Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/708f44b0-fe33-3110-843e-48a8b83d4f09.roa
File:                     708f44b0-fe33-3110-843e-48a8b83d4f09.roa (raw, json)
Hash identifier:          2sw5alWw1SdUSMVup7+r+TLahx6CTa+78pfFq2hBHXU=
Subject key identifier:   3F:D4:8E:4A:78:28:55:A5:E0:A4:C5:92:77:48:1C:1C:1A:71:EE:15
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C79C5786CDB86E06624B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/708f44b0-fe33-3110-843e-48a8b83d4f09.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.48.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:9c:57:86:cd:b8:6e:06:62:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=f09bfc53-cead-4b75-94ea-7ad5dd51e8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c2:58:67:b2:bf:cd:18:97:4c:38:a6:6e:79:
                    67:5c:25:d4:d7:49:63:c4:f3:f1:71:a9:e6:63:ad:
                    fb:42:38:34:dd:46:2b:ef:6d:f8:f4:fd:54:0d:6b:
                    14:fe:ee:f3:01:44:ae:2b:b3:1f:8a:b3:06:e6:25:
                    45:ae:01:c1:dd:98:5f:56:ab:99:ad:46:6b:da:ab:
                    e5:27:d9:f2:ce:c6:9c:a0:3b:27:35:10:c8:9c:8c:
                    ff:6a:8c:34:f7:6f:27:14:1b:77:cb:a6:f7:59:42:
                    b0:f4:7f:4c:7f:26:b9:e6:e6:c8:96:2d:e3:cc:b0:
                    03:20:f1:28:49:66:8b:de:a1:b1:2e:46:49:ed:51:
                    bf:be:aa:b8:52:93:94:70:ec:84:18:04:82:40:5c:
                    67:a1:cb:c6:12:ad:88:5a:19:9a:f0:28:81:dd:89:
                    38:e8:38:22:ce:7f:54:e0:95:a8:20:59:d8:12:3b:
                    85:a9:d2:c8:60:d3:fa:a4:cc:e2:3a:7e:42:df:79:
                    e5:06:4a:7b:20:57:e9:be:66:8d:3f:1e:37:41:11:
                    d7:1b:98:f3:b3:6f:20:7f:c0:fb:a7:73:71:ec:18:
                    cb:6c:3a:0a:9c:32:7c:ef:95:6b:11:93:4b:95:20:
                    0e:3d:22:72:f5:f2:97:a8:9a:0e:f2:ba:f3:7e:ed:
                    f3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D4:8E:4A:78:28:55:A5:E0:A4:C5:92:77:48:1C:1C:1A:71:EE:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/708f44b0-fe33-3110-843e-48a8b83d4f09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.48.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:39:76:9d:08:b3:21:14:04:0b:8f:d9:41:8a:08:34:b4:82:
         f4:35:07:f2:0f:a5:2c:0e:e6:b3:48:0f:54:ab:cb:e5:7d:5c:
         73:5f:38:9a:cc:88:6c:40:1d:6e:4a:db:04:0b:6d:b6:fc:c4:
         df:72:31:94:ec:6c:83:6d:5d:86:e6:e5:08:11:4f:97:89:1a:
         d1:3e:0e:cf:34:b1:78:0c:37:b7:92:03:c8:dc:6c:43:d1:7f:
         28:eb:f5:69:b0:b3:97:f8:20:23:f2:ec:a6:ab:ed:61:46:a0:
         86:ee:9e:ce:84:ca:6b:e4:93:ce:4b:05:b1:f7:c1:8f:f9:3c:
         30:2a:c5:16:3d:a7:0e:e9:3c:08:7f:a3:92:ac:39:47:9a:11:
         19:58:ae:10:12:55:72:74:de:b5:a8:cc:98:21:d3:b1:e2:fb:
         4c:db:fd:6b:ee:62:31:e9:c5:61:c4:10:1c:2d:45:55:e6:75:
         90:1b:5b:5e:7d:52:e3:64:2f:00:a0:a7:29:f3:3e:be:0f:8d:
         71:c3:81:cc:89:b8:1f:a4:f7:cc:fa:3d:a3:e2:88:d2:df:93:
         c5:d9:f5:93:50:a1:67:a0:5b:3c:49:56:87:4e:b6:56:39:16:
         d5:72:37:b9:03:13:8f:67:d1:6f:ac:68:b3:96:4b:64:a7:4c:
         8d:3f:98:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0x5xXhs24bgZiS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
ZjA5YmZjNTMtY2VhZC00Yjc1LTk0ZWEtN2FkNWRkNTFlOGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocJYZ7K/zRiXTDimbnlnXCXU10ljxPPxcanm
Y637Qjg03UYr72349P1UDWsU/u7zAUSuK7MfirMG5iVFrgHB3ZhfVquZrUZr2qvl
J9nyzsacoDsnNRDInIz/aow0928nFBt3y6b3WUKw9H9Mfya55ubIli3jzLADIPEo
SWaL3qGxLkZJ7VG/vqq4UpOUcOyEGASCQFxnocvGEq2IWhma8CiB3Yk46Dgizn9U
4JWoIFnYEjuFqdLIYNP6pMziOn5C33nlBkp7IFfpvmaNPx43QRHXG5jzs28gf8D7
p3Nx7BjLbDoKnDJ875VrEZNLlSAOPSJy9fKXqJoO8rrzfu3zNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/Ujkp4KFWl4KTFkndIHBwace4VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzA4ZjQ0YjAtZmUzMy0z
MTEwLTg0M2UtNDhhOGI4M2Q0ZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDADMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI85dp0IsyEUBAuP2UGKCDS0gvQ1B/IPpSwO5rNID1Sry+V9XHNfOJrM
iGxAHW5K2wQLbbb8xN9yMZTsbINtXYbm5QgRT5eJGtE+Ds80sXgMN7eSA8jcbEPR
fyjr9Wmws5f4ICPy7Kar7WFGoIbuns6Eymvkk85LBbH3wY/5PDAqxRY9pw7pPAh/
o5KsOUeaERlYrhASVXJ03rWozJgh07Hi+0zb/WvuYjHpxWHEEBwtRVXmdZAbW159
UuNkLwCgpynzPr4PjXHDgcyJuB+k98z6PaPiiNLfk8XZ9ZNQoWegWzxJVodOtlY5
FtVyN7kDE49n0W+saLOWS2SnTI0/mCI=
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:49:15 2024 by rpki-client on console-fra.rpki-client.org