Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3e2b2dc-b9cd-3163-8e30-7b960399e7fd.roa
File:                     f3e2b2dc-b9cd-3163-8e30-7b960399e7fd.roa (raw, json)
Hash identifier:          NftTTcpZKISyF5czxsGJSvnSWTBbzAWhld2hm+yeYR4=
Subject key identifier:   B4:4B:FB:04:A9:59:A8:FC:08:95:83:8D:B8:F4:6F:A3:E7:C4:2D:99
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584811700F366EAAA4CF8CA4ED80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3e2b2dc-b9cd-3163-8e30-7b960399e7fd.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        69.246.106.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:70:0f:36:6e:aa:a4:cf:8c:a4:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=61432858-faa3-47af-bc7d-758ebb4f2ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5a:71:40:5a:52:0d:57:68:79:74:9e:2a:e2:
                    de:62:91:e9:db:d4:58:79:a0:a3:ae:94:52:27:5e:
                    50:50:ad:37:03:21:42:7c:b6:10:f4:7a:e0:aa:43:
                    93:49:ae:b3:cb:e1:2f:94:10:11:4f:64:70:d3:d4:
                    9b:5d:17:0c:d4:d0:6e:fa:50:17:d1:3b:cb:66:2e:
                    b3:13:f7:fc:e4:a3:9f:6e:c6:49:8c:07:8c:e1:62:
                    5e:c7:13:0c:b1:97:8a:f1:44:e0:00:bc:7a:04:d8:
                    89:c5:6c:c8:09:db:cd:e4:a3:f9:e9:4a:0e:9b:ba:
                    84:56:0f:3e:7c:b5:ec:c7:12:49:98:50:4e:5c:85:
                    09:3b:fe:8e:9f:c7:62:6c:00:cb:85:5f:6b:8a:f0:
                    83:13:81:50:1e:c6:73:41:4e:d3:40:14:6d:36:a9:
                    f7:b7:f9:d6:d4:dc:8c:1d:04:28:36:91:2f:0c:9a:
                    b4:5f:a0:6f:d7:33:c2:df:32:88:dd:68:bd:59:7f:
                    1c:d9:06:c3:b3:e1:38:5f:73:5d:cb:9a:6f:c0:5a:
                    fa:a0:e9:b2:32:a2:41:16:60:aa:11:b8:7e:0e:5a:
                    19:ea:d0:98:26:9c:ee:db:88:3d:85:8d:f5:a8:e0:
                    81:3e:f7:60:88:83:13:f9:45:03:e7:05:3c:f3:9b:
                    76:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4B:FB:04:A9:59:A8:FC:08:95:83:8D:B8:F4:6F:A3:E7:C4:2D:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3e2b2dc-b9cd-3163-8e30-7b960399e7fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.246.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:5d:b1:95:cf:0d:3b:8f:ef:7d:0d:ca:03:8c:bc:82:b4:0a:
         20:6c:fa:73:b9:6a:9c:cf:74:6a:5c:c1:f6:10:80:79:95:cc:
         b4:2e:f1:26:9f:a4:fe:ea:ae:98:bd:41:2d:cd:fc:c7:8d:55:
         e8:00:39:4c:f1:d8:fe:8a:ba:03:8d:9a:6c:d9:30:92:34:7c:
         fa:5b:cb:fe:10:9d:b3:7c:2f:39:08:2a:87:32:1b:3b:81:36:
         c9:1a:2f:f7:fc:ab:02:ee:72:e0:53:ed:ec:da:53:eb:16:09:
         af:ba:aa:2c:95:ab:8c:22:41:b0:fa:27:44:6e:e6:c8:7d:d3:
         c6:e7:82:ca:c6:6a:93:46:ca:26:ba:99:3e:58:6f:a6:c7:dc:
         b5:0d:89:18:08:1c:61:cd:fc:ce:75:33:6a:76:8a:3d:90:60:
         07:64:17:cf:b1:9a:49:45:e4:14:57:be:d0:23:1a:4b:22:7a:
         28:8d:c9:73:fa:8a:07:1d:51:c9:8e:7c:fa:75:81:b7:d3:91:
         29:25:5e:d8:d8:b3:33:78:0f:f7:a8:be:83:16:8f:10:fa:87:
         9b:32:ae:21:b7:87:24:45:94:95:3b:a2:45:c8:1d:eb:f8:94:
         02:1e:13:4f:3d:41:b5:28:25:05:4e:e7:fd:2c:0a:b5:97:13:
         b5:fd:38:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRcA82bqqkz4yk7YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk
NjE0MzI4NTgtZmFhMy00N2FmLWJjN2QtNzU4ZWJiNGYyYWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVpxQFpSDVdoeXSeKuLeYpHp29RYeaCjrpRS
J15QUK03AyFCfLYQ9HrgqkOTSa6zy+EvlBART2Rw09SbXRcM1NBu+lAX0TvLZi6z
E/f85KOfbsZJjAeM4WJexxMMsZeK8UTgALx6BNiJxWzICdvN5KP56UoOm7qEVg8+
fLXsxxJJmFBOXIUJO/6On8dibADLhV9rivCDE4FQHsZzQU7TQBRtNqn3t/nW1NyM
HQQoNpEvDJq0X6Bv1zPC3zKI3Wi9WX8c2QbDs+E4X3Ndy5pvwFr6oOmyMqJBFmCq
Ebh+DloZ6tCYJpzu24g9hY31qOCBPvdgiIMT+UUD5wU885t2kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLRL+wSpWaj8CJWDjbj0b6PnxC2ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjNlMmIyZGMtYjljZC0z
MTYzLThlMzAtN2I5NjAzOTllN2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRfZqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZdsZXPDTuP730NygOMvIK0CiBs+nO5apzPdGpcwfYQgHmVzLQu8Saf
pP7qrpi9QS3N/MeNVegAOUzx2P6KugONmmzZMJI0fPpby/4QnbN8LzkIKocyGzuB
NskaL/f8qwLucuBT7ezaU+sWCa+6qiyVq4wiQbD6J0Ru5sh908bngsrGapNGyia6
mT5Yb6bH3LUNiRgIHGHN/M51M2p2ij2QYAdkF8+xmklF5BRXvtAjGksieiiNyXP6
igcdUcmOfPp1gbfTkSklXtjYszN4D/eovoMWjxD6h5syriG3hyRFlJU7okXIHev4
lAIeE089QbUoJQVO5/0sCrWXE7X9OPM=
-----END CERTIFICATE-----
Generated at Sun Dec 22 13:24:13 2024 by rpki-client on console-ams.rpki-client.org