Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/a0ee70a9-8a34-3815-bf5a-4c9e0641ef7a.roa
File:                     a0ee70a9-8a34-3815-bf5a-4c9e0641ef7a.roa (raw, json)
Hash identifier:          sqUouDmHVUdpppMFH30d+4sypdvgMwU1x4SzBrHVN0Y=
Subject key identifier:   1B:40:5B:B2:69:DF:1E:72:42:E9:E9:DD:38:33:01:88:B2:75:DE:10
Certificate issuer:       /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
Certificate serial:       010D0C9F43285847537B57A147719A02F5E268E0
Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/a0ee70a9-8a34-3815-bf5a-4c9e0641ef7a.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     20454
IP address blocks:        69.160.40.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:57:a1:47:71:9a:02:f5:e2:68:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=ef7a3128-9f76-443e-acb5-dafaf90f88cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c9:f9:73:96:9d:3e:fa:4c:cd:64:3c:81:19:
                    82:5b:e9:d9:50:09:ac:81:37:38:a1:cf:b9:6a:80:
                    f0:00:41:26:4d:a8:ea:1b:5a:3a:49:fa:74:7c:e0:
                    63:9d:f9:e1:97:15:68:00:41:1a:da:e4:8c:32:d7:
                    60:d0:36:43:2d:2b:56:0a:f8:3f:bd:3f:b8:e1:44:
                    31:b1:a6:3d:5b:a8:4c:d8:37:8a:2b:ac:7c:02:e7:
                    07:56:1c:42:01:19:4c:20:0b:33:5e:5b:c6:08:c6:
                    0e:6a:cd:7f:f9:4e:c9:79:3f:72:e5:11:13:98:3d:
                    e3:16:b4:67:5a:26:f8:40:cf:bf:d8:a7:03:0d:dc:
                    e2:22:f1:eb:e1:04:ae:b8:f6:a0:83:14:7c:7b:a9:
                    8e:37:4f:36:d7:00:b1:65:ae:1d:bc:06:55:a4:e6:
                    93:52:fd:c7:52:4b:ef:33:76:9d:10:9c:26:1b:96:
                    44:86:39:37:22:87:7c:24:3f:5f:44:ce:e9:ee:d1:
                    22:d1:8e:2b:78:55:c5:00:17:42:3b:9b:b6:48:d2:
                    6f:c7:d5:9c:1b:8c:74:eb:3d:cd:76:5c:c9:d4:dd:
                    d7:c7:27:08:13:d0:8d:58:04:c2:49:4e:4b:f7:0b:
                    93:f8:07:ce:41:c1:84:68:77:a4:3e:0b:31:93:26:
                    a9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:40:5B:B2:69:DF:1E:72:42:E9:E9:DD:38:33:01:88:B2:75:DE:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/a0ee70a9-8a34-3815-bf5a-4c9e0641ef7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl

            X509v3 Authority Key Identifier:
                keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.160.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d6:ec:84:5a:52:6d:34:1b:4d:28:b7:a9:05:c9:74:6f:2c:
         2b:f2:89:cc:64:5a:3e:54:ad:1b:fd:ea:36:4f:50:db:3d:8d:
         53:a5:74:2d:2f:67:60:37:4a:f3:25:66:f7:7b:09:71:7d:49:
         6b:0e:24:65:d1:ec:91:10:ee:3b:a5:17:26:1f:d8:62:a4:d4:
         10:fa:d0:47:5d:c3:0c:62:0d:28:4b:ba:ea:89:ca:d6:4b:a1:
         6f:42:f9:7e:ce:4c:a8:0d:6e:f5:ab:2f:ab:6f:06:23:64:6b:
         43:58:aa:85:fa:b3:cf:76:4c:db:1c:f2:f8:5e:04:88:11:8c:
         6b:da:d6:47:4d:7c:b0:f0:be:2c:73:6f:7d:15:83:92:7c:0f:
         d8:87:af:3b:0a:5b:74:df:03:ab:79:4e:6a:f8:3f:a3:11:4f:
         6f:17:18:1a:42:85:b4:85:d5:61:72:8f:f6:3c:c8:25:f2:ba:
         ff:78:ff:43:54:9f:84:2c:82:be:87:3a:67:a8:f3:f9:37:90:
         ea:8d:f3:b1:b6:c5:2c:c5:06:1f:05:9e:b6:6c:41:9f:b3:b7:
         17:92:b5:02:68:50:30:b3:07:8d:a9:10:ea:5c:46:7a:e5:65:
         95:92:ec:d0:ba:12:85:bc:1d:6b:b7:f3:58:68:b8:46:e2:fb:
         48:a5:58:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdTe1ehR3GaAvXiaOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTAxN2NlZDUtNmUwMy00YzIwLTllYjItY2FhNTdhMmY3
ODI5MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk
ZWY3YTMxMjgtOWY3Ni00NDNlLWFjYjUtZGFmYWY5MGY4OGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8n5c5adPvpMzWQ8gRmCW+nZUAmsgTc4oc+5
aoDwAEEmTajqG1o6Sfp0fOBjnfnhlxVoAEEa2uSMMtdg0DZDLStWCvg/vT+44UQx
saY9W6hM2DeKK6x8AucHVhxCARlMIAszXlvGCMYOas1/+U7JeT9y5RETmD3jFrRn
Wib4QM+/2KcDDdziIvHr4QSuuPaggxR8e6mON0821wCxZa4dvAZVpOaTUv3HUkvv
M3adEJwmG5ZEhjk3Iod8JD9fRM7p7tEi0Y4reFXFABdCO5u2SNJvx9WcG4x06z3N
dlzJ1N3XxycIE9CNWATCSU5L9wuT+AfOQcGEaHekPgsxkyapFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBtAW7Jp3x5yQunp3TgzAYiydd4QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3
Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1N2EyZjc4MjkvYTBlZTcwYTktOGEzNC0z
ODE1LWJmNWEtNGM5ZTA2NDFlZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxN2NlZDUtNmUwMy00YzIwLTll
YjItY2FhNTdhMmY3ODI5LzUwMTdjZWQ1LTZlMDMtNGMyMC05ZWIyLWNhYTU3YTJm
NzgyOS5jcmwwHwYDVR0jBBgwFoAUIr6PGmFUenj3XYro0kCXNLfsebEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1
N2EyZjc4MjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRaAoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTW7IRaUm00G00ot6kFyXRvLCvyicxkWj5UrRv96jZPUNs9jVOldC0v
Z2A3SvMlZvd7CXF9SWsOJGXR7JEQ7julFyYf2GKk1BD60EddwwxiDShLuuqJytZL
oW9C+X7OTKgNbvWrL6tvBiNka0NYqoX6s892TNsc8vheBIgRjGva1kdNfLDwvixz
b30Vg5J8D9iHrzsKW3TfA6t5Tmr4P6MRT28XGBpChbSF1WFyj/Y8yCXyuv94/0NU
n4Qsgr6HOmeo8/k3kOqN87G2xSzFBh8FnrZsQZ+ztxeStQJoUDCzB42pEOpcRnrl
ZZWS7NC6EoW8HWu381houEbi+0ilWEk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:49 2024 by rpki-client on console-fra.rpki-client.org