Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af168bb0-c2c2-3e84-86f7-3819835ff43a.roa
File:                     af168bb0-c2c2-3e84-86f7-3819835ff43a.roa (raw, json)
Hash identifier:          hwGwjwamriOWZs3ryZobfuiWh4jw1u5C4s8qQll9lhs=
Subject key identifier:   44:4E:C3:03:E1:30:BC:93:68:DB:A7:E7:14:02:5C:8D:97:BA:CB:C9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A25E0E94941FDEEBE7780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af168bb0-c2c2-3e84-86f7-3819835ff43a.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7015
IP address blocks:        68.87.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:25:e0:e9:49:41:fd:ee:be:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=31ff6111-4314-439f-9808-0364223db0e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7f:c7:df:26:15:24:09:e6:b2:8d:6d:e0:30:
                    cf:f7:b7:24:88:40:91:c9:be:48:2b:f8:b0:d9:e8:
                    42:5f:15:c4:50:a6:12:6c:93:86:0b:2f:4b:25:a1:
                    a8:a7:08:be:f1:2c:79:70:03:3b:ff:ff:77:fc:c3:
                    e9:d7:b3:08:cb:68:10:cf:ff:01:0b:0f:91:f5:ca:
                    84:80:f6:f1:bb:88:7a:09:c9:86:f9:87:66:ea:ac:
                    7c:d6:2a:74:6f:f7:d2:0c:90:96:05:13:3e:72:84:
                    63:03:69:5f:13:39:8a:ae:d2:2b:41:7b:80:18:c3:
                    8d:9b:7d:35:8e:76:55:3f:fc:2f:8a:f1:a8:b4:90:
                    d5:99:12:e8:d0:b6:08:78:57:62:eb:a7:ef:69:49:
                    4b:03:a1:41:96:f8:b7:bb:1f:f1:76:b3:4f:53:0d:
                    c2:e7:7d:66:10:33:2f:04:53:17:df:d9:de:a0:aa:
                    02:a6:73:8c:3f:66:45:fd:df:16:5d:6e:f5:dd:6f:
                    81:08:20:35:2c:3f:e7:f4:13:86:9e:36:ff:4c:25:
                    34:3e:81:ec:92:56:e6:d7:5d:1d:c2:e0:5a:de:74:
                    f6:7d:3c:02:eb:a4:80:c0:30:a5:bb:af:01:f6:93:
                    a1:8d:63:7c:21:1b:26:2c:a9:6f:9c:a0:60:20:56:
                    b9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4E:C3:03:E1:30:BC:93:68:DB:A7:E7:14:02:5C:8D:97:BA:CB:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af168bb0-c2c2-3e84-86f7-3819835ff43a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.87.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ae:e6:4e:9c:57:f4:27:b5:a2:fb:35:c8:d1:14:02:ad:45:
         b5:20:0e:ea:d6:95:ad:78:c2:55:e9:51:92:98:fb:65:c7:46:
         ad:11:f2:07:2e:f7:0a:bf:35:8f:38:7f:72:1a:9a:af:aa:35:
         fa:a4:68:ef:75:8b:3a:13:73:b7:23:e8:9e:10:a0:52:64:c4:
         07:d7:71:00:7b:fc:b8:e6:f4:7d:6c:41:48:6a:09:93:00:09:
         d2:e3:46:18:50:21:8d:51:a0:96:ee:62:4c:3a:af:ef:9e:a1:
         23:b3:b7:6f:e0:94:41:73:ba:09:7d:f7:04:36:b3:03:9f:e2:
         f4:cb:71:22:31:e9:bf:7a:97:5d:dd:62:46:7e:ac:26:39:ef:
         f8:28:d8:a5:09:5e:0e:05:ef:62:6f:bd:38:e6:bc:80:06:75:
         2c:05:eb:cc:82:16:93:a2:6f:44:6b:98:8f:64:bd:5a:47:3b:
         95:1a:65:4d:98:01:06:66:6c:50:9a:7f:d2:2b:4c:d3:ec:1c:
         c7:91:58:54:61:ee:6f:0e:9c:1c:95:a5:fa:4c:c6:58:8f:43:
         e8:52:da:a9:74:2a:92:31:fd:c1:bf:1d:ad:cb:b1:ac:06:2c:
         97:7a:c0:fa:18:30:2d:6f:8b:86:79:23:62:f8:07:f0:2d:15:
         7a:e1:b8:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYASiXg6UlB/e6+d4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
MzFmZjYxMTEtNDMxNC00MzlmLTk4MDgtMDM2NDIyM2RiMGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH/H3yYVJAnmso1t4DDP97ckiECRyb5IK/iw
2ehCXxXEUKYSbJOGCy9LJaGopwi+8Sx5cAM7//93/MPp17MIy2gQz/8BCw+R9cqE
gPbxu4h6CcmG+Ydm6qx81ip0b/fSDJCWBRM+coRjA2lfEzmKrtIrQXuAGMONm301
jnZVP/wvivGotJDVmRLo0LYIeFdi66fvaUlLA6FBlvi3ux/xdrNPUw3C531mEDMv
BFMX39neoKoCpnOMP2ZF/d8WXW713W+BCCA1LD/n9BOGnjb/TCU0PoHsklbm110d
wuBa3nT2fTwC66SAwDClu68B9pOhjWN8IRsmLKlvnKBgIFa5TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEROwwPhMLyTaNun5xQCXI2XusvJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWYxNjhiYjAtYzJjMi0z
ZTg0LTg2ZjctMzgxOTgzNWZmNDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFcJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF6u5k6cV/QntaL7NcjRFAKtRbUgDurWla14wlXpUZKY+2XHRq0R8gcu
9wq/NY84f3Iamq+qNfqkaO91izoTc7cj6J4QoFJkxAfXcQB7/Ljm9H1sQUhqCZMA
CdLjRhhQIY1RoJbuYkw6r++eoSOzt2/glEFzugl99wQ2swOf4vTLcSIx6b96l13d
YkZ+rCY57/go2KUJXg4F72JvvTjmvIAGdSwF68yCFpOib0RrmI9kvVpHO5UaZU2Y
AQZmbFCaf9IrTNPsHMeRWFRh7m8OnByVpfpMxliPQ+hS2ql0KpIx/cG/Ha3LsawG
LJd6wPoYMC1vi4Z5I2L4B/AtFXrhuIg=
-----END CERTIFICATE-----
Generated at Sat Jun 15 12:18:29 2024 by rpki-client on console-fra.rpki-client.org