Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/7acb58bc-b9ac-3d38-b68d-661cd6f2bc81.roa
File:                     7acb58bc-b9ac-3d38-b68d-661cd6f2bc81.roa (raw, json)
Hash identifier:          u+g+BxLNzw73O7RuLgNygcMpmyT1BKaYRgEDVyn2mgU=
Subject key identifier:   34:5D:E3:CB:71:1A:80:2E:B2:D4:F1:D1:37:84:BD:DC:82:76:77:C2
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F43285845AF537211D8A24790C32BE900
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/7acb58bc-b9ac-3d38-b68d-661cd6f2bc81.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     25804
IP address blocks:        68.142.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:72:11:d8:a2:47:90:c3:2b:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=442581c3-7968-4413-b335-7d521a7522f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5a:2e:44:8f:7d:b8:24:7e:e3:43:bf:06:c7:
                    c8:95:20:43:2a:58:f5:5b:78:bb:9e:54:08:b6:84:
                    5b:12:15:10:f8:40:29:d3:8c:d5:b2:3e:61:6b:08:
                    c9:b1:74:c9:c8:59:2e:93:ef:c7:8e:d8:a2:ef:4a:
                    2f:fe:7d:a4:62:83:9a:cd:7e:66:84:2e:fc:1a:91:
                    15:e1:31:cf:f7:cf:54:f9:0c:6a:57:f7:49:8a:31:
                    e2:4a:0d:ef:1e:9e:e6:99:7e:ea:95:0f:f2:62:e7:
                    83:41:ef:eb:64:eb:df:38:d9:89:14:67:69:e3:0b:
                    35:60:89:bc:9a:77:9d:d7:d0:c9:4c:0b:8d:2e:f2:
                    f6:d8:39:de:1a:ad:7a:a7:c0:20:0d:2d:43:65:0a:
                    8a:2f:fb:ef:9c:c0:1d:6e:eb:a9:c6:40:16:ea:ad:
                    f3:dc:48:27:be:a2:bc:10:14:3b:92:b5:58:37:55:
                    bb:27:de:52:42:7c:71:9d:c8:91:d8:0a:b1:76:1d:
                    51:fb:25:45:fa:85:05:6c:f2:b8:82:79:96:b5:b1:
                    15:b9:07:c1:2b:4e:d6:ca:92:60:59:f7:70:02:ed:
                    d2:71:00:fe:17:61:a6:1b:dc:75:1d:17:04:52:d0:
                    00:0d:fc:1b:33:1e:ab:12:23:31:2c:3c:09:6f:c4:
                    7f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5D:E3:CB:71:1A:80:2E:B2:D4:F1:D1:37:84:BD:DC:82:76:77:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/7acb58bc-b9ac-3d38-b68d-661cd6f2bc81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.142.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:2e:29:0a:d4:15:25:8b:18:9f:b7:c7:7e:c2:85:4e:21:2c:
         ce:ed:d9:1f:52:f6:3a:c4:0d:c4:69:ca:bb:53:9b:dd:3b:4f:
         41:ca:c8:66:c5:9a:d6:5c:ab:fb:d5:02:b7:43:65:d0:4b:35:
         4c:23:2d:57:2b:54:47:e0:a8:7f:63:ba:da:ac:4c:d3:be:89:
         53:b9:7b:57:cf:53:8e:90:ad:0b:e9:7e:d2:df:fb:92:dc:31:
         ee:96:91:9a:aa:d6:67:c1:48:4a:50:41:c0:c6:56:26:25:f1:
         bd:da:fa:57:4f:50:fb:da:5d:dd:e8:12:c9:aa:57:86:82:cf:
         3f:95:92:2a:57:aa:8f:bf:9f:f1:60:ed:78:55:d9:0a:91:d4:
         46:40:0b:2e:ff:d6:b1:04:3c:3d:d4:7e:e0:2b:c3:16:4b:60:
         7a:fb:5b:83:0b:86:31:bf:f4:9c:44:b2:1d:9f:1d:52:d6:26:
         4a:94:ed:50:bd:bb:f3:7d:21:3b:76:0f:6e:07:b7:e2:ca:6e:
         3e:d8:cc:28:fe:c1:0b:82:12:13:cc:e9:5a:80:ec:11:a6:20:
         91:8e:b9:38:52:28:e4:be:68:e4:c7:d0:3b:0d:f2:92:e0:6f:
         ef:da:d7:d7:ae:bb:10:5c:e6:f4:d7:38:a8:0f:d7:ae:3a:1e:
         60:8b:5f:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWvU3IR2KJHkMMr6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw
MDdjMB4XDTI0MDQyNzEzMDAzNFoXDTI0MDcyNjEzMDAzNFowLzEtMCsGA1UEAxMk
NDQyNTgxYzMtNzk2OC00NDEzLWIzMzUtN2Q1MjFhNzUyMmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVouRI99uCR+40O/BsfIlSBDKlj1W3i7nlQI
toRbEhUQ+EAp04zVsj5hawjJsXTJyFkuk+/Hjtii70ov/n2kYoOazX5mhC78GpEV
4THP989U+QxqV/dJijHiSg3vHp7mmX7qlQ/yYueDQe/rZOvfONmJFGdp4ws1YIm8
mned19DJTAuNLvL22DneGq16p8AgDS1DZQqKL/vvnMAdbuupxkAW6q3z3EgnvqK8
EBQ7krVYN1W7J95SQnxxnciR2Aqxdh1R+yVF+oUFbPK4gnmWtbEVuQfBK07WypJg
WfdwAu3ScQD+F2GmG9x1HRcEUtAADfwbMx6rEiMxLDwJb8R/yQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDRd48txGoAustTx0TeEvdyCdnfCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2
OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvN2FjYjU4YmMtYjlhYy0z
ZDM4LWI2OGQtNjYxY2Q2ZjJiYzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk
MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk
MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0
ZjFmZDAwN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRI5EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACIuKQrUFSWLGJ+3x37ChU4hLM7t2R9S9jrEDcRpyrtTm907T0HKyGbF
mtZcq/vVArdDZdBLNUwjLVcrVEfgqH9jutqsTNO+iVO5e1fPU46QrQvpftLf+5Lc
Me6WkZqq1mfBSEpQQcDGViYl8b3a+ldPUPvaXd3oEsmqV4aCzz+VkipXqo+/n/Fg
7XhV2QqR1EZACy7/1rEEPD3UfuArwxZLYHr7W4MLhjG/9JxEsh2fHVLWJkqU7VC9
u/N9ITt2D24Ht+LKbj7YzCj+wQuCEhPM6VqA7BGmIJGOuThSKOS+aOTH0DsN8pLg
b+/a19euuxBc5vTXOKgP1646HmCLXyE=
-----END CERTIFICATE-----
Generated at Fri May 24 13:40:38 2024 by rpki-client on console-fra.rpki-client.org