Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/fb2d1c26-78b3-3b15-8e79-7db1d1c5bd5f.roa
File:                     fb2d1c26-78b3-3b15-8e79-7db1d1c5bd5f.roa (raw, json)
Hash identifier:          lxjZQPNmAmf5NnsuSPn+mlao2x20MoNkdxlQqjzMbO0=
Subject key identifier:   50:CB:A3:47:E2:76:DB:9A:EB:B4:B5:2B:E9:9C:6D:9A:75:36:68:37
Certificate issuer:       /CN=e0647553-32ca-48b6-be58-d6c7f475e654
Certificate serial:       010D0C9F432858479AABF4D3D46E3E03208AA400
Authority key identifier: 3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/fb2d1c26-78b3-3b15-8e79-7db1d1c5bd5f.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     7784
IP address blocks:        65.79.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:f4:d3:d4:6e:3e:03:20:8a:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0647553-32ca-48b6-be58-d6c7f475e654
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=479b8a44-66a5-42fd-8a04-ec9d4f374588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1e:bd:aa:f8:71:6d:48:18:ba:3d:86:b3:f4:
                    3d:76:06:79:89:b8:ae:f1:d1:ba:c5:fa:5e:71:0f:
                    b9:87:cd:95:f5:33:48:23:d1:cd:83:0d:14:aa:e0:
                    cb:47:85:bd:a1:e8:72:ca:7b:30:0a:d7:3e:a9:6e:
                    c6:08:77:3c:af:10:dc:d2:8e:c5:21:ef:b9:af:1b:
                    a0:f4:53:ec:3d:d9:bb:a9:f8:f0:ac:79:27:99:8b:
                    42:a8:ef:b2:a4:44:8c:77:3d:af:f3:0d:19:69:8b:
                    66:ab:d4:77:7c:ce:6d:27:3c:d9:40:ef:85:2c:b4:
                    1a:24:6d:2b:af:34:de:74:7a:e4:96:9a:dc:38:7c:
                    2d:5a:50:ee:5d:e1:a1:84:3e:80:26:3e:da:91:f8:
                    f4:e6:0f:29:b6:dd:38:fe:91:5b:56:48:b4:75:db:
                    fb:f0:d4:f6:89:c9:70:cc:5e:a7:3b:6d:70:5b:87:
                    32:ba:85:04:b9:fd:0c:43:91:c0:fe:ee:d3:f5:54:
                    4c:7c:f7:f6:05:bd:84:44:b0:f9:f7:5c:08:63:63:
                    c3:f8:8d:60:3c:42:36:2f:0d:32:1b:50:94:4c:1b:
                    84:98:3b:ba:e8:cd:3a:b8:91:40:b7:a9:42:d7:0e:
                    10:b6:5c:01:49:8a:8a:7e:dd:85:9f:65:02:2c:32:
                    6c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CB:A3:47:E2:76:DB:9A:EB:B4:B5:2B:E9:9C:6D:9A:75:36:68:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/fb2d1c26-78b3-3b15-8e79-7db1d1c5bd5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl

            X509v3 Authority Key Identifier:
                keyid:3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.79.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b4:d0:8e:e5:8f:c9:97:9d:67:bb:57:1e:89:9a:0b:1e:73:
         35:d1:af:a8:0d:ef:3c:55:44:e8:60:75:61:d2:4b:0e:d5:1a:
         ff:4b:b4:c5:62:13:f2:c0:a3:bb:e2:77:82:ae:26:19:98:67:
         66:74:eb:dd:cf:e3:13:f7:3a:6f:db:fa:f0:16:cf:8e:aa:ac:
         a2:52:15:11:86:ee:f2:2b:71:68:55:da:92:77:25:b2:0f:6a:
         f8:fa:19:01:2a:a3:20:d4:0a:74:99:ab:0b:27:f9:58:39:40:
         48:6c:86:ad:84:65:26:d3:8c:ca:0f:40:31:42:d1:82:7e:9e:
         bb:76:99:bb:c3:c0:ac:36:02:85:23:e1:c9:ed:2f:3c:5d:f7:
         c1:ce:36:08:f1:33:c7:4e:53:59:7b:ee:bf:1b:15:64:c0:4a:
         9f:7a:64:d7:9a:f5:3c:81:38:b6:bc:f6:7c:44:64:d8:9c:b9:
         21:e3:d3:1a:e8:4c:a8:aa:02:ab:5b:79:03:0e:86:cc:2f:33:
         cc:7b:66:48:7f:a7:02:ef:6c:f7:04:76:09:f2:f6:df:a6:f6:
         b0:a5:cb:73:33:60:8b:41:2c:a5:8a:65:57:02:3b:2d:db:0c:
         7e:b1:99:ad:9d:d2:4f:4f:22:81:27:ec:b0:f4:cf:05:11:33:
         46:86:aa:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq/TT1G4+AyCKpAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTA2NDc1NTMtMzJjYS00OGI2LWJlNTgtZDZjN2Y0NzVl
NjU0MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk
NDc5YjhhNDQtNjZhNS00MmZkLThhMDQtZWM5ZDRmMzc0NTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4B69qvhxbUgYuj2Gs/Q9dgZ5ibiu8dG6xfpe
cQ+5h82V9TNII9HNgw0UquDLR4W9oehyynswCtc+qW7GCHc8rxDc0o7FIe+5rxug
9FPsPdm7qfjwrHknmYtCqO+ypESMdz2v8w0ZaYtmq9R3fM5tJzzZQO+FLLQaJG0r
rzTedHrklprcOHwtWlDuXeGhhD6AJj7akfj05g8ptt04/pFbVki0ddv78NT2iclw
zF6nO21wW4cyuoUEuf0MQ5HA/u7T9VRMfPf2Bb2ERLD591wIY2PD+I1gPEI2Lw0y
G1CUTBuEmDu66M06uJFAt6lC1w4QtlwBSYqKft2Fn2UCLDJszQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFDLo0fidtua67S1K+mcbZp1Nmg3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMDY0
NzU1My0zMmNhLTQ4YjYtYmU1OC1kNmM3ZjQ3NWU2NTQvZmIyZDFjMjYtNzhiMy0z
YjE1LThlNzktN2RiMWQxYzViZDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTA2NDc1NTMtMzJjYS00OGI2LWJl
NTgtZDZjN2Y0NzVlNjU0L2UwNjQ3NTUzLTMyY2EtNDhiNi1iZTU4LWQ2YzdmNDc1
ZTY1NC5jcmwwHwYDVR0jBBgwFoAUPeqHK+uoJ4iQ/FpjZA/KjxDA/kcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lMDY0NzU1My0zMmNhLTQ4YjYtYmU1OC1kNmM3
ZjQ3NWU2NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQU/sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+00I7lj8mXnWe7Vx6JmgseczXRr6gN7zxVROhgdWHSSw7VGv9LtMVi
E/LAo7vid4KuJhmYZ2Z0693P4xP3Om/b+vAWz46qrKJSFRGG7vIrcWhV2pJ3JbIP
avj6GQEqoyDUCnSZqwsn+Vg5QEhshq2EZSbTjMoPQDFC0YJ+nrt2mbvDwKw2AoUj
4cntLzxd98HONgjxM8dOU1l77r8bFWTASp96ZNea9TyBOLa89nxEZNicuSHj0xro
TKiqAqtbeQMOhswvM8x7Zkh/pwLvbPcEdgny9t+m9rCly3MzYItBLKWKZVcCOy3b
DH6xma2d0k9PIoEn7LD0zwURM0aGqiI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:31 2024 by rpki-client on console-fra.rpki-client.org