Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d654446e-8d9c-38fb-8a01-91fd1cd50152.roa
File:                     d654446e-8d9c-38fb-8a01-91fd1cd50152.roa (raw, json)
Hash identifier:          /uCJ3AedLsK+1+WUhfRZKKfH9Ej7MfgfqFvsF/Qor/g=
Subject key identifier:   EC:D0:43:96:1E:9F:30:D6:0C:1F:41:7A:D8:61:26:12:40:04:20:18
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC84E6074AA88F12D63980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d654446e-8d9c-38fb-8a01-91fd1cd50152.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        68.59.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:84:e6:07:4a:a8:8f:12:d6:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=818a20e9-4913-4fc0-a193-5c6d785c4148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0d:bb:9d:a1:6c:98:7e:b9:45:3d:14:f2:18:
                    08:21:5f:bf:d3:d0:bf:99:ef:10:b1:25:c8:9a:5d:
                    20:56:ed:17:74:50:21:13:84:32:cb:50:64:e5:9a:
                    47:f8:61:b7:f7:24:81:7a:b9:db:bf:6e:79:09:66:
                    0c:c6:63:0a:b2:82:23:e0:d6:51:1b:25:43:a7:c9:
                    77:86:9a:7b:2b:e2:0f:3f:aa:23:c9:df:72:1b:9e:
                    da:91:09:14:f0:b7:d7:b2:23:8b:48:11:69:e6:2b:
                    bb:0e:7b:3c:1d:ef:cb:89:bf:d3:c6:d2:09:4c:df:
                    0f:ad:c2:25:3e:dd:10:7d:03:89:73:64:e2:06:6a:
                    78:d5:5f:60:68:c4:3e:44:1e:ab:2c:27:72:26:c6:
                    92:6c:30:2b:65:85:0d:52:e6:c1:d0:5a:db:81:59:
                    8b:cc:8f:00:f2:0f:64:a1:bd:dd:b7:24:5e:43:17:
                    c8:5d:62:9b:9d:8e:af:46:bf:ac:c4:95:cb:73:6a:
                    87:8c:1b:98:e5:e7:8a:30:af:0b:16:13:f4:78:11:
                    5e:49:7e:0c:b4:e9:ee:af:1f:15:bf:01:a0:3c:30:
                    c0:73:b3:6d:77:17:02:2c:29:13:bd:9d:83:a6:04:
                    2f:5d:11:1a:7f:b7:6f:4c:fd:4d:a8:83:4f:30:c9:
                    7e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D0:43:96:1E:9F:30:D6:0C:1F:41:7A:D8:61:26:12:40:04:20:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d654446e-8d9c-38fb-8a01-91fd1cd50152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.59.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:aa:8e:4e:b5:08:d7:80:1a:b0:21:e7:5a:c4:cb:f9:e4:3b:
         07:b6:c9:a4:4e:7c:82:cc:c9:c8:23:a9:2a:eb:5d:67:99:e2:
         04:c9:4d:4e:2c:b4:92:5d:fc:7d:a4:c1:48:c1:41:15:22:3b:
         27:6d:c4:6a:f1:17:6d:13:d5:f8:75:da:26:7d:d3:54:83:16:
         8a:c4:29:0e:0d:78:13:b5:14:61:d3:b3:4b:7a:a6:f7:ad:04:
         87:db:11:5a:7c:0a:b4:ce:5c:5f:b0:e1:f2:ad:eb:3f:55:26:
         f8:cf:96:40:56:9d:e2:85:9a:28:8c:2c:17:75:8d:6f:85:8b:
         f5:e9:f0:0c:f2:3c:d7:85:35:e4:43:8e:38:84:2d:d3:84:f1:
         6c:97:bf:67:7e:5a:7c:10:53:21:9f:b7:74:bb:c4:17:a2:a8:
         1e:48:9e:ad:0e:13:78:60:84:17:8c:1f:b2:fe:d3:14:29:f1:
         fb:cc:61:45:84:00:e5:0f:b9:51:79:d0:71:74:97:67:27:5a:
         5e:6b:19:c0:9a:d0:e9:33:de:50:02:d2:29:bd:1e:24:72:1a:
         c1:3b:31:b5:87:75:f3:b2:39:a5:33:50:f6:8f:e4:72:2c:e6:
         c9:da:51:2a:e1:3d:b8:46:06:df:fc:bb:70:8c:79:aa:59:21:
         72:2d:34:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrITmB0qojxLWOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
ODE4YTIwZTktNDkxMy00ZmMwLWExOTMtNWM2ZDc4NWM0MTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng27naFsmH65RT0U8hgIIV+/09C/me8QsSXI
ml0gVu0XdFAhE4Qyy1Bk5ZpH+GG39ySBernbv255CWYMxmMKsoIj4NZRGyVDp8l3
hpp7K+IPP6ojyd9yG57akQkU8LfXsiOLSBFp5iu7Dns8He/Lib/TxtIJTN8PrcIl
Pt0QfQOJc2TiBmp41V9gaMQ+RB6rLCdyJsaSbDArZYUNUubB0FrbgVmLzI8A8g9k
ob3dtyReQxfIXWKbnY6vRr+sxJXLc2qHjBuY5eeKMK8LFhP0eBFeSX4MtOnurx8V
vwGgPDDAc7NtdxcCLCkTvZ2DpgQvXREaf7dvTP1NqINPMMl+iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOzQQ5YenzDWDB9BethhJhJABCAYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDY1NDQ0NmUtOGQ5Yy0z
OGZiLThhMDEtOTFmZDFjZDUwMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDv4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFaqjk61CNeAGrAh51rEy/nkOwe2yaROfILMycgjqSrrXWeZ4gTJTU4s
tJJd/H2kwUjBQRUiOydtxGrxF20T1fh12iZ901SDForEKQ4NeBO1FGHTs0t6pvet
BIfbEVp8CrTOXF+w4fKt6z9VJvjPlkBWneKFmiiMLBd1jW+Fi/Xp8AzyPNeFNeRD
jjiELdOE8WyXv2d+WnwQUyGft3S7xBeiqB5Inq0OE3hghBeMH7L+0xQp8fvMYUWE
AOUPuVF50HF0l2cnWl5rGcCa0Okz3lAC0im9HiRyGsE7MbWHdfOyOaUzUPaP5HIs
5snaUSrhPbhGBt/8u3CMeapZIXItNME=
-----END CERTIFICATE-----
Generated at Sat May 4 14:56:58 2024 by rpki-client on console-fra.rpki-client.org