Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa
File:                     9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa (raw, json)
Hash identifier:          WgU+WTzszmeO09BqxbbtqnxFYUaS110PAMZewIOXujk=
Subject key identifier:   46:8E:41:5E:DF:A4:C9:7A:18:BE:01:78:A7:A1:18:31:23:4F:7B:6A
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F432858489340AC08EDA0D0AF43083040
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     393336
IP address blocks:        64.40.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:ac:08:ed:a0:d0:af:43:08:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=12d0027f-82e6-42fe-bda4-29f10867537d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:51:b2:f1:27:a6:a7:82:96:58:0b:f8:30:
                    18:09:11:52:2e:54:79:76:07:d9:a1:43:00:ae:eb:
                    59:03:e8:54:28:63:4b:0c:ab:94:13:2b:a8:60:5b:
                    04:d7:f0:db:f6:4f:76:ee:45:c6:da:d8:b9:02:98:
                    6c:be:1a:57:88:0f:71:57:94:27:e4:2d:23:8e:42:
                    7f:f7:eb:96:09:a6:79:2f:78:e3:61:ee:cf:3a:ba:
                    4e:80:94:a9:64:cd:7c:8a:8c:96:cb:4c:b6:f8:d3:
                    b4:86:5f:d8:e1:4e:1b:02:99:2b:a2:e7:35:26:83:
                    00:d0:a4:6a:11:29:e7:0d:72:89:6c:11:7b:f2:60:
                    f0:8a:e3:55:61:a0:5c:ed:51:4d:e9:c5:47:3e:21:
                    a7:bc:7c:2f:db:9d:28:b5:d8:3b:50:e3:94:5e:df:
                    24:9b:85:09:6b:a9:c5:92:8e:de:ba:38:47:ae:ef:
                    e8:f1:90:0a:b9:3a:e8:46:32:4c:33:63:43:a1:03:
                    e7:22:33:39:e8:32:70:32:9f:1c:07:a1:d4:10:3e:
                    c3:8b:53:7c:37:16:7e:5d:fa:e9:e0:ce:09:22:54:
                    cd:49:08:ed:05:62:b7:8b:98:ef:63:c8:98:1c:55:
                    d0:38:92:a4:bb:34:6c:d4:f9:67:bb:92:25:28:d6:
                    ed:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8E:41:5E:DF:A4:C9:7A:18:BE:01:78:A7:A1:18:31:23:4F:7B:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d7:9f:1a:cb:fe:7b:49:a8:4b:3a:e9:86:d4:ca:f4:00:99:
         df:23:39:fb:2b:10:0b:bb:85:30:26:7d:2b:7c:8c:6e:73:55:
         9b:58:ce:1e:fe:7d:ef:18:99:cd:7f:cd:df:ef:92:45:a9:b6:
         7a:ba:e2:f9:f6:8b:30:1f:66:9e:fa:a2:df:e8:cd:64:1e:0b:
         e8:09:d1:e0:93:59:8c:38:92:0a:a2:97:9c:7e:41:17:4c:d2:
         9f:9d:7f:a1:0d:23:31:77:90:28:60:7b:dc:f5:4a:7b:48:e1:
         9c:41:8d:0d:4f:4e:b1:7f:9b:28:c5:fa:4f:85:36:04:3e:7a:
         d6:80:3e:f8:3e:69:f6:30:7b:41:e0:2f:cf:da:f7:3f:fc:08:
         2b:18:55:a8:3c:25:d8:c6:cd:83:f9:3b:2f:e0:73:51:38:de:
         b1:e4:b3:ac:4c:f1:bd:28:9d:8c:b4:70:64:a5:2c:74:6f:06:
         93:2c:98:47:8a:a9:a9:e2:b4:cb:45:97:86:8b:99:fc:a0:83:
         fd:dc:c0:48:16:49:08:65:4c:18:c0:48:1c:47:a5:f0:9f:00:
         3d:69:c8:87:8c:50:dd:cf:03:aa:1f:8d:c4:b7:43:ea:8e:6e:
         e9:42:2d:6f:f6:42:f4:77:8e:a6:b2:19:f9:ab:54:f1:c9:4f:
         ca:5a:62:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQKwI7aDQr0MIMEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0
ZWE5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
MTJkMDAyN2YtODJlNi00MmZlLWJkYTQtMjlmMTA4Njc1MzdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6lRsvEnpqeCllgL+DAYCRFSLlR5dgfZoUMA
rutZA+hUKGNLDKuUEyuoYFsE1/Db9k927kXG2ti5AphsvhpXiA9xV5Qn5C0jjkJ/
9+uWCaZ5L3jjYe7POrpOgJSpZM18ioyWy0y2+NO0hl/Y4U4bApkrouc1JoMA0KRq
ESnnDXKJbBF78mDwiuNVYaBc7VFN6cVHPiGnvHwv250otdg7UOOUXt8km4UJa6nF
ko7eujhHru/o8ZAKuTroRjJMM2NDoQPnIjM56DJwMp8cB6HUED7Di1N8NxZ+Xfrp
4M4JIlTNSQjtBWK3i5jvY8iYHFXQOJKkuzRs1Plnu5IlKNbtGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEaOQV7fpMl6GL4BeKehGDEjT3tqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi
MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvOTY4N2Y5ZDYtYTZjZi0z
NjAzLWJmMmYtODcyN2Y4MWFhYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3
MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj
NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5
ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCgaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEfXnxrL/ntJqEs66YbUyvQAmd8jOfsrEAu7hTAmfSt8jG5zVZtYzh7+
fe8Ymc1/zd/vkkWptnq64vn2izAfZp76ot/ozWQeC+gJ0eCTWYw4kgqil5x+QRdM
0p+df6ENIzF3kChge9z1SntI4ZxBjQ1PTrF/myjF+k+FNgQ+etaAPvg+afYwe0Hg
L8/a9z/8CCsYVag8JdjGzYP5Oy/gc1E43rHks6xM8b0onYy0cGSlLHRvBpMsmEeK
qanitMtFl4aLmfygg/3cwEgWSQhlTBjASBxHpfCfAD1pyIeMUN3PA6ofjcS3Q+qO
bulCLW/2QvR3jqayGfmrVPHJT8paYrw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:06 2025 by rpki-client