Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f9e471de-ee98-38ae-8a4d-74161f7485df.roa
File:                     f9e471de-ee98-38ae-8a4d-74161f7485df.roa (raw, json)
Hash identifier:          4MvPxAG+j2bgdrUP7NngYiTnJpXN0QHv4AkY10Pr9D0=
Subject key identifier:   2B:E5:EF:C6:A3:E9:EF:F8:18:86:EA:83:D6:E8:75:B3:FA:67:D0:4C
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285847537B6C60410555E8C00F8680
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f9e471de-ee98-38ae-8a4d-74161f7485df.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     30103
IP address blocks:        64.224.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:6c:60:41:05:55:e8:c0:0f:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=af8109d3-78d8-4062-9d7f-691584f855fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:61:bc:46:54:0f:2c:93:73:da:60:94:d8:64:
                    c0:d4:d2:18:e5:89:f5:a4:30:18:70:15:a1:60:d4:
                    8c:c4:0c:21:f0:c0:4e:cd:37:7e:8a:b0:81:f7:41:
                    a0:8f:36:9a:80:e1:c3:55:3b:28:56:4a:17:2e:e4:
                    53:d9:75:19:bb:8d:6d:b9:1f:23:bc:25:d9:41:54:
                    59:18:d4:03:0f:12:51:d0:4d:7c:57:fb:c9:e7:76:
                    71:aa:b9:03:9b:0b:bc:8b:e7:49:80:ab:ab:75:be:
                    7f:c2:4f:b0:a6:54:d5:ff:c3:c7:3e:78:a0:76:db:
                    63:87:22:b5:8a:d9:7e:f3:d3:01:21:19:78:ef:83:
                    05:bb:2a:e8:08:c2:cd:2c:32:21:a3:2a:34:db:f4:
                    c8:5a:e6:72:a9:d6:04:9b:c3:4e:43:d8:83:e8:f9:
                    5e:08:38:06:4c:c7:8d:95:cf:b3:24:28:90:3d:d2:
                    02:f3:23:63:00:13:09:89:83:bd:98:c1:fb:04:cf:
                    0a:d7:b1:a9:cb:b5:34:59:cc:3d:77:78:34:0d:f1:
                    8a:98:1f:cd:6f:8c:ab:39:f3:b8:c0:f0:87:a5:16:
                    e0:6b:4d:44:77:f4:b7:6e:c1:7e:0f:f7:b4:f4:2e:
                    9b:1a:9c:a9:17:f3:65:72:77:92:c7:84:d4:80:d1:
                    f3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E5:EF:C6:A3:E9:EF:F8:18:86:EA:83:D6:E8:75:B3:FA:67:D0:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f9e471de-ee98-38ae-8a4d-74161f7485df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.224.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:47:ee:2e:33:45:6e:de:45:bd:2e:02:51:10:1d:b9:af:e4:
         a2:76:34:c6:78:7c:11:50:c3:e3:55:a9:4b:7b:c9:d9:ec:06:
         06:17:b1:25:77:06:0a:4e:3f:53:3c:87:9b:7e:24:a2:67:6f:
         82:d2:78:b8:e0:dd:9a:c3:ef:26:d4:e4:bf:f6:2f:4a:f9:08:
         df:6e:ea:53:d0:be:89:25:cc:38:58:f6:0d:f7:f7:95:ed:e2:
         6c:11:2e:3c:8c:d6:22:f9:c2:ee:1b:7a:5c:a8:1a:a9:c0:0e:
         43:cf:68:aa:22:50:39:40:16:1a:07:0a:39:81:89:da:e8:c1:
         77:cf:87:81:a0:60:f9:07:9f:8e:b4:72:52:a6:ca:61:6a:dc:
         44:c4:71:b4:f6:8d:de:22:39:0d:02:7d:db:f4:f6:fb:60:97:
         af:56:3e:d7:c6:31:0b:b0:31:7b:61:4c:06:fa:12:8c:fa:ce:
         6e:ad:91:34:16:a3:7b:8a:89:a9:61:9a:ce:c7:00:0b:d4:ea:
         34:21:24:60:df:aa:79:93:7a:26:59:28:53:0e:66:fb:f1:49:
         8e:8a:5b:22:ea:aa:58:1d:d1:4f:69:2d:cf:e9:d2:70:37:0a:
         aa:29:43:86:b0:df:40:28:15:1f:09:c8:f1:b4:91:07:15:03:
         1a:f9:57:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdTe2xgQQVV6MAPhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk
YWY4MTA5ZDMtNzhkOC00MDYyLTlkN2YtNjkxNTg0Zjg1NWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9mG8RlQPLJNz2mCU2GTA1NIY5Yn1pDAYcBWh
YNSMxAwh8MBOzTd+irCB90GgjzaagOHDVTsoVkoXLuRT2XUZu41tuR8jvCXZQVRZ
GNQDDxJR0E18V/vJ53ZxqrkDmwu8i+dJgKurdb5/wk+wplTV/8PHPnigdttjhyK1
itl+89MBIRl474MFuyroCMLNLDIhoyo02/TIWuZyqdYEm8NOQ9iD6PleCDgGTMeN
lc+zJCiQPdIC8yNjABMJiYO9mMH7BM8K17Gpy7U0Wcw9d3g0DfGKmB/Nb4yrOfO4
wPCHpRbga01Ed/S3bsF+D/e09C6bGpypF/NlcneSx4TUgNHzawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvl78aj6e/4GIbqg9bodbP6Z9BMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZjllNDcxZGUtZWU5OC0z
OGFlLThhNGQtNzQxNjFmNzQ4NWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQOAgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAItH7i4zRW7eRb0uAlEQHbmv5KJ2NMZ4fBFQw+NVqUt7ydnsBgYXsSV3
BgpOP1M8h5t+JKJnb4LSeLjg3ZrD7ybU5L/2L0r5CN9u6lPQvoklzDhY9g3395Xt
4mwRLjyM1iL5wu4belyoGqnADkPPaKoiUDlAFhoHCjmBidrowXfPh4GgYPkHn460
clKmymFq3ETEcbT2jd4iOQ0Cfdv09vtgl69WPtfGMQuwMXthTAb6Eoz6zm6tkTQW
o3uKialhms7HAAvU6jQhJGDfqnmTeiZZKFMOZvvxSY6KWyLqqlgd0U9pLc/p0nA3
CqopQ4aw30AoFR8JyPG0kQcVAxr5V+0=
-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:26 2024 by rpki-client on console-fra.rpki-client.org