Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/8b7a8af7-f7ba-312f-8140-005dd293f00c.roa
File:                     8b7a8af7-f7ba-312f-8140-005dd293f00c.roa (raw, json)
Hash identifier:          m067ufIbg0fMV/mFIYSX0YV4o8LhD+gddJixkfh42jQ=
Subject key identifier:   80:74:8A:25:5F:9C:D4:3D:D7:BD:FC:5C:2D:64:B3:F3:74:27:CE:36
Certificate issuer:       /CN=04b45e42-c2e7-4254-9ecb-472a7693a730
Certificate serial:       010D0C9F432858473095E80636EB276BD0E9BAC0
Authority key identifier: DF:50:B3:98:79:BE:37:C0:83:54:8F:CB:DD:FC:D2:44:6A:51:C8:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/8b7a8af7-f7ba-312f-8140-005dd293f00c.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     397377
IP address blocks:        63.246.143.0/24 maxlen: 24
                          161.199.88.0/24 maxlen: 24
                          207.229.66.0/24 maxlen: 24
                          2605:51c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:e8:06:36:eb:27:6b:d0:e9:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b45e42-c2e7-4254-9ecb-472a7693a730
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=f15a090b-25b0-4e01-984a-cdf42626ce2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d8:34:73:50:6e:e3:92:8d:90:4c:e5:6f:3c:
                    03:8d:7e:23:a7:bf:1a:81:21:fd:d3:d1:cd:f7:98:
                    57:c9:fc:f8:6e:18:2d:e2:e8:08:e7:ce:34:ae:a6:
                    76:e8:7d:2e:dc:08:7f:77:4b:f3:e6:f9:ee:20:c0:
                    94:2a:d5:76:e4:a6:e8:2a:18:1d:6a:76:e8:fa:71:
                    05:1b:d0:a9:1c:c6:0f:e2:16:86:a5:3c:7f:af:e6:
                    79:ca:fd:d1:17:d4:f9:a2:08:ba:bb:06:40:33:02:
                    26:c9:a3:d8:d3:48:d6:d8:bd:b9:0c:59:e8:7b:cb:
                    40:d8:61:3e:56:12:ee:93:d3:6c:1a:9e:1a:93:d5:
                    57:c8:c4:96:b2:65:18:e2:f9:7d:ae:78:1c:db:d2:
                    13:d3:07:16:61:4b:9f:c6:ae:c9:d6:39:e0:56:c2:
                    cb:c7:1c:5b:67:44:43:9c:d3:68:f7:da:63:15:ef:
                    da:65:ed:04:54:e9:07:7c:35:7f:71:61:e3:da:b1:
                    5b:c7:cf:60:e7:54:85:35:4d:c5:9e:e2:27:9e:fc:
                    e5:16:35:3a:8b:5e:5c:61:7d:1a:2c:fd:bb:71:ae:
                    f4:34:80:4c:09:45:94:c5:82:8f:8a:93:f9:ba:48:
                    bd:6a:e5:d5:da:66:6a:02:8e:f2:e0:ab:5d:84:d2:
                    db:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:74:8A:25:5F:9C:D4:3D:D7:BD:FC:5C:2D:64:B3:F3:74:27:CE:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/8b7a8af7-f7ba-312f-8140-005dd293f00c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.crl

            X509v3 Authority Key Identifier:
                keyid:DF:50:B3:98:79:BE:37:C0:83:54:8F:CB:DD:FC:D2:44:6A:51:C8:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.143.0/24
                  161.199.88.0/24
                  207.229.66.0/24
