Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d5a9244-0c64-3208-8120-7b468ebbd5a7.roa
File:                     2d5a9244-0c64-3208-8120-7b468ebbd5a7.roa (raw, json)
Hash identifier:          aAEWlNv7DDhzMSsWYX6A68WzfcXT1A7xrhKtC692r5U=
Subject key identifier:   11:A9:55:13:AD:33:5D:82:7E:85:60:12:66:5C:5E:D2:F3:2D:37:20
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7BBF5ECF513FB2D906000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d5a9244-0c64-3208-8120-7b468ebbd5a7.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        68.47.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:bb:f5:ec:f5:13:fb:2d:90:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=74a881d2-6fdb-458f-b913-34f461f49178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1e:0b:cf:56:69:24:14:d5:74:d5:bc:2f:97:
                    3d:3c:8c:50:25:ee:53:7f:de:fd:9b:29:e6:72:68:
                    f9:a4:63:29:0a:32:4d:0c:2b:0e:94:d9:1c:e9:b7:
                    57:5d:6e:f6:d0:28:96:39:72:11:6f:bf:7e:ff:07:
                    c6:9e:93:b9:27:d3:6a:e6:49:8a:67:a2:52:6a:8f:
                    3f:bc:ec:04:c5:5a:e6:4e:8a:f6:eb:b4:d6:d9:33:
                    31:f0:9a:84:68:c8:09:a6:0b:63:d3:1a:65:10:07:
                    57:5f:e0:ce:58:93:52:a7:68:fc:eb:48:eb:b9:69:
                    27:fc:15:34:86:30:b6:79:e0:fd:9f:98:19:dd:54:
                    e8:b5:12:36:78:4a:2f:96:8b:09:79:40:4f:84:ef:
                    2e:18:7a:18:61:ff:ad:cb:48:13:18:d9:cc:84:5c:
                    e2:83:31:e6:b1:fa:10:7a:4f:72:ac:b7:e3:02:67:
                    09:08:ee:bf:a3:69:cf:ed:01:17:a0:96:a2:74:a0:
                    31:b4:43:75:64:8c:70:ef:e9:ad:e5:31:fd:bc:01:
                    e5:63:4d:93:5c:3e:3c:bb:e4:84:b9:5c:04:82:2d:
                    0a:72:58:62:55:6e:e8:d4:d3:ff:cf:b4:2e:44:43:
                    99:05:e1:5b:59:e5:23:5c:aa:71:97:7b:6f:4b:54:
                    74:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A9:55:13:AD:33:5D:82:7E:85:60:12:66:5C:5E:D2:F3:2D:37:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d5a9244-0c64-3208-8120-7b468ebbd5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.47.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f5:db:bf:b0:1a:a6:03:17:4d:df:22:81:10:87:b0:79:ce:
         cd:f8:ae:46:7d:e9:52:94:41:eb:a9:ac:be:46:20:8b:64:2a:
         c3:fe:5a:ce:bb:3b:18:5b:48:e9:be:65:8a:aa:4b:46:f9:fd:
         92:df:57:3d:80:53:a9:91:43:ae:40:1e:0a:e6:43:42:25:f5:
         92:37:46:ec:4e:72:e0:bc:80:f2:9d:d3:98:13:dd:d4:11:2d:
         c8:77:2b:9b:09:13:de:8c:d6:e9:a7:78:d0:10:b7:52:31:fe:
         c0:a6:dd:99:1a:98:64:af:88:6c:64:97:c1:9e:7a:41:77:24:
         8a:91:f1:af:94:cd:1c:5d:51:ac:6b:6c:69:bb:11:de:5a:df:
         c6:59:a2:ab:7a:ea:f9:e9:d8:b5:d8:ab:ff:04:59:16:52:32:
         e7:38:f4:fc:59:f6:9f:c3:15:fc:24:aa:9a:52:62:81:c2:bb:
         b6:e0:58:6f:c1:a9:da:bf:d8:5c:1d:1e:d3:8e:ae:46:11:b4:
         95:f9:be:39:99:16:ca:d6:8f:78:f9:78:5b:91:69:12:7c:93:
         df:b4:72:31:d2:6b:f1:4c:2a:df:cf:2c:c1:c2:d2:fb:d2:d0:
         bd:94:98:8f:ec:31:df:06:15:46:63:ec:fe:bd:f8:ea:88:7a:
         e2:0a:88:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+97v17PUT+y2QYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
NzRhODgxZDItNmZkYi00NThmLWI5MTMtMzRmNDYxZjQ5MTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB4Lz1ZpJBTVdNW8L5c9PIxQJe5Tf979mynm
cmj5pGMpCjJNDCsOlNkc6bdXXW720CiWOXIRb79+/wfGnpO5J9Nq5kmKZ6JSao8/
vOwExVrmTor267TW2TMx8JqEaMgJpgtj0xplEAdXX+DOWJNSp2j860jruWkn/BU0
hjC2eeD9n5gZ3VTotRI2eEovlosJeUBPhO8uGHoYYf+ty0gTGNnMhFzigzHmsfoQ
ek9yrLfjAmcJCO6/o2nP7QEXoJaidKAxtEN1ZIxw7+mt5TH9vAHlY02TXD48u+SE
uVwEgi0KclhiVW7o1NP/z7QuREOZBeFbWeUjXKpxl3tvS1R0owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBGpVROtM12CfoVgEmZcXtLzLTcgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmQ1YTkyNDQtMGM2NC0z
MjA4LTgxMjAtN2I0NjhlYmJkNWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC9QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADz127+wGqYDF03fIoEQh7B5zs34rkZ96VKUQeuprL5GIItkKsP+Ws67
OxhbSOm+ZYqqS0b5/ZLfVz2AU6mRQ65AHgrmQ0Il9ZI3RuxOcuC8gPKd05gT3dQR
Lch3K5sJE96M1umneNAQt1Ix/sCm3ZkamGSviGxkl8GeekF3JIqR8a+UzRxdUaxr
bGm7Ed5a38ZZoqt66vnp2LXYq/8EWRZSMuc49PxZ9p/DFfwkqppSYoHCu7bgWG/B
qdq/2FwdHtOOrkYRtJX5vjmZFsrWj3j5eFuRaRJ8k9+0cjHSa/FMKt/PLMHC0vvS
0L2UmI/sMd8GFUZj7P69+OqIeuIKiOQ=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:04:30 2024 by rpki-client on console-fra.rpki-client.org