Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/4e7d8a90-78e9-308a-898b-13d40c2410ea.roa
File:                     4e7d8a90-78e9-308a-898b-13d40c2410ea.roa (raw, json)
Hash identifier:          VOQM52nfHxTWZ0S9KZ2ZVu+oVU9TNZwi1fjHy9L/ifI=
Subject key identifier:   97:BC:A4:1D:92:E3:1C:7C:4A:28:F5:AD:7A:62:FC:8F:39:C9:D8:CB
Certificate issuer:       /CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85
Certificate serial:       010D0C9F4328584566BDAFBAC17E0C2BE35C1F00
Authority key identifier: 76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/4e7d8a90-78e9-308a-898b-13d40c2410ea.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     6327
IP address blocks:        64.59.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Jun 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:af:ba:c1:7e:0c:2b:e3:5c:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=6767107f-0d9c-4282-8c51-82dab9ab9aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:5f:22:3a:09:3f:5b:d3:39:8c:bf:90:39:
                    95:be:a1:32:f9:13:a3:30:9e:27:4e:bd:f5:56:b7:
                    e0:cf:a5:fe:65:b8:3b:07:51:df:c8:d2:4c:4e:f3:
                    c9:4b:6d:3a:2e:2e:d2:30:50:e4:53:d3:c9:31:05:
                    62:d2:43:b7:b5:23:9a:d8:62:80:54:51:e2:83:d6:
                    d2:af:da:35:48:58:27:ad:bf:91:6f:df:a9:80:95:
                    8a:77:b8:59:30:80:89:15:46:fb:7c:ad:9c:ce:2c:
                    1a:25:eb:b2:49:7d:56:ef:12:78:86:21:1f:3c:b6:
                    7b:8c:14:d2:91:13:7e:19:d8:3c:9d:ac:f4:71:08:
                    a1:ff:42:54:49:91:93:12:c1:83:77:c9:12:09:aa:
                    dd:31:cb:6f:b8:48:a0:7a:d9:40:e4:e9:54:a9:1b:
                    62:e5:fd:b4:b4:49:98:9d:5b:34:90:f1:2e:d4:ef:
                    42:e7:81:2c:2d:7f:a3:df:1d:ab:9e:64:87:43:61:
                    35:a8:10:c3:02:cd:b9:bc:13:b5:2c:db:d3:31:db:
                    83:cb:ea:18:67:27:43:20:5b:d2:f4:b9:e7:48:f0:
                    57:8f:6d:6a:d4:04:0b:76:89:b6:07:eb:8c:30:4e:
                    eb:f5:66:da:8a:ff:2c:1c:38:c3:37:bb:a9:07:3c:
                    c6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BC:A4:1D:92:E3:1C:7C:4A:28:F5:AD:7A:62:FC:8F:39:C9:D8:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/4e7d8a90-78e9-308a-898b-13d40c2410ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl

            X509v3 Authority Key Identifier:
                keyid:76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.59.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:46:ea:fd:37:3f:aa:7f:69:e3:84:4c:a4:24:4c:ac:b9:9f:
         4b:6d:2a:6b:2f:09:0c:68:0d:d3:a5:e8:94:ab:e2:38:fb:00:
         84:76:d2:99:1a:21:51:86:a2:f8:06:7d:5b:60:9a:84:7e:f2:
         c2:52:c6:a1:df:93:3b:dc:75:99:9b:92:1f:09:0e:81:bb:91:
         70:83:d4:a9:6c:53:b5:c5:92:0c:11:6c:a0:6e:87:28:e5:8e:
         81:b5:e5:87:06:5a:40:dc:81:2d:25:f7:8b:ea:21:85:3a:b6:
         15:b9:fd:61:5b:42:ae:1f:59:fd:0b:c1:dc:4b:e2:d0:b1:f7:
         80:38:71:2d:8c:b3:0c:b9:6a:43:e1:ca:4a:a1:8d:28:23:ac:
         44:05:df:76:44:a3:5d:e2:c8:0e:a6:f3:68:ee:1b:6f:4d:35:
         d2:27:08:3f:3d:64:92:98:d5:22:0d:f9:de:e4:7c:dd:19:7d:
         f6:30:65:e1:ac:c8:c2:2e:f8:9b:ee:9b:2c:dc:25:5a:19:a2:
         0e:1f:12:14:fa:d7:c6:72:1c:be:38:03:dc:f6:28:bf:f5:bb:
         6c:32:af:cb:83:55:02:44:e6:66:63:4f:3d:07:3d:c2:99:e2:
         6a:46:6f:92:6a:2f:7e:cf:22:d7:26:91:a1:35:4e:e9:7b:8d:
         3e:d3:4c:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVmva+6wX4MK+NcHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmOWEzZmMtM2E4Yy00N2U0LTkxZmEtZDc4MDhiMDZh
ZTg1MB4XDTI0MDQwMTEzMDAzNloXDTI0MDYzMDEzMDAzNlowLzEtMCsGA1UEAxMk
Njc2NzEwN2YtMGQ5Yy00MjgyLThjNTEtODJkYWI5YWI5YWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj1fIjoJP1vTOYy/kDmVvqEy+ROjMJ4nTr31
Vrfgz6X+Zbg7B1HfyNJMTvPJS206Li7SMFDkU9PJMQVi0kO3tSOa2GKAVFHig9bS
r9o1SFgnrb+Rb9+pgJWKd7hZMICJFUb7fK2cziwaJeuySX1W7xJ4hiEfPLZ7jBTS
kRN+Gdg8naz0cQih/0JUSZGTEsGDd8kSCardMctvuEigetlA5OlUqRti5f20tEmY
nVs0kPEu1O9C54EsLX+j3x2rnmSHQ2E1qBDDAs25vBO1LNvTMduDy+oYZydDIFvS
9LnnSPBXj21q1AQLdom2B+uMME7r9Wbaiv8sHDjDN7upBzzGhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJe8pB2S4xx8Sij1rXpi/I85ydjLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5
YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgwOGIwNmFlODUvNGU3ZDhhOTAtNzhlOS0z
MDhhLTg5OGItMTNkNDBjMjQxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFmOWEzZmMtM2E4Yy00N2U0LTkx
ZmEtZDc4MDhiMDZhZTg1L2FhZjlhM2ZjLTNhOGMtNDdlNC05MWZhLWQ3ODA4YjA2
YWU4NS5jcmwwHwYDVR0jBBgwFoAUdg0UkffgTh768ACPZCs6jJ4PzkYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgw
OGIwNmFlODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQDuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdG6v03P6p/aeOETKQkTKy5n0ttKmsvCQxoDdOl6JSr4jj7AIR20pka
IVGGovgGfVtgmoR+8sJSxqHfkzvcdZmbkh8JDoG7kXCD1KlsU7XFkgwRbKBuhyjl
joG15YcGWkDcgS0l94vqIYU6thW5/WFbQq4fWf0LwdxL4tCx94A4cS2Mswy5akPh
ykqhjSgjrEQF33ZEo13iyA6m82juG29NNdInCD89ZJKY1SIN+d7kfN0ZffYwZeGs
yMIu+JvumyzcJVoZog4fEhT618ZyHL44A9z2KL/1u2wyr8uDVQJE5mZjTz0HPcKZ
4mpGb5JqL37PItcmkaE1Tul7jT7TTAE=
-----END CERTIFICATE-----
Generated at Mon Jun 10 22:17:51 2024 by rpki-client on console-ams.rpki-client.org