Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e3c3caf-739f-316c-a016-6a0fc9d6841a.roa
File:                     1e3c3caf-739f-316c-a016-6a0fc9d6841a.roa (raw, json)
Hash identifier:          VmLDDHCdZZr5V4ucd5pASOD/0gB7Ns0mGl5HBYF5cCQ=
Subject key identifier:   68:D2:1C:C2:5F:EE:9E:62:ED:3D:12:40:7D:5C:2A:20:91:DC:E7:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E5B5FC67237F67E87C6C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e3c3caf-739f-316c-a016-6a0fc9d6841a.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33660
IP address blocks:        67.177.14.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:5b:5f:c6:72:37:f6:7e:87:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=2425c17f-6d27-4cc6-a5f2-a684c64aa40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:77:c9:55:8f:0e:a2:28:72:f4:57:b8:52:a0:
                    a9:c3:41:48:b6:12:c9:d5:eb:59:6c:8b:f9:60:8a:
                    44:61:a0:07:d9:b6:31:58:20:c8:8c:4b:f0:46:5d:
                    84:a8:2b:82:06:a3:bd:13:3e:d3:0a:e0:5d:a2:c0:
                    7e:30:ea:9b:c3:ab:b4:c8:d0:c3:0a:69:0d:bb:1a:
                    29:e6:5f:d5:eb:88:0d:f8:6d:7e:fd:03:df:de:b9:
                    d8:6a:07:d2:e0:bf:3d:0f:ab:7b:5b:cc:6b:84:6b:
                    6b:a5:bf:1b:69:93:97:27:ee:12:ac:78:3c:3c:d3:
                    94:2e:6b:d2:04:e8:42:56:e8:1e:41:50:68:2f:fa:
                    b8:30:87:98:18:ec:19:7f:8c:a8:ff:fc:0e:b4:47:
                    2d:0c:aa:1d:10:06:93:e3:9e:62:43:79:46:89:0f:
                    99:1e:65:2d:41:8d:cb:74:5e:3c:7b:9f:91:58:b0:
                    68:df:7d:91:71:f1:dd:c0:c7:05:b8:1d:e3:b9:44:
                    53:bc:a8:d1:c1:a7:0d:00:4e:8f:ae:16:7c:6a:b9:
                    1e:32:49:4e:28:7b:80:b8:38:be:6a:b6:24:17:47:
                    77:be:5b:82:0e:fd:f5:6d:47:8c:72:c8:97:26:40:
                    3b:af:ca:43:0a:53:ca:1c:88:99:0f:16:76:4b:ae:
                    7a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D2:1C:C2:5F:EE:9E:62:ED:3D:12:40:7D:5C:2A:20:91:DC:E7:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e3c3caf-739f-316c-a016-6a0fc9d6841a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.177.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:d8:d0:81:6a:49:9b:79:d2:d6:6a:b0:de:22:76:4e:63:c6:
         13:86:d3:3c:d0:37:0d:1e:c0:5f:21:46:2a:29:bb:c9:46:f9:
         18:c3:83:b7:35:ba:02:fb:15:15:85:ec:a5:a2:73:77:bb:4a:
         20:d3:19:fc:f6:f8:92:b3:5a:bb:85:e6:1a:2c:c9:67:9b:30:
         9b:a5:59:77:8e:78:51:72:2c:aa:65:e4:b9:f2:e5:dd:bb:3f:
         6d:9d:70:8c:25:82:4f:a7:11:c7:7a:85:a2:14:28:47:e7:6a:
         1d:81:ef:1f:26:95:2a:cd:bb:c9:20:90:06:12:d0:7e:84:ce:
         49:2e:1d:7a:30:2f:b8:a3:1c:04:95:c9:6b:f7:c4:ad:cc:89:
         f6:60:3e:9d:d5:73:39:28:32:c3:77:8d:76:8b:d2:e0:c4:55:
         47:60:75:73:61:4a:49:4a:be:7f:ef:6e:af:df:77:f6:86:b1:
         da:28:e4:52:13:56:6b:9a:b4:2b:f3:63:86:17:2f:34:03:ff:
         84:47:87:09:27:86:da:2a:93:09:f9:56:58:14:ff:04:a7:8b:
         ff:29:3d:ae:b5:88:46:24:96:1d:7f:7e:1d:18:67:be:c4:06:
         ac:62:cd:9c:62:3f:bc:73:d1:6e:ef:58:78:09:5b:ac:56:fb:
         3f:5e:08:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnltfxnI39n6HxsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
MjQyNWMxN2YtNmQyNy00Y2M2LWE1ZjItYTY4NGM2NGFhNDBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXfJVY8Ooihy9Fe4UqCpw0FIthLJ1etZbIv5
YIpEYaAH2bYxWCDIjEvwRl2EqCuCBqO9Ez7TCuBdosB+MOqbw6u0yNDDCmkNuxop
5l/V64gN+G1+/QPf3rnYagfS4L89D6t7W8xrhGtrpb8baZOXJ+4SrHg8PNOULmvS
BOhCVugeQVBoL/q4MIeYGOwZf4yo//wOtEctDKodEAaT455iQ3lGiQ+ZHmUtQY3L
dF48e5+RWLBo332RcfHdwMcFuB3juURTvKjRwacNAE6PrhZ8arkeMklOKHuAuDi+
arYkF0d3vluCDv31bUeMcsiXJkA7r8pDClPKHIiZDxZ2S656IwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGjSHMJf7p5i7T0SQH1cKiCR3OdpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWUzYzNjYWYtNzM5Zi0z
MTZjLWEwMTYtNmEwZmM5ZDY4NDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ7EOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMrY0IFqSZt50tZqsN4idk5jxhOG0zzQNw0ewF8hRiopu8lG+RjDg7c1
ugL7FRWF7KWic3e7SiDTGfz2+JKzWruF5hosyWebMJulWXeOeFFyLKpl5Lny5d27
P22dcIwlgk+nEcd6haIUKEfnah2B7x8mlSrNu8kgkAYS0H6EzkkuHXowL7ijHASV
yWv3xK3MifZgPp3VczkoMsN3jXaL0uDEVUdgdXNhSklKvn/vbq/fd/aGsdoo5FIT
VmuatCvzY4YXLzQD/4RHhwknhtoqkwn5VlgU/wSni/8pPa61iEYklh1/fh0YZ77E
BqxizZxiP7xz0W7vWHgJW6xW+z9eCH8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:56:58 2024 by rpki-client on console-ams.rpki-client.org