Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65a5e7cc-4134-3f57-ac42-6662657dfb79.roa
File:                     65a5e7cc-4134-3f57-ac42-6662657dfb79.roa (raw, json)
Hash identifier:          arAyeJeEQmdHnnQrNcBX7DA0sImPg1KkE3A7X9l6Mdw=
Subject key identifier:   6A:9B:10:FC:F6:A9:41:DA:4E:F6:CA:71:42:96:E2:BE:52:C3:4C:1D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC8990FEFBDE7D26C7078100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65a5e7cc-4134-3f57-ac42-6662657dfb79.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        68.83.112.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:90:fe:fb:de:7d:26:c7:07:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=40cb46f4-7b1a-431f-907a-38ba404853e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:92:4d:0a:f1:d4:28:36:9a:43:43:49:99:ea:
                    de:11:91:43:8b:62:6d:c6:a1:53:90:f4:80:f8:74:
                    ba:b1:ea:51:21:16:33:0d:88:62:15:a0:2a:b1:31:
                    75:0e:41:e2:bb:b1:34:9a:34:48:42:81:6b:d3:e2:
                    ac:d1:e2:3d:d3:d7:ae:f5:e5:4d:0f:05:3a:2a:11:
                    c8:8b:35:80:e9:bd:ba:51:67:fd:16:22:6a:be:cb:
                    ff:a3:02:31:db:80:3d:49:de:9c:ca:df:b1:94:c6:
                    a2:2a:f5:d7:2e:87:f6:08:14:6e:86:e3:28:b5:79:
                    87:42:9c:69:e3:c1:69:60:bd:bb:b2:3b:ff:9f:64:
                    c4:be:07:42:8f:1e:c6:5e:ec:80:12:84:ff:f8:57:
                    31:48:9f:b9:61:b3:e4:9e:13:05:87:91:1a:e2:a5:
                    6a:ea:8c:84:74:53:ab:b1:45:1f:a8:b1:ab:05:97:
                    bb:1d:ba:08:35:a4:a8:df:a0:c4:04:0b:ee:c4:a5:
                    51:44:40:47:6b:91:83:f1:06:0c:0f:76:ae:9c:e4:
                    fc:18:ba:8a:d5:7c:57:95:76:51:f4:af:39:f6:d5:
                    cc:93:81:27:41:2f:0c:42:d6:fc:81:83:45:76:00:
                    f7:23:ff:a6:4f:02:4f:24:ed:9e:25:86:88:7e:c7:
                    71:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9B:10:FC:F6:A9:41:DA:4E:F6:CA:71:42:96:E2:BE:52:C3:4C:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65a5e7cc-4134-3f57-ac42-6662657dfb79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.83.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:bf:14:e7:6f:9f:53:57:5d:da:c2:53:f0:89:11:0f:b1:ec:
         8a:a3:bd:9b:18:f4:f2:b0:a5:cf:8e:46:bb:0f:7c:9e:19:1e:
         d1:fc:bc:2e:ee:40:c8:d5:89:22:f8:9c:a5:0a:c5:64:69:5a:
         e5:60:2b:20:eb:05:98:2a:6a:21:9f:50:70:cf:68:f9:ab:ef:
         37:7a:d6:8a:74:8e:c7:10:0e:f3:87:ed:1b:bf:a0:a9:11:42:
         1c:e8:5e:09:38:91:31:39:db:e8:01:b9:3d:2b:66:ad:76:79:
         6d:8b:93:2b:20:2b:fb:b3:be:4e:af:ef:62:a8:a7:22:a3:36:
         86:43:02:63:1f:36:02:d7:34:0a:2d:6e:83:b7:d0:d8:81:90:
         77:09:23:d7:a9:d9:4a:e3:fb:63:68:8f:88:47:b8:e4:42:fb:
         6d:a5:f0:48:d6:e6:89:97:8f:cf:4d:b2:04:b7:61:38:b4:1e:
         e0:61:86:3d:51:c0:e3:dc:1e:13:6c:98:a8:44:c8:75:70:bf:
         a2:43:f8:4f:dd:97:74:62:ac:1d:34:56:c0:50:74:77:4d:fa:
         d1:c6:47:41:a1:f8:81:e9:2c:e5:14:87:64:c5:d5:db:d0:ef:
         40:7c:a4:8f:26:f3:31:e8:23:bc:90:b1:39:56:3a:3d:b8:2f:
         bd:cc:70:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiZD++959JscHgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
NDBjYjQ2ZjQtN2IxYS00MzFmLTkwN2EtMzhiYTQwNDg1M2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JJNCvHUKDaaQ0NJmereEZFDi2JtxqFTkPSA
+HS6sepRIRYzDYhiFaAqsTF1DkHiu7E0mjRIQoFr0+Ks0eI909eu9eVNDwU6KhHI
izWA6b26UWf9FiJqvsv/owIx24A9Sd6cyt+xlMaiKvXXLof2CBRuhuMotXmHQpxp
48FpYL27sjv/n2TEvgdCjx7GXuyAEoT/+FcxSJ+5YbPknhMFh5Ea4qVq6oyEdFOr
sUUfqLGrBZe7HboINaSo36DEBAvuxKVRREBHa5GD8QYMD3aunOT8GLqK1XxXlXZR
9K859tXMk4EnQS8MQtb8gYNFdgD3I/+mTwJPJO2eJYaIfsdxiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGqbEPz2qUHaTvbKcUKW4r5Sw0wdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjVhNWU3Y2MtNDEzNC0z
ZjU3LWFjNDItNjY2MjY1N2RmYjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFNwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABi/FOdvn1NXXdrCU/CJEQ+x7IqjvZsY9PKwpc+ORrsPfJ4ZHtH8vC7u
QMjViSL4nKUKxWRpWuVgKyDrBZgqaiGfUHDPaPmr7zd61op0jscQDvOH7Ru/oKkR
QhzoXgk4kTE52+gBuT0rZq12eW2LkysgK/uzvk6v72KopyKjNoZDAmMfNgLXNAot
boO30NiBkHcJI9ep2Urj+2Noj4hHuORC+22l8EjW5omXj89NsgS3YTi0HuBhhj1R
wOPcHhNsmKhEyHVwv6JD+E/dl3RirB00VsBQdHdN+tHGR0Gh+IHpLOUUh2TF1dvQ
70B8pI8m8zHoI7yQsTlWOj24L73McBo=
-----END CERTIFICATE-----
Generated at Sun May 5 01:29:03 2024 by rpki-client on console-fra.rpki-client.org