Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f29d49e4-5385-3af0-8fcf-e6f0aca32976.roa
File:                     f29d49e4-5385-3af0-8fcf-e6f0aca32976.roa (raw, json)
Hash identifier:          WMks2B2FJmgI/k5RAdis8b6UXHOXGQgOmSgtVrF3Vsw=
Subject key identifier:   CE:E2:7D:DE:EE:A2:83:EE:FC:4E:3E:C9:58:88:F3:4F:77:8B:CE:F6
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285847D999F4CF4741168017FCA700
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f29d49e4-5385-3af0-8fcf-e6f0aca32976.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     55035
IP address blocks:        69.9.252.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:f4:cf:47:41:16:80:17:fc:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=40dad7d9-515b-4851-8104-3ee9cbb90aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a7:6b:74:c0:c9:14:cc:8d:b4:02:a7:af:65:
                    67:88:88:b1:34:03:3b:d5:16:95:a8:df:6a:55:ad:
                    25:30:68:da:79:9f:3c:4a:5c:79:9b:e1:7b:84:92:
                    95:60:06:f2:96:19:fa:27:6b:30:cf:e8:99:bb:32:
                    0a:bd:1a:34:83:2e:e1:a1:f7:f7:2a:35:10:a6:58:
                    f2:8f:af:aa:9c:7c:12:dc:c8:41:f5:8f:e5:2b:6c:
                    67:ec:14:d6:aa:85:34:c6:65:51:76:9d:49:f0:f7:
                    26:eb:fc:65:c2:d7:8b:5a:c5:16:79:ed:2f:45:9c:
                    a7:a4:93:bd:21:39:7c:c1:f5:dc:5c:c5:b1:6c:76:
                    62:29:8b:e1:66:97:b0:90:96:23:93:6a:0e:61:df:
                    2b:7c:d2:bb:21:4d:13:5b:d1:18:12:95:1c:89:a9:
                    f1:fa:87:6f:c0:8c:b2:9d:db:89:47:ca:63:13:95:
                    e3:02:73:9c:7a:b4:aa:c4:f2:eb:a5:ea:39:9a:07:
                    73:16:02:d9:bd:60:d1:35:77:06:c6:00:ce:b0:12:
                    38:e8:63:ea:f8:50:92:4e:aa:32:df:f9:51:cc:f9:
                    45:8f:f1:85:5a:34:7f:14:2f:21:8b:f8:c0:b6:58:
                    f3:51:c5:cb:30:fa:48:d8:22:8b:f0:10:e9:8b:3e:
                    24:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E2:7D:DE:EE:A2:83:EE:FC:4E:3E:C9:58:88:F3:4F:77:8B:CE:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f29d49e4-5385-3af0-8fcf-e6f0aca32976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.9.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d2:19:78:84:e3:81:66:97:8e:17:ae:af:a8:b4:68:90:ae:
         a2:e3:25:73:22:63:6a:e0:1e:0c:ce:c6:53:0c:06:f6:e2:06:
         14:bb:8e:68:a0:59:ad:da:73:89:58:e7:55:5b:b9:8e:79:0e:
         be:ee:ff:0d:51:0d:34:1d:d7:fc:03:b0:27:32:1d:cd:3a:86:
         dc:91:1b:c8:c6:bf:25:36:6c:26:b8:65:c6:91:fa:bf:24:25:
         8a:d4:d9:23:2d:fd:c2:0d:5b:16:d0:fc:9f:df:07:55:c9:a1:
         d0:21:4c:9f:2d:b8:52:83:0b:7d:4f:6a:4e:db:27:9a:c3:62:
         a8:da:7c:f4:2c:fd:0e:99:fc:fc:d0:0b:05:6c:9f:ff:4f:47:
         a1:79:44:c6:ff:33:70:9a:ee:0c:77:32:a0:96:ea:fb:7d:48:
         35:3a:b2:a8:e5:71:5e:ad:cb:f9:92:47:41:80:d8:70:bc:bb:
         e3:f6:0e:83:43:8d:26:37:33:c6:4c:fe:10:c2:01:38:f2:6e:
         20:90:1d:fc:05:25:ef:cf:a6:ef:81:7d:bb:28:61:1b:e5:67:
         80:f3:a0:7d:73:e7:e0:79:4b:22:06:7c:1b:89:de:58:fd:18:
         52:a5:d0:ab:6b:ef:57:00:0a:e2:10:a7:01:47:ce:12:3e:23:
         db:54:e0:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmfTPR0EWgBf8pwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk
NDBkYWQ3ZDktNTE1Yi00ODUxLTgxMDQtM2VlOWNiYjkwYWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqdrdMDJFMyNtAKnr2VniIixNAM71RaVqN9q
Va0lMGjaeZ88Slx5m+F7hJKVYAbylhn6J2swz+iZuzIKvRo0gy7hoff3KjUQpljy
j6+qnHwS3MhB9Y/lK2xn7BTWqoU0xmVRdp1J8Pcm6/xlwteLWsUWee0vRZynpJO9
ITl8wfXcXMWxbHZiKYvhZpewkJYjk2oOYd8rfNK7IU0TW9EYEpUcianx+odvwIyy
nduJR8pjE5XjAnOcerSqxPLrpeo5mgdzFgLZvWDRNXcGxgDOsBI46GPq+FCSTqoy
3/lRzPlFj/GFWjR/FC8hi/jAtljzUcXLMPpI2CKL8BDpiz4kjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM7ifd7uooPu/E4+yViI8093i872MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZjI5ZDQ5ZTQtNTM4NS0z
YWYwLThmY2YtZTZmMGFjYTMyOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRQn8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLSGXiE44Fml44Xrq+otGiQrqLjJXMiY2rgHgzOxlMMBvbiBhS7jmig
Wa3ac4lY51VbuY55Dr7u/w1RDTQd1/wDsCcyHc06htyRG8jGvyU2bCa4ZcaR+r8k
JYrU2SMt/cINWxbQ/J/fB1XJodAhTJ8tuFKDC31Pak7bJ5rDYqjafPQs/Q6Z/PzQ
CwVsn/9PR6F5RMb/M3Ca7gx3MqCW6vt9SDU6sqjlcV6ty/mSR0GA2HC8u+P2DoND
jSY3M8ZM/hDCATjybiCQHfwFJe/Ppu+BfbsoYRvlZ4DzoH1z5+B5SyIGfBuJ3lj9
GFKl0Ktr71cACuIQpwFHzhI+I9tU4Oc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:47 2024 by rpki-client on console-ams.rpki-client.org