Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f9a2902-17bf-3086-843a-e800c6b9ab4c.roa
File:                     4f9a2902-17bf-3086-843a-e800c6b9ab4c.roa (raw, json)
Hash identifier:          3Cdi5fa0YsGHx1LT3bTzXlpERnDLapx1ZfcvpzpXR8o=
Subject key identifier:   70:19:E8:5F:39:89:79:31:ED:80:B3:3C:1E:D9:72:78:A2:21:60:F2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89D21C9B5A340C74C19700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f9a2902-17bf-3086-843a-e800c6b9ab4c.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        68.80.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:d2:1c:9b:5a:34:0c:74:c1:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=ef2c4348-0822-4259-af56-dcfb4850a760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e1:d3:66:22:5b:7b:c0:4f:a9:8b:2f:43:a9:
                    15:61:74:c7:90:1f:ca:bd:a5:e0:e4:63:1a:5c:06:
                    8b:6b:97:d3:25:7a:da:2d:db:c5:23:0a:a7:a0:40:
                    77:c2:87:ca:5f:01:45:8f:4a:3d:47:96:d6:df:34:
                    77:e3:76:59:6e:f1:bd:e8:cc:12:8b:9d:c2:be:08:
                    bb:b5:b8:ac:75:23:8a:08:c6:36:63:5a:e4:8b:0d:
                    fa:a5:0c:65:af:e5:da:47:f6:5e:48:d1:98:4a:69:
                    f4:5b:f1:17:cd:c3:5e:17:28:4f:76:42:8e:fd:cd:
                    11:b3:ab:7c:9a:c0:a0:0b:95:e2:02:b7:e8:2c:3e:
                    4d:49:92:7b:bf:58:fd:9a:fa:62:2f:0c:f2:75:e2:
                    ad:c3:bc:8f:3e:5f:5d:ae:44:86:81:c0:49:fb:71:
                    c4:1e:a4:84:7a:c2:4e:85:f8:28:11:0e:db:87:a4:
                    1a:89:a1:a9:55:77:cc:48:22:2f:64:ee:bf:28:da:
                    ee:eb:cf:d2:39:c7:36:47:e6:d9:5b:66:5b:e6:10:
                    ee:69:6e:7e:dd:20:f4:4a:53:54:ff:b0:1b:32:95:
                    6a:b2:a3:03:9d:e6:3d:79:88:24:b6:32:70:cc:6c:
                    c3:57:a2:f5:0b:01:89:fc:ca:b2:4f:08:6b:34:ad:
                    8f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:19:E8:5F:39:89:79:31:ED:80:B3:3C:1E:D9:72:78:A2:21:60:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f9a2902-17bf-3086-843a-e800c6b9ab4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.80.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b1:2a:cf:bf:87:bb:63:1e:8b:31:d0:3a:87:10:83:04:19:
         df:a5:c5:f8:33:0d:1c:2b:3d:ad:db:10:f2:62:18:3a:fb:fa:
         3a:08:1c:6e:21:18:1e:47:cc:f9:82:f2:c5:53:23:3e:10:0f:
         b5:0c:cd:9d:31:04:75:62:24:83:e1:ef:e3:f5:47:86:4c:42:
         1a:54:9c:9f:e4:c4:0a:fd:b8:f1:85:67:27:e7:e3:84:fd:c3:
         ef:e8:4a:e3:f3:9d:ec:cc:52:29:2e:40:88:cd:5e:12:9f:1e:
         e4:ae:9a:e1:ab:a4:45:ba:ab:ce:e1:52:39:8e:ca:4b:ac:4b:
         b8:0f:31:b2:d9:7a:de:24:19:a7:7e:77:cc:e5:de:f1:b1:08:
         53:5f:7e:27:5b:30:d0:21:a9:11:d0:58:c9:18:a5:5c:91:46:
         15:ec:ab:d2:d1:74:8b:e5:e3:70:19:65:62:db:8c:34:73:e2:
         23:ef:ca:3e:52:33:19:09:96:ec:ae:e8:40:09:09:a1:c0:6b:
         d3:39:67:6f:21:54:5c:05:d2:be:93:ce:97:17:4d:bb:4f:0a:
         72:e6:07:42:fd:ed:1a:04:1b:02:73:c2:a5:30:a9:ef:0e:c8:
         31:f6:d7:a0:07:4c:8a:67:36:dd:e1:fa:e0:9a:17:91:46:60:
         e5:98:91:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsidIcm1o0DHTBlwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
ZWYyYzQzNDgtMDgyMi00MjU5LWFmNTYtZGNmYjQ4NTBhNzYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOHTZiJbe8BPqYsvQ6kVYXTHkB/KvaXg5GMa
XAaLa5fTJXraLdvFIwqnoEB3wofKXwFFj0o9R5bW3zR343ZZbvG96MwSi53Cvgi7
tbisdSOKCMY2Y1rkiw36pQxlr+XaR/ZeSNGYSmn0W/EXzcNeFyhPdkKO/c0Rs6t8
msCgC5XiArfoLD5NSZJ7v1j9mvpiLwzydeKtw7yPPl9drkSGgcBJ+3HEHqSEesJO
hfgoEQ7bh6QaiaGpVXfMSCIvZO6/KNru68/SOcc2R+bZW2Zb5hDuaW5+3SD0SlNU
/7AbMpVqsqMDneY9eYgktjJwzGzDV6L1CwGJ/MqyTwhrNK2PdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHAZ6F85iXkx7YCzPB7ZcniiIWDyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGY5YTI5MDItMTdiZi0z
MDg2LTg0M2EtZTgwMGM2YjlhYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFCkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISxKs+/h7tjHosx0DqHEIMEGd+lxfgzDRwrPa3bEPJiGDr7+joIHG4h
GB5HzPmC8sVTIz4QD7UMzZ0xBHViJIPh7+P1R4ZMQhpUnJ/kxAr9uPGFZyfn44T9
w+/oSuPznezMUikuQIjNXhKfHuSumuGrpEW6q87hUjmOykusS7gPMbLZet4kGad+
d8zl3vGxCFNffidbMNAhqRHQWMkYpVyRRhXsq9LRdIvl43AZZWLbjDRz4iPvyj5S
MxkJluyu6EAJCaHAa9M5Z28hVFwF0r6TzpcXTbtPCnLmB0L97RoEGwJzwqUwqe8O
yDH216AHTIpnNt3h+uCaF5FGYOWYkaI=
-----END CERTIFICATE-----
Generated at Sun May 5 02:16:40 2024 by rpki-client on console-ams.rpki-client.org