Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/060896f4-f0db-3d27-8f47-fecb929ee453.roa
File:                     060896f4-f0db-3d27-8f47-fecb929ee453.roa (raw, json)
Hash identifier:          eR8lzrRcnr4DmJaT5lzfa3meP4Zccc+MZW5rv7NHkk0=
Subject key identifier:   F5:AD:AB:BA:C1:13:A9:27:88:0D:78:6C:96:5B:B1:CE:CB:C5:4B:F0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABC09E22F9EE08E5991380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/060896f4-f0db-3d27-8f47-fecb929ee453.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33668
IP address blocks:        68.87.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:c0:9e:22:f9:ee:08:e5:99:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=23192af5-a2c9-4e17-a4b3-6aac9b1fe6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:57:8e:6a:ac:ce:ff:38:df:f2:92:51:6c:8c:
                    1c:d1:1d:cc:df:d4:76:ef:b9:59:6b:f5:4b:d2:25:
                    66:69:d1:c2:0c:9b:ec:78:37:7e:ed:89:91:5b:59:
                    b8:c4:07:f2:ad:e7:ee:65:c2:a4:f6:fe:c8:46:3d:
                    76:f3:f1:7a:30:a4:1a:db:0b:0f:45:d8:de:e4:38:
                    fe:23:e8:cc:4f:b1:ad:4d:dd:d1:26:73:9d:d8:01:
                    c4:42:93:cc:5f:ec:01:2f:7b:a8:9f:f7:5d:f0:24:
                    88:74:73:f1:7b:55:8f:ff:37:93:ce:80:b4:2a:59:
                    27:12:42:26:4a:e5:46:21:97:2e:77:5c:3f:2d:46:
                    a8:ce:31:8d:32:7d:97:48:b6:ed:ec:35:38:a6:9c:
                    ce:0c:58:1b:98:57:84:84:6e:b9:57:ec:5e:6b:07:
                    d7:63:1f:87:4f:29:b1:23:22:6c:b9:da:86:c3:e0:
                    25:33:67:f4:d6:d5:ef:62:b6:b0:65:f7:40:af:59:
                    c9:67:81:0b:47:b3:b7:9d:33:34:59:0a:6f:8d:a7:
                    82:4b:4b:89:b3:be:dd:10:31:78:f7:46:6b:57:6a:
                    c1:d4:34:63:77:de:31:56:4a:08:2b:f3:fb:80:2c:
                    d2:ca:cc:ea:24:22:81:c8:a7:98:ee:60:e1:a9:83:
                    f7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AD:AB:BA:C1:13:A9:27:88:0D:78:6C:96:5B:B1:CE:CB:C5:4B:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/060896f4-f0db-3d27-8f47-fecb929ee453.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.87.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:c1:b9:ed:44:b3:85:47:f0:ca:48:48:29:b1:c0:23:38:60:
         6a:1e:7a:44:c5:c9:b9:e4:ae:46:81:31:1b:54:67:62:3a:04:
         ac:0e:76:ce:6d:74:5b:08:3e:ea:af:ba:a1:48:5e:86:a0:92:
         c3:7a:c3:df:9c:d8:3a:1b:aa:2f:b4:a1:04:bb:e1:22:1d:a9:
         95:8d:bc:86:92:64:2f:93:84:c2:42:32:97:52:ce:4f:71:11:
         46:60:e5:ab:90:05:a2:2f:0c:41:74:da:00:bd:61:2c:2a:60:
         99:38:3e:87:8f:8e:8e:a4:2f:6f:80:0d:39:6b:8a:31:2a:d6:
         7a:ba:d1:36:b2:f7:52:12:05:cf:58:cd:03:8f:60:73:78:d1:
         45:0a:67:b1:d8:78:07:78:b4:63:3c:af:f6:12:b1:88:58:22:
         f4:87:e5:fc:52:f5:2e:f2:38:5d:8f:92:44:9c:98:c3:e7:a5:
         0a:a1:d9:8c:c3:6b:cc:fc:cf:de:6c:3b:32:3c:25:5f:5a:d1:
         c5:1d:c8:a9:42:95:28:5f:35:ee:b0:1e:1f:35:a4:f0:c0:df:
         81:ce:4c:31:61:65:e2:a7:9b:51:46:b8:68:af:7b:5d:82:f4:
         7f:86:a0:b9:f6:39:13:0f:98:07:a6:f5:ef:aa:c6:12:fc:3c:
         90:64:f9:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfq8CeIvnuCOWZE4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
MjMxOTJhZjUtYTJjOS00ZTE3LWE0YjMtNmFhYzliMWZlNmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FeOaqzO/zjf8pJRbIwc0R3M39R277lZa/VL
0iVmadHCDJvseDd+7YmRW1m4xAfyrefuZcKk9v7IRj128/F6MKQa2wsPRdje5Dj+
I+jMT7GtTd3RJnOd2AHEQpPMX+wBL3uon/dd8CSIdHPxe1WP/zeTzoC0KlknEkIm
SuVGIZcud1w/LUaozjGNMn2XSLbt7DU4ppzODFgbmFeEhG65V+xeawfXYx+HTymx
IyJsudqGw+AlM2f01tXvYrawZfdAr1nJZ4ELR7O3nTM0WQpvjaeCS0uJs77dEDF4
90ZrV2rB1DRjd94xVkoIK/P7gCzSyszqJCKByKeY7mDhqYP3DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPWtq7rBE6kniA14bJZbsc7LxUvwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDYwODk2ZjQtZjBkYi0z
ZDI3LThmNDctZmVjYjkyOWVlNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFcBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG/Bue1Es4VH8MpISCmxwCM4YGoeekTFybnkrkaBMRtUZ2I6BKwOds5t
dFsIPuqvuqFIXoagksN6w9+c2Dobqi+0oQS74SIdqZWNvIaSZC+ThMJCMpdSzk9x
EUZg5auQBaIvDEF02gC9YSwqYJk4PoePjo6kL2+ADTlrijEq1nq60Tay91ISBc9Y
zQOPYHN40UUKZ7HYeAd4tGM8r/YSsYhYIvSH5fxS9S7yOF2PkkScmMPnpQqh2YzD
a8z8z95sOzI8JV9a0cUdyKlClShfNe6wHh81pPDA34HOTDFhZeKnm1FGuGive12C
9H+GoLn2ORMPmAem9e+qxhL8PJBk+WI=
-----END CERTIFICATE-----
Generated at Sun May 5 02:13:31 2024 by rpki-client on console-ams.rpki-client.org