Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf5a45c8-97e5-364e-af7f-dae0688f094a.roa
File:                     cf5a45c8-97e5-364e-af7f-dae0688f094a.roa (raw, json)
Hash identifier:          js/Nq9mNLyyIDtyNF05CHn/ltMgfBEgBL3s2w7ecwPk=
Subject key identifier:   2C:4D:72:2D:82:FA:57:DA:A4:85:1C:A6:CF:E6:1C:72:BF:E3:BA:05
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004998F529B12A0E374DCC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf5a45c8-97e5-364e-af7f-dae0688f094a.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7016
IP address blocks:        68.85.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:98:f5:29:b1:2a:0e:37:4d:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=f6c92273-b11b-48f3-83ac-cb328f604c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:dc:ca:02:63:eb:da:2c:9f:2f:2f:ae:58:
                    ee:06:00:7a:ca:a0:8f:5e:1b:dc:35:68:03:b3:41:
                    5e:92:05:e9:d1:aa:31:7f:05:40:1c:48:bd:f1:bf:
                    ce:96:29:30:82:d7:c8:ba:ef:c9:ec:c9:d7:28:97:
                    08:b6:fe:0b:cd:b2:f4:f6:4a:58:e3:4f:18:0f:5e:
                    34:08:5c:47:fb:dc:a6:1c:51:11:c4:8c:b0:ba:75:
                    b8:b6:11:3e:15:69:32:78:d7:85:46:76:b0:76:19:
                    42:97:4a:47:07:ed:71:2f:c5:5b:55:9d:87:41:89:
                    f9:de:e0:de:ea:60:1c:c7:a6:6c:cb:47:b9:a9:6f:
                    bf:ea:27:88:b1:ba:8c:8e:1e:10:3f:98:4d:df:92:
                    39:79:75:ed:b3:d9:d0:70:f0:97:fb:8e:6f:75:30:
                    4e:9c:64:89:8d:b7:a2:64:ca:27:cc:d5:37:6f:00:
                    9d:1c:80:c9:6c:25:8a:98:52:cb:bf:b6:b5:03:89:
                    23:51:cb:4f:24:61:03:d6:33:c6:b8:58:52:be:73:
                    f1:0d:4c:93:3f:04:57:7b:5e:36:d4:90:77:d4:44:
                    31:3e:b8:1b:eb:76:56:89:30:ae:0b:3b:81:02:ba:
                    55:75:c5:a9:2e:48:87:79:81:e8:01:46:6a:1e:1f:
                    6b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4D:72:2D:82:FA:57:DA:A4:85:1C:A6:CF:E6:1C:72:BF:E3:BA:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf5a45c8-97e5-364e-af7f-dae0688f094a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.85.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ee:53:3f:06:69:23:ca:2b:75:e3:26:70:9c:98:d7:64:b9:
         f8:22:18:68:bd:02:7f:f0:91:c2:7b:da:71:7c:03:bc:0c:86:
         f4:7b:6a:76:a9:a7:e1:ef:25:56:04:42:f0:e3:6e:a0:46:7c:
         88:a6:6c:d1:56:17:ae:05:6b:a3:10:65:62:2c:2f:ae:8b:91:
         14:bb:c7:f8:7f:bf:91:ce:62:94:b0:55:0d:79:40:9a:7b:d3:
         bf:25:62:be:cb:8e:39:0b:1d:ff:ff:eb:ba:b9:fe:c1:d6:b4:
         fd:e4:2d:18:78:9e:5b:be:e7:5b:9b:da:62:14:67:8f:9c:93:
         b7:71:9b:ad:08:0d:37:fb:f1:af:0d:21:8f:2c:5b:a4:aa:e6:
         ec:b7:a4:a4:14:c6:29:31:fd:9a:f6:8d:9a:22:df:80:b9:43:
         b9:15:65:f5:9f:82:81:d4:7b:27:97:d7:39:7e:3d:19:de:a1:
         39:41:58:86:b8:50:ad:eb:2c:48:71:6b:27:50:c8:7b:b3:f3:
         9d:a2:33:16:94:85:a0:7f:65:85:d2:a7:46:49:f1:64:b4:08:
         7d:f9:b4:b5:a2:9c:99:34:f1:c2:9a:8a:c2:11:90:a6:a5:d2:
         d4:1b:2e:f5:e7:86:54:54:2b:b6:7a:41:b0:ef:b2:6c:e7:04:
         96:af:95:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYASZj1KbEqDjdNzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
ZjZjOTIyNzMtYjExYi00OGYzLTgzYWMtY2IzMjhmNjA0YzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOzcygJj69osny8vrljuBgB6yqCPXhvcNWgD
s0FekgXp0aoxfwVAHEi98b/OlikwgtfIuu/J7MnXKJcItv4LzbL09kpY408YD140
CFxH+9ymHFERxIywunW4thE+FWkyeNeFRnawdhlCl0pHB+1xL8VbVZ2HQYn53uDe
6mAcx6Zsy0e5qW+/6ieIsbqMjh4QP5hN35I5eXXts9nQcPCX+45vdTBOnGSJjbei
ZMonzNU3bwCdHIDJbCWKmFLLv7a1A4kjUctPJGED1jPGuFhSvnPxDUyTPwRXe142
1JB31EQxPrgb63ZWiTCuCzuBArpVdcWpLkiHeYHoAUZqHh9rgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCxNci2C+lfapIUcps/mHHK/47oFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Y1YTQ1YzgtOTdlNS0z
NjRlLWFmN2YtZGFlMDY4OGYwOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFVIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACnuUz8GaSPKK3XjJnCcmNdkufgiGGi9An/wkcJ72nF8A7wMhvR7anap
p+HvJVYEQvDjbqBGfIimbNFWF64Fa6MQZWIsL66LkRS7x/h/v5HOYpSwVQ15QJp7
078lYr7LjjkLHf//67q5/sHWtP3kLRh4nlu+51ub2mIUZ4+ck7dxm60IDTf78a8N
IY8sW6Sq5uy3pKQUxikx/Zr2jZoi34C5Q7kVZfWfgoHUeyeX1zl+PRneoTlBWIa4
UK3rLEhxaydQyHuz852iMxaUhaB/ZYXSp0ZJ8WS0CH35tLWinJk08cKaisIRkKal
0tQbLvXnhlRUK7Z6QbDvsmznBJavldI=
-----END CERTIFICATE-----
Generated at Sat Jun 8 01:07:47 2024 by rpki-client on console-ams.rpki-client.org