Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/777db9e1-92d5-362c-9ce1-b5c0cfb753bd.roa
File:                     777db9e1-92d5-362c-9ce1-b5c0cfb753bd.roa (raw, json)
Hash identifier:          eg6pSLKpBOHo1Ut8k9JpvQvZwVgjzKi2wN6I299IbFI=
Subject key identifier:   A9:16:DB:4B:16:D2:27:BF:77:8A:BE:1F:2A:AA:CA:45:C7:8D:7B:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584762D67EEFF13157D10E173900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/777db9e1-92d5-362c-9ce1-b5c0cfb753bd.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     36733
IP address blocks:        68.86.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:7e:ef:f1:31:57:d1:0e:17:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=666ea742-2bcb-4e1d-82dd-913cbc54341d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:19:8d:1b:3a:0d:2f:f4:9e:96:bb:58:77:78:
                    91:fb:cb:19:d1:7e:86:b2:de:44:77:df:5b:91:e2:
                    d1:da:a2:da:d0:70:cb:9e:c6:a1:22:3e:cd:32:d2:
                    8a:4d:17:7f:b6:fc:2c:bc:b9:2c:51:5b:56:d8:02:
                    48:13:86:d7:c8:ca:07:73:8e:2d:2f:b4:fa:51:34:
                    37:a7:21:33:6a:06:fd:28:ff:e5:6d:c4:9f:57:23:
                    2c:56:85:c1:86:d8:f7:3c:fc:12:e6:d1:4b:ba:34:
                    08:d3:6c:5a:13:67:9c:72:0c:bb:b0:30:15:97:3a:
                    ec:48:9d:1f:6b:17:e3:23:b4:4a:42:72:10:6b:fa:
                    9d:36:48:a6:5d:af:7e:26:32:f8:37:05:d9:82:ad:
                    0a:9a:6f:b2:ed:66:b8:16:88:f1:ab:42:e7:16:28:
                    c8:b5:da:16:0a:bf:7e:d6:c3:ea:c2:fb:b0:98:ce:
                    7b:70:21:3d:b9:36:71:ba:e6:f1:cb:07:c9:f6:0a:
                    15:6b:8a:03:c2:b3:9b:be:72:b2:3d:46:8c:94:87:
                    17:57:17:6a:cd:64:73:ae:d3:e3:c7:7d:cd:09:12:
                    7b:47:60:dc:37:9a:a4:5e:a5:08:3d:07:bd:13:1c:
                    13:bb:88:70:d5:05:44:42:71:af:ee:34:3a:12:b0:
                    f0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:16:DB:4B:16:D2:27:BF:77:8A:BE:1F:2A:AA:CA:45:C7:8D:7B:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/777db9e1-92d5-362c-9ce1-b5c0cfb753bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:2b:e7:ea:54:44:6c:6c:ec:37:f7:59:d2:24:d4:07:fc:7c:
         65:6f:6e:90:a9:98:94:a5:a0:62:eb:cf:e8:06:15:1d:8a:2b:
         3d:5b:e6:1b:1b:be:7b:98:93:96:6e:2b:ea:ac:21:88:39:2c:
         b1:f5:e9:ad:8c:a0:93:48:f6:1d:ca:07:d4:b9:c9:df:28:29:
         18:82:76:90:bd:f0:7b:fb:d6:2a:e9:5d:36:26:42:79:bb:f2:
         a4:0f:72:dd:9f:1e:2e:a9:55:49:98:24:53:d9:dd:73:60:4c:
         ba:e6:b1:68:dd:e6:6f:30:b1:ed:a0:34:53:90:b0:67:49:8f:
         23:87:38:0f:8a:76:f4:4d:b7:22:8a:b0:4b:b6:d4:f8:79:ea:
         7a:34:1d:55:95:af:e9:a1:2c:49:f5:63:6b:30:76:03:22:b9:
         ef:04:f6:9c:7d:3e:17:5e:71:56:e2:2e:08:33:79:e9:cb:f4:
         e8:9f:44:64:c8:b9:7b:60:f4:2a:59:45:97:f2:6f:4d:79:e8:
         42:df:63:cb:7d:a3:a9:c5:c9:f4:27:27:6d:2b:77:dc:73:cd:
         b3:04:da:92:1c:a0:8d:5e:71:53:b3:fa:f0:4f:ad:db:5f:6c:
         ab:2d:2b:b5:81:4d:ae:d0:34:47:77:17:f1:2b:04:70:ed:dc:
         b6:52:7f:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdi1n7v8TFX0Q4XOQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk
NjY2ZWE3NDItMmJjYi00ZTFkLTgyZGQtOTEzY2JjNTQzNDFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhmNGzoNL/SelrtYd3iR+8sZ0X6Gst5Ed99b
keLR2qLa0HDLnsahIj7NMtKKTRd/tvwsvLksUVtW2AJIE4bXyMoHc44tL7T6UTQ3
pyEzagb9KP/lbcSfVyMsVoXBhtj3PPwS5tFLujQI02xaE2eccgy7sDAVlzrsSJ0f
axfjI7RKQnIQa/qdNkimXa9+JjL4NwXZgq0Kmm+y7Wa4Fojxq0LnFijItdoWCr9+
1sPqwvuwmM57cCE9uTZxuubxywfJ9goVa4oDwrObvnKyPUaMlIcXVxdqzWRzrtPj
x33NCRJ7R2DcN5qkXqUIPQe9ExwTu4hw1QVEQnGv7jQ6ErDwFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKkW20sW0ie/d4q+HyqqykXHjXtrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzc3ZGI5ZTEtOTJkNS0z
NjJjLTljZTEtYjVjMGNmYjc1M2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFaGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0r5+pURGxs7Df3WdIk1Af8fGVvbpCpmJSloGLrz+gGFR2KKz1b5hsb
vnuYk5ZuK+qsIYg5LLH16a2MoJNI9h3KB9S5yd8oKRiCdpC98Hv71irpXTYmQnm7
8qQPct2fHi6pVUmYJFPZ3XNgTLrmsWjd5m8wse2gNFOQsGdJjyOHOA+KdvRNtyKK
sEu21Ph56no0HVWVr+mhLEn1Y2swdgMiue8E9px9PhdecVbiLggzeenL9OifRGTI
uXtg9CpZRZfyb0156ELfY8t9o6nFyfQnJ20rd9xzzbME2pIcoI1ecVOz+vBPrdtf
bKstK7WBTa7QNEd3F/ErBHDt3LZSf8Q=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:08:10 2024 by rpki-client on console-fra.rpki-client.org