Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bb221f0-982b-3d95-87c9-0d93d45f3307.roa
File:                     5bb221f0-982b-3d95-87c9-0d93d45f3307.roa (raw, json)
Hash identifier:          y17OIZpMINR2vZPCNyWnr4QqKIelh29y90ffZ0Vx+no=
Subject key identifier:   C3:9B:AF:E9:01:BC:76:A7:02:6B:1D:F6:75:CD:B2:3C:B2:77:C4:02
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C5EBB13C4DD6230DC35D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bb221f0-982b-3d95-87c9-0d93d45f3307.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        67.170.160.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c5:eb:b1:3c:4d:d6:23:0d:c3:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=355efc2f-54d9-453b-bb30-8cf56523628d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:63:75:d7:04:d9:e9:04:cd:d0:12:be:20:19:
                    67:1d:83:e4:2e:b2:04:59:9e:0d:da:31:65:77:60:
                    1d:02:97:20:0b:34:0b:52:82:33:7f:f0:fa:6d:1b:
                    3f:dd:7c:01:3c:d8:56:e5:e3:7c:c4:b1:03:38:47:
                    ce:8b:92:18:50:2e:5a:1d:dd:db:9b:d5:70:c8:a8:
                    cf:9a:39:df:2c:98:25:c8:79:05:ee:dc:c0:cb:ea:
                    60:00:79:c4:48:11:fb:13:fc:c8:67:54:1a:3a:05:
                    06:74:7e:3a:32:df:bb:4d:05:5f:43:86:8e:51:69:
                    0a:4a:8e:c2:77:1a:cf:87:1d:d5:33:f7:17:07:25:
                    b3:ab:31:9c:43:83:25:00:93:0d:f0:5e:b0:dc:7a:
                    45:cc:af:f1:69:55:bd:91:7f:cc:3c:21:05:09:4a:
                    c8:3b:d7:7f:f5:e2:6e:1a:11:af:e0:89:0f:0e:e9:
                    1f:0c:7e:50:88:1d:8d:0c:cd:22:24:33:22:30:71:
                    ae:e1:6c:e0:b4:8d:68:28:5e:0e:34:69:91:a3:10:
                    28:58:09:42:c0:8e:ac:ef:19:ad:e0:f5:29:67:ee:
                    2d:36:fd:f1:b8:f4:33:71:42:df:ee:b3:ce:c1:6f:
                    87:cb:7f:74:db:23:79:e8:e3:ec:ab:3d:c2:7d:04:
                    7d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9B:AF:E9:01:BC:76:A7:02:6B:1D:F6:75:CD:B2:3C:B2:77:C4:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bb221f0-982b-3d95-87c9-0d93d45f3307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.170.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c7:7f:b3:bf:2e:59:a9:77:aa:76:0e:69:75:cd:48:af:7e:
         4e:ec:6a:b6:50:80:b6:04:45:b9:41:f0:1e:ef:59:ea:d7:19:
         00:9e:da:36:d6:0f:a4:d2:09:2f:8d:80:49:9c:85:d4:1e:fd:
         af:7e:d6:e2:c0:5c:f7:ef:12:6b:01:b4:08:0f:80:ce:38:0d:
         7c:d9:0c:95:b8:07:67:63:87:e9:1c:93:50:06:22:d3:84:d2:
         60:63:42:01:2e:56:35:70:28:84:59:e5:0c:7c:6b:3d:76:88:
         35:29:8c:df:20:9c:7a:63:54:e1:31:2a:e0:dd:25:32:56:cc:
         94:af:cd:b1:c5:a8:c7:fb:ac:e4:d3:91:e5:56:b4:7f:ea:2a:
         f9:b2:0f:22:b8:65:b5:20:e3:41:1a:96:22:cc:02:01:01:2e:
         82:31:ec:a0:00:1b:fd:20:08:f0:4e:30:19:9f:24:cb:66:b1:
         2f:b6:ce:52:79:a5:f5:92:4c:a2:8b:13:df:a8:01:ee:5d:4b:
         91:ec:84:e7:bc:39:8d:f4:89:51:09:3f:6b:ad:cf:04:56:4e:
         44:ad:c2:07:4b:f9:8b:71:d4:69:ba:9a:a3:36:8f:48:6e:9b:
         aa:95:eb:38:1f:1d:ec:38:42:53:73:03:24:44:0e:d0:a3:20:
         9d:74:06:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0xeuxPE3WIw3DXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
MzU1ZWZjMmYtNTRkOS00NTNiLWJiMzAtOGNmNTY1MjM2MjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/GN11wTZ6QTN0BK+IBlnHYPkLrIEWZ4N2jFl
d2AdApcgCzQLUoIzf/D6bRs/3XwBPNhW5eN8xLEDOEfOi5IYUC5aHd3bm9VwyKjP
mjnfLJglyHkF7tzAy+pgAHnESBH7E/zIZ1QaOgUGdH46Mt+7TQVfQ4aOUWkKSo7C
dxrPhx3VM/cXByWzqzGcQ4MlAJMN8F6w3HpFzK/xaVW9kX/MPCEFCUrIO9d/9eJu
GhGv4IkPDukfDH5QiB2NDM0iJDMiMHGu4WzgtI1oKF4ONGmRoxAoWAlCwI6s7xmt
4PUpZ+4tNv3xuPQzcULf7rPOwW+Hy3902yN56OPsqz3CfQR9bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMObr+kBvHanAmsd9nXNsjyyd8QCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWJiMjIxZjAtOTgyYi0z
ZDk1LTg3YzktMGQ5M2Q0NWYzMzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6qgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLHf7O/Llmpd6p2Dml1zUivfk7sarZQgLYERblB8B7vWerXGQCe2jbW
D6TSCS+NgEmchdQe/a9+1uLAXPfvEmsBtAgPgM44DXzZDJW4B2djh+kck1AGItOE
0mBjQgEuVjVwKIRZ5Qx8az12iDUpjN8gnHpjVOExKuDdJTJWzJSvzbHFqMf7rOTT
keVWtH/qKvmyDyK4ZbUg40EaliLMAgEBLoIx7KAAG/0gCPBOMBmfJMtmsS+2zlJ5
pfWSTKKLE9+oAe5dS5HshOe8OY30iVEJP2utzwRWTkStwgdL+Ytx1Gm6mqM2j0hu
m6qV6zgfHew4QlNzAyREDtCjIJ10Bsk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:25:40 2024 by rpki-client on console-fra.rpki-client.org