Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/a5807a7a-913e-3a90-a90c-8bfe44f94ba0.roa
File:                     a5807a7a-913e-3a90-a90c-8bfe44f94ba0.roa (raw, json)
Hash identifier:          uIsYbu/IKmeJpkIn+lCCW1YNtijFxQIWf3z/2CWnCNc=
Subject key identifier:   90:60:02:49:39:FD:70:AA:E9:3E:6B:88:E7:3E:00:DD:E9:B1:F3:EA
Certificate issuer:       /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
Certificate serial:       010D0C9F432858473089BFE81EE2C631F3002A00
Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/a5807a7a-913e-3a90-a90c-8bfe44f94ba0.roa
Signing time:             Thu 12 Sep 2024 12:36:18 +0000
ROA not before:           Thu 12 Sep 2024 12:36:18 +0000
ROA not after:            Wed 11 Dec 2024 13:36:18 +0000
asID:                     8070
IP address blocks:        165.224.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:89:bf:e8:1e:e2:c6:31:f3:00:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
        Validity
            Not Before: Sep 12 12:36:18 2024 GMT
            Not After : Dec 11 13:36:18 2024 GMT
        Subject: CN=b3696bf4-9e66-4381-ad65-0130c982e0cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dd:5a:30:a2:38:61:c3:63:c7:68:5f:da:ad:
                    93:c3:52:42:95:f7:c5:db:4c:c3:a2:9d:85:32:d0:
                    72:9a:68:ca:c8:0f:bd:0e:5e:40:fb:9f:b9:52:45:
                    6a:87:ab:37:4d:80:ce:19:1e:b3:98:2f:fc:35:d8:
                    29:f1:17:ce:92:5d:8f:0b:03:06:a0:43:27:ab:10:
                    8a:e2:36:a8:97:fa:c2:96:36:fc:76:c4:6f:3b:92:
                    3e:1d:33:43:a8:df:c7:17:8c:fb:65:a3:f0:b9:d3:
                    84:56:27:d1:68:0c:2d:d3:b3:c2:c2:b4:fb:30:a6:
                    54:1e:fd:7d:cf:b2:03:22:ca:c8:95:54:54:29:b7:
                    4e:e8:68:93:83:ea:2e:6e:c5:2d:21:28:96:e8:0d:
                    74:08:42:fd:d8:da:8c:fe:26:9e:6e:39:ef:18:9e:
                    bd:77:27:2e:4a:cb:5c:c4:b1:a8:e8:ff:e2:3a:78:
                    66:5d:39:41:27:8c:6d:cc:41:b4:65:fd:60:b1:5f:
                    bb:76:62:c0:c9:ec:4e:b0:a3:bb:b2:ec:7a:8e:46:
                    65:3f:65:2e:c7:41:91:b5:26:78:72:cd:1f:3a:40:
                    32:a9:ce:4f:4f:68:6a:2b:ae:80:17:15:16:a0:c7:
                    80:e0:b2:94:f4:0d:8a:28:2a:66:5a:6b:c1:2c:eb:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:60:02:49:39:FD:70:AA:E9:3E:6B:88:E7:3E:00:DD:E9:B1:F3:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/a5807a7a-913e-3a90-a90c-8bfe44f94ba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl

            X509v3 Authority Key Identifier:
                keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.224.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:63:22:97:34:81:3b:28:3d:e4:19:9f:dd:80:e7:c5:1c:a0:
         4d:18:db:4b:f4:dd:1b:e3:a3:b1:95:52:a2:ce:f8:76:84:4a:
         ef:2a:a1:38:f1:68:b6:60:0a:c7:49:9d:43:3a:fa:59:ca:2c:
         8c:54:df:1b:96:ee:25:82:e2:02:9f:98:0b:86:28:08:4f:8c:
         8b:e2:0f:59:b2:34:9c:c6:55:b1:44:31:2f:08:cd:31:e7:7e:
         f6:7d:5d:73:77:c4:34:17:50:b7:52:91:8f:9f:65:4b:6c:fa:
         75:12:f5:70:fb:95:24:e2:d7:d6:22:bb:df:2c:7c:97:5b:5b:
         3a:75:a7:eb:3c:44:af:5b:3a:c8:26:fb:d4:bb:f4:87:f3:db:
         31:b8:92:11:90:03:6d:85:da:59:59:cb:99:94:f0:87:96:d0:
         a7:91:97:c1:44:ce:0e:f4:77:40:dc:58:c8:e6:de:f7:dd:52:
         8a:50:0b:ff:a6:dc:f7:cf:80:d1:2a:8a:a1:95:8f:c5:2e:fc:
         0e:f8:93:d0:02:47:d7:f7:d7:78:33:4a:25:b3:98:4a:ec:4a:
         88:e3:86:ed:be:6d:00:da:27:b1:52:35:ea:10:2f:bd:ce:30:
         b3:26:a0:d0:87:4c:be:b2:39:41:12:0c:8c:e8:6c:4c:8d:f7:
         e9:04:1f:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwib/oHuLGMfMAKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0
ZDdiMB4XDTI0MDkxMjEyMzYxOFoXDTI0MTIxMTEzMzYxOFowLzEtMCsGA1UEAxMk
YjM2OTZiZjQtOWU2Ni00MzgxLWFkNjUtMDEzMGM5ODJlMGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt91aMKI4YcNjx2hf2q2Tw1JClffF20zDop2F
MtBymmjKyA+9Dl5A+5+5UkVqh6s3TYDOGR6zmC/8Ndgp8RfOkl2PCwMGoEMnqxCK
4jaol/rCljb8dsRvO5I+HTNDqN/HF4z7ZaPwudOEVifRaAwt07PCwrT7MKZUHv19
z7IDIsrIlVRUKbdO6GiTg+oubsUtISiW6A10CEL92NqM/iaebjnvGJ69dycuSstc
xLGo6P/iOnhmXTlBJ4xtzEG0Zf1gsV+7dmLAyexOsKO7sux6jkZlP2Uux0GRtSZ4
cs0fOkAyqc5PT2hqK66AFxUWoMeA4LKU9A2KKCpmWmvBLOsOkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJBgAkk5/XCq6T5riOc+AN3psfPqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0
MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvYTU4MDdhN2EtOTEzZS0z
YTkwLWE5MGMtOGJmZTQ0Zjk0YmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll
MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4
NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw
NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpeBAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABJjIpc0gTsoPeQZn92A58UcoE0Y20v03Rvjo7GVUqLO+HaESu8qoTjx
aLZgCsdJnUM6+lnKLIxU3xuW7iWC4gKfmAuGKAhPjIviD1myNJzGVbFEMS8IzTHn
fvZ9XXN3xDQXULdSkY+fZUts+nUS9XD7lSTi19Yiu98sfJdbWzp1p+s8RK9bOsgm
+9S79Ifz2zG4khGQA22F2llZy5mU8IeW0KeRl8FEzg70d0DcWMjm3vfdUopQC/+m
3PfPgNEqiqGVj8Uu/A74k9ACR9f313gzSiWzmErsSojjhu2+bQDaJ7FSNeoQL73O
MLMmoNCHTL6yOUESDIzobEyN9+kEH04=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:04 2024 by rpki-client on console-fra.rpki-client.org