Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/758a010e-ae25-393f-8305-fabb38a512be.roa
File:                     758a010e-ae25-393f-8305-fabb38a512be.roa (raw, json)
Hash identifier:          5/7CeWeTKgcYhLF/jWzI3gZSmKBS50efpVr723vEoC4=
Subject key identifier:   CC:59:AD:AE:4A:82:11:0E:9F:0E:C7:74:64:60:45:41:84:EA:71:F5
Certificate issuer:       /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial:       010D0C9F432858453B77F576A9367D46C8D1ED00
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/758a010e-ae25-393f-8305-fabb38a512be.roa
Signing time:             Sun 17 Mar 2024 01:00:26 +0000
ROA not before:           Sun 17 Mar 2024 01:00:26 +0000
ROA not after:            Sat 15 Jun 2024 01:00:26 +0000
asID:                     2495
IP address blocks:        69.77.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3b:77:f5:76:a9:36:7d:46:c8:d1:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
        Validity
            Not Before: Mar 17 01:00:26 2024 GMT
            Not After : Jun 15 01:00:26 2024 GMT
        Subject: CN=62c24036-e35b-40e5-8771-82bafd742f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f4:6f:d0:7a:02:a5:07:1d:35:ee:b3:48:7f:
                    52:18:a7:d9:b7:51:86:45:e6:be:88:7f:c0:af:f1:
                    8d:94:c5:de:9a:0b:7d:82:18:7e:f8:62:ed:e8:1d:
                    08:ea:4e:f2:37:a9:0f:3e:ea:1d:af:16:1a:25:01:
                    55:15:ed:26:88:d6:6c:90:d1:fe:38:7e:dc:58:76:
                    d7:6c:e7:63:0d:0d:f7:65:d9:e5:aa:33:03:9d:93:
                    26:cf:b6:e5:9e:ea:2a:cc:5b:2e:69:49:95:c2:fc:
                    e1:62:39:e3:09:55:10:da:35:8c:cb:fb:22:c6:a9:
                    62:d8:41:0c:cd:63:cc:ca:e4:23:c7:eb:8e:d1:09:
                    fc:21:cb:96:b4:1d:48:bd:44:7e:f6:c2:23:2d:12:
                    86:49:74:91:a3:a1:45:01:77:da:46:75:96:ab:f3:
                    fb:43:ed:97:00:11:9f:ec:48:75:2c:0d:1b:58:c3:
                    ad:38:87:11:a1:d6:0b:9d:e4:05:db:3a:3d:ce:45:
                    3d:62:c1:f2:20:7f:a1:a1:47:07:eb:fd:0c:46:6b:
                    a2:aa:2d:90:18:86:2f:88:f0:32:05:27:ae:0c:55:
                    a1:e5:95:f1:1c:18:ea:2c:ce:19:25:87:57:3c:e8:
                    ec:b0:63:91:8f:ca:71:ec:96:1c:d5:6a:16:95:a6:
                    f1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:59:AD:AE:4A:82:11:0E:9F:0E:C7:74:64:60:45:41:84:EA:71:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/758a010e-ae25-393f-8305-fabb38a512be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl

            X509v3 Authority Key Identifier:
                keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.77.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:7c:c7:d4:d0:22:7c:43:d3:bc:46:b3:bc:6c:60:62:23:8a:
