Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/caa1f309-d0ee-375b-8222-6d9b8b9006db.roa
File:                     caa1f309-d0ee-375b-8222-6d9b8b9006db.roa (raw, json)
Hash identifier:          WD041sr+DcLnq0N5b7xz5VU9JLcgUNOJmrIJaHdgf/Q=
Subject key identifier:   87:5A:47:AB:21:60:C5:3A:03:17:70:CA:AF:37:EB:F9:D1:95:41:FE
Certificate issuer:       /CN=f8791c17-503c-4afd-9a0b-412c175e957d
Certificate serial:       010D0C9F43285845D933D0C4CA58D15E9749649C
Authority key identifier: 40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/caa1f309-d0ee-375b-8222-6d9b8b9006db.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     36344
IP address blocks:        69.168.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:d0:c4:ca:58:d1:5e:97:49:64:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8791c17-503c-4afd-9a0b-412c175e957d
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=ee3827dd-de5b-4247-8fcd-707b8c1ee396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d6:db:38:11:a9:48:1e:99:98:19:42:6b:e4:
                    43:d3:35:16:60:a0:d3:cd:26:50:7b:b1:4d:da:bf:
                    03:6d:f2:a4:c5:01:ab:c1:d0:c3:52:0a:ba:0d:55:
                    a8:52:94:3d:bd:2e:f0:4d:df:4c:91:4a:c8:85:b0:
                    f4:9b:28:44:70:bc:44:1a:dd:bc:f6:91:8c:5c:be:
                    13:62:04:25:49:e2:6d:15:4f:c1:d9:79:a7:6e:d1:
                    6e:99:a5:ec:e3:14:76:2c:43:66:f9:8f:cc:88:20:
                    91:28:bb:0a:f8:35:d3:37:80:72:0e:63:b3:50:12:
                    6f:1d:63:45:14:9d:b3:bc:57:9f:c4:59:68:ac:5b:
                    cc:ba:4b:cf:a8:b4:0c:a3:cd:4f:1d:5f:9a:76:87:
                    a4:98:94:a1:a4:bd:d6:88:b2:54:78:ea:ae:5b:13:
                    3d:e6:fa:f8:9f:d2:43:6a:4d:e9:cb:a7:d4:1e:e2:
                    7e:2d:03:96:a9:5c:31:ad:5b:c6:99:d4:9e:c8:59:
                    9e:b7:16:c7:71:b6:2a:92:aa:fa:26:04:ac:1b:bc:
                    e4:b1:1c:9f:05:73:de:54:4c:a2:f9:3d:25:f5:d6:
                    e9:07:c7:64:d5:ee:13:e8:e5:88:13:0f:d0:36:ec:
                    42:46:ff:9f:1c:f0:3b:3d:bf:b5:39:62:06:80:da:
                    b7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5A:47:AB:21:60:C5:3A:03:17:70:CA:AF:37:EB:F9:D1:95:41:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/caa1f309-d0ee-375b-8222-6d9b8b9006db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.crl

            X509v3 Authority Key Identifier:
                keyid:40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c0:03:3b:e8:ad:47:63:fa:5c:96:02:2a:55:6b:87:54:b0:
         19:7f:25:a9:2f:a2:18:06:2f:a2:34:df:b2:99:96:eb:18:f5:
         a7:29:35:b9:cf:2c:0b:21:f6:4e:3d:0b:55:b7:6c:00:84:d0:
         bf:c1:67:db:1b:66:71:47:ae:fa:b2:7a:e3:ca:c1:a4:c0:78:
         eb:6d:b8:5a:25:86:06:ba:a6:7e:39:0e:c3:50:0e:dd:f5:14:
         6c:a1:16:61:2b:75:f9:50:9b:4c:27:78:90:39:d7:f9:4f:f6:
         31:51:64:f7:66:e4:10:38:27:13:75:3d:23:a3:fd:58:0b:f0:
         74:ca:9b:00:db:cf:3e:49:d3:7a:98:d5:43:35:1d:18:30:e7:
         de:cd:f3:ba:7a:52:df:c9:fa:07:b7:0a:2a:9a:8c:8b:6c:2f:
         80:29:69:8f:51:ff:db:aa:05:0d:e9:9b:0c:e5:ad:c5:8a:82:
         f7:a8:65:cd:34:99:1b:66:df:49:1f:6a:a2:31:b3:c7:df:6a:
         43:2e:ac:68:a7:2b:09:86:83:2a:d9:11:f6:17:40:69:3b:d8:
         46:a4:5b:c4:f7:70:d4:a1:04:d6:1a:a5:35:a7:2c:1e:2c:d9:
         5e:75:5f:d4:22:3c:ad:85:a6:ac:96:34:c5:3d:c0:af:da:f1:
         10:6f:c9:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXZM9DEyljRXpdJZJwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3OTFjMTctNTAzYy00YWZkLTlhMGItNDEyYzE3NWU5
NTdkMB4XDTI0MDUxMjEzMDAzNFoXDTI0MDgxMDEzMDAzNFowLzEtMCsGA1UEAxMk
ZWUzODI3ZGQtZGU1Yi00MjQ3LThmY2QtNzA3YjhjMWVlMzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdbbOBGpSB6ZmBlCa+RD0zUWYKDTzSZQe7FN
2r8DbfKkxQGrwdDDUgq6DVWoUpQ9vS7wTd9MkUrIhbD0myhEcLxEGt289pGMXL4T
YgQlSeJtFU/B2XmnbtFumaXs4xR2LENm+Y/MiCCRKLsK+DXTN4ByDmOzUBJvHWNF
FJ2zvFefxFlorFvMukvPqLQMo81PHV+adoekmJShpL3WiLJUeOquWxM95vr4n9JD
ak3py6fUHuJ+LQOWqVwxrVvGmdSeyFmetxbHcbYqkqr6JgSsG7zksRyfBXPeVEyi
+T0l9dbpB8dk1e4T6OWIEw/QNuxCRv+fHPA7Pb+1OWIGgNq3KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIdaR6shYMU6Axdwyq836/nRlUH+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mODc5
MWMxNy01MDNjLTRhZmQtOWEwYi00MTJjMTc1ZTk1N2QvY2FhMWYzMDktZDBlZS0z
NzViLTgyMjItNmQ5YjhiOTAwNmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjg3OTFjMTctNTAzYy00YWZkLTlh
MGItNDEyYzE3NWU5NTdkL2Y4NzkxYzE3LTUwM2MtNGFmZC05YTBiLTQxMmMxNzVl
OTU3ZC5jcmwwHwYDVR0jBBgwFoAUQOApBkvTpPYHi2O0vKbHlDXapGYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mODc5MWMxNy01MDNjLTRhZmQtOWEwYi00MTJj
MTc1ZTk1N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARajnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfAAzvorUdj+lyWAipVa4dUsBl/JakvohgGL6I037KZlusY9acpNbnP
LAsh9k49C1W3bACE0L/BZ9sbZnFHrvqyeuPKwaTAeOttuFolhga6pn45DsNQDt31
FGyhFmErdflQm0wneJA51/lP9jFRZPdm5BA4JxN1PSOj/VgL8HTKmwDbzz5J03qY
1UM1HRgw597N87p6Ut/J+ge3CiqajItsL4ApaY9R/9uqBQ3pmwzlrcWKgveoZc00
mRtm30kfaqIxs8ffakMurGinKwmGgyrZEfYXQGk72EakW8T3cNShBNYapTWnLB4s
2V51X9QiPK2FpqyWNMU9wK/a8RBvybg=
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:00:24 2024 by rpki-client on console-fra.rpki-client.org