Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d654446e-8d9c-38fb-8a01-91fd1cd50152.roa
File:                     d654446e-8d9c-38fb-8a01-91fd1cd50152.roa (raw, json)
Hash identifier:          Kje2m44ZzZmxHjTpgY5ioob4pUTHfBaSocd5dReOYYg=
Subject key identifier:   BF:95:16:73:E9:14:50:9D:F8:74:EA:FF:3E:F5:42:E4:49:28:2C:D4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF83DCDEA1BB410B2EB4EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d654446e-8d9c-38fb-8a01-91fd1cd50152.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        68.59.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:3d:cd:ea:1b:b4:10:b2:eb:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=f5ba63f0-507b-4a6d-9dd2-c32e48500ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:69:5d:e5:7e:d3:66:74:01:f2:f5:a0:e2:88:
                    ca:4c:10:44:9a:34:c7:96:d9:28:a7:07:37:97:ad:
                    d6:df:41:34:43:6d:72:e5:30:cb:7b:0d:01:43:d4:
                    cf:93:51:05:4f:1f:a1:a7:27:70:49:78:cf:ac:8e:
                    e6:e0:27:01:6c:30:e8:61:36:58:22:1a:60:37:91:
                    bd:2c:0e:8d:da:1c:a9:af:3b:1a:c8:52:ea:64:bc:
                    a7:54:5a:c2:59:fa:d9:da:dc:60:f8:5d:10:99:a3:
                    18:f6:7f:28:b1:e2:93:4d:ed:25:6b:1e:35:19:e6:
                    d0:57:e1:9e:83:90:79:3b:23:ff:6d:71:6e:ea:1d:
                    86:64:2c:77:ce:02:d8:d6:03:e1:9b:0d:78:24:a5:
                    54:26:bf:37:52:9c:63:78:79:3a:1a:bf:c4:0d:28:
                    2e:13:c6:47:6a:de:e4:f6:5f:33:16:21:24:a2:02:
                    b8:a5:58:34:bb:67:ad:db:3f:42:6c:2d:52:c9:0c:
                    41:db:52:3d:94:ea:f6:e0:6d:58:eb:90:03:e3:f4:
                    ee:77:c7:39:4f:90:4d:f5:be:8c:fe:71:aa:48:c7:
                    8d:6e:b7:9c:d7:23:89:48:6a:5a:69:c6:be:59:7c:
                    90:48:46:cc:0e:e3:f2:81:b7:c5:35:4d:a1:3e:aa:
                    58:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:95:16:73:E9:14:50:9D:F8:74:EA:FF:3E:F5:42:E4:49:28:2C:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d654446e-8d9c-38fb-8a01-91fd1cd50152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.59.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a4:83:86:a3:02:23:fd:1c:c4:a0:8a:02:02:3d:eb:e5:3c:
         fd:0c:52:64:cb:7e:58:d9:96:94:21:ef:d8:a4:90:4d:d4:6a:
         d5:04:b7:80:0a:42:d4:76:6e:ed:fe:1a:7d:9e:ec:d3:0a:1c:
         80:bf:95:98:6c:8b:bf:ca:8c:bb:ae:2e:53:3f:66:16:64:db:
         f9:77:19:3f:d4:a7:23:12:34:31:8f:46:a8:73:34:99:cb:64:
         34:62:d7:d4:10:33:49:11:7c:ca:9a:8c:8f:5e:e3:56:8d:20:
         9d:17:bc:b1:e6:84:44:f8:46:a8:da:eb:18:91:96:ea:85:77:
         f8:f4:ed:eb:b5:91:20:15:e0:25:d4:b4:b5:bf:85:2b:59:36:
         f9:56:00:cd:da:79:49:7b:73:ee:08:14:c4:08:b3:9e:11:4b:
         f2:ff:bd:66:e7:58:13:48:3f:8a:bc:28:49:58:3a:dd:f2:51:
         18:8f:12:05:35:06:08:d1:a9:04:2b:f4:b3:00:94:cb:3a:35:
         3b:1a:a2:52:11:4d:9b:1f:bb:c4:ff:b7:b6:0b:1f:a6:41:5d:
         7c:85:12:9d:76:46:bf:24:25:c4:d4:3e:fe:5e:71:7c:cd:1e:
         cf:35:4c:23:e9:34:a4:e6:e8:ba:2c:b7:4e:ac:fe:cd:84:06:
         19:be:87:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe++D3N6hu0ELLrTsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
ZjViYTYzZjAtNTA3Yi00YTZkLTlkZDItYzMyZTQ4NTAwYWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmld5X7TZnQB8vWg4ojKTBBEmjTHltkopwc3
l63W30E0Q21y5TDLew0BQ9TPk1EFTx+hpydwSXjPrI7m4CcBbDDoYTZYIhpgN5G9
LA6N2hyprzsayFLqZLynVFrCWfrZ2txg+F0QmaMY9n8oseKTTe0lax41GebQV+Ge
g5B5OyP/bXFu6h2GZCx3zgLY1gPhmw14JKVUJr83UpxjeHk6Gr/EDSguE8ZHat7k
9l8zFiEkogK4pVg0u2et2z9CbC1SyQxB21I9lOr24G1Y65AD4/Tud8c5T5BN9b6M
/nGqSMeNbrec1yOJSGpaaca+WXyQSEbMDuPygbfFNU2hPqpY0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL+VFnPpFFCd+HTq/z71QuRJKCzUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDY1NDQ0NmUtOGQ5Yy0z
OGZiLThhMDEtOTFmZDFjZDUwMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDv4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFekg4ajAiP9HMSgigICPevlPP0MUmTLfljZlpQh79ikkE3UatUEt4AK
QtR2bu3+Gn2e7NMKHIC/lZhsi7/KjLuuLlM/ZhZk2/l3GT/UpyMSNDGPRqhzNJnL
ZDRi19QQM0kRfMqajI9e41aNIJ0XvLHmhET4Rqja6xiRluqFd/j07eu1kSAV4CXU
tLW/hStZNvlWAM3aeUl7c+4IFMQIs54RS/L/vWbnWBNIP4q8KElYOt3yURiPEgU1
BgjRqQQr9LMAlMs6NTsaolIRTZsfu8T/t7YLH6ZBXXyFEp12Rr8kJcTUPv5ecXzN
Hs81TCPpNKTm6Lost06s/s2EBhm+h18=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:34:01 2024 by rpki-client on console-fra.rpki-client.org