Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/534d5037-8d1b-3f9f-a27e-66d52ef3f7a0.roa
File:                     534d5037-8d1b-3f9f-a27e-66d52ef3f7a0.roa (raw, json)
Hash identifier:          6EWkjzOGD/EiRqlte9lZChbJSk1p1otO5S/bMZ2G3ag=
Subject key identifier:   B6:CD:A3:D9:33:3B:63:65:BE:24:3E:28:E2:94:43:6F:9D:7D:C0:FC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583FDFE557A2865A146B95FABB80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/534d5037-8d1b-3f9f-a27e-66d52ef3f7a0.roa
Signing time:             Thu 10 Nov 2022 12:00:00 +0000
ROA not before:           Thu 10 Nov 2022 12:00:00 +0000
ROA not after:            Wed 03 May 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        172.68.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:df:e5:57:a2:86:5a:14:6b:95:fa:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 10 12:00:00 2022 GMT
            Not After : May  3 04:00:00 2028 GMT
        Subject: CN=550459e8-f6cc-40ce-afdc-5d1cbe879592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a2:ce:81:82:94:c4:a3:e2:b4:20:c4:e3:65:
                    9d:7e:b9:9f:f0:42:50:57:68:94:07:38:91:d7:40:
                    af:24:f2:9e:80:1a:b6:71:e3:6f:aa:f2:1c:1e:60:
                    00:24:c0:31:75:e7:ed:cc:a8:64:28:9c:e2:66:54:
                    74:3e:05:bf:1d:91:af:9e:b2:1e:30:97:5b:69:61:
                    77:69:be:07:88:73:f5:0a:12:2f:65:ca:38:81:7d:
                    bb:b9:f2:0b:28:e7:ef:a8:fe:31:f7:d5:32:2c:31:
                    16:88:10:4f:ef:3c:fb:45:fe:8a:a4:b7:22:3a:10:
                    e2:95:45:a9:f3:95:af:2b:ec:02:35:a6:59:bf:08:
                    14:97:b0:56:43:aa:2d:bb:d5:64:90:39:d9:f6:6b:
                    70:a0:e3:ee:b1:30:b5:14:13:48:4d:52:02:d5:6a:
                    e5:17:de:18:a0:93:09:fc:99:c1:90:1a:4b:c0:30:
                    15:34:f0:4d:b7:e3:61:8b:58:b8:cb:66:cd:82:5e:
                    e7:48:02:6d:d9:1f:f4:5e:47:b8:9f:26:d6:8c:1a:
                    32:93:f8:5b:70:ae:25:29:69:1d:03:50:b4:a1:9e:
                    34:10:23:c6:23:c0:83:75:73:e7:1c:d6:31:9f:c4:
                    5c:8c:4a:82:42:d7:8d:6d:80:97:fa:aa:23:60:8b:
                    a9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CD:A3:D9:33:3B:63:65:BE:24:3E:28:E2:94:43:6F:9D:7D:C0:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/534d5037-8d1b-3f9f-a27e-66d52ef3f7a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d3:98:78:c0:bc:b9:f8:77:92:8c:41:cb:83:2d:61:b6:d1:
         bd:02:0b:20:ec:0a:48:a6:a5:13:04:53:2e:2d:aa:6a:37:ad:
         43:c1:6a:99:c9:c9:fc:bc:71:6d:92:52:ce:e1:04:b6:e6:e9:
         5a:9a:ba:42:14:1a:2c:87:bf:74:3a:ec:82:13:e6:24:bc:9a:
         92:f4:ec:8b:cd:ff:a1:65:55:64:50:b2:6c:68:37:14:05:8c:
         d6:04:04:32:02:22:49:cc:2c:06:30:26:32:de:a7:7d:83:3c:
         b0:4c:48:36:03:40:e7:ca:d3:05:d9:f8:99:8a:f2:46:e7:2e:
         0a:9e:7c:42:2a:53:c0:e2:ba:a5:18:fc:46:ff:a0:03:18:b4:
         50:f4:1d:37:da:93:32:77:c4:b4:cf:94:70:f8:f3:66:3c:85:
         4a:57:e6:ab:d6:49:d5:8c:a7:1b:31:e4:9e:44:b7:7b:f6:0f:
         2b:bd:ba:ca:21:3e:ac:16:6e:fb:1e:f9:c9:dd:ed:26:1e:ba:
         c9:6a:ce:26:0e:cc:8e:f5:d8:46:9f:69:b3:06:7a:38:6e:89:
         8f:a3:97:b1:d9:56:b3:c8:1b:c4:9f:db:cf:f5:78:27:b2:b0:
         00:54:6b:37:86:8a:e8:73:0c:5d:11:19:7c:59:80:c8:ef:d8:
         22:12:2e:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/f5VeihloUa5X6u4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTIyMTExMDEyMDAwMFoXDTI4MDUwMzA0MDAwMFowLzEtMCsGA1UEAxMk
NTUwNDU5ZTgtZjZjYy00MGNlLWFmZGMtNWQxY2JlODc5NTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaLOgYKUxKPitCDE42Wdfrmf8EJQV2iUBziR
10CvJPKegBq2ceNvqvIcHmAAJMAxdeftzKhkKJziZlR0PgW/HZGvnrIeMJdbaWF3
ab4HiHP1ChIvZco4gX27ufILKOfvqP4x99UyLDEWiBBP7zz7Rf6KpLciOhDilUWp
85WvK+wCNaZZvwgUl7BWQ6otu9VkkDnZ9mtwoOPusTC1FBNITVIC1WrlF94YoJMJ
/JnBkBpLwDAVNPBNt+Nhi1i4y2bNgl7nSAJt2R/0Xke4nybWjBoyk/hbcK4lKWkd
A1C0oZ40ECPGI8CDdXPnHNYxn8RcjEqCQteNbYCX+qojYIupZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLbNo9kzO2NlviQ+KOKUQ2+dfcD8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTM0ZDUwMzctOGQxYi0z
ZjlmLWEyN2UtNjZkNTJlZjNmN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEReMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF/TmHjAvLn4d5KMQcuDLWG20b0CCyDsCkimpRMEUy4tqmo3rUPBapnJ
yfy8cW2SUs7hBLbm6VqaukIUGiyHv3Q67IIT5iS8mpL07IvN/6FlVWRQsmxoNxQF
jNYEBDICIknMLAYwJjLep32DPLBMSDYDQOfK0wXZ+JmK8kbnLgqefEIqU8DiuqUY
/Eb/oAMYtFD0HTfakzJ3xLTPlHD482Y8hUpX5qvWSdWMpxsx5J5Et3v2Dyu9usoh
PqwWbvse+cnd7SYeuslqziYOzI712EafabMGejhuiY+jl7HZVrPIG8Sf28/1eCey
sABUazeGiuhzDF0RGXxZgMjv2CISLuM=
-----END CERTIFICATE-----
Generated at Mon Nov 25 01:41:24 2024 by rpki-client on console-fra.rpki-client.org