Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe021314-8b2f-3d26-ae64-81c07c110877.roa
File:                     fe021314-8b2f-3d26-ae64-81c07c110877.roa (raw, json)
Hash identifier:          RSyd5VQr+puzqra+1mefbiawXvZOV/iOLsw42GoSlmM=
Subject key identifier:   E4:A6:F6:54:0C:B8:BC:95:D0:33:3D:8F:28:2D:4A:D1:86:90:2C:71
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858453317F273A152DAAF7297E020
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe021314-8b2f-3d26-ae64-81c07c110877.roa
Signing time:             Thu 14 Mar 2024 01:00:25 +0000
ROA not before:           Thu 14 Mar 2024 01:00:25 +0000
ROA not after:            Wed 12 Jun 2024 01:00:25 +0000
asID:                     7922
IP address blocks:        67.174.128.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:17:f2:73:a1:52:da:af:72:97:e0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 14 01:00:25 2024 GMT
            Not After : Jun 12 01:00:25 2024 GMT
        Subject: CN=4861b8a3-88cc-4492-ab75-4d26e36d3277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cf:ad:7c:76:37:7b:8b:1c:f8:48:22:77:aa:
                    f9:ef:8a:6a:17:63:e3:27:59:ae:6e:b0:c7:19:fc:
                    a9:2a:09:8a:b1:e7:0b:e7:dc:26:09:af:fc:b1:ff:
                    70:2f:44:90:e5:05:f4:1c:14:03:5c:3b:ae:99:08:
                    e6:2e:1e:fc:94:f0:11:d5:b6:8d:2d:2b:e5:5f:10:
                    02:83:e4:35:0c:69:8d:15:27:66:4d:a6:ac:a3:ab:
                    41:b9:e4:fb:7f:be:a7:f7:b6:8e:e0:d8:0a:35:4c:
                    5b:e7:4c:a9:3a:82:3a:84:96:2a:f9:c0:e9:6e:c5:
                    97:4d:2e:49:ea:7e:0c:cf:a3:0e:d1:57:0f:5c:a2:
                    39:cd:91:96:8e:b9:ff:0c:ac:7b:74:e5:57:53:df:
                    87:97:a8:48:1e:e8:62:7d:e2:9d:71:7d:19:f7:f5:
                    b2:57:95:94:95:b6:f6:05:9c:74:48:8f:af:9f:84:
                    51:51:c8:c2:b6:7a:76:0b:29:7d:48:78:c0:16:f6:
                    23:df:2e:86:b7:4b:2a:e4:6c:4a:1b:de:d6:90:85:
                    10:39:66:df:67:e1:14:00:76:f6:3b:00:84:cc:b2:
                    12:40:92:25:33:89:6c:03:8e:de:44:fb:8d:c0:4f:
                    6f:10:0c:ad:8c:dc:a9:2f:a8:49:bf:65:0a:69:ac:
                    b5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A6:F6:54:0C:B8:BC:95:D0:33:3D:8F:28:2D:4A:D1:86:90:2C:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe021314-8b2f-3d26-ae64-81c07c110877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.174.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:40:2c:01:1a:08:f2:47:b3:e2:7b:a5:1d:bc:27:b2:c6:cc:
         d4:09:08:e8:c5:f7:fb:d7:0d:4f:58:8e:d7:4a:13:60:e9:b2:
         68:0d:b5:0e:6f:3f:37:04:d9:a0:0e:d8:76:70:6b:32:b9:30:
         ec:8d:1a:9b:b5:e9:00:27:4e:06:45:60:c1:0c:be:2f:6f:01:
         c7:fe:7c:69:18:f6:c8:a1:61:22:a4:4b:a0:69:6a:d3:ce:a9:
         57:b3:d6:17:81:e4:67:c4:04:3e:85:d9:6a:5f:51:bf:54:85:
         1d:88:0d:02:39:fc:a9:9d:37:4d:15:0d:89:0d:20:b2:34:1c:
         0d:7d:45:25:ba:22:43:2f:e6:7d:07:e1:eb:83:99:e4:32:8a:
         cd:78:a0:19:15:fb:71:24:fc:bc:6a:44:b7:bd:52:aa:62:a1:
         fa:4f:0c:1e:cb:8c:cb:79:93:52:95:00:16:8e:46:e9:54:9f:
         43:a6:d2:ee:62:f8:cb:ae:dd:19:84:1c:1e:2a:4d:9f:bb:de:
         35:64:3b:2f:35:49:17:7c:46:30:2e:dc:80:2f:da:9c:09:5f:
         11:d6:35:28:f9:a4:f3:02:12:c4:ca:da:c5:ef:1d:50:b2:52:
         82:8a:da:5d:f1:a7:68:e5:11:d0:16:b7:12:ac:19:a4:01:19:
         80:d2:7d:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUzF/JzoVLar3KX4CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMxNDAxMDAyNVoXDTI0MDYxMjAxMDAyNVowLzEtMCsGA1UEAxMk
NDg2MWI4YTMtODhjYy00NDkyLWFiNzUtNGQyNmUzNmQzMjc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic+tfHY3e4sc+Egid6r574pqF2PjJ1mubrDH
GfypKgmKsecL59wmCa/8sf9wL0SQ5QX0HBQDXDuumQjmLh78lPAR1baNLSvlXxAC
g+Q1DGmNFSdmTaaso6tBueT7f76n97aO4NgKNUxb50ypOoI6hJYq+cDpbsWXTS5J
6n4Mz6MO0VcPXKI5zZGWjrn/DKx7dOVXU9+Hl6hIHuhifeKdcX0Z9/WyV5WUlbb2
BZx0SI+vn4RRUcjCtnp2Cyl9SHjAFvYj3y6Gt0sq5GxKG97WkIUQOWbfZ+EUAHb2
OwCEzLISQJIlM4lsA47eRPuNwE9vEAytjNypL6hJv2UKaay10QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOSm9lQMuLyV0DM9jygtStGGkCxxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmUwMjEzMTQtOGIyZi0z
ZDI2LWFlNjQtODFjMDdjMTEwODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ66AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHtALAEaCPJHs+J7pR28J7LGzNQJCOjF9/vXDU9YjtdKE2DpsmgNtQ5v
PzcE2aAO2HZwazK5MOyNGpu16QAnTgZFYMEMvi9vAcf+fGkY9sihYSKkS6BpatPO
qVez1heB5GfEBD6F2WpfUb9UhR2IDQI5/KmdN00VDYkNILI0HA19RSW6IkMv5n0H
4euDmeQyis14oBkV+3Ek/LxqRLe9UqpiofpPDB7LjMt5k1KVABaORulUn0Om0u5i
+Muu3RmEHB4qTZ+73jVkOy81SRd8RjAu3IAv2pwJXxHWNSj5pPMCEsTK2sXvHVCy
UoKK2l3xp2jlEdAWtxKsGaQBGYDSfXQ=
-----END CERTIFICATE-----
Generated at Fri May 3 15:32:07 2024 by rpki-client on console-ams.rpki-client.org