         0e:1e:ee:e5:12:6c:26:86:c7:5e:04:b6:f4:4b:d0:98:91:d7:
         f2:59:b8:45:c4:b7:e8:44:7c:b5:3f:d0:dc:14:d0:41:b9:b2:
         d5:b1:71:99:b9:f9:4a:dc:3a:1f:f5:57:14:f0:57:59:aa:9d:
         f5:ef:2b:fc:28:4c:58:c1:e3:4f:a9:f4:80:9b:b8:a2:c2:57:
         73:e6:26:95:a6:4b:e1:20:2f:d6:3f:e6:b2:83:22:cb:76:a7:
         45:ef:ea:a7:c0:90:b0:8b:28:6c:d0:ec:c2:ff:38:73:0c:4c:
         59:fc:60:75:51:b6:4e:4a:01:89:1a:dd:6b:9a:64:48:31:21:
         6e:e5:b4:d0:80:a8:b9:68:34:2b:4e:28:5f:cd:17:50:c9:68:
         d4:99:3c:0d:c9:d8:93:54:77:32:a4:2a:e5:f1:09:59:e7:9b:
         cf:0d:de:97:5d:b2:6f:c4:7a:64:1d:01:7f:45:ff:0c:6e:73:
         4e:95:35:40:b9:21:5e:f3:81:53:99:90:4d:52:cc:e4:7f:d4:
         dd:7e:a3:aa:bd:95:f6:c8:1e:af:0c:7c:7a:fc:39:a2:f2:cf:
         21:00:e6:b2:13:66:4b:b3:55:86:04:d3:4b:71:30:9b:a2:fe:
         fa:61:a7:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU7d/V2qTZ9RsjR7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE5MTIzMmItY2YwNy00ZDNkLTk1ZTEtYWZjZDFiOTI4
YWIxMB4XDTI0MDMxNzAxMDAyNloXDTI0MDYxNTAxMDAyNlowLzEtMCsGA1UEAxMk
NjJjMjQwMzYtZTM1Yi00MGU1LTg3NzEtODJiYWZkNzQyZjQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/Rv0HoCpQcdNe6zSH9SGKfZt1GGRea+iH/A
r/GNlMXemgt9ghh++GLt6B0I6k7yN6kPPuodrxYaJQFVFe0miNZskNH+OH7cWHbX
bOdjDQ33ZdnlqjMDnZMmz7blnuoqzFsuaUmVwvzhYjnjCVUQ2jWMy/sixqli2EEM
zWPMyuQjx+uO0Qn8IcuWtB1IvUR+9sIjLRKGSXSRo6FFAXfaRnWWq/P7Q+2XABGf
7Eh1LA0bWMOtOIcRodYLneQF2zo9zkU9YsHyIH+hoUcH6/0MRmuiqi2QGIYviPAy
BSeuDFWh5ZXxHBjqLM4ZJYdXPOjssGORj8px7JYc1WoWlabxmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMxZra5KghEOnw7HdGRgRUGE6nH1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkx
MjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNkMWI5MjhhYjEvNzU4YTAxMGUtYWUyNS0z
OTNmLTgzMDUtZmFiYjM4YTUxMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTE5MTIzMmItY2YwNy00ZDNkLTk1
ZTEtYWZjZDFiOTI4YWIxL2UxOTEyMzJiLWNmMDctNGQzZC05NWUxLWFmY2QxYjky
OGFiMS5jcmwwHwYDVR0jBBgwFoAU7JRBLAWSfcf7SwhB2jG+8+q2vTQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkxMjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNk
MWI5MjhhYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARU0PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJ8x9TQInxD07xGs7xsYGIjig4e7uUSbCaGx14EtvRL0JiR1/JZuEXE
t+hEfLU/0NwU0EG5stWxcZm5+UrcOh/1VxTwV1mqnfXvK/woTFjB40+p9ICbuKLC
V3PmJpWmS+EgL9Y/5rKDIst2p0Xv6qfAkLCLKGzQ7ML/OHMMTFn8YHVRtk5KAYka
3WuaZEgxIW7ltNCAqLloNCtOKF/NF1DJaNSZPA3J2JNUdzKkKuXxCVnnm88N3pdd
sm/EemQdAX9F/wxuc06VNUC5IV7zgVOZkE1SzOR/1N1+o6q9lfbIHq8MfHr8OaLy
zyEA5rITZkuzVYYE00txMJui/vphpzM=
-----END CERTIFICATE-----
Generated at Sat May 11 05:40:28 2024 by rpki-client on console-ams.rpki-client.org