Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94e3f1a8-208a-38f8-bf39-75bfb89625ae.roa
File:                     94e3f1a8-208a-38f8-bf39-75bfb89625ae.roa (raw, json)
Hash identifier:          +4SMcAsO5lZusX6tWYOxXQz2wlOTB1E8MwqmfCPcpNg=
Subject key identifier:   41:DF:28:EF:CD:83:66:A0:E6:83:23:26:1A:39:70:6E:C8:D0:B4:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BE0B477F1209E8E7D0DA8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94e3f1a8-208a-38f8-bf39-75bfb89625ae.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        68.50.252.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:e0:b4:77:f1:20:9e:8e:7d:0d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=0facd5f0-eff3-430b-9f3d-8180ea12d53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7e:96:bd:10:cf:fa:46:84:a3:11:dc:1a:08:
                    83:0e:d5:4c:02:b3:30:56:af:85:0a:57:2e:81:f7:
                    35:82:82:73:03:81:cf:00:a9:db:01:d0:d4:5f:b8:
                    d8:7a:c4:95:15:ca:56:52:67:09:e4:d6:33:c6:7a:
                    8c:4f:2d:a2:8e:a8:60:21:04:3a:ca:62:ac:29:42:
                    c5:d3:f7:d1:be:0f:2f:e9:99:1a:7a:98:53:fb:ae:
                    e8:40:01:b8:f4:f6:67:9b:fb:e2:41:a0:32:50:0a:
                    2f:39:0c:29:8b:65:21:ef:82:78:27:a9:85:44:a9:
                    0d:1a:fd:13:96:3a:8e:08:93:c6:9b:11:27:33:79:
                    b6:bd:90:a1:90:be:b2:0c:de:de:7d:21:5f:de:ee:
                    21:37:6a:f0:e0:b8:cf:49:56:41:b8:27:15:16:da:
                    a4:17:a4:9f:60:cf:33:fb:3b:4c:63:08:ef:9f:2f:
                    f4:26:36:c2:44:1a:d0:42:c2:a9:43:08:ac:ca:02:
                    ff:5a:7e:6e:39:c7:7d:dd:73:f9:ba:cf:04:a6:8b:
                    fa:e6:39:3f:8c:ab:22:4b:ba:5e:64:36:ab:ff:9e:
                    26:6d:95:a0:74:13:b2:03:a1:f4:8e:0c:15:ce:6d:
                    85:2a:98:eb:f0:73:77:a6:c1:50:01:3f:9f:4f:b6:
                    57:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DF:28:EF:CD:83:66:A0:E6:83:23:26:1A:39:70:6E:C8:D0:B4:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94e3f1a8-208a-38f8-bf39-75bfb89625ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.50.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c7:46:af:cc:e8:80:6f:17:2b:5f:39:63:ea:a7:f1:f8:26:
         b8:b0:01:47:a3:5b:c8:c5:91:5b:20:8f:3f:ad:7e:c6:58:cd:
         f3:0d:bb:dd:c5:65:03:a2:09:cc:87:91:64:86:93:f7:c1:1c:
         0a:98:57:bb:3d:f7:be:0e:3a:0b:fa:2a:0f:7e:e7:61:d2:e7:
         1e:e1:f3:2d:bf:5c:7b:09:e9:49:c8:30:f1:53:60:e2:25:f6:
         f8:3a:f8:f6:a9:7d:4d:86:c7:dd:6d:4a:9f:03:31:28:8f:b1:
         fd:5f:12:03:04:cb:40:51:9b:c2:9a:ae:21:40:57:f0:2f:2e:
         66:c3:1f:a8:d9:0d:75:8f:14:65:2e:66:ec:51:fd:cb:d1:6a:
         c5:43:9c:b6:1f:cc:af:e1:a6:f6:e6:fe:03:35:95:69:f7:22:
         58:69:80:c2:dc:c2:77:58:37:4f:f3:a7:8e:1e:20:b9:79:10:
         2e:20:cb:8b:b3:8d:0e:62:57:79:39:dd:c2:0a:c6:78:13:7c:
         74:b8:11:44:62:19:05:17:7d:6f:64:f2:92:b1:57:25:72:5c:
         b1:c5:5c:5c:5c:54:9c:fc:22:e4:4a:47:b4:51:79:95:22:41:
         ee:db:57:e3:34:92:13:0b:db:58:dd:00:4d:05:62:e3:08:29:
         eb:e6:23:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsm+C0d/Egno59DagwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
MGZhY2Q1ZjAtZWZmMy00MzBiLTlmM2QtODE4MGVhMTJkNTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH6WvRDP+kaEoxHcGgiDDtVMArMwVq+FClcu
gfc1goJzA4HPAKnbAdDUX7jYesSVFcpWUmcJ5NYzxnqMTy2ijqhgIQQ6ymKsKULF
0/fRvg8v6ZkaephT+67oQAG49PZnm/viQaAyUAovOQwpi2Uh74J4J6mFRKkNGv0T
ljqOCJPGmxEnM3m2vZChkL6yDN7efSFf3u4hN2rw4LjPSVZBuCcVFtqkF6SfYM8z
+ztMYwjvny/0JjbCRBrQQsKpQwisygL/Wn5uOcd93XP5us8Epov65jk/jKsiS7pe
ZDar/54mbZWgdBOyA6H0jgwVzm2FKpjr8HN3psFQAT+fT7ZX/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEHfKO/Ng2ag5oMjJho5cG7I0LTzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTRlM2YxYTgtMjA4YS0z
OGY4LWJmMzktNzViZmI4OTYyNWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDL8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI3HRq/M6IBvFytfOWPqp/H4JriwAUejW8jFkVsgjz+tfsZYzfMNu93F
ZQOiCcyHkWSGk/fBHAqYV7s9974OOgv6Kg9+52HS5x7h8y2/XHsJ6UnIMPFTYOIl
9vg6+PapfU2Gx91tSp8DMSiPsf1fEgMEy0BRm8KariFAV/AvLmbDH6jZDXWPFGUu
ZuxR/cvRasVDnLYfzK/hpvbm/gM1lWn3IlhpgMLcwndYN0/zp44eILl5EC4gy4uz
jQ5iV3k53cIKxngTfHS4EURiGQUXfW9k8pKxVyVyXLHFXFxcVJz8IuRKR7RReZUi
Qe7bV+M0khML21jdAE0FYuMIKevmIxY=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:22:32 2024 by rpki-client on console-fra.rpki-client.org