Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2b8f928-fa59-4885-89b5-939cf8ccfc08/2fdc0df2-10e0-3bbd-95e6-02382ff9c350.roa
File:                     2fdc0df2-10e0-3bbd-95e6-02382ff9c350.roa (raw, json)
Hash identifier:          x6pkLQJ8rLpO+cOzM24W96c0C9BO5tlWm6vK6QlFdbo=
Subject key identifier:   E1:5B:5C:9A:A3:2C:70:E9:1E:D1:B1:34:E5:05:23:5C:0F:2B:75:C6
Certificate issuer:       /CN=b2b8f928-fa59-4885-89b5-939cf8ccfc08
Certificate serial:       010D0C9F432858456C530CF09B43026E319895C0
Authority key identifier: 25:94:16:19:1B:2E:49:30:7A:DB:48:1C:54:13:E3:F6:EB:40:42:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2b8f928-fa59-4885-89b5-939cf8ccfc08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2b8f928-fa59-4885-89b5-939cf8ccfc08/2fdc0df2-10e0-3bbd-95e6-02382ff9c350.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     16509
IP address blocks:        64.66.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2b8f928-fa59-4885-89b5-939cf8ccfc08/b2b8f928-fa59-4885-89b5-939cf8ccfc08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2b8f928-fa59-4885-89b5-939cf8ccfc08/b2b8f928-fa59-4885-89b5-939cf8ccfc08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2b8f928-fa59-4885-89b5-939cf8ccfc08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:0c:f0:9b:43:02:6e:31:98:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2b8f928-fa59-4885-89b5-939cf8ccfc08
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=241738ff-dc54-47de-89e9-8bd67956f839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:12:2f:67:16:59:2a:9a:1b:ba:f8:4a:31:b6:
                    29:bf:f9:b4:33:56:dd:27:46:b5:ae:c3:48:91:fa:
                    97:88:58:28:e4:82:96:6a:82:fd:7c:72:79:de:60:
                    64:14:6b:4b:ea:67:92:a7:f0:43:b4:c9:e9:bb:cd:
                    76:88:71:59:3b:d5:cd:81:51:e6:fa:8a:78:a7:4d:
                    d7:83:c7:f6:f9:08:84:f4:a0:b6:fa:23:2c:3a:00:
                    55:62:b1:61:d6:41:f9:a7:67:bf:9a:65:ca:5f:b1:
                    17:13:30:63:f4:4c:a7:3f:44:d3:01:17:39:ce:b5:
                    ab:d0:15:52:56:51:dd:6b:2e:61:35:d7:69:75:47:
                    3e:cc:61:12:72:f1:ab:cd:18:86:0f:ed:a8:d2:1f:
                    95:2a:cf:2f:57:45:8e:cf:df:0a:b7:54:40:6d:e8:
                    14:fb:6f:5f:13:da:14:e6:57:6e:37:16:81:3e:e1:
                    ea:7f:83:82:49:6c:e6:27:4d:f8:56:99:3f:a1:a8:
                    9b:07:7b:11:c1:6c:4c:04:ea:a0:2b:1d:38:e5:11:
                    c6:e9:08:c7:b4:5d:f0:00:8b:d4:17:70:4d:73:48:
                    5a:ea:50:3f:bb:62:25:96:59:f1:f9:48:7f:69:d7:
                    64:82:24:bf:07:61:dd:59:98:9d:f5:de:b8:1a:d3:
                    af:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5B:5C:9A:A3:2C:70:E9:1E:D1:B1:34:E5:05:23:5C:0F:2B:75:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2b8f928-fa59-4885-89b5-939cf8ccfc08/2fdc0df2-10e0-3bbd-95e6-02382ff9c350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2b8f928-fa59-4885-89b5-939cf8ccfc08/b2b8f928-fa59-4885-89b5-939cf8ccfc08.crl

