Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4e385b9-28eb-3152-89d1-7261ed6a134e.roa
File:                     e4e385b9-28eb-3152-89d1-7261ed6a134e.roa (raw, json)
Hash identifier:          kKyYL2c5/GJ+0fUtQ8FJTCQohChIvNxKM7hj47TX8Vg=
Subject key identifier:   75:13:94:50:84:D8:A9:4E:88:57:69:AA:A8:03:0C:52:42:8E:B8:7D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC893AFD8D2CC76723895780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4e385b9-28eb-3152-89d1-7261ed6a134e.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        68.81.120.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:3a:fd:8d:2c:c7:67:23:89:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=6cf6fcb9-709b-4daf-9f3b-527f696fa522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e3:35:a1:ba:e4:64:de:6c:21:81:26:0c:63:
                    bf:8e:3f:48:14:af:21:85:02:da:43:6b:01:38:2d:
                    b6:34:4d:06:55:cd:cf:e2:ac:8f:92:fd:a1:65:56:
                    51:85:32:2d:73:ef:46:72:58:aa:e0:99:31:55:ac:
                    e6:a2:da:91:60:18:d4:9e:64:b5:2a:52:41:d7:fe:
                    e7:2b:e8:bc:54:48:5f:5c:a7:55:29:df:b8:4b:b3:
                    33:de:bd:53:b4:f5:a6:96:75:b1:48:fe:ce:71:64:
                    52:6f:b3:97:b3:19:cb:71:f7:17:ae:af:8a:65:cf:
                    2c:be:3c:dd:cc:d5:05:38:1f:ef:e1:9b:64:08:bf:
                    11:ff:f6:3b:08:d2:b4:e9:44:62:0d:63:3f:8f:0c:
                    a3:cb:54:98:4f:e5:5c:cd:6e:9a:30:3a:d4:fc:95:
                    59:86:71:ea:b7:e1:1f:45:4d:a8:96:23:89:1d:3b:
                    11:d7:8f:a6:44:37:ef:9d:8f:ed:1d:6e:6f:89:3a:
                    30:3c:32:1e:9d:cf:4a:a6:96:fb:cd:c3:6d:80:08:
                    b7:e2:b3:18:c8:ec:43:da:28:24:92:07:49:70:35:
                    9d:94:f2:00:15:d6:19:12:5f:96:62:30:49:a7:c0:
                    43:02:79:bc:d3:04:51:e1:58:fd:1d:8c:f9:26:49:
                    a5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:13:94:50:84:D8:A9:4E:88:57:69:AA:A8:03:0C:52:42:8E:B8:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4e385b9-28eb-3152-89d1-7261ed6a134e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.81.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:a7:00:2d:54:49:6f:05:77:89:4f:4b:2e:e0:02:1e:bb:a0:
         2a:01:c7:cd:f5:c0:df:5e:cc:6f:d9:c3:36:9b:88:1a:86:45:
         c1:35:9f:22:ae:ea:1c:9b:92:6c:30:0e:fd:d6:e1:aa:d2:89:
         07:88:33:f4:9a:31:c5:c8:bd:c7:40:df:ce:18:5a:d9:00:15:
         8b:06:97:56:6f:c0:bb:f1:d9:e0:1e:82:20:4d:c0:b0:50:3d:
         20:9d:d3:02:22:e4:43:e4:b8:2c:c8:c6:07:c5:bd:e1:22:09:
         e5:50:16:35:68:62:5e:61:d1:7e:ab:cf:14:d6:89:19:74:02:
         81:1c:2f:13:e9:2c:53:85:26:db:d1:9f:2a:c6:2d:df:15:a5:
         17:44:46:e9:18:25:43:ad:5f:db:52:4c:50:4c:37:9e:2d:0b:
         4d:3b:69:95:7e:38:76:f5:ad:4f:6b:aa:8d:0f:32:a7:ba:ae:
         37:a4:12:20:a2:30:cd:45:47:07:db:15:96:d1:bc:00:61:54:
         38:d6:d9:48:c7:4e:0c:19:ea:0f:6d:0a:e0:a6:c0:14:7b:23:
         91:1b:dc:44:f8:4f:c3:a8:10:26:cf:c2:78:d7:d6:48:b0:c7:
         c0:5b:df:f7:fc:60:73:04:2d:5f:71:dc:94:0c:9b:b5:90:b0:
         1d:28:b9:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiTr9jSzHZyOJV4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
NmNmNmZjYjktNzA5Yi00ZGFmLTlmM2ItNTI3ZjY5NmZhNTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruM1obrkZN5sIYEmDGO/jj9IFK8hhQLaQ2sB
OC22NE0GVc3P4qyPkv2hZVZRhTItc+9Gcliq4JkxVazmotqRYBjUnmS1KlJB1/7n
K+i8VEhfXKdVKd+4S7Mz3r1TtPWmlnWxSP7OcWRSb7OXsxnLcfcXrq+KZc8svjzd
zNUFOB/v4ZtkCL8R//Y7CNK06URiDWM/jwyjy1SYT+VczW6aMDrU/JVZhnHqt+Ef
RU2oliOJHTsR14+mRDfvnY/tHW5viTowPDIenc9Kppb7zcNtgAi34rMYyOxD2igk
kgdJcDWdlPIAFdYZEl+WYjBJp8BDAnm80wRR4Vj9HYz5JkmlMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHUTlFCE2KlOiFdpqqgDDFJCjrh9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTRlMzg1YjktMjhlYi0z
MTUyLTg5ZDEtNzI2MWVkNmExMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFF4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ2nAC1USW8Fd4lPSy7gAh67oCoBx831wN9ezG/ZwzabiBqGRcE1nyKu
6hybkmwwDv3W4arSiQeIM/SaMcXIvcdA384YWtkAFYsGl1ZvwLvx2eAegiBNwLBQ
PSCd0wIi5EPkuCzIxgfFveEiCeVQFjVoYl5h0X6rzxTWiRl0AoEcLxPpLFOFJtvR
nyrGLd8VpRdERukYJUOtX9tSTFBMN54tC007aZV+OHb1rU9rqo0PMqe6rjekEiCi
MM1FRwfbFZbRvABhVDjW2UjHTgwZ6g9tCuCmwBR7I5Eb3ET4T8OoECbPwnjX1kiw
x8Bb3/f8YHMELV9x3JQMm7WQsB0ouVs=
-----END CERTIFICATE-----
Generated at Sat May 4 14:59:13 2024 by rpki-client on console-ams.rpki-client.org