Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2ac45368-7658-3908-9f64-b7c6146232bd.roa
File:                     2ac45368-7658-3908-9f64-b7c6146232bd.roa (raw, json)
Hash identifier:          9WNCAC1NCk/MAAIcZvSduFRwblvRi9uG1txypEW3EJ4=
Subject key identifier:   9E:49:15:B7:B2:61:02:90:9E:B1:DD:08:59:A5:AB:F8:4A:6F:1C:BB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D28AAC17EDA367E54D99540
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2ac45368-7658-3908-9f64-b7c6146232bd.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        67.69.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:28:aa:c1:7e:da:36:7e:54:d9:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=9bc1fa01-e6fa-4851-a426-dcae49942a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:2b:66:78:11:4e:24:45:6c:df:c6:b7:58:
                    0d:28:05:82:c9:59:97:b2:49:8d:df:61:24:0c:29:
                    27:57:f2:f0:d8:ee:36:f2:c0:59:8e:28:35:28:52:
                    53:d3:1b:b3:2e:8f:eb:df:bc:24:87:11:49:70:f0:
                    42:7c:ea:97:69:fd:93:ca:c7:a5:aa:91:f3:fd:b3:
                    77:13:5e:4a:53:14:ae:e9:3f:f5:60:98:fe:5e:6c:
                    47:c3:da:20:1f:16:eb:e9:b4:a9:f3:86:fd:4c:fc:
                    64:31:51:65:37:8c:0d:51:f4:03:13:e8:db:14:67:
                    f3:2d:97:05:4d:c5:00:0d:94:85:89:fe:89:4d:c4:
                    8e:e4:47:af:84:da:a5:4e:3e:3a:1b:82:b6:81:35:
                    0d:20:4d:78:80:19:21:c5:fb:2d:49:0c:c1:d2:8c:
                    45:8c:90:2b:f8:19:44:36:e7:fb:e4:cd:cc:d8:05:
                    b4:e0:e6:7c:17:ea:af:65:ae:9d:9d:6f:af:b1:b3:
                    75:a8:5b:98:6d:b7:4c:ca:cd:0b:ca:49:08:a4:fe:
                    6a:d6:7c:4e:93:94:a9:ee:19:32:49:a2:6f:d9:20:
                    ff:8d:b7:b8:2c:b7:8c:55:74:4e:42:2b:82:aa:4c:
                    6c:7f:a7:8b:55:4f:00:1c:56:1f:ee:f2:b8:99:a0:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:49:15:B7:B2:61:02:90:9E:B1:DD:08:59:A5:AB:F8:4A:6F:1C:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2ac45368-7658-3908-9f64-b7c6146232bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0b:87:9f:a6:7c:87:34:3a:b5:bb:e5:9e:21:2d:f2:99:19:
         44:d6:15:ba:d5:73:eb:27:c7:e7:f7:ef:d4:d0:e9:0a:d7:e1:
         fe:e4:ab:59:67:86:09:d5:8f:cc:54:4c:8e:1d:86:9c:ac:cd:
         e7:09:3a:e0:56:68:c4:37:52:04:23:70:c3:96:ad:73:34:ff:
         51:cf:02:df:e1:26:90:51:89:38:8d:f6:fb:4a:34:83:ca:35:
         88:26:c1:e0:12:d2:52:e1:f6:36:75:65:b6:09:4a:7c:25:ec:
         80:16:83:bc:8e:ca:13:36:db:b1:17:be:7d:59:2e:77:d8:0c:
         e7:26:5f:5c:b1:a6:02:50:e2:e6:1b:05:78:41:c0:2a:8b:09:
         83:46:4b:5b:aa:c2:b7:e2:fe:09:03:83:14:4a:c4:e5:20:5d:
         af:b9:a2:2e:da:78:9a:7c:c7:d8:83:26:d2:c1:b9:77:b6:4a:
         0b:91:fc:f7:0a:0f:a4:c8:ed:38:97:db:af:9f:43:43:c3:8d:
         62:b9:fe:9e:1d:28:b0:97:78:97:a8:f8:23:03:fe:0a:c7:0b:
         92:87:0c:51:f2:5e:ae:1f:50:06:9c:15:22:dd:f0:28:1e:4d:
         56:d5:2c:28:df:8f:96:da:60:02:1b:2a:65:3c:8c:4e:74:c8:
         83:2d:74:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYtKKrBfto2flTZlUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDYxMDEyMDAwMFoXDTI0MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk
OWJjMWZhMDEtZTZmYS00ODUxLWE0MjYtZGNhZTQ5OTQyYTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkQrZngRTiRFbN/Gt1gNKAWCyVmXskmN32Ek
DCknV/Lw2O428sBZjig1KFJT0xuzLo/r37wkhxFJcPBCfOqXaf2TyselqpHz/bN3
E15KUxSu6T/1YJj+XmxHw9ogHxbr6bSp84b9TPxkMVFlN4wNUfQDE+jbFGfzLZcF
TcUADZSFif6JTcSO5EevhNqlTj46G4K2gTUNIE14gBkhxfstSQzB0oxFjJAr+BlE
Nuf75M3M2AW04OZ8F+qvZa6dnW+vsbN1qFuYbbdMys0LykkIpP5q1nxOk5Sp7hky
SaJv2SD/jbe4LLeMVXROQiuCqkxsf6eLVU8AHFYf7vK4maAADwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ5JFbeyYQKQnrHdCFmlq/hKbxy7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMmFjNDUzNjgtNzY1OC0z
OTA4LTlmNjQtYjdjNjE0NjIzMmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ0VOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABwLh5+mfIc0OrW75Z4hLfKZGUTWFbrVc+snx+f379TQ6QrX4f7kq1ln
hgnVj8xUTI4dhpyszecJOuBWaMQ3UgQjcMOWrXM0/1HPAt/hJpBRiTiN9vtKNIPK
NYgmweAS0lLh9jZ1ZbYJSnwl7IAWg7yOyhM227EXvn1ZLnfYDOcmX1yxpgJQ4uYb
BXhBwCqLCYNGS1uqwrfi/gkDgxRKxOUgXa+5oi7aeJp8x9iDJtLBuXe2SguR/PcK
D6TI7TiX26+fQ0PDjWK5/p4dKLCXeJeo+CMD/grHC5KHDFHyXq4fUAacFSLd8Cge
TVbVLCjfj5baYAIbKmU8jE50yIMtdD4=
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:46:48 2024 by rpki-client on console-fra.rpki-client.org