2-9aa7-de279e9aeb04
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=b48af464-33fb-4ebe-81c5-d71e813ec07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c5:57:17:ba:d7:f2:88:29:e2:22:f0:60:0d:
                    74:2c:fe:94:99:55:e1:c2:4c:ce:62:51:e5:06:5c:
                    96:3c:09:7b:78:e6:14:00:94:51:8d:4f:af:0a:ec:
                    07:70:bb:2d:eb:2a:88:b7:62:a7:1b:11:0e:19:62:
                    d3:ca:56:dd:1b:d2:c9:3f:10:8e:55:40:e6:b7:e8:
                    0e:7d:4a:cb:35:90:c8:8e:2f:9c:48:b7:bb:0a:fb:
                    58:63:ef:09:17:f8:e9:2f:7a:04:1a:b9:8f:45:2f:
                    23:05:60:ce:a3:e4:78:61:e2:e5:1d:f8:28:bc:e3:
                    a5:37:17:17:7b:d4:6e:cf:ca:cf:a2:6d:a4:fc:7e:
                    dc:78:f1:f4:ec:9e:ab:0c:5e:2f:19:61:cf:5b:e1:
                    18:fc:cd:23:c8:a7:8b:2a:32:1a:1d:32:fb:7b:3a:
                    8b:3b:6e:05:a1:4f:2a:1e:90:aa:70:ea:c1:2d:68:
                    9e:00:81:d2:f7:8c:77:f5:ac:bc:87:be:a7:35:a7:
                    d3:79:3f:11:a7:0b:b6:c3:d7:08:68:a2:35:e8:42:
                    ae:94:4b:0c:a1:d2:ec:09:2d:6f:bf:a3:3d:5c:dd:
                    b6:5e:d5:b4:44:f7:93:ac:20:62:49:92:26:c9:2a:
                    80:30:6a:a2:68:a7:d7:00:8c:39:9a:ce:c7:ff:6f:
                    7f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:70:A5:9D:45:B6:25:94:6B:3A:18:8D:31:01:10:25:B1:7C:6A:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3eed6bd4-f589-42d2-9aa7-de279e9aeb04/c71cd7f1-c056-3040-8493-57a10e5d5057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3eed6bd4-f589-42d2-9aa7-de279e9aeb04/3eed6bd4-f589-42d2-9aa7-de279e9aeb04.crl

            X509v3 Authority Key Identifier:
                keyid:47:E1:51:61:48:04:8D:B2:78:F2:2E:4D:3E:44:4D:AF:12:B7:55:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3eed6bd4-f589-42d2-9aa7-de279e9aeb04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.23.0/24
                  64.15.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9a:c4:ad:21:09:c7:b0:d8:71:81:52:83:34:51:b5:c4:d8:
         cb:ab:4d:dc:13:f4:ae:9a:76:83:07:5f:01:23:65:a3:8f:b2:
         97:c4:9b:95:23:75:00:59:35:fc:a2:8c:1f:c7:ce:f2:52:36:
         84:2a:3b:01:71:01:19:3a:7c:ff:cd:d1:be:d8:39:5f:a4:83:
         73:23:a5:52:3c:28:a3:a8:22:1c:6e:80:97:88:7d:18:50:21:
         cd:cd:59:7f:41:76:ca:db:15:e5:d1:e3:ff:09:07:3b:f8:db:
         34:de:fd:8a:1b:ab:91:74:7d:84:56:20:f1:71:cc:66:9c:0f:
         2f:24:39:27:4a:95:33:57:53:a7:72:6c:a7:cf:42:62:91:dc:
         a0:9d:46:1c:3b:61:82:b1:b7:f1:a8:4b:ab:a1:77:29:5b:eb:
         22:6c:49:26:f4:68:73:bb:b5:14:c2:9b:b1:7c:4e:5c:a1:cd:
         b7:b9:cc:fd:ec:de:04:b3:78:fe:df:ed:39:4f:af:e6:9b:b5:
         96:ae:eb:cf:15:6d:dc:db:22:15:10:7c:ef:e4:1b:ee:1d:1b:
         ee:a2:01:db:91:c7:85:36:22:9e:d4:ab:fb:77:44:3e:86:16:
         04:28:75:71:51:2a:49:83:b5:55:62:9a:01:97:70:23:89:c3:
         fd:9a:48:78
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEfyujeZjZ2BcyC8LYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VlZDZiZDQtZjU4OS00MmQyLTlhYTctZGUyNzllOWFl
YjA0MB4XDTI0MTEyMTAyMDAzOFoXDTI1MDIxOTAyMDAzOFowLzEtMCsGA1UEAxMk
YjQ4YWY0NjQtMzNmYi00ZWJlLTgxYzUtZDcxZTgxM2VjMDdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48VXF7rX8ogp4iLwYA10LP6UmVXhwkzOYlHl
BlyWPAl7eOYUAJRRjU+vCuwHcLst6yqIt2KnGxEOGWLTylbdG9LJPxCOVUDmt+gO
fUrLNZDIji+cSLe7CvtYY+8JF/jpL3oEGrmPRS8jBWDOo+R4YeLlHfgovOOlNxcX
e9Ruz8rPom2k/H7cePH07J6rDF4vGWHPW+EY/M0jyKeLKjIaHTL7ezqLO24FoU8q
HpCqcOrBLWieAIHS94x39ay8h76nNafTeT8Rpwu2w9cIaKI16EKulEsModLsCS1v
v6M9XN22XtW0RPeTrCBiSZImySqAMGqiaKfXAIw5ms7H/29/tQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEtwpZ1FtiWUazoYjTEBECWxfGqFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZWVk
NmJkNC1mNTg5LTQyZDItOWFhNy1kZTI3OWU5YWViMDQvYzcxY2Q3ZjEtYzA1Ni0z
MDQwLTg0OTMtNTdhMTBlNWQ1MDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2VlZDZiZDQtZjU4OS00MmQyLTlh
YTctZGUyNzllOWFlYjA0LzNlZWQ2YmQ0LWY1ODktNDJkMi05YWE3LWRlMjc5ZTlh
ZWIwNC5jcmwwHwYDVR0jBBgwFoAUR+FRYUgEjbJ48i5NPkRNrxK3Vd8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zZWVkNmJkNC1mNTg5LTQyZDItOWFhNy1kZTI3
OWU5YWViMDQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQA8XAwQA
QA8ZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACeaxK0hCcew2HGBUoM0UbXE2MurTdwT9K6adoMHXwEjZaOP
spfEm5UjdQBZNfyijB/HzvJSNoQqOwFxARk6fP/N0b7YOV+kg3MjpVI8KKOoIhxu
gJeIfRhQIc3NWX9BdsrbFeXR4/8JBzv42zTe/Yobq5F0fYRWIPFxzGacDy8kOSdK
lTNXU6dybKfPQmKR3KCdRhw7YYKxt/GoS6uhdylb6yJsSSb0aHO7tRTCm7F8Tlyh
zbe5zP3s3gSzeP7f7TlPr+abtZau688VbdzbIhUQfO/kG+4dG+6iAduRx4U2Ip7U
q/t3RD6GFgQodXFRKkmDtVVimgGXcCOJw/2aSHg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org