Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7844817c-1df2-3500-a8f6-4c397d045ffc.roa
File:                     7844817c-1df2-3500-a8f6-4c397d045ffc.roa (raw, json)
Hash identifier:          AAl3H5e2YxkCKRUuUSsiPwKtJeqJ4/IwscZV6Uy4e4E=
Subject key identifier:   51:46:41:38:36:71:91:FD:6F:95:04:21:60:B0:A9:7D:CD:93:94:48
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7947AAD10FB4F061CCF40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7844817c-1df2-3500-a8f6-4c397d045ffc.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.43.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:94:7a:ad:10:fb:4f:06:1c:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=cc14abf0-2678-47bd-8fae-83f3c9ccc422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:16:c7:af:a1:1f:cb:7e:86:44:e4:1b:bc:6b:
                    f2:76:05:98:f3:28:91:aa:78:a5:97:db:62:98:a6:
                    80:ab:74:28:13:f3:7a:e7:05:cc:69:0b:5d:37:38:
                    7f:81:e2:69:1b:5f:ad:76:c9:f3:b8:ed:10:3f:48:
                    bb:50:f6:28:6f:47:3c:45:05:51:3e:78:3d:d0:83:
                    eb:5c:99:47:6f:a7:22:c3:b9:fb:2d:b8:ac:7a:ce:
                    04:d1:7e:9d:00:f7:a9:30:f3:6c:66:19:60:e0:d5:
                    02:5e:35:3f:49:fc:ba:f2:a5:d5:40:70:25:59:e4:
                    08:d4:63:0c:36:c9:e7:23:77:78:0b:71:82:80:27:
                    b1:2e:33:d9:89:67:a3:12:fe:8e:ff:b6:fd:9e:d0:
                    c0:a5:db:13:ae:95:aa:b0:ff:f5:02:81:0b:b8:e2:
                    ec:d1:16:19:6c:aa:dd:af:6e:e1:84:1b:97:b2:5e:
                    8f:7a:0e:93:bc:51:ec:a8:38:8f:ab:c1:d9:2d:2c:
                    ee:02:b7:09:87:39:3b:8a:5d:33:b8:86:b6:fe:4a:
                    9c:1a:98:44:01:38:a1:f8:ab:b6:ba:b2:53:53:33:
                    20:ae:e2:dd:10:9a:d7:97:e6:ad:94:3c:56:27:da:
                    47:a0:50:54:39:ab:ee:b9:24:79:da:76:73:fa:0b:
                    32:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:46:41:38:36:71:91:FD:6F:95:04:21:60:B0:A9:7D:CD:93:94:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7844817c-1df2-3500-a8f6-4c397d045ffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.43.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:02:e4:a2:b1:a5:e7:a9:b0:3f:46:ee:ab:cd:91:f2:0a:28:
         c1:ad:96:11:6e:4a:c1:3c:ef:2c:3e:84:30:3e:ae:4c:ff:88:
         59:e9:bc:10:a1:83:71:3a:0b:49:89:ea:d1:25:09:d6:0d:f8:
         cb:59:c6:e2:36:e7:46:d2:c5:39:5e:28:ca:d0:86:d6:bf:48:
         5e:dd:08:80:28:e5:31:86:31:d0:85:81:09:5f:a7:2d:c3:7e:
         b3:de:23:1f:31:1c:db:37:05:e2:82:28:5d:f8:f4:10:ec:d2:
         3b:15:e4:f2:74:b9:90:d2:4a:d1:34:32:9d:97:0e:4d:95:9d:
         4e:c4:90:85:f1:e6:80:bd:4f:41:95:df:b6:94:65:a8:c3:5a:
         1d:2a:5d:cc:15:63:2d:cf:01:e2:7b:b4:20:ab:ba:b6:98:e9:
         53:c8:cd:1c:41:a5:0e:79:34:f9:71:03:b1:95:d8:05:b0:bb:
         c2:d7:e9:96:95:03:1f:83:73:23:27:ec:79:7b:91:7f:62:84:
         1b:31:23:a9:eb:17:cf:b9:3f:f5:6d:e6:92:76:fe:01:03:c0:
         58:43:9d:d9:f1:01:18:f8:56:59:23:a9:60:2d:90:6f:5a:dc:
         7a:ee:42:34:f6:1a:47:0b:9f:16:38:0a:27:e7:a3:75:01:d5:
         5d:0d:82:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0x5R6rRD7TwYcz0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
Y2MxNGFiZjAtMjY3OC00N2JkLThmYWUtODNmM2M5Y2NjNDIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRbHr6Efy36GROQbvGvydgWY8yiRqnill9ti
mKaAq3QoE/N65wXMaQtdNzh/geJpG1+tdsnzuO0QP0i7UPYob0c8RQVRPng90IPr
XJlHb6ciw7n7Lbises4E0X6dAPepMPNsZhlg4NUCXjU/Sfy68qXVQHAlWeQI1GMM
NsnnI3d4C3GCgCexLjPZiWejEv6O/7b9ntDApdsTrpWqsP/1AoELuOLs0RYZbKrd
r27hhBuXsl6Peg6TvFHsqDiPq8HZLSzuArcJhzk7il0zuIa2/kqcGphEATih+Ku2
urJTUzMgruLdEJrXl+atlDxWJ9pHoFBUOavuuSR52nZz+gsy5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFFGQTg2cZH9b5UEIWCwqX3Nk5RIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzg0NDgxN2MtMWRmMi0z
NTAwLWE4ZjYtNGMzOTdkMDQ1ZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCt7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADUC5KKxpeepsD9G7qvNkfIKKMGtlhFuSsE87yw+hDA+rkz/iFnpvBCh
g3E6C0mJ6tElCdYN+MtZxuI250bSxTleKMrQhta/SF7dCIAo5TGGMdCFgQlfpy3D
frPeIx8xHNs3BeKCKF349BDs0jsV5PJ0uZDSStE0Mp2XDk2VnU7EkIXx5oC9T0GV
37aUZajDWh0qXcwVYy3PAeJ7tCCruraY6VPIzRxBpQ55NPlxA7GV2AWwu8LX6ZaV
Ax+DcyMn7Hl7kX9ihBsxI6nrF8+5P/Vt5pJ2/gEDwFhDndnxARj4VlkjqWAtkG9a
3HruQjT2GkcLnxY4Cifno3UB1V0NgvY=
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:49:54 2024 by rpki-client on console-fra.rpki-client.org