Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39b8a65a-4e42-39a2-b063-3d53c5a643c4.roa
File:                     39b8a65a-4e42-39a2-b063-3d53c5a643c4.roa (raw, json)
Hash identifier:          1PwOPEUK1YudzV7aU3gFXaUhFYu4904DVW+A+NZ98jU=
Subject key identifier:   F6:F6:30:7C:B6:13:1D:76:0F:01:70:46:D8:72:E5:9B:54:E2:0A:48
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848117025E088511503E30D8000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39b8a65a-4e42-39a2-b063-3d53c5a643c4.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        75.65.110.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:70:25:e0:88:51:15:03:e3:0d:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=cd3d3179-9e2f-406d-a94b-b3a90ee1144e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:25:15:13:e9:4f:7d:8b:99:c2:27:bb:04:b2:
                    cc:a9:bd:ce:c2:b8:90:22:b9:8c:e4:66:9c:d9:68:
                    44:53:f3:0b:e9:87:25:bc:17:2c:cd:8a:66:10:20:
                    bf:aa:b1:87:62:06:1a:91:ab:7e:2f:2e:11:3a:5d:
                    10:5a:0c:c9:89:ec:45:63:6e:d9:a5:0b:89:91:ad:
                    29:2d:20:b5:96:ea:d1:6f:32:ac:6b:05:59:90:7a:
                    b4:dd:6f:1d:fa:a9:50:2d:bc:a2:86:0c:67:1f:39:
                    be:67:2c:1e:90:f4:3f:58:91:a3:18:53:35:f0:bd:
                    db:0d:f3:91:89:d4:4e:bd:99:bc:e8:03:dc:db:4f:
                    59:28:40:5e:95:9d:92:8e:87:10:23:6e:db:e0:d4:
                    84:1b:9a:00:ba:76:ce:2c:ec:94:39:8f:f6:0d:2e:
                    53:e6:17:c9:5e:11:dc:75:5c:29:55:4b:78:da:1b:
                    c0:06:95:6d:94:0c:e1:39:4e:34:23:c6:77:da:d9:
                    52:b8:cc:ab:e0:95:f4:71:dc:8c:04:8e:49:8f:71:
                    cf:0f:b6:ba:d4:11:09:3a:8e:c0:cd:c0:a7:21:92:
                    81:b5:ae:e4:75:98:fe:07:f8:f9:39:7f:f3:64:05:
                    58:0d:2e:93:00:7f:b9:03:8e:31:fd:31:b5:12:cf:
                    58:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F6:30:7C:B6:13:1D:76:0F:01:70:46:D8:72:E5:9B:54:E2:0A:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39b8a65a-4e42-39a2-b063-3d53c5a643c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.65.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:e3:ec:40:b1:aa:c5:46:28:cf:5b:14:2c:b5:6d:26:f1:8a:
         65:5e:fa:f7:be:9b:37:a8:ae:35:b7:14:f0:76:6f:51:c8:14:
         0f:e8:fa:b1:95:90:81:04:c4:2f:7d:ee:4f:a3:2a:12:a1:f8:
         df:cf:e1:08:dc:01:45:ee:87:17:81:aa:e3:eb:58:e3:8c:bf:
         fc:8e:9f:1f:48:41:2a:b6:b8:72:c1:52:ae:b8:a1:66:93:66:
         95:31:c9:dd:dd:d4:58:12:b5:d2:6b:cb:59:e3:28:1d:07:31:
         fc:f1:7c:d5:e8:73:f8:67:23:97:0d:4c:a2:9e:c5:c7:c4:2a:
         64:bd:45:25:67:8c:e4:72:52:37:96:a9:3e:66:07:b4:df:9c:
         39:c0:71:f7:54:e3:a1:93:10:c7:81:6f:99:bf:b6:dc:84:5d:
         c9:09:01:05:e0:7e:2d:e0:f2:32:66:75:b4:88:ad:68:a1:9c:
         ce:01:8d:af:c7:f5:2f:05:fa:84:d8:5d:9a:de:33:3c:6e:35:
         11:a2:2f:e6:4e:c7:70:c9:51:95:22:22:bd:6f:9e:85:01:5c:
         58:e3:db:e6:1a:f4:81:87:37:17:38:5a:4a:8a:8c:8e:b6:89:
         ea:7a:2f:95:ce:2d:f7:5b:b7:39:b8:dd:ec:0b:9d:35:23:8f:
         f4:6d:7d:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRcCXgiFEVA+MNgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk
Y2QzZDMxNzktOWUyZi00MDZkLWE5NGItYjNhOTBlZTExNDRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSUVE+lPfYuZwie7BLLMqb3OwriQIrmM5Gac
2WhEU/ML6YclvBcszYpmECC/qrGHYgYakat+Ly4ROl0QWgzJiexFY27ZpQuJka0p
LSC1lurRbzKsawVZkHq03W8d+qlQLbyihgxnHzm+ZywekPQ/WJGjGFM18L3bDfOR
idROvZm86APc209ZKEBelZ2SjocQI27b4NSEG5oAunbOLOyUOY/2DS5T5hfJXhHc
dVwpVUt42hvABpVtlAzhOU40I8Z32tlSuMyr4JX0cdyMBI5Jj3HPD7a61BEJOo7A
zcCnIZKBta7kdZj+B/j5OX/zZAVYDS6TAH+5A44x/TG1Es9YzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPb2MHy2Ex12DwFwRthy5ZtU4gpIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzliOGE2NWEtNGU0Mi0z
OWEyLWIwNjMtM2Q1M2M1YTY0M2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS0FuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3j7ECxqsVGKM9bFCy1bSbximVe+ve+mzeorjW3FPB2b1HIFA/o+rGV
kIEExC997k+jKhKh+N/P4QjcAUXuhxeBquPrWOOMv/yOnx9IQSq2uHLBUq64oWaT
ZpUxyd3d1FgStdJry1njKB0HMfzxfNXoc/hnI5cNTKKexcfEKmS9RSVnjORyUjeW
qT5mB7TfnDnAcfdU46GTEMeBb5m/ttyEXckJAQXgfi3g8jJmdbSIrWihnM4Bja/H
9S8F+oTYXZreMzxuNRGiL+ZOx3DJUZUiIr1vnoUBXFjj2+Ya9IGHNxc4WkqKjI62
iep6L5XOLfdbtzm43ewLnTUjj/RtfQQ=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:06:38 2024 by rpki-client on console-fra.rpki-client.org