Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca77de09-9d5b-37ad-b2a8-fba7935699eb.roa
File:                     ca77de09-9d5b-37ad-b2a8-fba7935699eb.roa (raw, json)
Hash identifier:          hl7Q9FuozTL8VG/+ju2fAgINQ+x8r1Q00eaPkYPfmhs=
Subject key identifier:   1E:83:44:C5:4C:72:CD:31:00:D9:90:67:F8:F7:59:2A:C8:4D:71:D8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7B0A64707D61555097A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca77de09-9d5b-37ad-b2a8-fba7935699eb.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.61.138.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:b0:a6:47:07:d6:15:55:09:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=ba73513f-9e68-4d01-8236-db03016e3f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:43:e2:f8:9b:76:e7:6b:07:5e:51:f3:27:02:
                    32:22:c1:f0:a7:f7:81:15:5f:b2:c8:b2:c3:e9:41:
                    66:b9:c4:63:1b:39:f0:7b:28:3c:ea:b7:59:d9:a5:
                    f0:a5:86:be:c1:68:1a:91:82:70:79:b5:12:21:90:
                    46:25:39:e7:9d:a6:d7:14:37:3e:70:37:50:5a:65:
                    ca:71:4a:c1:d5:7d:4f:5d:77:ec:df:01:bc:3e:02:
                    04:70:bf:5d:6a:81:88:21:01:eb:4f:e1:90:b7:d1:
                    c8:6d:63:51:65:ff:7a:32:e4:1d:f6:bb:38:ce:e0:
                    f5:5e:a0:38:dd:36:98:c9:de:22:0a:71:08:2f:bf:
                    7a:8c:1c:df:b0:cb:76:1b:65:c4:99:c9:6c:c8:31:
                    58:6c:c0:53:e3:33:fa:19:e7:99:d8:81:ed:17:b9:
                    9a:d6:c0:27:49:fe:fb:5d:7c:d3:0f:31:6b:fc:f5:
                    cf:f1:ad:e7:59:f5:12:a4:f2:94:24:d3:96:b3:12:
                    59:5e:09:a4:36:ce:dd:ef:04:a5:89:c9:e6:e7:2e:
                    0e:0c:24:b8:cd:60:46:80:69:9f:3f:ee:41:59:37:
                    fa:fa:8e:02:d7:df:e6:c0:9a:71:19:4f:21:7e:be:
                    f8:6f:1b:9a:2a:91:42:7d:9e:38:65:7f:ae:97:c2:
                    2d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:83:44:C5:4C:72:CD:31:00:D9:90:67:F8:F7:59:2A:C8:4D:71:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca77de09-9d5b-37ad-b2a8-fba7935699eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.61.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:0f:87:68:26:02:2e:59:09:25:8e:24:f5:5a:82:fa:6b:4f:
         c9:47:5e:97:32:f7:39:aa:b7:25:ec:5e:12:34:ec:71:63:51:
         98:62:6a:83:20:88:17:d1:a5:67:36:dc:da:3d:ed:ae:20:05:
         ee:bd:f3:a4:d5:03:e9:61:23:9a:cc:51:9c:cc:e2:cd:1b:70:
         ea:68:e3:e7:b4:d7:8c:57:d2:c4:f1:c9:c5:75:a1:01:47:b8:
         c0:10:54:0f:37:4d:24:bf:c9:6c:54:c9:29:54:f8:c4:70:e4:
         d4:ae:56:46:42:6e:04:47:29:82:af:14:63:33:b3:49:46:cb:
         49:99:21:23:e9:23:20:f4:07:24:b3:15:9b:f0:36:73:ff:54:
         e1:18:9a:51:51:a0:11:8e:2e:4f:92:17:60:2e:6c:bf:e9:76:
         90:eb:91:9d:85:cb:2a:cc:59:96:fe:25:b7:6a:ae:bd:3a:9a:
         37:cf:e2:27:8f:2b:cb:93:a6:a7:42:8d:43:1a:23:57:49:7f:
         39:3b:d7:b5:be:86:31:85:5b:8d:06:1c:8c:af:cf:1c:c2:ef:
         64:e9:25:44:ec:88:93:64:af:b0:59:92:48:15:1c:12:b6:a2:
         84:02:2f:84:3c:67:de:8a:43:a4:b4:a0:dd:a4:4a:94:87:da:
         20:67:eb:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0x7CmRwfWFVUJeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
YmE3MzUxM2YtOWU2OC00ZDAxLTgyMzYtZGIwMzAxNmUzZjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0Pi+Jt252sHXlHzJwIyIsHwp/eBFV+yyLLD
6UFmucRjGznweyg86rdZ2aXwpYa+wWgakYJwebUSIZBGJTnnnabXFDc+cDdQWmXK
cUrB1X1PXXfs3wG8PgIEcL9daoGIIQHrT+GQt9HIbWNRZf96MuQd9rs4zuD1XqA4
3TaYyd4iCnEIL796jBzfsMt2G2XEmclsyDFYbMBT4zP6GeeZ2IHtF7ma1sAnSf77
XXzTDzFr/PXP8a3nWfUSpPKUJNOWsxJZXgmkNs7d7wSlicnm5y4ODCS4zWBGgGmf
P+5BWTf6+o4C19/mwJpxGU8hfr74bxuaKpFCfZ44ZX+ul8ItvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB6DRMVMcs0xANmQZ/j3WSrITXHYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2E3N2RlMDktOWQ1Yi0z
N2FkLWIyYTgtZmJhNzkzNTY5OWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRD2KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIgPh2gmAi5ZCSWOJPVagvprT8lHXpcy9zmqtyXsXhI07HFjUZhiaoMg
iBfRpWc23No97a4gBe6986TVA+lhI5rMUZzM4s0bcOpo4+e014xX0sTxycV1oQFH
uMAQVA83TSS/yWxUySlU+MRw5NSuVkZCbgRHKYKvFGMzs0lGy0mZISPpIyD0BySz
FZvwNnP/VOEYmlFRoBGOLk+SF2AubL/pdpDrkZ2FyyrMWZb+Jbdqrr06mjfP4ieP
K8uTpqdCjUMaI1dJfzk717W+hjGFW40GHIyvzxzC72TpJUTsiJNkr7BZkkgVHBK2
ooQCL4Q8Z96KQ6S0oN2kSpSH2iBn64w=
-----END CERTIFICATE-----
Generated at Tue Nov 26 05:13:18 2024 by rpki-client on console-ams.rpki-client.org