Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69d98e29-37c0-3aab-94f6-a61b91d44a47.roa
File:                     69d98e29-37c0-3aab-94f6-a61b91d44a47.roa (raw, json)
Hash identifier:          EXuz5Njmf6KrQALsLGmN4Hax5+z7egqmgqtJ0UJPEYs=
Subject key identifier:   38:D6:99:B1:98:4B:D4:62:EC:D8:EF:29:81:AA:E8:16:2F:80:9F:02
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D07CD8A0B4D962B74E600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69d98e29-37c0-3aab-94f6-a61b91d44a47.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        67.169.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:07:cd:8a:0b:4d:96:2b:74:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=ba7a7885-3a9e-4055-8bdb-a2057a3044cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:62:b5:9a:63:a1:30:88:12:e4:d8:aa:08:74:
                    d8:bf:d3:07:2b:fa:6c:33:b1:9a:1b:f5:09:f4:0a:
                    f3:d0:96:cd:46:5b:2b:de:62:d0:4c:10:3e:e8:fa:
                    a9:ee:a0:c7:6c:08:3d:94:6f:2e:23:91:fe:98:77:
                    07:f0:2c:88:29:35:2f:f9:0b:f4:a3:83:ae:08:83:
                    d5:2d:4f:81:09:33:9e:64:55:43:61:91:c0:7e:2c:
                    ef:cb:37:bd:85:11:3d:ee:f2:3e:20:16:34:fc:a4:
                    4f:10:e8:fd:d7:06:e3:a6:fe:df:14:1d:30:6e:6d:
                    8e:f9:be:6c:16:23:a7:67:16:f4:51:cc:c1:89:65:
                    79:d0:21:38:11:27:cb:5d:df:7b:33:1a:b4:5b:b1:
                    ef:8a:5c:1c:4b:39:32:c3:87:28:93:8b:d8:82:42:
                    ae:78:9a:c2:40:72:a7:f7:12:1a:2a:c6:ff:38:bd:
                    f4:cd:42:1b:e9:97:9a:fc:49:9c:b9:17:8c:07:ce:
                    49:36:5e:3d:34:1f:52:a0:40:60:c2:60:8e:33:6f:
                    56:c6:31:60:64:9d:f6:a1:34:08:23:55:f0:a3:88:
                    b5:ea:d6:d9:41:12:c2:80:de:2e:ca:ae:cc:4d:d8:
                    15:6b:1f:39:f0:c5:6b:76:45:b1:3d:d3:82:84:ee:
                    80:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D6:99:B1:98:4B:D4:62:EC:D8:EF:29:81:AA:E8:16:2F:80:9F:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69d98e29-37c0-3aab-94f6-a61b91d44a47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.169.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:2d:2c:a9:7f:d7:33:1e:fb:d1:6f:3d:f2:38:5d:c9:c1:35:
         57:68:e4:cc:cf:27:2c:e9:92:b3:9c:74:e9:62:0b:de:d3:da:
         ed:48:9a:c4:9b:21:17:e9:5b:02:0b:40:f0:46:9a:d4:88:98:
         cd:4f:5a:d2:18:0a:65:b3:96:c9:30:b6:3f:f5:f4:20:81:72:
         9c:f5:d8:51:70:e9:b2:f4:18:ee:99:55:40:76:1a:d6:e0:2d:
         a1:04:b1:3c:7b:83:84:8d:15:d1:70:70:7f:2f:05:57:47:da:
         74:79:86:b6:46:2e:a9:97:03:7d:d3:40:47:73:b8:01:34:e3:
         ae:01:2d:50:e4:bd:3c:db:64:c8:b3:77:f0:d2:93:69:57:70:
         eb:97:31:83:83:89:c4:94:0f:2f:08:88:90:c4:45:88:09:d0:
         fa:0c:b3:94:31:58:3e:ee:e5:de:19:db:40:a9:8d:42:8b:26:
         a5:92:36:b6:89:58:0c:32:9c:60:f8:2f:8c:59:e2:0e:76:30:
         7b:c6:6e:7b:63:66:fc:62:d2:25:92:d9:27:60:71:04:29:f2:
         26:33:c7:31:88:e8:66:74:84:03:79:26:e0:60:74:e5:3f:9a:
         a8:7c:d8:5e:f7:01:b8:b7:9d:db:e1:d1:ee:15:d8:94:34:84:
         33:f9:f0:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnQfNigtNlit05gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
YmE3YTc4ODUtM2E5ZS00MDU1LThiZGItYTIwNTdhMzA0NGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWK1mmOhMIgS5NiqCHTYv9MHK/psM7GaG/UJ
9Arz0JbNRlsr3mLQTBA+6Pqp7qDHbAg9lG8uI5H+mHcH8CyIKTUv+Qv0o4OuCIPV
LU+BCTOeZFVDYZHAfizvyze9hRE97vI+IBY0/KRPEOj91wbjpv7fFB0wbm2O+b5s
FiOnZxb0UczBiWV50CE4ESfLXd97Mxq0W7HvilwcSzkyw4cok4vYgkKueJrCQHKn
9xIaKsb/OL30zUIb6Zea/EmcuReMB85JNl49NB9SoEBgwmCOM29WxjFgZJ32oTQI
I1Xwo4i16tbZQRLCgN4uyq7MTdgVax858MVrdkWxPdOChO6AtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDjWmbGYS9Ri7NjvKYGq6BYvgJ8CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjlkOThlMjktMzdjMC0z
YWFiLTk0ZjYtYTYxYjkxZDQ0YTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6mYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADstLKl/1zMe+9FvPfI4XcnBNVdo5MzPJyzpkrOcdOliC97T2u1ImsSb
IRfpWwILQPBGmtSImM1PWtIYCmWzlskwtj/19CCBcpz12FFw6bL0GO6ZVUB2Gtbg
LaEEsTx7g4SNFdFwcH8vBVdH2nR5hrZGLqmXA33TQEdzuAE0464BLVDkvTzbZMiz
d/DSk2lXcOuXMYODicSUDy8IiJDERYgJ0PoMs5QxWD7u5d4Z20CpjUKLJqWSNraJ
WAwynGD4L4xZ4g52MHvGbntjZvxi0iWS2SdgcQQp8iYzxzGI6GZ0hAN5JuBgdOU/
mqh82F73Abi3ndvh0e4V2JQ0hDP58BU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:26:50 2024 by rpki-client on console-fra.rpki-client.org