Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fac14e4-cdbc-3970-9d64-adbef6690ef9.roa
File:                     0fac14e4-cdbc-3970-9d64-adbef6690ef9.roa (raw, json)
Hash identifier:          LGsQZPa7Gv6uC0e+7ymTVhiwV0B/Rc75QprgPSmjsK4=
Subject key identifier:   9A:84:DE:0E:B8:B5:D8:95:C1:A0:3B:17:79:BE:71:61:6F:46:67:25
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BB174916F7A89231E55F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fac14e4-cdbc-3970-9d64-adbef6690ef9.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        67.162.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:b1:74:91:6f:7a:89:23:1e:55:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=c4e9f6a1-4ea1-47e6-8a3e-f8573a426882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7c:53:02:8a:15:88:b4:07:91:d0:78:4b:f4:
                    89:fb:57:78:47:46:11:ba:d6:ff:af:c9:27:5b:d1:
                    a4:23:5a:89:aa:73:80:20:79:a2:31:37:d2:29:39:
                    41:79:a7:e2:a3:2a:f5:95:58:3f:ac:9e:9e:b1:50:
                    73:48:d1:87:e0:ef:5b:fc:d6:23:72:ef:7e:d5:11:
                    1f:bf:15:f5:7c:4e:e3:65:6a:ae:79:07:19:17:67:
                    d3:e6:30:cb:29:9b:f2:b4:bb:20:a8:ad:5c:19:1c:
                    62:9b:cb:5c:d3:f5:73:15:69:ac:0a:40:e6:30:90:
                    1c:db:a6:f0:85:b8:49:a3:14:90:4c:89:5a:8e:8e:
                    d9:21:a3:7a:b7:32:8c:ad:1a:09:dc:28:c7:b8:ba:
                    fe:6f:a7:8a:ed:c9:f4:db:06:52:13:fe:ad:6c:e6:
                    44:f0:bc:4b:ea:26:b0:bc:8d:19:b0:7c:39:73:da:
                    9e:85:b2:bb:c1:af:49:7e:dd:21:28:c9:40:cc:6b:
                    55:4d:b7:eb:e1:6a:93:65:e0:a1:4c:16:f6:31:ba:
                    6c:ff:8a:86:15:41:97:fc:ec:54:46:d9:1e:83:9b:
                    8b:5f:41:54:7a:24:7e:d2:af:9e:b4:8c:88:71:a3:
                    9f:87:14:a5:2b:99:09:c8:30:85:6c:87:2a:9a:eb:
                    51:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:84:DE:0E:B8:B5:D8:95:C1:A0:3B:17:79:BE:71:61:6F:46:67:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fac14e4-cdbc-3970-9d64-adbef6690ef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.162.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:8c:34:7f:57:69:7f:1b:07:b8:61:88:c9:89:d8:a2:65:fb:
         0b:19:2d:4a:55:7d:da:37:f1:95:e8:71:d0:c7:b9:68:9e:57:
         54:01:97:d3:cd:3f:73:eb:00:05:2b:63:13:4a:fc:57:57:28:
         0d:1a:cc:e1:93:e2:63:8c:a6:87:f8:e8:de:96:d2:38:43:b0:
         e7:ba:33:b4:bd:d2:26:31:22:90:32:2e:25:c6:c0:0c:f9:af:
         79:4f:1e:c8:07:8d:e0:f1:b6:27:0a:ac:b4:bf:20:79:fd:ed:
         46:aa:c5:bf:1b:9c:e0:4b:80:71:6d:f4:47:74:35:8d:68:d1:
         b0:bd:4d:fd:1b:77:5d:3d:cd:57:61:08:67:ef:47:d2:f6:b7:
         28:aa:db:0b:7f:88:6e:89:4a:fe:7a:07:d7:59:05:fc:b1:c0:
         01:a8:ae:f2:b7:82:e3:5f:e3:7e:b8:ef:85:51:59:45:60:e7:
         9e:ee:34:e3:59:70:6f:5d:7b:1f:cd:a9:7c:ae:7d:aa:7b:4c:
         28:aa:a3:9a:94:b3:63:0f:b7:ec:ee:37:75:d4:65:15:37:96:
         64:31:ef:6f:ef:70:9c:dc:91:43:90:aa:9b:cb:ca:a7:01:0b:
         e0:94:df:ec:e5:2d:b0:f8:6f:8d:36:1e:c3:fa:dd:11:83:f4:
         24:d3:2b:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsm7F0kW96iSMeVfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
YzRlOWY2YTEtNGVhMS00N2U2LThhM2UtZjg1NzNhNDI2ODgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3xTAooViLQHkdB4S/SJ+1d4R0YRutb/r8kn
W9GkI1qJqnOAIHmiMTfSKTlBeafioyr1lVg/rJ6esVBzSNGH4O9b/NYjcu9+1REf
vxX1fE7jZWqueQcZF2fT5jDLKZvytLsgqK1cGRxim8tc0/VzFWmsCkDmMJAc26bw
hbhJoxSQTIlajo7ZIaN6tzKMrRoJ3CjHuLr+b6eK7cn02wZSE/6tbOZE8LxL6iaw
vI0ZsHw5c9qehbK7wa9Jft0hKMlAzGtVTbfr4WqTZeChTBb2Mbps/4qGFUGX/OxU
Rtkeg5uLX0FUeiR+0q+etIyIcaOfhxSlK5kJyDCFbIcqmutRKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJqE3g64tdiVwaA7F3m+cWFvRmclMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGZhYzE0ZTQtY2RiYy0z
OTcwLTlkNjQtYWRiZWY2NjkwZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ6IYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKqMNH9XaX8bB7hhiMmJ2KJl+wsZLUpVfdo38ZXocdDHuWieV1QBl9PN
P3PrAAUrYxNK/FdXKA0azOGT4mOMpof46N6W0jhDsOe6M7S90iYxIpAyLiXGwAz5
r3lPHsgHjeDxticKrLS/IHn97Uaqxb8bnOBLgHFt9Ed0NY1o0bC9Tf0bd109zVdh
CGfvR9L2tyiq2wt/iG6JSv56B9dZBfyxwAGorvK3guNf436474VRWUVg557uNONZ
cG9dex/NqXyufap7TCiqo5qUs2MPt+zuN3XUZRU3lmQx72/vcJzckUOQqpvLyqcB
C+CU3+zlLbD4b402HsP63RGD9CTTK24=
-----END CERTIFICATE-----
Generated at Sun Dec 22 03:34:46 2024 by rpki-client on console-fra.rpki-client.org