            X509v3 Authority Key Identifier:
                keyid:25:94:16:19:1B:2E:49:30:7A:DB:48:1C:54:13:E3:F6:EB:40:42:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2b8f928-fa59-4885-89b5-939cf8ccfc08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.66.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:41:0a:09:12:64:0a:08:e6:33:9e:61:67:64:56:fb:d6:7b:
         7f:5e:a2:13:84:ff:44:0a:70:9a:c6:25:d9:9f:80:b8:ef:dd:
         6e:58:1e:17:3f:c5:a3:a7:eb:87:9c:5c:f0:7a:27:c5:cd:e7:
         ad:58:2a:d5:70:77:23:67:3d:98:93:90:7f:a2:72:2b:ec:ab:
         b0:f4:9f:0c:3f:34:f0:5d:fd:69:73:2d:ba:2f:fe:4d:e5:df:
         2e:ee:92:0d:50:14:f9:63:0e:f8:ea:14:c4:48:a7:99:67:9f:
         f7:26:b4:11:22:53:45:86:a0:cb:2f:6a:d3:d0:34:12:78:67:
         00:1c:8e:ef:99:57:bb:cd:7d:a8:06:64:d3:c9:0a:fa:bd:5f:
         95:66:0a:61:68:a0:55:eb:9a:50:72:0f:4d:68:49:f5:26:15:
         72:fb:ac:e7:4b:3b:03:ab:2f:fa:2f:10:40:60:75:2c:76:c2:
         8c:ff:64:8e:52:6d:51:17:80:66:b4:79:a3:27:13:d1:7b:5f:
         2c:a3:c6:e3:66:a3:15:8b:18:5c:82:cc:ae:26:44:e8:ee:e3:
         c7:1f:d2:60:bb:35:2e:2f:b9:9f:c9:9b:6a:51:16:f1:e0:6c:
         34:94:2b:56:85:e3:53:c7:0d:4c:97:51:ca:bb:6d:14:86:93:
         f3:d3:2b:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVsUwzwm0MCbjGYlcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJiOGY5MjgtZmE1OS00ODg1LTg5YjUtOTM5Y2Y4Y2Nm
YzA4MB4XDTI0MDQwMzEzMDAzN1oXDTI0MDcwMjEzMDAzN1owLzEtMCsGA1UEAxMk
MjQxNzM4ZmYtZGM1NC00N2RlLTg5ZTktOGJkNjc5NTZmODM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBIvZxZZKpobuvhKMbYpv/m0M1bdJ0a1rsNI
kfqXiFgo5IKWaoL9fHJ53mBkFGtL6meSp/BDtMnpu812iHFZO9XNgVHm+op4p03X
g8f2+QiE9KC2+iMsOgBVYrFh1kH5p2e/mmXKX7EXEzBj9EynP0TTARc5zrWr0BVS
VlHday5hNddpdUc+zGEScvGrzRiGD+2o0h+VKs8vV0WOz98Kt1RAbegU+29fE9oU
5lduNxaBPuHqf4OCSWzmJ034Vpk/oaibB3sRwWxMBOqgKx045RHG6QjHtF3wAIvU
F3BNc0ha6lA/u2Illlnx+Uh/addkgiS/B2HdWZid9d64GtOv0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOFbXJqjLHDpHtGxNOUFI1wPK3XGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmI4
ZjkyOC1mYTU5LTQ4ODUtODliNS05MzljZjhjY2ZjMDgvMmZkYzBkZjItMTBlMC0z
YmJkLTk1ZTYtMDIzODJmZjljMzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJiOGY5MjgtZmE1OS00ODg1LTg5
YjUtOTM5Y2Y4Y2NmYzA4L2IyYjhmOTI4LWZhNTktNDg4NS04OWI1LTkzOWNmOGNj
ZmMwOC5jcmwwHwYDVR0jBBgwFoAUJZQWGRsuSTB620gcVBPj9utAQskwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmI4ZjkyOC1mYTU5LTQ4ODUtODliNS05Mzlj
ZjhjY2ZjMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEItMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5BCgkSZAoI5jOeYWdkVvvWe39eohOE/0QKcJrGJdmfgLjv3W5YHhc/
xaOn64ecXPB6J8XN561YKtVwdyNnPZiTkH+icivsq7D0nww/NPBd/WlzLbov/k3l
3y7ukg1QFPljDvjqFMRIp5lnn/cmtBEiU0WGoMsvatPQNBJ4ZwAcju+ZV7vNfagG
ZNPJCvq9X5VmCmFooFXrmlByD01oSfUmFXL7rOdLOwOrL/ovEEBgdSx2woz/ZI5S
bVEXgGa0eaMnE9F7XyyjxuNmoxWLGFyCzK4mROju48cf0mC7NS4vuZ/Jm2pRFvHg
bDSUK1aF41PHDUyXUcq7bRSGk/PTK6U=
-----END CERTIFICATE-----
Generated at Thu May 2 22:32:02 2024 by rpki-client on console-ams.rpki-client.org