Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/08437c7d-f46a-351f-9d6e-06c112594e2f.roa
File:                     08437c7d-f46a-351f-9d6e-06c112594e2f.roa (raw, json)
Hash identifier:          Lq0fHNcZB94Tc2xSgbBCiRGAho3fDoMSFNRCVFm5vIA=
Subject key identifier:   36:FA:81:A4:6B:7B:BB:37:E8:7C:2F:4C:43:DC:F7:36:7B:9C:94:B5
Certificate issuer:       /CN=f8791c17-503c-4afd-9a0b-412c175e957d
Certificate serial:       010D0C9F43285844F9E45CB06DCCCF8A4BF49776
Authority key identifier: 40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/08437c7d-f46a-351f-9d6e-06c112594e2f.roa
Signing time:             Thu 22 Feb 2024 13:15:32 +0000
ROA not before:           Thu 22 Feb 2024 13:15:32 +0000
ROA not after:            Wed 22 May 2024 12:15:32 +0000
asID:                     62240
IP address blocks:        69.168.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f9:e4:5c:b0:6d:cc:cf:8a:4b:f4:97:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8791c17-503c-4afd-9a0b-412c175e957d
        Validity
            Not Before: Feb 22 13:15:32 2024 GMT
            Not After : May 22 12:15:32 2024 GMT
        Subject: CN=17d111e9-053c-44e6-a086-fd6f935a1406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:42:67:af:d7:77:4a:13:10:49:59:4e:5d:ee:
                    6a:8c:18:d8:fa:4c:8a:dd:c2:30:ad:94:b0:cd:b7:
                    17:d6:ee:74:d8:46:fd:b3:5e:a3:1f:30:46:a5:9f:
                    ff:ad:17:94:df:95:ca:1c:60:79:3c:36:8a:41:7f:
                    19:e7:50:47:20:99:c8:76:24:28:33:d9:8c:a2:2e:
                    31:5e:31:58:fd:fa:26:a0:c3:b9:eb:0a:5d:ee:30:
                    22:0e:90:8a:07:a1:1f:a2:33:5e:0e:67:f5:7b:01:
                    e9:79:4f:3b:68:7f:d2:c3:55:c5:9a:f2:f6:56:51:
                    cb:44:c4:c5:4f:4e:99:c0:f5:80:16:40:a3:1a:3c:
                    8a:72:30:2c:4a:2a:f3:d5:e5:cc:3f:05:00:68:76:
                    47:c6:44:4f:2c:51:0d:b6:7f:72:a0:39:e3:ab:66:
                    38:01:99:0f:c6:5f:56:82:11:3f:05:24:cf:e2:18:
                    d5:44:0c:d1:4b:c2:a9:52:08:1a:7c:73:b6:9c:ab:
                    44:86:c4:e7:cc:52:57:7f:6b:87:40:06:3b:03:77:
                    85:a2:2d:3c:ea:84:f6:9f:6e:77:54:9a:90:63:73:
                    8c:32:4f:09:f8:37:68:49:26:62:6d:61:41:1c:1e:
                    7a:0b:78:8d:7b:e9:41:17:86:9e:12:08:12:8b:a6:
                    f2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FA:81:A4:6B:7B:BB:37:E8:7C:2F:4C:43:DC:F7:36:7B:9C:94:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/08437c7d-f46a-351f-9d6e-06c112594e2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.crl

            X509v3 Authority Key Identifier:
