Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77325681-1b51-3dd2-a900-fe3acf90902e.roa
File:                     77325681-1b51-3dd2-a900-fe3acf90902e.roa (raw, json)
Hash identifier:          zDx+FpcUkUmfngZV4WLdJad5nPzXB7q6FsY2FtbuNDo=
Subject key identifier:   5E:00:BF:79:3C:44:B6:26:ED:21:BB:FA:8C:CE:1E:89:7F:EF:AA:F9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC8941AAD06D610A72A3ED80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77325681-1b51-3dd2-a900-fe3acf90902e.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        69.249.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:41:aa:d0:6d:61:0a:72:a3:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=cbb7d7d1-e740-4e63-be96-df718ecebe07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:4a:34:b4:96:ac:54:0b:0a:7a:d6:06:4a:
                    8a:63:ae:9b:f1:0b:a5:51:1f:ed:6f:28:c8:88:e8:
                    d0:3d:44:07:02:9a:c4:64:7c:43:4c:b4:74:fd:72:
                    07:38:15:54:7e:73:e3:06:0e:c6:bb:79:30:68:f7:
                    e8:29:9f:7c:04:ca:26:ff:3d:53:a0:bf:d8:ad:17:
                    ff:0c:93:fc:e1:01:e5:23:b9:b7:53:5a:d1:4f:dd:
                    ee:8f:79:ab:e7:0a:bd:e7:a0:2c:30:8b:cb:64:54:
                    17:b3:6e:06:ec:e6:02:46:39:e7:bf:43:e2:7c:37:
                    11:b6:da:35:3a:11:90:ee:bd:87:93:d2:fc:31:3a:
                    b7:10:9e:27:ea:b3:e6:9b:6a:db:05:a6:e4:79:d2:
                    fc:97:da:c7:98:e0:e9:83:31:87:76:50:71:fb:6e:
                    01:99:76:73:42:0d:a3:ac:64:90:30:5e:27:7b:cd:
                    3e:94:cb:f3:bc:be:d1:a8:76:a9:fb:fe:78:fa:ff:
                    e6:a8:62:a7:cc:e6:b2:81:2b:86:a0:3f:6e:62:14:
                    e6:10:ef:7a:bb:7e:68:58:02:f1:27:de:d8:21:60:
                    fb:a0:4c:b2:d1:26:90:c9:9a:3f:92:57:6e:71:5c:
                    37:21:29:a4:13:8f:16:e3:b3:bc:cf:01:bd:f4:24:
                    8a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:00:BF:79:3C:44:B6:26:ED:21:BB:FA:8C:CE:1E:89:7F:EF:AA:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77325681-1b51-3dd2-a900-fe3acf90902e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.249.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:c3:4e:ca:21:5e:5a:10:2b:52:61:13:c9:9f:5a:17:39:3c:
         12:ab:95:21:61:6d:48:66:9c:9c:3d:76:bf:48:59:b2:5c:46:
         f7:2e:98:eb:88:b3:7d:8d:85:6a:fc:6b:5e:7b:67:d3:12:c1:
         73:90:81:67:b5:0b:a7:f5:bc:a6:c1:6a:01:06:4b:f8:bc:07:
         fb:37:6b:29:b3:c3:5c:f9:d6:b5:87:5f:e0:02:67:0c:9a:68:
         57:9b:2a:ff:25:e5:9d:4e:58:b5:e4:8e:3c:ae:7f:09:67:9c:
         73:a2:5b:13:88:bb:35:a8:f2:52:87:66:04:86:69:d7:ea:62:
         d7:71:15:9c:fb:be:c8:00:28:42:a2:fd:95:54:67:d6:ed:e0:
         da:8b:f6:ee:c2:39:33:00:5a:3c:93:c0:17:be:44:8a:2a:99:
         11:48:eb:88:69:0f:a2:3b:46:69:bf:3d:c3:c4:75:c7:9f:c5:
         cb:c2:2f:e8:f5:c3:ab:d6:08:f8:ea:1e:95:ba:1c:b9:f5:ac:
         bf:4a:fb:28:4b:5f:d6:2c:20:5d:08:fe:2b:da:dd:a1:7e:40:
         ee:7b:c0:50:20:e2:4f:50:00:fc:32:15:16:1f:71:22:cc:9a:
         ac:f4:e7:7f:bc:63:c7:d9:be:3e:16:57:cc:e9:de:64:db:92:
         91:d9:9d:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiUGq0G1hCnKj7YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
Y2JiN2Q3ZDEtZTc0MC00ZTYzLWJlOTYtZGY3MThlY2ViZTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1tKNLSWrFQLCnrWBkqKY66b8QulUR/tbyjI
iOjQPUQHAprEZHxDTLR0/XIHOBVUfnPjBg7Gu3kwaPfoKZ98BMom/z1ToL/YrRf/
DJP84QHlI7m3U1rRT93uj3mr5wq956AsMIvLZFQXs24G7OYCRjnnv0PifDcRtto1
OhGQ7r2Hk9L8MTq3EJ4n6rPmm2rbBabkedL8l9rHmODpgzGHdlBx+24BmXZzQg2j
rGSQMF4ne80+lMvzvL7RqHap+/54+v/mqGKnzOaygSuGoD9uYhTmEO96u35oWALx
J97YIWD7oEyy0SaQyZo/klducVw3ISmkE48W47O8zwG99CSKzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF4Av3k8RLYm7SG7+ozOHol/76r5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzczMjU2ODEtMWI1MS0z
ZGQyLWE5MDAtZmUzYWNmOTA5MDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRfkoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKrDTsohXloQK1JhE8mfWhc5PBKrlSFhbUhmnJw9dr9IWbJcRvcumOuI
s32NhWr8a157Z9MSwXOQgWe1C6f1vKbBagEGS/i8B/s3aymzw1z51rWHX+ACZwya
aFebKv8l5Z1OWLXkjjyufwlnnHOiWxOIuzWo8lKHZgSGadfqYtdxFZz7vsgAKEKi
/ZVUZ9bt4NqL9u7COTMAWjyTwBe+RIoqmRFI64hpD6I7Rmm/PcPEdcefxcvCL+j1
w6vWCPjqHpW6HLn1rL9K+yhLX9YsIF0I/iva3aF+QO57wFAg4k9QAPwyFRYfcSLM
mqz053+8Y8fZvj4WV8zp3mTbkpHZnS4=
-----END CERTIFICATE-----
Generated at Sat May 4 14:51:07 2024 by rpki-client on console-fra.rpki-client.org