Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/985211db-3d6b-313f-ad01-983be935ee5a.roa
File:                     985211db-3d6b-313f-ad01-983be935ee5a.roa (raw, json)
Hash identifier:          ZNEVCZlTargX+nsVCOTJxT3xFSYDLlPDXmCKSFxOTWQ=
Subject key identifier:   D6:9F:AB:00:ED:74:2F:0C:A5:A5:C1:7A:26:52:F0:BA:8F:87:41:2B
Certificate issuer:       /CN=dd89d034-c049-4b11-917d-e035f703312f
Certificate serial:       010D0C9F432858474420B8DBB7F2F41A1845A480
Authority key identifier: FD:2D:36:CC:EC:EE:00:DC:29:64:26:A8:7C:2F:AC:E6:1F:0E:B1:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/985211db-3d6b-313f-ad01-983be935ee5a.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     13394
IP address blocks:        204.63.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b8:db:b7:f2:f4:1a:18:45:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd89d034-c049-4b11-917d-e035f703312f
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=52f8adc9-eecd-4ce1-9038-714983bd41b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1f:73:14:62:83:d4:ca:ed:f7:64:1f:fc:e6:
                    5b:e3:12:f8:dc:27:ed:f4:c7:03:55:41:5d:64:c5:
                    85:ec:3e:80:bd:80:da:4c:b2:4d:e7:a5:fd:64:65:
                    30:61:4e:24:af:c8:aa:4e:d5:7c:6b:94:15:b5:77:
                    2d:6a:17:f3:a7:7b:ce:3c:21:de:d6:53:b6:03:9f:
                    f0:62:18:65:24:c9:b6:84:92:d4:be:f9:85:39:fa:
                    a5:19:42:34:ce:fb:cf:99:23:6b:0d:7c:dc:c5:0b:
                    75:1c:0c:05:92:62:6a:37:24:e5:16:a7:23:57:2d:
                    4f:97:33:e6:83:f8:23:35:31:a1:d7:c5:15:3a:8c:
                    f8:62:61:e5:c7:bf:26:c8:23:f6:30:28:55:f8:e5:
                    61:d6:3a:8f:1d:e5:cd:93:e7:0a:2c:e5:43:a4:63:
                    00:4b:df:af:8e:0c:8b:2b:dd:3c:cd:c7:29:54:34:
                    3c:97:24:14:84:94:65:c8:a3:44:42:ae:73:3c:93:
                    0b:3c:ee:db:91:ae:3a:42:ca:13:cb:f4:7b:d9:49:
                    6a:2f:bb:cc:5e:fd:46:d0:bd:05:e7:24:98:1b:7f:
                    6c:e3:fa:20:d2:29:a7:ac:35:cc:8a:ba:74:06:a7:
                    d7:03:69:78:20:c7:a5:c4:22:61:66:43:82:40:26:
                    25:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9F:AB:00:ED:74:2F:0C:A5:A5:C1:7A:26:52:F0:BA:8F:87:41:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/985211db-3d6b-313f-ad01-983be935ee5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.crl

            X509v3 Authority Key Identifier:
                keyid:FD:2D:36:CC:EC:EE:00:DC:29:64:26:A8:7C:2F:AC:E6:1F:0E:B1:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.63.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:38:f4:c0:0c:20:11:27:13:4f:9e:90:98:3a:ef:ee:7d:95:
