Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a/7793fc48-7ea1-37bf-b5c1-456f5f96831c.roa
File:                     7793fc48-7ea1-37bf-b5c1-456f5f96831c.roa (raw, json)
Hash identifier:          +49elOBDJJi1y3XTeDybVi7DgbaHJrxYTBAq5xpUA98=
Subject key identifier:   1D:9E:86:E2:53:83:5A:30:54:42:44:2C:17:4E:7E:69:20:42:AD:D5
Certificate issuer:       /CN=2c41fdd7-374e-45cb-986c-b74864f1441a
Certificate serial:       010D0C9F43285847B9617501DD48D75B759E4D80
Authority key identifier: 46:5D:4F:76:28:0F:03:BE:D5:D3:30:82:30:A0:AE:E7:F8:BB:AC:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a/7793fc48-7ea1-37bf-b5c1-456f5f96831c.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     11246
IP address blocks:        64.93.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a/2c41fdd7-374e-45cb-986c-b74864f1441a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a/2c41fdd7-374e-45cb-986c-b74864f1441a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:75:01:dd:48:d7:5b:75:9e:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c41fdd7-374e-45cb-986c-b74864f1441a
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=0cde5379-d17e-4f7e-9f40-9cdb5f15de0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:18:ec:68:c5:ed:74:18:cf:ad:1e:d5:ca:8c:
                    8f:3b:53:60:83:c1:62:70:38:57:69:04:98:1e:b6:
                    cd:a6:db:44:33:82:81:ab:b6:de:75:05:04:5f:b7:
                    f9:80:91:46:d4:2d:aa:19:f4:e4:bd:95:23:28:e0:
                    a3:5a:f6:e2:60:ee:b7:05:8b:b9:11:1b:4f:03:02:
                    2c:94:5d:4b:9d:5d:f1:d2:ec:c9:51:46:ae:b0:92:
                    f4:d9:f6:b5:ea:c0:95:29:21:db:1b:9a:02:fa:55:
                    40:a5:d8:5d:a6:b2:e9:79:c6:b1:5d:87:0b:71:bb:
                    21:25:d4:8f:30:78:df:e5:d4:6d:1b:77:04:45:1c:
                    bf:01:24:f8:f0:8e:d1:58:f2:08:77:6d:64:c7:c7:
                    27:85:b0:5f:f1:00:dc:b6:85:1a:96:b7:b1:38:1a:
                    1b:8f:75:b1:38:10:ce:11:31:c4:ca:c0:17:6a:f5:
                    2e:74:33:5b:35:50:2f:e6:16:8f:7e:0e:08:ac:0a:
                    47:af:28:fe:77:ac:f2:7a:c8:07:32:48:e4:74:28:
                    b6:22:60:d0:77:a8:a8:46:94:a7:e0:bd:62:b5:4b:
                    c1:48:62:65:74:d8:65:ce:8e:2a:08:17:05:e0:4c:
                    e6:04:31:33:20:32:ca:0c:db:d6:63:64:33:8e:da:
                    82:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9E:86:E2:53:83:5A:30:54:42:44:2C:17:4E:7E:69:20:42:AD:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a/7793fc48-7ea1-37bf-b5c1-456f5f96831c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a/2c41fdd7-374e-45cb-986c-b74864f1441a.crl

            X509v3 Authority Key Identifier:
