Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cad37a01-3e82-39c4-9d5f-68a4bacb22b6.roa
File:                     cad37a01-3e82-39c4-9d5f-68a4bacb22b6.roa (raw, json)
Hash identifier:          eMiULav2L/YOXYTcHSdfHSXujbFrf3Rngxn9CcJ6tP0=
Subject key identifier:   C3:CE:16:26:E4:C4:8D:99:8D:26:7E:65:56:6E:8F:8A:F6:D6:45:05
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF835A90673088A57769E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cad37a01-3e82-39c4-9d5f-68a4bacb22b6.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        68.52.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:35:a9:06:73:08:8a:57:76:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=4aa5b732-a135-4d71-979f-3942471377af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4b:af:13:ae:26:47:73:1b:24:a7:1d:9a:d4:
                    4c:c5:8f:fb:d0:ed:96:8b:8d:90:73:56:36:bb:88:
                    a4:21:26:5d:48:78:ad:95:e5:de:75:62:69:db:27:
                    73:a0:ef:fa:86:73:ef:b1:13:44:f4:d7:a5:59:38:
                    da:bc:89:fb:5a:4e:65:af:94:5b:74:c9:c6:94:55:
                    69:4f:56:13:cf:ee:f6:55:a4:35:93:fe:42:fd:12:
                    23:1d:fe:27:2e:34:cc:85:03:d3:5e:f9:c2:80:de:
                    b9:3c:c1:ca:e6:9a:ff:70:fd:ce:5d:0d:3d:7c:cc:
                    ea:1c:a0:1f:36:38:f9:3e:36:6e:43:ae:21:21:fa:
                    83:af:95:c0:0b:22:3c:19:f4:95:86:b9:07:3f:ab:
                    de:05:a8:8c:6d:43:34:8a:66:64:94:cd:a9:61:62:
                    ad:5e:a6:cd:38:02:ac:64:81:18:fb:8d:37:26:82:
                    6b:3c:b7:0c:ec:8d:42:23:17:e7:66:f0:fc:a3:f2:
                    74:dd:ad:1b:15:aa:b5:45:31:8d:48:f0:af:80:ab:
                    ca:d0:91:11:94:9f:60:3d:99:23:18:71:3c:bf:27:
                    60:31:db:36:3b:e8:75:12:ed:09:23:7f:35:4b:a5:
                    7c:90:31:a3:8a:d8:b3:34:98:b0:1b:bd:6d:32:6a:
                    46:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CE:16:26:E4:C4:8D:99:8D:26:7E:65:56:6E:8F:8A:F6:D6:45:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cad37a01-3e82-39c4-9d5f-68a4bacb22b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.52.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:1f:69:77:1c:d4:5d:ba:67:d1:44:dc:18:22:4a:3c:85:bc:
         8d:8b:26:e2:81:51:cc:f2:37:47:fa:6f:43:46:66:3b:54:68:
         4e:6d:c1:bf:52:d0:fc:1d:da:5d:1f:83:40:a9:27:49:30:fe:
         8c:66:34:cf:3d:6b:79:d7:95:ee:19:9a:4a:c0:65:0e:90:dd:
         ea:c8:a4:bf:b6:a7:eb:09:c6:df:65:cd:05:76:c3:79:ac:c3:
         35:47:cf:ef:70:26:e1:96:86:3b:8a:63:f9:56:8a:49:8c:82:
         b3:a4:b5:f8:79:a1:af:3d:9f:a1:d3:c4:fc:04:ab:b2:51:ae:
         92:eb:2b:6a:46:10:39:c6:e7:c3:55:d9:32:bc:43:c5:a3:1b:
         f0:53:16:3a:1e:41:97:dd:be:3d:41:54:59:f9:e6:38:be:aa:
         1a:06:f3:4c:86:23:3c:72:16:0a:49:54:7b:46:bd:8b:53:3f:
         ba:c6:51:0f:c9:71:6d:00:bc:ee:d7:79:1f:38:8a:d2:ea:82:
         17:14:28:29:39:20:cb:cc:1a:64:c3:3e:4a:0a:51:58:fe:b9:
         61:0f:9f:cc:e3:83:0a:46:82:55:82:29:4c:b7:f1:0c:de:6e:
         10:47:44:da:d6:6a:95:16:1f:8d:e3:7b:63:73:96:04:b7:65:
         96:4c:89:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe++DWpBnMIild2ngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
NGFhNWI3MzItYTEzNS00ZDcxLTk3OWYtMzk0MjQ3MTM3N2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEuvE64mR3MbJKcdmtRMxY/70O2Wi42Qc1Y2
u4ikISZdSHitleXedWJp2ydzoO/6hnPvsRNE9NelWTjavIn7Wk5lr5RbdMnGlFVp
T1YTz+72VaQ1k/5C/RIjHf4nLjTMhQPTXvnCgN65PMHK5pr/cP3OXQ09fMzqHKAf
Njj5PjZuQ64hIfqDr5XACyI8GfSVhrkHP6veBaiMbUM0imZklM2pYWKtXqbNOAKs
ZIEY+403JoJrPLcM7I1CIxfnZvD8o/J03a0bFaq1RTGNSPCvgKvK0JERlJ9gPZkj
GHE8vydgMds2O+h1Eu0JI381S6V8kDGjitizNJiwG71tMmpG8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPOFibkxI2ZjSZ+ZVZuj4r21kUFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2FkMzdhMDEtM2U4Mi0z
OWM0LTlkNWYtNjhhNGJhY2IyMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDQ9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQfaXcc1F26Z9FE3BgiSjyFvI2LJuKBUczyN0f6b0NGZjtUaE5twb9S
0Pwd2l0fg0CpJ0kw/oxmNM89a3nXle4ZmkrAZQ6Q3erIpL+2p+sJxt9lzQV2w3ms
wzVHz+9wJuGWhjuKY/lWikmMgrOktfh5oa89n6HTxPwEq7JRrpLrK2pGEDnG58NV
2TK8Q8WjG/BTFjoeQZfdvj1BVFn55ji+qhoG80yGIzxyFgpJVHtGvYtTP7rGUQ/J
cW0AvO7XeR84itLqghcUKCk5IMvMGmTDPkoKUVj+uWEPn8zjgwpGglWCKUy38Qze
bhBHRNrWapUWH43je2NzlgS3ZZZMiQc=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:32:00 2024 by rpki-client on console-fra.rpki-client.org