Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5845b5ce-0248-3fc8-bbe6-b56346a072f4.roa
File:                     5845b5ce-0248-3fc8-bbe6-b56346a072f4.roa (raw, json)
Hash identifier:          DqH3UFdhC8vKApcwsOdOejj9zMHbP0H+91Banx/KfOM=
Subject key identifier:   D2:B0:37:E7:E8:39:59:53:54:44:A3:FA:A9:9A:57:F9:18:59:64:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049598E17DF2A93750BECC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5845b5ce-0248-3fc8-bbe6-b56346a072f4.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        68.52.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:59:8e:17:df:2a:93:75:0b:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=4290ee66-7a6f-4dde-8d67-08bcc3b2dc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:75:f3:7e:de:c2:a9:1b:6c:dd:3f:a4:9e:
                    91:ff:87:b7:ad:24:41:03:4e:ab:10:d1:46:5a:c0:
                    1e:5d:9e:e2:73:18:a2:a4:50:ea:08:74:e5:a5:a4:
                    46:66:f9:c2:7f:11:3a:12:8f:c7:6f:fb:7f:0d:44:
                    f0:5d:39:2f:a5:a9:18:34:ca:7b:40:c3:75:b5:aa:
                    6b:31:5d:fd:d6:a5:a4:d8:9e:31:66:be:c6:c8:9b:
                    48:23:4e:0c:99:6e:65:ab:a5:80:8c:7f:76:e8:5b:
                    a1:60:47:16:94:e7:02:7b:c5:81:31:59:ed:7e:f3:
                    91:16:64:33:b6:74:0d:c9:83:ac:ad:d9:9d:57:25:
                    1d:31:3e:5f:ee:82:92:97:f7:b0:f4:24:b4:18:16:
                    af:b9:5b:63:ea:b9:bf:73:be:45:6b:e2:8a:96:7d:
                    7c:ad:ba:ca:f0:ea:8e:48:55:8b:38:fa:1d:78:a2:
                    87:90:2f:0b:d3:3c:d3:e0:54:b2:f2:cc:f7:8c:c0:
                    49:a7:3f:b2:21:60:06:fd:20:a3:84:97:78:2a:d6:
                    b8:c5:01:63:eb:bc:33:a8:d5:db:bb:77:68:7d:c7:
                    32:e1:c0:63:d4:bf:5b:0a:13:26:d4:b5:10:46:ad:
                    66:39:f8:40:45:11:db:9a:99:ec:af:af:e7:17:c4:
                    20:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B0:37:E7:E8:39:59:53:54:44:A3:FA:A9:9A:57:F9:18:59:64:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5845b5ce-0248-3fc8-bbe6-b56346a072f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.52.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:24:be:d9:30:7a:cb:1a:0f:1d:7f:88:74:28:3b:3f:27:c1:
         92:67:cb:92:d9:f0:c3:f2:2b:e8:ca:b0:bd:f3:26:9c:37:d0:
         e9:70:5f:31:70:16:95:28:19:fa:55:f5:bf:c1:e8:6a:3e:26:
         46:04:f8:9f:81:b2:c8:88:32:d4:51:f7:30:15:3b:9d:9b:5f:
         fc:cc:15:eb:09:ce:c8:68:23:53:a1:be:31:66:3a:5d:b1:ec:
         63:08:c3:a3:e3:0b:91:69:37:c9:88:aa:71:37:b5:8e:98:e5:
         01:7a:aa:66:e7:f1:fa:6b:6f:34:0d:aa:10:f8:99:73:ce:9d:
         c5:9c:e1:ff:4e:40:b3:b6:29:c7:a5:90:ec:57:8d:36:b0:d3:
         2c:79:83:19:83:c8:8f:39:07:46:87:10:a5:23:84:e5:cb:a6:
         3c:c6:c7:fc:30:b0:72:17:87:d2:0d:84:78:5b:4e:90:1f:f0:
         bb:0f:d4:6a:53:f7:38:cc:36:7e:89:86:68:0b:9c:81:b3:71:
         cc:7e:72:bb:1b:d7:9c:e0:c3:e6:a7:f3:8c:5b:b4:03:51:4a:
         f4:7d:c1:9d:83:5b:1d:9d:23:4a:41:b6:d7:9b:df:dc:d9:4a:
         40:b4:41:1d:f4:17:ac:3d:a5:aa:ee:ef:72:c2:3f:87:e0:d6:
         e6:87:15:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYASVmOF98qk3UL7MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
NDI5MGVlNjYtN2E2Zi00ZGRlLThkNjctMDhiY2MzYjJkYzZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1x1837ewqkbbN0/pJ6R/4e3rSRBA06rENFG
WsAeXZ7icxiipFDqCHTlpaRGZvnCfxE6Eo/Hb/t/DUTwXTkvpakYNMp7QMN1tapr
MV391qWk2J4xZr7GyJtII04MmW5lq6WAjH926FuhYEcWlOcCe8WBMVntfvORFmQz
tnQNyYOsrdmdVyUdMT5f7oKSl/ew9CS0GBavuVtj6rm/c75Fa+KKln18rbrK8OqO
SFWLOPodeKKHkC8L0zzT4FSy8sz3jMBJpz+yIWAG/SCjhJd4Kta4xQFj67wzqNXb
u3dofccy4cBj1L9bChMm1LUQRq1mOfhARRHbmpnsr6/nF8QgDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNKwN+foOVlTVESj+qmaV/kYWWQ0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTg0NWI1Y2UtMDI0OC0z
ZmM4LWJiZTYtYjU2MzQ2YTA3MmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDTtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADUkvtkwessaDx1/iHQoOz8nwZJny5LZ8MPyK+jKsL3zJpw30OlwXzFw
FpUoGfpV9b/B6Go+JkYE+J+BssiIMtRR9zAVO52bX/zMFesJzshoI1OhvjFmOl2x
7GMIw6PjC5FpN8mIqnE3tY6Y5QF6qmbn8fprbzQNqhD4mXPOncWc4f9OQLO2Kcel
kOxXjTaw0yx5gxmDyI85B0aHEKUjhOXLpjzGx/wwsHIXh9INhHhbTpAf8LsP1GpT
9zjMNn6JhmgLnIGzccx+crsb15zgw+an84xbtANRSvR9wZ2DWx2dI0pBtteb39zZ
SkC0QR30F6w9paru73LCP4fg1uaHFes=
-----END CERTIFICATE-----
Generated at Sat Jun 1 14:43:50 2024 by rpki-client on console-fra.rpki-client.org