Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcfa779b-d11f-3c6a-82d4-ecfa6fe2669d.roa
File:                     bcfa779b-d11f-3c6a-82d4-ecfa6fe2669d.roa (raw, json)
Hash identifier:          2KtFOEwxx0JfCd95icrlpt40XNZ2XMrewT1GYqYW4WE=
Subject key identifier:   3F:E3:AC:78:A5:88:E0:BE:0A:4D:7C:5C:FF:26:48:2E:14:32:C8:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC894007C08C89BC59A0B800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcfa779b-d11f-3c6a-82d4-ecfa6fe2669d.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        69.141.120.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:40:07:c0:8c:89:bc:59:a0:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=d20e3dc7-3096-453b-b4ae-2b34163ee950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:04:77:19:e7:b8:58:2b:8b:8f:2c:49:c4:bd:
                    4b:05:bd:be:9c:ac:e0:15:58:78:6e:6f:78:e5:86:
                    48:8c:59:9d:3e:7f:b7:a1:e6:22:98:e0:5c:93:29:
                    d6:e7:48:aa:5d:04:ca:db:cb:d8:a3:99:25:5e:13:
                    79:38:d6:9d:f7:9a:3b:bb:c5:9a:91:5f:26:bd:42:
                    28:7c:e9:0f:2c:82:59:66:23:9c:b3:fa:1b:4b:e1:
                    db:da:fe:50:7a:46:63:e8:a0:a9:b1:be:eb:8e:38:
                    e1:19:b9:a6:89:d9:d3:47:57:42:4b:01:e1:04:9f:
                    51:f9:e1:f3:87:76:2b:a9:5d:6d:73:5c:f5:46:1c:
                    cc:60:58:67:9c:0d:e8:0b:77:2a:33:94:da:20:43:
                    c3:4b:59:71:fe:74:e7:53:08:7c:c0:c7:9b:e6:5c:
                    4a:b3:09:3e:3a:d5:80:5b:1f:c9:82:c5:cf:b3:8a:
                    55:7b:5e:15:01:54:f3:30:cd:26:4c:14:97:d9:09:
                    dd:40:27:52:f4:3f:da:54:8b:a6:31:27:d5:86:f5:
                    00:f3:4a:c8:7e:3a:05:11:4e:e9:5b:c2:4b:ad:ff:
                    0d:1c:a2:ed:27:9d:07:a1:37:f7:1c:da:ce:f5:a8:
                    24:02:e4:97:5e:67:3b:54:3e:62:eb:52:60:f0:06:
                    3f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E3:AC:78:A5:88:E0:BE:0A:4D:7C:5C:FF:26:48:2E:14:32:C8:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcfa779b-d11f-3c6a-82d4-ecfa6fe2669d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.141.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a2:da:6c:f7:e3:39:29:c1:f3:a7:e1:7c:24:6d:14:1b:aa:
         29:b8:6f:45:d2:89:1b:ca:75:7e:92:1d:a3:de:ad:cd:b2:9d:
         67:76:1a:c5:d2:68:de:b3:92:fd:65:b3:e6:57:49:ef:64:d3:
         ee:4b:4d:c1:38:6f:aa:ef:2a:2b:cb:8e:01:e6:5d:74:25:20:
         c3:45:ae:db:51:06:c0:65:ec:86:61:36:68:42:10:dc:31:e2:
         8b:dd:c0:7c:13:98:93:48:ae:be:5f:f6:77:87:d2:75:23:4e:
         d6:34:69:27:be:07:d4:7a:f3:16:1e:48:fc:3c:c4:1d:39:e4:
         84:c4:0e:f3:69:e3:2f:b5:76:df:ab:96:75:f8:23:8a:e0:2a:
         7d:e7:fb:34:77:51:c2:65:bf:2b:ad:75:3d:e9:14:0a:43:40:
         b2:e5:ae:5a:47:0f:2c:fd:92:be:93:24:d5:fb:fb:69:4b:99:
         2d:66:f6:bb:b3:5b:c8:f7:d2:53:25:55:dc:c5:73:56:60:52:
         54:2d:74:4e:66:5b:72:a2:aa:bb:b3:df:f2:6e:f6:f6:98:6c:
         e2:9e:90:75:d8:83:b8:bf:e4:63:ce:c7:59:e0:dc:89:24:4f:
         41:57:34:87:a5:79:1c:f6:fa:49:aa:37:38:11:91:4e:a4:ad:
         db:b1:f6:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiUAHwIyJvFmguAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
ZDIwZTNkYzctMzA5Ni00NTNiLWI0YWUtMmIzNDE2M2VlOTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQR3Gee4WCuLjyxJxL1LBb2+nKzgFVh4bm94
5YZIjFmdPn+3oeYimOBckynW50iqXQTK28vYo5klXhN5ONad95o7u8WakV8mvUIo
fOkPLIJZZiOcs/obS+Hb2v5QekZj6KCpsb7rjjjhGbmmidnTR1dCSwHhBJ9R+eHz
h3YrqV1tc1z1RhzMYFhnnA3oC3cqM5TaIEPDS1lx/nTnUwh8wMeb5lxKswk+OtWA
Wx/JgsXPs4pVe14VAVTzMM0mTBSX2QndQCdS9D/aVIumMSfVhvUA80rIfjoFEU7p
W8JLrf8NHKLtJ50HoTf3HNrO9agkAuSXXmc7VD5i61Jg8AY/pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/jrHiliOC+Ck18XP8mSC4UMsioMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmNmYTc3OWItZDExZi0z
YzZhLTgyZDQtZWNmYTZmZTI2NjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRY14MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE6i2mz34zkpwfOn4XwkbRQbqim4b0XSiRvKdX6SHaPerc2ynWd2GsXS
aN6zkv1ls+ZXSe9k0+5LTcE4b6rvKivLjgHmXXQlIMNFrttRBsBl7IZhNmhCENwx
4ovdwHwTmJNIrr5f9neH0nUjTtY0aSe+B9R68xYeSPw8xB055ITEDvNp4y+1dt+r
lnX4I4rgKn3n+zR3UcJlvyutdT3pFApDQLLlrlpHDyz9kr6TJNX7+2lLmS1m9ruz
W8j30lMlVdzFc1ZgUlQtdE5mW3Kiqruz3/Ju9vaYbOKekHXYg7i/5GPOx1ng3Ikk
T0FXNIeleRz2+kmqNzgRkU6krdux9oY=
-----END CERTIFICATE-----
Generated at Sat May 4 14:55:24 2024 by rpki-client on console-fra.rpki-client.org