Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c065542e-2875-3ddb-9e48-c9eb92b9bccd.roa
File:                     c065542e-2875-3ddb-9e48-c9eb92b9bccd.roa (raw, json)
Hash identifier:          i3kRG2Lgpilz/Th5zZiH0dZvHrQpn52QO958d3ESsQs=
Subject key identifier:   69:4D:6D:FD:2B:8A:75:C9:74:61:E8:FF:15:33:E4:AE:CF:D0:9E:F4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7D8712645E87B058477A8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c065542e-2875-3ddb-9e48-c9eb92b9bccd.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33287
IP address blocks:        69.242.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:d8:71:26:45:e8:7b:05:84:77:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=ea0aaf57-36fc-47d4-9b0a-8c454a3854d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f5:d0:0f:37:f0:4d:33:bf:49:90:04:98:ba:
                    ca:60:19:f4:fb:be:60:86:e0:40:f9:eb:e4:49:67:
                    86:44:f3:23:fb:1a:33:54:f5:63:a5:e6:d9:94:02:
                    dd:12:a9:52:3d:a5:6c:3b:ed:f5:2d:99:d7:a5:ba:
                    9b:73:53:58:c5:f6:24:28:ae:ff:2b:08:48:62:e1:
                    5b:6a:6b:15:b0:ce:29:05:6a:0a:26:75:45:e2:af:
                    b2:02:54:b5:b3:11:14:dc:76:24:35:f2:38:57:28:
                    38:8b:cd:ac:e3:6c:fb:0a:3b:f3:25:07:f7:22:19:
                    fc:2d:af:ae:35:26:f0:db:5e:5b:d1:9d:c0:6e:4b:
                    48:65:da:c7:d3:70:c5:d8:f9:30:97:ae:cd:fe:62:
                    89:16:18:c7:c1:5b:df:91:f6:6d:1d:d1:7a:21:16:
                    14:32:70:ec:3b:ba:25:40:44:64:f2:ed:8c:ae:3c:
                    51:28:ce:12:b6:53:29:d6:01:9e:e4:56:4c:7e:9c:
                    6b:fa:40:70:8a:ca:cd:dc:5f:e9:26:07:ed:55:17:
                    9e:7d:d0:17:31:50:1f:3f:f2:96:77:ef:4c:bc:9b:
                    c4:11:64:03:8c:83:d2:d9:50:c9:45:61:4e:b8:07:
                    47:48:d1:cf:76:32:03:c3:f9:6a:6f:ce:0c:b5:fe:
                    a2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4D:6D:FD:2B:8A:75:C9:74:61:E8:FF:15:33:E4:AE:CF:D0:9E:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c065542e-2875-3ddb-9e48-c9eb92b9bccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.242.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:0d:6d:f7:33:fb:f7:14:41:50:1d:3a:10:38:ab:c7:ae:e3:
         2b:d4:3f:39:df:e7:d0:fb:d5:43:ae:64:78:eb:c2:f2:a2:0f:
         f9:68:4e:dc:71:99:fa:8d:72:57:ba:7d:18:9c:b5:2c:4e:c0:
         91:65:b7:14:28:ab:4b:d1:93:be:c2:8e:75:84:59:60:3b:fc:
         78:ee:1e:b1:55:2e:ef:60:65:c0:15:cc:45:9c:7c:d0:54:77:
         ba:45:1a:9a:08:5c:3f:ba:43:f9:39:17:58:68:44:43:ab:e7:
         73:26:69:e3:3c:f3:d1:41:2a:12:81:fd:06:0a:46:7d:ec:a2:
         e5:5a:2a:5f:34:ad:73:c9:1b:20:fa:88:82:de:6e:2c:0e:01:
         f2:10:8d:66:26:b2:47:32:3f:7c:fe:3c:85:ae:eb:3a:f6:68:
         dd:28:46:55:a4:88:78:54:1c:76:f4:28:e7:ae:1f:c9:dd:3d:
         73:31:ce:9b:dd:ef:2d:9e:0c:56:28:09:fb:62:4f:3a:e9:6e:
         d6:e5:69:43:54:ad:92:08:9e:c4:a0:fc:5e:ab:66:33:1f:fd:
         6a:d0:5d:02:fa:6e:10:2f:19:ec:9f:7f:94:30:35:8c:2d:ad:
         5d:ae:57:96:2b:54:5c:45:be:cb:01:d7:de:ef:1c:6e:a8:54:
         2f:e0:2b:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+99hxJkXoewWEd6gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
ZWEwYWFmNTctMzZmYy00N2Q0LTliMGEtOGM0NTRhMzg1NGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPXQDzfwTTO/SZAEmLrKYBn0+75ghuBA+evk
SWeGRPMj+xozVPVjpebZlALdEqlSPaVsO+31LZnXpbqbc1NYxfYkKK7/KwhIYuFb
amsVsM4pBWoKJnVF4q+yAlS1sxEU3HYkNfI4Vyg4i82s42z7CjvzJQf3Ihn8La+u
NSbw215b0Z3AbktIZdrH03DF2Pkwl67N/mKJFhjHwVvfkfZtHdF6IRYUMnDsO7ol
QERk8u2MrjxRKM4StlMp1gGe5FZMfpxr+kBwisrN3F/pJgftVReefdAXMVAfP/KW
d+9MvJvEEWQDjIPS2VDJRWFOuAdHSNHPdjIDw/lqb84Mtf6iTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGlNbf0rinXJdGHo/xUz5K7P0J70MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzA2NTU0MmUtMjg3NS0z
ZGRiLTllNDgtYzllYjkyYjliY2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRfIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIANbfcz+/cUQVAdOhA4q8eu4yvUPznf59D71UOuZHjrwvKiD/loTtxx
mfqNcle6fRictSxOwJFltxQoq0vRk77CjnWEWWA7/HjuHrFVLu9gZcAVzEWcfNBU
d7pFGpoIXD+6Q/k5F1hoREOr53MmaeM889FBKhKB/QYKRn3souVaKl80rXPJGyD6
iILebiwOAfIQjWYmskcyP3z+PIWu6zr2aN0oRlWkiHhUHHb0KOeuH8ndPXMxzpvd
7y2eDFYoCftiTzrpbtblaUNUrZIInsSg/F6rZjMf/WrQXQL6bhAvGeyff5QwNYwt
rV2uV5YrVFxFvssB197vHG6oVC/gK5Q=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:33:55 2024 by rpki-client on console-fra.rpki-client.org