                IPv6:
                  2605:51c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:8b:4e:ec:38:3e:ec:94:34:6a:eb:8c:05:ad:79:dc:d3:0c:
         48:77:1c:77:aa:3e:d0:4b:e7:c9:c7:54:2a:eb:fa:5d:df:0e:
         b1:a5:bc:ed:e0:2f:f2:ef:d2:97:87:54:17:52:db:2c:e4:a5:
         81:ed:2e:17:37:e5:35:71:b5:89:90:e7:90:8b:69:4e:50:1e:
         a1:41:7e:92:cf:b6:bc:5b:45:db:04:35:2d:b9:76:29:55:d2:
         a3:c6:12:2c:30:c4:f6:79:70:2c:1d:6e:d9:b9:21:be:7b:81:
         d0:85:7e:c2:73:ed:0d:78:c0:32:cc:d7:dc:2f:c8:03:2b:84:
         7b:25:3e:b0:d8:9f:fd:89:99:2e:dd:c3:20:3f:1e:34:16:e2:
         cf:bf:20:12:a7:df:25:5a:c3:53:41:17:53:48:d7:a9:18:de:
         0f:5f:e7:3a:d9:3b:5c:2e:23:29:eb:3b:a3:40:6f:ac:75:cf:
         c9:01:db:d0:ad:c9:dc:00:7a:0b:78:c6:35:23:4c:f8:3d:47:
         90:dc:aa:dd:e7:55:ba:fe:23:47:7d:f2:0c:d7:22:1e:35:86:
         47:84:ac:5a:2f:63:c7:89:b7:39:86:df:67:75:e9:20:de:2d:
         e5:8c:ce:03:27:98:a8:44:bd:48:04:17:3b:b6:02:d4:32:d7:
         e9:84:02:18
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEcwlegGNusna9DpusAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDRiNDVlNDItYzJlNy00MjU0LTllY2ItNDcyYTc2OTNh
NzMwMB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk
ZjE1YTA5MGItMjViMC00ZTAxLTk4NGEtY2RmNDI2MjZjZTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9g0c1Bu45KNkEzlbzwDjX4jp78agSH909HN
95hXyfz4bhgt4ugI5840rqZ26H0u3Ah/d0vz5vnuIMCUKtV25KboKhgdanbo+nEF
G9CpHMYP4haGpTx/r+Z5yv3RF9T5ogi6uwZAMwImyaPY00jW2L25DFnoe8tA2GE+
VhLuk9NsGp4ak9VXyMSWsmUY4vl9rngc29IT0wcWYUufxq7J1jngVsLLxxxbZ0RD
nNNo99pjFe/aZe0EVOkHfDV/cWHj2rFbx89g51SFNU3FnuInnvzlFjU6i15cYX0a
LP27ca70NIBMCUWUxYKPipP5uki9auXV2mZqAo7y4KtdhNLb3wIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFIB0iiVfnNQ91738XC1ks/N0J842MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNGI0
NWU0Mi1jMmU3LTQyNTQtOWVjYi00NzJhNzY5M2E3MzAvOGI3YThhZjctZjdiYS0z
MTJmLTgxNDAtMDA1ZGQyOTNmMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDRiNDVlNDItYzJlNy00MjU0LTll
Y2ItNDcyYTc2OTNhNzMwLzA0YjQ1ZTQyLWMyZTctNDI1NC05ZWNiLTQ3MmE3Njkz
YTczMC5jcmwwHwYDVR0jBBgwFoAU31CzmHm+N8CDVI/L3fzSRGpRyM4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNGI0NWU0Mi1jMmU3LTQyNTQtOWVjYi00NzJh
NzY5M2E3MzAuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAP/aPAwQA
ocdYAwQAz+VCMA0EAgACMAcDBQAmBVHAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAGLTuw4PuyUNGrrjAWt
edzTDEh3HHeqPtBL58nHVCrr+l3fDrGlvO3gL/Lv0peHVBdS2yzkpYHtLhc35TVx
tYmQ55CLaU5QHqFBfpLPtrxbRdsENS25dilV0qPGEiwwxPZ5cCwdbtm5Ib57gdCF
fsJz7Q14wDLM19wvyAMrhHslPrDYn/2JmS7dwyA/HjQW4s+/IBKn3yVaw1NBF1NI
16kY3g9f5zrZO1wuIynrO6NAb6x1z8kB29CtydwAegt4xjUjTPg9R5Dcqt3nVbr+
I0d98gzXIh41hkeErFovY8eJtzmG32d16SDeLeWMzgMnmKhEvUgEFzu2AtQy1+mE
Ahg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:45 2024 by rpki-client on console-ams.rpki-client.org