Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c556dbfe-b6d5-3157-8015-0f074ae4fe2d.roa
File:                     c556dbfe-b6d5-3157-8015-0f074ae4fe2d.roa (raw, json)
Hash identifier:          z/gDr0SIlimtA3WpGJu0xShckHirydJqoPxZeDraW7w=
Subject key identifier:   74:48:F4:64:58:C0:8C:49:82:29:CF:7E:FC:7C:74:E1:1A:5C:B9:B7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFEEDCE928E275E3028900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c556dbfe-b6d5-3157-8015-0f074ae4fe2d.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     54288
IP address blocks:        64.62.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:ee:dc:e9:28:e2:75:e3:02:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=5d990ddc-fefb-4c9b-8960-76d8ab6b4dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6c:64:fd:a6:a9:a2:58:68:25:da:e0:28:14:
                    7d:e9:9e:06:6e:66:2e:78:d9:73:f4:17:f4:6d:b9:
                    4d:d1:48:2c:d7:d5:10:30:cb:08:0a:6e:c0:ba:1c:
                    09:67:f6:24:83:ea:93:e0:23:0e:d5:d7:53:31:fb:
                    81:c9:c2:15:b3:17:27:d8:1b:d5:12:78:02:25:23:
                    6c:59:2b:6e:81:1c:0f:b1:6b:04:bb:02:74:fc:8a:
                    b4:8f:14:a3:55:f1:f3:8f:87:5d:ad:4b:b2:45:51:
                    1b:a3:af:13:80:0e:4e:85:71:7b:1f:53:05:48:7d:
                    a6:b4:bd:4d:e1:6d:d7:f4:29:71:ff:b3:42:51:45:
                    ce:9e:d9:ad:99:00:33:83:e1:30:f5:bc:62:10:e5:
                    e3:d1:27:a3:54:fb:ab:b8:c0:15:c0:e7:d8:58:a6:
                    10:18:d5:61:38:24:99:c7:8b:25:71:44:dc:17:1e:
                    e6:9d:2a:2f:40:bc:c2:49:b9:ad:a6:ad:04:14:76:
                    ae:34:b4:e4:d4:ab:92:9a:d3:7c:1e:00:f4:3c:c5:
                    2f:28:c6:ac:4d:79:47:f7:4d:e2:68:cc:4c:06:6b:
                    bc:c2:e6:71:f5:79:55:17:3a:a7:3a:e7:40:27:9c:
                    e7:b7:52:65:2c:da:53:f1:16:ff:53:00:ad:93:f2:
                    e7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:48:F4:64:58:C0:8C:49:82:29:CF:7E:FC:7C:74:E1:1A:5C:B9:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c556dbfe-b6d5-3157-8015-0f074ae4fe2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:17:a8:17:7a:b6:a8:66:3d:e8:43:8a:fb:b8:f0:98:61:03:
         8e:c7:c6:4c:b4:6b:8d:c8:53:ad:6f:53:1b:dd:55:99:40:74:
         cc:e5:d8:98:6a:78:8d:3d:9e:4f:6f:da:41:ae:29:b3:06:f1:
         07:20:cb:29:b0:65:a5:e0:eb:cb:da:4d:d8:e9:18:61:8a:c6:
         c9:a7:8c:33:fe:2e:6c:b5:57:e7:b4:eb:ff:5e:c8:7f:3c:cd:
         fc:24:d4:24:c3:47:8a:83:31:dc:2d:7f:d0:c2:a6:7a:83:71:
         64:e9:b9:06:eb:63:fa:6b:f6:87:fe:a3:99:04:93:b2:85:a4:
         bb:10:05:6f:ca:d9:9d:43:a3:20:d7:7a:d0:8c:ce:cd:43:c3:
         8a:03:8f:a4:28:3b:d0:8d:57:76:eb:12:53:ea:ab:00:6f:63:
         69:71:93:08:06:59:e8:a0:c4:5a:73:f0:1e:cd:bc:94:59:11:
         17:0e:a8:09:4b:e3:6b:85:05:75:1f:4f:da:bb:8e:2d:93:d1:
         93:ca:a6:54:b6:17:9f:02:31:ec:d3:cc:e3:4f:85:60:04:92:
         75:0f:fa:88:f1:f7:3a:27:d5:85:aa:6e:fe:4b:3c:5b:57:b9:
         97:bc:56:48:94:88:d9:b0:63:5d:06:01:18:8a:51:10:4b:ee:
         c4:6f:92:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZz+7c6SjideMCiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
NWQ5OTBkZGMtZmVmYi00YzliLTg5NjAtNzZkOGFiNmI0ZGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmxk/aapolhoJdrgKBR96Z4GbmYueNlz9Bf0
bblN0Ugs19UQMMsICm7AuhwJZ/Ykg+qT4CMO1ddTMfuBycIVsxcn2BvVEngCJSNs
WStugRwPsWsEuwJ0/Iq0jxSjVfHzj4ddrUuyRVEbo68TgA5OhXF7H1MFSH2mtL1N
4W3X9Clx/7NCUUXOntmtmQAzg+Ew9bxiEOXj0SejVPuruMAVwOfYWKYQGNVhOCSZ
x4slcUTcFx7mnSovQLzCSbmtpq0EFHauNLTk1KuSmtN8HgD0PMUvKMasTXlH903i
aMxMBmu8wuZx9XlVFzqnOudAJ5znt1JlLNpT8Rb/UwCtk/LnSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHRI9GRYwIxJginPfvx8dOEaXLm3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzU1NmRiZmUtYjZkNS0z
MTU3LTgwMTUtMGYwNzRhZTRmZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD7EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkXqBd6tqhmPehDivu48JhhA47Hxky0a43IU61vUxvdVZlAdMzl2Jhq
eI09nk9v2kGuKbMG8QcgyymwZaXg68vaTdjpGGGKxsmnjDP+Lmy1V+e06/9eyH88
zfwk1CTDR4qDMdwtf9DCpnqDcWTpuQbrY/pr9of+o5kEk7KFpLsQBW/K2Z1DoyDX
etCMzs1Dw4oDj6QoO9CNV3brElPqqwBvY2lxkwgGWeigxFpz8B7NvJRZERcOqAlL
42uFBXUfT9q7ji2T0ZPKplS2F58CMezTzONPhWAEknUP+ojx9zon1YWqbv5LPFtX
uZe8VkiUiNmwY10GARiKURBL7sRvknE=
-----END CERTIFICATE-----
Generated at Wed Feb 12 17:26:27 2025 by rpki-client