         a1:99:7c:18:cc:75:e5:42:2c:c7:08:b3:14:dc:61:d1:d4:06:
         08:7e:97:7b:b0:0a:a3:1d:9a:ba:8c:8a:a8:01:5b:82:e7:c0:
         fa:57:99:e9:c6:db:81:58:63:f8:dd:90:b1:c8:03:0c:d5:6f:
         89:d8:98:c9:34:8d:1b:8a:3c:95:75:83:63:68:ee:97:f1:60:
         05:ad:9b:9e:93:be:c5:0a:3f:98:8f:23:94:94:c3:3b:9d:6a:
         8e:ba:a9:75:92:cc:85:dd:05:d9:31:4a:71:0a:89:35:71:be:
         27:8e:7f:7b:fd:39:62:04:15:cd:df:19:b9:c8:75:bb:18:33:
         0a:85:07:06:dd:5a:40:42:84:a1:7a:12:6f:20:ae:e9:fe:f1:
         62:d6:a5:d7:a9:ee:6e:80:0b:31:7a:97:3b:00:00:ab:d5:dd:
         75:d6:f1:13:fd:45:75:6a:b9:6a:0d:63:e5:9e:5c:2e:d7:5b:
         2b:b4:0a:89:67:1c:b6:59:f1:1d:0c:9f:70:cc:3c:a8:31:2a:
         51:70:77:92:b2:5a:d0:68:00:fe:78:c7:6d:cd:19:0f:1a:8b:
         1c:95:72:82:57:3a:6d:80:51:29:4a:e9:62:82:6c:51:ae:f6:
         23:ee:95:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdEILjbt/L0GhhFpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ4OWQwMzQtYzA0OS00YjExLTkxN2QtZTAzNWY3MDMz
MTJmMB4XDTI0MDkxOTEzMDA0MloXDTI0MTIxODE0MDA0MlowLzEtMCsGA1UEAxMk
NTJmOGFkYzktZWVjZC00Y2UxLTkwMzgtNzE0OTgzYmQ0MWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR9zFGKD1Mrt92Qf/OZb4xL43Cft9McDVUFd
ZMWF7D6AvYDaTLJN56X9ZGUwYU4kr8iqTtV8a5QVtXctahfzp3vOPCHe1lO2A5/w
YhhlJMm2hJLUvvmFOfqlGUI0zvvPmSNrDXzcxQt1HAwFkmJqNyTlFqcjVy1PlzPm
g/gjNTGh18UVOoz4YmHlx78myCP2MChV+OVh1jqPHeXNk+cKLOVDpGMAS9+vjgyL
K908zccpVDQ8lyQUhJRlyKNEQq5zPJMLPO7bka46QsoTy/R72UlqL7vMXv1G0L0F
5ySYG39s4/og0imnrDXMirp0BqfXA2l4IMelxCJhZkOCQCYlowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNafqwDtdC8MpaXBeiZS8LqPh0ErMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDg5
ZDAzNC1jMDQ5LTRiMTEtOTE3ZC1lMDM1ZjcwMzMxMmYvOTg1MjExZGItM2Q2Yi0z
MTNmLWFkMDEtOTgzYmU5MzVlZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQ4OWQwMzQtYzA0OS00YjExLTkx
N2QtZTAzNWY3MDMzMTJmL2RkODlkMDM0LWMwNDktNGIxMS05MTdkLWUwMzVmNzAz
MzEyZi5jcmwwHwYDVR0jBBgwFoAU/S02zOzuANwpZCaofC+s5h8OsfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDg5ZDAzNC1jMDQ5LTRiMTEtOTE3ZC1lMDM1
ZjcwMzMxMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzD/WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC049MAMIBEnE0+ekJg67+59laGZfBjMdeVCLMcIsxTcYdHUBgh+l3uw
CqMdmrqMiqgBW4LnwPpXmenG24FYY/jdkLHIAwzVb4nYmMk0jRuKPJV1g2No7pfx
YAWtm56TvsUKP5iPI5SUwzudao66qXWSzIXdBdkxSnEKiTVxvieOf3v9OWIEFc3f
GbnIdbsYMwqFBwbdWkBChKF6Em8grun+8WLWpdep7m6ACzF6lzsAAKvV3XXW8RP9
RXVquWoNY+WeXC7XWyu0ColnHLZZ8R0Mn3DMPKgxKlFwd5KyWtBoAP54x23NGQ8a
ixyVcoJXOm2AUSlK6WKCbFGu9iPuldk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:14 2024 by rpki-client on console-ams.rpki-client.org