Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/544c91b8-0df5-3f31-841e-442a6ddb8a5d.roa
File:                     544c91b8-0df5-3f31-841e-442a6ddb8a5d.roa (raw, json)
Hash identifier:          3FlLA/ZHb93Zs+9+AD0EwNAcYeWcFQPEYSfhp7BrJ0k=
Subject key identifier:   4E:E1:FC:86:E6:5B:5A:7D:65:13:C4:7C:E6:00:A9:0A:64:E2:F2:E5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF6DCB296C374EF57B01200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/544c91b8-0df5-3f31-841e-442a6ddb8a5d.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        68.32.242.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:dc:b2:96:c3:74:ef:57:b0:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=c1c4a344-4517-497a-95e3-3b72436a054f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5c:0d:58:32:0e:36:37:09:b0:a1:25:a1:5c:
                    10:59:aa:30:09:b3:7c:3e:63:43:8f:16:5e:11:9f:
                    50:0e:a7:c5:67:9b:11:de:00:65:70:73:63:d8:43:
                    48:d1:c3:2a:d5:d7:be:e7:37:dc:97:22:98:22:58:
                    9f:c0:06:b5:be:b3:ed:13:50:a1:3d:d0:94:77:eb:
                    09:76:f0:72:93:84:16:06:c0:f7:2d:f2:30:bb:b2:
                    e4:a6:02:16:8c:ff:5b:f5:88:ad:f5:cf:13:20:29:
                    5f:e2:9f:ad:76:e0:94:ee:ae:48:d7:27:66:38:5d:
                    64:f9:3d:bb:1b:7e:8e:29:74:1e:52:35:f9:e1:2b:
                    e7:68:b4:b1:d7:6f:56:33:ba:ce:7f:d0:89:7c:fa:
                    78:96:cb:ec:b4:65:6f:8a:df:90:8c:b3:df:70:bc:
                    38:83:45:1b:ef:2a:fa:66:64:dc:ae:5f:8b:9f:1d:
                    09:22:c1:a0:7a:ce:80:4f:3b:30:08:29:2e:eb:ae:
                    9e:0d:2e:73:f9:dc:f0:96:9f:43:8b:69:8d:ce:0d:
                    9a:f5:1a:78:2c:8b:41:e4:75:df:cf:66:92:02:8e:
                    2c:c5:31:61:2a:9d:bc:fa:a9:7f:61:54:71:57:33:
                    62:c8:0d:52:17:a7:99:9c:72:3d:63:5d:f5:92:eb:
                    29:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E1:FC:86:E6:5B:5A:7D:65:13:C4:7C:E6:00:A9:0A:64:E2:F2:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/544c91b8-0df5-3f31-841e-442a6ddb8a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.32.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:6e:de:1a:65:a6:c1:5c:67:97:f4:13:2a:40:d7:89:06:6e:
         62:dd:19:d0:dc:cd:11:5b:a9:50:88:ad:46:d8:36:24:f0:64:
         ea:c1:93:55:22:aa:30:7e:bb:48:73:20:5d:59:a8:a1:2a:e8:
         f8:ba:6e:08:2e:99:3c:fb:b6:29:e9:68:59:c2:6a:2f:e2:a9:
         3e:25:86:f1:0d:cc:bb:da:48:c9:0a:74:a7:41:d4:e6:6d:c6:
         3a:33:d2:a3:45:cd:63:97:3a:bf:4a:8f:c1:e3:53:9e:b7:5c:
         b6:d5:af:d0:ed:97:df:1c:c3:a6:29:46:9a:03:14:45:07:95:
         45:78:fa:18:56:5d:65:dd:32:10:37:99:01:f6:cd:08:7f:1f:
         68:23:21:16:ae:76:a4:20:bb:2d:a8:b2:f8:3a:02:77:e6:f1:
         26:e6:ef:3b:28:7f:b0:ec:90:1b:08:11:00:8b:96:ce:94:8a:
         08:13:23:2f:a6:56:35:d2:d7:ce:71:7a:8c:7c:8f:dd:13:91:
         08:17:8d:81:5c:1b:c5:16:06:32:3d:bb:c7:70:f2:37:13:3c:
         1b:d3:92:89:d6:3d:7d:6d:f3:a5:7b:33:c3:db:8d:db:6d:35:
         61:ed:34:11:9c:6a:0d:48:cd:5a:14:ec:30:1c:bc:f1:c9:ad:
         3c:66:9e:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+9tyylsN071ewEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
YzFjNGEzNDQtNDUxNy00OTdhLTk1ZTMtM2I3MjQzNmEwNTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1wNWDIONjcJsKEloVwQWaowCbN8PmNDjxZe
EZ9QDqfFZ5sR3gBlcHNj2ENI0cMq1de+5zfclyKYIlifwAa1vrPtE1ChPdCUd+sJ
dvByk4QWBsD3LfIwu7LkpgIWjP9b9Yit9c8TIClf4p+tduCU7q5I1ydmOF1k+T27
G36OKXQeUjX54SvnaLSx129WM7rOf9CJfPp4lsvstGVvit+QjLPfcLw4g0Ub7yr6
ZmTcrl+Lnx0JIsGges6ATzswCCku666eDS5z+dzwlp9Di2mNzg2a9Rp4LItB5HXf
z2aSAo4sxTFhKp28+ql/YVRxVzNiyA1SF6eZnHI9Y131kuspCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE7h/IbmW1p9ZRPEfOYAqQpk4vLlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTQ0YzkxYjgtMGRmNS0z
ZjMxLTg0MWUtNDQyYTZkZGI4YTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCDyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL1u3hplpsFcZ5f0EypA14kGbmLdGdDczRFbqVCIrUbYNiTwZOrBk1Ui
qjB+u0hzIF1ZqKEq6Pi6bggumTz7tinpaFnCai/iqT4lhvENzLvaSMkKdKdB1OZt
xjoz0qNFzWOXOr9Kj8HjU563XLbVr9Dtl98cw6YpRpoDFEUHlUV4+hhWXWXdMhA3
mQH2zQh/H2gjIRaudqQguy2osvg6Anfm8Sbm7zsof7DskBsIEQCLls6UiggTIy+m
VjXS185xeox8j90TkQgXjYFcG8UWBjI9u8dw8jcTPBvTkonWPX1t86V7M8Pbjdtt
NWHtNBGcag1IzVoU7DAcvPHJrTxmnq0=
-----END CERTIFICATE-----
Generated at Sun Dec 22 16:22:21 2024 by rpki-client on console-ams.rpki-client.org