                keyid:40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:07:3d:44:8e:57:54:e0:7d:80:e5:57:35:d9:3f:09:c6:1b:
         97:f5:39:30:3b:61:ab:be:b7:73:58:b3:5b:7d:3f:39:97:a3:
         d5:4e:70:b1:b6:b3:01:12:cb:eb:6b:66:b9:6f:97:2a:15:b5:
         b8:d2:cd:d4:91:16:b3:be:29:0d:24:c5:20:09:4d:20:b9:94:
         c4:34:1f:53:d6:13:ca:87:41:17:7a:3c:13:6f:9e:2c:db:a6:
         0d:43:3f:42:1b:4a:42:9b:44:e3:5b:9a:e5:4a:2d:30:14:55:
         1f:5c:21:44:22:5a:45:3d:14:d9:8b:ec:ae:0e:24:55:17:5c:
         59:65:d3:63:ac:a1:4e:79:01:fb:5e:c8:a2:36:a8:c6:4e:47:
         7d:4c:f2:30:a1:33:84:16:69:69:9d:ae:a1:8c:84:07:78:0e:
         06:61:fd:42:fb:1c:41:50:91:25:9b:e9:f2:24:b0:4c:db:c4:
         5a:52:cd:ee:0a:f5:73:c6:be:41:55:36:50:f8:50:64:34:71:
         35:9f:13:8a:6b:bc:d0:72:65:a8:2b:7c:1b:ad:f4:1a:41:34:
         f8:73:06:66:a4:dd:db:a2:1e:38:ca:85:26:80:c1:5c:f7:0d:
         09:c1:31:61:5e:fb:72:31:4c:da:76:77:c3:3e:a1:8c:29:2e:
         bd:29:0c:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET55FywbczPikv0l3YwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3OTFjMTctNTAzYy00YWZkLTlhMGItNDEyYzE3NWU5
NTdkMB4XDTI0MDIyMjEzMTUzMloXDTI0MDUyMjEyMTUzMlowLzEtMCsGA1UEAxMk
MTdkMTExZTktMDUzYy00NGU2LWEwODYtZmQ2ZjkzNWExNDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EJnr9d3ShMQSVlOXe5qjBjY+kyK3cIwrZSw
zbcX1u502Eb9s16jHzBGpZ//rReU35XKHGB5PDaKQX8Z51BHIJnIdiQoM9mMoi4x
XjFY/fomoMO56wpd7jAiDpCKB6EfojNeDmf1ewHpeU87aH/Sw1XFmvL2VlHLRMTF
T06ZwPWAFkCjGjyKcjAsSirz1eXMPwUAaHZHxkRPLFENtn9yoDnjq2Y4AZkPxl9W
ghE/BSTP4hjVRAzRS8KpUggafHO2nKtEhsTnzFJXf2uHQAY7A3eFoi086oT2n253
VJqQY3OMMk8J+DdoSSZibWFBHB56C3iNe+lBF4aeEggSi6bypwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDb6gaRre7s36HwvTEPc9zZ7nJS1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mODc5
MWMxNy01MDNjLTRhZmQtOWEwYi00MTJjMTc1ZTk1N2QvMDg0MzdjN2QtZjQ2YS0z
NTFmLTlkNmUtMDZjMTEyNTk0ZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjg3OTFjMTctNTAzYy00YWZkLTlh
MGItNDEyYzE3NWU5NTdkL2Y4NzkxYzE3LTUwM2MtNGFmZC05YTBiLTQxMmMxNzVl
OTU3ZC5jcmwwHwYDVR0jBBgwFoAUQOApBkvTpPYHi2O0vKbHlDXapGYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mODc5MWMxNy01MDNjLTRhZmQtOWEwYi00MTJj
MTc1ZTk1N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARajgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQHPUSOV1TgfYDlVzXZPwnGG5f1OTA7Yau+t3NYs1t9PzmXo9VOcLG2
swESy+trZrlvlyoVtbjSzdSRFrO+KQ0kxSAJTSC5lMQ0H1PWE8qHQRd6PBNvnizb
pg1DP0IbSkKbRONbmuVKLTAUVR9cIUQiWkU9FNmL7K4OJFUXXFll02OsoU55Afte
yKI2qMZOR31M8jChM4QWaWmdrqGMhAd4DgZh/UL7HEFQkSWb6fIksEzbxFpSze4K
9XPGvkFVNlD4UGQ0cTWfE4prvNByZagrfBut9BpBNPhzBmak3duiHjjKhSaAwVz3
DQnBMWFe+3IxTNp2d8M+oYwpLr0pDDA=
-----END CERTIFICATE-----
Generated at Sun May 5 16:31:28 2024 by rpki-client on console-fra.rpki-client.org