Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f7b022c-69d1-3fd6-abf3-c6ed00f6912f.roa
File:                     5f7b022c-69d1-3fd6-abf3-c6ed00f6912f.roa (raw, json)
Hash identifier:          ojf+moLb2suyFcN0n5ttDVtHkK3sRmsGOD7AqZwG84o=
Subject key identifier:   39:FB:2E:4C:8B:76:0D:57:D7:02:09:83:5F:79:33:08:BF:F5:69:B0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9DDD7B50BFE42A4E81BAC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f7b022c-69d1-3fd6-abf3-c6ed00f6912f.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33660
IP address blocks:        174.162.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:dd:7b:50:bf:e4:2a:4e:81:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=aa7129dc-8684-45cd-b667-66e87370b3e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9a:85:8d:a9:2e:5d:8d:da:2d:63:d7:67:00:
                    21:23:78:7f:71:16:04:81:95:47:4d:e6:b2:d7:c0:
                    17:64:c1:22:a9:fb:e7:c4:74:b4:9b:d9:9f:93:6a:
                    43:e4:44:92:d6:e6:46:7b:d5:20:6d:82:49:25:be:
                    67:a5:d6:79:00:43:d0:19:98:fb:a9:4a:69:a0:e4:
                    b1:44:7a:d7:c0:80:af:4d:07:56:ca:b1:0e:25:68:
                    f1:97:86:a0:6d:68:f9:b6:d0:15:02:2d:bc:80:a8:
                    68:93:d3:9b:d8:97:00:99:b9:b1:db:3c:c3:a6:7d:
                    de:b9:30:4d:ec:7f:09:d8:51:11:db:cb:e6:21:e5:
                    f9:de:e8:3e:b9:44:fb:84:c0:1e:f7:21:a0:00:d3:
                    99:21:e5:97:c3:9d:be:e0:13:7d:d4:a1:c6:94:d3:
                    7c:3d:d5:ca:4b:eb:f9:8d:d6:31:b1:15:8b:0f:55:
                    9c:55:63:74:8e:78:34:1a:da:5f:e7:87:d5:9b:c6:
                    55:e4:a8:0e:15:0f:e2:cd:51:bc:4d:1c:4c:09:82:
                    d1:06:2b:07:39:6d:78:b0:4b:d3:08:8d:ae:9b:56:
                    bf:77:5e:dc:e0:68:35:cb:07:8a:60:56:45:22:2d:
                    12:96:83:5f:29:1d:a5:58:52:bd:63:71:df:87:50:
                    61:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FB:2E:4C:8B:76:0D:57:D7:02:09:83:5F:79:33:08:BF:F5:69:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f7b022c-69d1-3fd6-abf3-c6ed00f6912f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.162.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:9f:b5:a1:01:0f:9a:1d:c9:f1:81:cd:69:20:fc:2d:7a:0c:
         1c:c4:d5:63:71:a2:79:6c:ec:e1:53:28:fd:98:43:fd:17:6d:
         d0:30:dc:ae:d6:29:95:db:b9:28:0c:81:13:0c:d0:45:ef:e4:
         f8:7d:6c:a4:79:11:d5:38:a5:b1:e0:39:51:ee:1d:f5:b3:3e:
         0f:74:91:27:b2:a3:9f:67:19:34:21:f7:b2:b2:ca:4b:e3:ad:
         75:11:1e:b3:9d:f4:56:73:35:88:7b:65:2c:ab:7d:a2:0b:fc:
         ae:02:2c:c1:96:8a:e0:33:28:67:19:22:61:d0:dd:6f:8f:96:
         52:ca:07:3c:8e:92:d1:21:65:85:28:db:22:99:d3:06:9a:48:
         75:5e:6b:cf:32:8b:d1:1e:37:79:17:09:cf:e4:cf:c8:d7:e5:
         5f:09:2f:0b:be:70:07:48:01:9c:c8:ae:28:39:87:69:36:d2:
         ac:6c:98:42:db:af:71:20:fe:06:bc:28:99:66:37:b2:60:0b:
         9e:ca:08:1f:a9:5d:df:d5:4f:7c:98:c4:77:52:56:96:bf:c0:
         b2:66:62:29:a8:e1:6a:f2:f0:5a:da:4d:90:d7:8b:88:a6:db:
         64:8d:00:f7:1a:5a:da:11:ae:f3:45:9a:2d:43:e9:a0:6e:6e:
         04:a5:e9:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnd17UL/kKk6BusAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
YWE3MTI5ZGMtODY4NC00NWNkLWI2NjctNjZlODczNzBiM2UwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JqFjakuXY3aLWPXZwAhI3h/cRYEgZVHTeay
18AXZMEiqfvnxHS0m9mfk2pD5ESS1uZGe9UgbYJJJb5npdZ5AEPQGZj7qUppoOSx
RHrXwICvTQdWyrEOJWjxl4agbWj5ttAVAi28gKhok9Ob2JcAmbmx2zzDpn3euTBN
7H8J2FER28vmIeX53ug+uUT7hMAe9yGgANOZIeWXw52+4BN91KHGlNN8PdXKS+v5
jdYxsRWLD1WcVWN0jng0Gtpf54fVm8ZV5KgOFQ/izVG8TRxMCYLRBisHOW14sEvT
CI2um1a/d17c4Gg1yweKYFZFIi0SloNfKR2lWFK9Y3Hfh1BhywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDn7LkyLdg1X1wIJg195Mwi/9WmwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWY3YjAyMmMtNjlkMS0z
ZmQ2LWFiZjMtYzZlZDAwZjY5MTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqL4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHGftaEBD5odyfGBzWkg/C16DBzE1WNxonls7OFTKP2YQ/0XbdAw3K7W
KZXbuSgMgRMM0EXv5Ph9bKR5EdU4pbHgOVHuHfWzPg90kSeyo59nGTQh97Kyykvj
rXURHrOd9FZzNYh7ZSyrfaIL/K4CLMGWiuAzKGcZImHQ3W+PllLKBzyOktEhZYUo
2yKZ0waaSHVea88yi9EeN3kXCc/kz8jX5V8JLwu+cAdIAZzIrig5h2k20qxsmELb
r3Eg/ga8KJlmN7JgC57KCB+pXd/VT3yYxHdSVpa/wLJmYimo4Wry8FraTZDXi4im
22SNAPcaWtoRrvNFmi1D6aBubgSl6ck=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:36:58 2024 by rpki-client on console-fra.rpki-client.org