Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/faf7175e-d95d-32d7-b5f6-5c8705e0869b.roa
File:                     faf7175e-d95d-32d7-b5f6-5c8705e0869b.roa (raw, json)
Hash identifier:          HIGR2QvWa1U4OeAvrPl7eazgu5piZUpC2NZrJTxbScY=
Subject key identifier:   4D:8F:47:D4:5F:57:CD:4C:11:DB:E0:92:6E:36:93:D7:EA:17:39:9D
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584693F010032C5174EF04CFB280
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/faf7175e-d95d-32d7-b5f6-5c8705e0869b.roa
Signing time:             Wed 17 Jul 2024 12:00:00 +0000
ROA not before:           Wed 17 Jul 2024 12:00:00 +0000
ROA not after:            Fri 21 Aug 2026 04:00:00 +0000
asID:                     36692
IP address blocks:        67.215.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:93:f0:10:03:2c:51:74:ef:04:cf:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jul 17 12:00:00 2024 GMT
            Not After : Aug 21 04:00:00 2026 GMT
        Subject: CN=e68a4ec9-84b9-4702-9255-e9d48d7a3798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:26:20:2a:4b:b7:be:f5:01:3f:c7:bf:58:19:
                    ac:15:71:18:be:f8:76:66:ae:3e:33:95:ff:52:50:
                    e5:62:f3:8d:1f:3a:d2:51:15:12:5b:dc:18:5a:6b:
                    90:f6:78:17:70:17:db:34:dc:36:44:40:e7:13:43:
                    0f:28:2e:dd:33:d1:b1:ea:87:e8:eb:9c:66:c4:e1:
                    18:b6:39:fc:09:67:d3:d7:33:73:9d:e5:dc:17:9c:
                    96:ae:29:28:25:57:eb:cf:9d:64:19:77:ff:1a:30:
                    8c:ca:aa:c7:a7:40:94:7d:c6:f5:c3:f6:2c:0d:8a:
                    27:20:16:f1:bf:5d:66:93:d4:4a:bc:29:ec:35:a5:
                    91:ec:dc:a5:41:9f:56:fc:c3:63:d6:48:74:8f:bb:
                    25:2e:d3:3a:25:07:52:12:53:78:d3:85:b3:5c:78:
                    2a:a0:d8:35:16:a2:ce:c9:12:ad:46:c2:18:21:2c:
                    86:a6:00:af:8a:e2:ef:ca:2f:6f:97:57:63:f1:3a:
                    a6:34:ea:fd:9e:74:e1:a5:1e:f9:6f:6f:df:e6:7a:
                    ef:bf:b3:7e:83:d9:5d:79:e1:a2:fe:af:d1:e3:af:
                    2a:76:6b:31:73:3b:fb:bc:69:e0:b9:d6:a4:10:50:
                    1c:f0:7c:a6:72:b2:af:64:fe:2a:4b:ee:19:2e:26:
                    5d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8F:47:D4:5F:57:CD:4C:11:DB:E0:92:6E:36:93:D7:EA:17:39:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/faf7175e-d95d-32d7-b5f6-5c8705e0869b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:59:6e:fa:d5:b3:94:09:9a:38:4e:1c:c8:34:d0:30:b0:19:
         1c:24:1b:08:c5:69:c3:cf:f4:bc:70:b5:53:4b:d7:e2:75:c5:
         ce:17:7b:75:f1:85:f4:5a:bf:01:e0:8c:c3:5f:ff:53:84:9d:
         cd:fa:2b:76:4e:92:4d:6a:5e:7d:2a:96:70:99:3c:38:b0:64:
         e8:e4:2a:e9:4f:dd:45:2a:cf:e8:75:1f:09:02:ae:09:d1:9c:
         d9:3f:ad:c8:9a:1a:fb:6e:fa:10:83:eb:5c:2b:94:43:d7:4a:
         c3:c7:72:49:d4:6a:10:b3:a1:33:6d:b2:50:c5:64:cb:81:83:
         94:4e:6d:c3:ec:3e:aa:ec:2f:5a:35:4c:06:1d:5a:34:0b:47:
         8d:5d:cd:8d:ca:85:66:8f:58:e5:4e:c7:45:97:8b:e4:6f:2b:
         60:f0:4f:97:e6:8f:f7:d0:e0:5a:93:20:6a:b0:32:2f:4f:b5:
         68:1d:af:14:70:73:d0:5a:4a:8a:50:8a:1b:c9:95:dd:e6:ca:
         2d:0e:ca:37:19:88:43:ab:26:c0:eb:51:e5:6a:d0:8a:5b:0d:
         bb:35:04:81:02:e6:6e:67:fb:a2:46:f0:14:7a:7e:d1:2c:0e:
         67:57:43:32:8b:45:21:d6:69:6f:94:c4:94:00:66:60:49:f5:
         ec:60:b2:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaT8BADLFF07wTPsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk
ZWZjMB4XDTI0MDcxNzEyMDAwMFoXDTI2MDgyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTY4YTRlYzktODRiOS00NzAyLTkyNTUtZTlkNDhkN2EzNzk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCYgKku3vvUBP8e/WBmsFXEYvvh2Zq4+M5X/
UlDlYvONHzrSURUSW9wYWmuQ9ngXcBfbNNw2REDnE0MPKC7dM9Gx6ofo65xmxOEY
tjn8CWfT1zNzneXcF5yWrikoJVfrz51kGXf/GjCMyqrHp0CUfcb1w/YsDYonIBbx
v11mk9RKvCnsNaWR7NylQZ9W/MNj1kh0j7slLtM6JQdSElN404WzXHgqoNg1FqLO
yRKtRsIYISyGpgCviuLvyi9vl1dj8TqmNOr9nnThpR75b2/f5nrvv7N+g9ldeeGi
/q/R468qdmsxczv7vGngudakEFAc8HymcrKvZP4qS+4ZLiZdEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE2PR9RfV81MEdvgkm42k9fqFzmdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj
YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvZmFmNzE3NWUtZDk1ZC0z
MmQ3LWI1ZjYtNWM4NzA1ZTA4NjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm
MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi
ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw
NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9dYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALVZbvrVs5QJmjhOHMg00DCwGRwkGwjFacPP9LxwtVNL1+J1xc4Xe3Xx
hfRavwHgjMNf/1OEnc36K3ZOkk1qXn0qlnCZPDiwZOjkKulP3UUqz+h1HwkCrgnR
nNk/rciaGvtu+hCD61wrlEPXSsPHcknUahCzoTNtslDFZMuBg5RObcPsPqrsL1o1
TAYdWjQLR41dzY3KhWaPWOVOx0WXi+RvK2DwT5fmj/fQ4FqTIGqwMi9PtWgdrxRw
c9BaSopQihvJld3myi0OyjcZiEOrJsDrUeVq0IpbDbs1BIEC5m5n+6JG8BR6ftEs
DmdXQzKLRSHWaW+UxJQAZmBJ9exgsl4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:36 2024 by rpki-client on console-ams.rpki-client.org