                keyid:46:5D:4F:76:28:0F:03:BE:D5:D3:30:82:30:A0:AE:E7:F8:BB:AC:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:26:d0:b2:4a:96:57:47:a8:41:1f:5d:f7:4a:3d:39:ee:d1:
         09:f4:b2:0e:20:0f:11:b7:ea:b8:ec:d3:6e:f6:9b:88:ed:93:
         3b:63:9a:70:f4:25:2a:bf:3e:b3:71:cf:00:2c:c4:8e:54:24:
         b8:93:c5:b1:a3:3c:58:87:11:69:6e:5e:3b:44:cf:4f:70:0a:
         81:75:d1:aa:ba:3a:6d:00:7c:de:0c:02:40:b3:a6:c4:a2:93:
         a0:33:c5:47:32:c3:ad:19:6e:b3:f5:f0:58:84:04:2d:f8:91:
         df:46:19:ef:13:3c:79:c1:cd:22:18:4f:46:d0:91:a1:a8:ce:
         2f:96:92:00:4b:ac:a4:9a:f1:2c:e6:88:c1:a5:1c:27:c3:45:
         53:cd:d8:63:1b:f5:aa:73:2d:f9:9e:2f:a4:b4:32:36:f6:bd:
         f6:ea:8b:83:ec:5f:9f:9d:81:0d:3e:fb:f5:48:54:d5:a9:82:
         6d:6a:5d:57:40:ee:fc:c6:b9:ee:20:b8:76:e3:11:cd:31:bf:
         55:32:8f:f3:00:27:2a:df:55:cc:47:ea:30:6e:9f:45:0d:37:
         4d:d9:8b:d3:a9:b7:66:8d:5a:82:be:87:24:5f:39:c4:fd:61:
         91:d5:e6:56:ea:db:2b:3d:ee:a0:67:f8:27:6a:97:48:3c:8b:
         e0:b2:49:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YXUB3UjXW3WeTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmM0MWZkZDctMzc0ZS00NWNiLTk4NmMtYjc0ODY0ZjE0
NDFhMB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk
MGNkZTUzNzktZDE3ZS00ZjdlLTlmNDAtOWNkYjVmMTVkZTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRjsaMXtdBjPrR7VyoyPO1Ngg8FicDhXaQSY
HrbNpttEM4KBq7bedQUEX7f5gJFG1C2qGfTkvZUjKOCjWvbiYO63BYu5ERtPAwIs
lF1LnV3x0uzJUUausJL02fa16sCVKSHbG5oC+lVApdhdprLpecaxXYcLcbshJdSP
MHjf5dRtG3cERRy/AST48I7RWPIId21kx8cnhbBf8QDctoUalrexOBobj3WxOBDO
ETHEysAXavUudDNbNVAv5haPfg4IrApHryj+d6zyesgHMkjkdCi2ImDQd6ioRpSn
4L1itUvBSGJldNhlzo4qCBcF4EzmBDEzIDLKDNvWY2QzjtqC1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB2ehuJTg1owVEJELBdOfmkgQq3VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yYzQx
ZmRkNy0zNzRlLTQ1Y2ItOTg2Yy1iNzQ4NjRmMTQ0MWEvNzc5M2ZjNDgtN2VhMS0z
N2JmLWI1YzEtNDU2ZjVmOTY4MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmM0MWZkZDctMzc0ZS00NWNiLTk4
NmMtYjc0ODY0ZjE0NDFhLzJjNDFmZGQ3LTM3NGUtNDVjYi05ODZjLWI3NDg2NGYx
NDQxYS5jcmwwHwYDVR0jBBgwFoAURl1PdigPA77V0zCCMKCu5/i7rAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yYzQxZmRkNy0zNzRlLTQ1Y2ItOTg2Yy1iNzQ4
NjRmMTQ0MWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQF1MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0m0LJKlldHqEEfXfdKPTnu0Qn0sg4gDxG36rjs0272m4jtkztjmnD0
JSq/PrNxzwAsxI5UJLiTxbGjPFiHEWluXjtEz09wCoF10aq6Om0AfN4MAkCzpsSi
k6AzxUcyw60ZbrP18FiEBC34kd9GGe8TPHnBzSIYT0bQkaGozi+WkgBLrKSa8Szm
iMGlHCfDRVPN2GMb9apzLfmeL6S0Mjb2vfbqi4PsX5+dgQ0++/VIVNWpgm1qXVdA
7vzGue4guHbjEc0xv1Uyj/MAJyrfVcxH6jBun0UNN03Zi9Opt2aNWoK+hyRfOcT9
YZHV5lbq2ys97qBn+Cdql0g8i+CySWw=
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:11 2024 by rpki-client on console-fra.rpki-client.org