Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b1af42e-eb12-3dc2-bd59-12fd1d4deffa.roa
File:                     6b1af42e-eb12-3dc2-bd59-12fd1d4deffa.roa (raw, json)
Hash identifier:          60uLdHOmIsJjwKB5YoSBoKL59XfmI1DFs/3SG9LaI1w=
Subject key identifier:   7C:B4:2D:8D:4E:A3:B4:47:9B:3F:DB:8A:48:AC:25:4D:EF:C8:77:12
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C78D6A429B40E5F97AE800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b1af42e-eb12-3dc2-bd59-12fd1d4deffa.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.41.142.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:8d:6a:42:9b:40:e5:f9:7a:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=e41bc0bd-b558-438f-ad9a-6681af6d79a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:d7:40:68:87:7f:3c:cd:07:ef:72:af:06:
                    fe:7a:59:74:53:6a:b8:27:d1:9d:49:89:79:c1:b8:
                    60:75:7c:e9:fe:58:93:8f:34:2b:36:a8:ab:24:6b:
                    f4:c0:f3:a7:56:cf:de:83:dc:ce:a8:54:ce:6d:32:
                    97:80:0d:5c:eb:f8:6b:99:b5:31:ef:01:6f:47:df:
                    86:b3:c1:fd:0a:0c:e3:4d:6d:1d:09:cd:00:40:92:
                    a1:91:2f:6d:f9:5e:b4:06:7e:36:64:ab:ce:3d:b7:
                    7b:52:b8:70:ad:bb:6b:fa:1f:83:cb:83:4b:f4:f9:
                    74:91:d1:c0:a5:e3:ad:20:e7:6e:f6:a8:cb:12:8f:
                    0a:a1:42:96:0e:a8:d2:19:d3:57:cd:a8:5e:8d:ad:
                    c3:de:dc:ac:98:60:1d:32:18:99:2b:e9:e0:b5:51:
                    41:ef:3f:2d:71:34:0d:3e:ec:f7:56:d0:7c:d4:f4:
                    7c:ce:13:c5:99:5a:e5:a0:25:e5:3c:cb:68:73:d6:
                    60:aa:ff:e6:5c:58:21:d5:4f:e9:46:b7:d4:1d:7c:
                    ee:de:84:01:7e:d8:a9:44:9e:c0:ac:fe:e6:15:0c:
                    9e:99:64:ee:42:e9:ac:2b:99:ad:18:0f:f8:69:0c:
                    b7:64:15:1e:80:90:95:da:50:ee:ec:2a:9a:70:a3:
                    84:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B4:2D:8D:4E:A3:B4:47:9B:3F:DB:8A:48:AC:25:4D:EF:C8:77:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b1af42e-eb12-3dc2-bd59-12fd1d4deffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.41.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:07:46:12:10:8e:b9:27:60:c0:ee:cf:86:26:c4:2a:73:33:
         32:d8:c4:4d:5e:12:51:d6:b7:6b:1a:c2:b6:96:55:9f:46:90:
         1c:46:02:3c:60:39:96:16:a4:7e:61:bb:c7:db:5e:f8:85:b4:
         68:d3:11:90:ed:6a:56:16:25:0f:81:d0:24:f6:8f:ee:a2:d8:
         1a:dc:45:eb:ee:f4:65:aa:4e:fb:34:d0:1d:90:11:59:be:1a:
         e6:66:22:a4:8b:96:33:44:e4:64:f8:39:21:1d:7d:1d:30:b4:
         4c:62:e9:07:15:04:ef:74:e7:ba:b0:e4:a6:7c:4f:57:ed:93:
         69:0c:8f:2a:b0:0a:09:12:ba:8c:c1:c6:2e:cd:41:54:a9:5a:
         7b:a0:cf:5f:b9:df:06:4c:bb:af:db:9d:12:6d:a2:25:51:30:
         ae:58:a3:cc:52:6a:06:b4:b7:f2:35:b2:27:0e:4f:fe:eb:8c:
         c0:2a:fb:77:68:28:cd:67:04:0d:c0:86:60:4e:93:2e:b5:cc:
         dd:a7:f7:35:6e:ba:94:8b:21:7d:fc:d7:92:16:9d:53:12:ba:
         e5:a2:1f:2f:b3:17:75:3a:6d:4d:88:1b:bc:db:5e:a5:8a:16:
         55:46:3b:7b:05:ca:f1:b5:4c:2a:07:41:7a:67:11:a9:ae:e9:
         fb:ac:60:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0x41qQptA5fl66AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
ZTQxYmMwYmQtYjU1OC00MzhmLWFkOWEtNjY4MWFmNmQ3OWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLPXQGiHfzzNB+9yrwb+ell0U2q4J9GdSYl5
wbhgdXzp/liTjzQrNqirJGv0wPOnVs/eg9zOqFTObTKXgA1c6/hrmbUx7wFvR9+G
s8H9CgzjTW0dCc0AQJKhkS9t+V60Bn42ZKvOPbd7Urhwrbtr+h+Dy4NL9Pl0kdHA
peOtIOdu9qjLEo8KoUKWDqjSGdNXzaheja3D3tysmGAdMhiZK+ngtVFB7z8tcTQN
Puz3VtB81PR8zhPFmVrloCXlPMtoc9Zgqv/mXFgh1U/pRrfUHXzu3oQBftipRJ7A
rP7mFQyemWTuQumsK5mtGA/4aQy3ZBUegJCV2lDu7CqacKOEKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHy0LY1Oo7RHmz/bikisJU3vyHcSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmIxYWY0MmUtZWIxMi0z
ZGMyLWJkNTktMTJmZDFkNGRlZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCmOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMsHRhIQjrknYMDuz4YmxCpzMzLYxE1eElHWt2sawraWVZ9GkBxGAjxg
OZYWpH5hu8fbXviFtGjTEZDtalYWJQ+B0CT2j+6i2BrcRevu9GWqTvs00B2QEVm+
GuZmIqSLljNE5GT4OSEdfR0wtExi6QcVBO9057qw5KZ8T1ftk2kMjyqwCgkSuozB
xi7NQVSpWnugz1+53wZMu6/bnRJtoiVRMK5Yo8xSaga0t/I1sicOT/7rjMAq+3do
KM1nBA3AhmBOky61zN2n9zVuupSLIX3815IWnVMSuuWiHy+zF3U6bU2IG7zbXqWK
FlVGO3sFyvG1TCoHQXpnEamu6fusYMM=
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:48:49 2024 by rpki-client on console-fra.rpki-client.org