Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/a255d2a9-1632-3498-a355-3f80e16ca491.roa
File:                     a255d2a9-1632-3498-a355-3f80e16ca491.roa (raw, json)
Hash identifier:          bEBBnm4Yub73LldshDL3E6M1UF/WlTCvtDEVU51suqw=
Subject key identifier:   A3:B0:88:4B:85:FC:95:4E:60:1B:BD:F5:DF:26:0D:32:CD:0E:DB:82
Certificate issuer:       /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Certificate serial:       010D0C9F43285845A9BE1B0604E8786F63250770
Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/a255d2a9-1632-3498-a355-3f80e16ca491.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     32058
IP address blocks:        69.55.93.0/24 maxlen: 24
                          2620:0:120::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:1b:06:04:e8:78:6f:63:25:07:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=b8ba9d86-caff-4b19-9e7e-44efc72028c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5c:cf:17:fb:17:f7:69:7d:47:2a:e3:28:e8:
                    45:48:c0:5c:5b:44:40:5b:0c:7b:0a:d4:db:2a:12:
                    90:c8:49:62:db:3c:9c:86:22:a9:bf:20:49:c9:66:
                    57:08:2c:e6:e4:c3:55:1e:03:3c:a7:66:95:ce:6a:
                    0f:ad:e8:59:9b:37:39:21:f7:4a:92:a9:08:46:96:
                    f5:74:46:44:9f:e6:ab:3d:3c:d5:40:28:cc:fe:98:
                    80:e2:b7:47:84:d4:88:a8:a7:73:48:5a:a2:3e:65:
                    9d:10:aa:f3:3d:60:46:35:19:dd:42:d7:ad:82:7c:
                    79:3e:66:df:c6:cb:d4:f6:c5:b0:b8:7b:6b:ee:a5:
                    bc:f0:7f:f8:d5:31:92:57:42:cc:b1:e3:82:e9:68:
                    ea:48:04:97:03:43:1f:6b:19:e5:29:73:16:cf:96:
                    88:10:27:06:8a:51:65:a1:7e:d3:21:82:12:99:4c:
                    46:18:78:cb:b0:d9:c6:a3:61:eb:9a:1b:1e:1a:8a:
                    2f:f7:0f:67:4d:11:61:c9:8a:bc:e7:e2:27:96:21:
                    e6:dc:44:60:9a:84:5f:67:fc:1b:d2:74:26:36:5b:
                    1c:33:aa:88:ab:3a:a4:04:c9:3c:7c:3c:fe:1e:46:
                    8c:16:40:1f:1f:18:c9:6e:42:25:62:65:31:27:30:
                    94:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B0:88:4B:85:FC:95:4E:60:1B:BD:F5:DF:26:0D:32:CD:0E:DB:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/a255d2a9-1632-3498-a355-3f80e16ca491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl

            X509v3 Authority Key Identifier:
                keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.55.93.0/24
                IPv6:
                  2620:0:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:fc:7d:73:05:12:a8:b3:fe:d7:6e:43:14:13:21:dc:bf:6d:
         ed:64:c7:ed:4b:35:75:74:4a:f9:1c:96:64:34:66:a8:35:5f:
         c5:51:bf:d1:c1:5d:20:99:1f:d7:e7:a2:cc:47:38:50:49:aa:
         df:81:90:28:5d:b4:46:24:0f:56:2a:0d:c0:de:ea:5d:5f:29:
         ac:b7:b4:e9:28:2b:e7:45:81:73:55:94:d6:82:32:a2:b3:3d:
         a3:75:ca:2c:3a:bf:c4:e1:da:b7:75:4e:86:c2:e7:34:61:7f:
         9a:08:e8:2f:9c:4a:2c:2b:98:c0:b2:1c:8b:0b:54:cd:ba:7c:
         67:5a:e3:e2:d0:a3:76:d3:57:de:21:49:90:3d:62:ab:00:00:
         83:89:32:db:a8:04:f5:a9:5b:7d:c8:ad:02:38:6d:a9:77:92:
         b7:e3:9f:e9:21:62:41:4c:be:1b:fe:24:a3:28:68:de:1f:bf:
         63:63:88:b0:8e:e4:3c:bd:56:63:17:09:80:0d:26:3c:11:de:
         22:aa:b6:ba:0f:8a:79:89:26:7a:f7:7e:41:4c:3c:1b:18:0d:
         92:10:1d:05:2f:2d:e6:e8:5c:ef:ad:b1:60:41:79:93:0b:ee:
         2e:95:dd:12:4e:04:ea:21:15:3c:a2:84:22:8c:fd:d5:6f:ab:
         2f:4d:94:67
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEWpvhsGBOh4b2MlB3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk
NmEzMB4XDTI0MDQyNTEzMDAzM1oXDTI0MDcyNDEzMDAzM1owLzEtMCsGA1UEAxMk
YjhiYTlkODYtY2FmZi00YjE5LTllN2UtNDRlZmM3MjAyOGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVzPF/sX92l9RyrjKOhFSMBcW0RAWwx7CtTb
KhKQyEli2zychiKpvyBJyWZXCCzm5MNVHgM8p2aVzmoPrehZmzc5IfdKkqkIRpb1
dEZEn+arPTzVQCjM/piA4rdHhNSIqKdzSFqiPmWdEKrzPWBGNRndQtetgnx5Pmbf
xsvU9sWwuHtr7qW88H/41TGSV0LMseOC6WjqSASXA0MfaxnlKXMWz5aIECcGilFl
oX7TIYISmUxGGHjLsNnGo2HrmhseGoov9w9nTRFhyYq85+InliHm3ERgmoRfZ/wb
0nQmNlscM6qIqzqkBMk8fDz+HkaMFkAfHxjJbkIlYmUxJzCU9wIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFKOwiEuF/JVOYBu99d8mDTLNDtuCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj
YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvYTI1NWQyYTktMTYzMi0z
NDk4LWEzNTUtM2Y4MGUxNmNhNDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw
MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3
ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4
ODUzN2Q2YTMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQARTddMA8E
AgACMAkDBwAmIAAAASAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEApPx9cwUSqLP+125DFBMh3L9t7WTH7Us1
dXRK+RyWZDRmqDVfxVG/0cFdIJkf1+eizEc4UEmq34GQKF20RiQPVioNwN7qXV8p
rLe06Sgr50WBc1WU1oIyorM9o3XKLDq/xOHat3VOhsLnNGF/mgjoL5xKLCuYwLIc
iwtUzbp8Z1rj4tCjdtNX3iFJkD1iqwAAg4ky26gE9albfcitAjhtqXeSt+Of6SFi
QUy+G/4koyho3h+/Y2OIsI7kPL1WYxcJgA0mPBHeIqq2ug+KeYkmevd+QUw8GxgN
khAdBS8t5uhc762xYEF5kwvuLpXdEk4E6iEVPKKEIoz91W+rL02UZw==
-----END CERTIFICATE-----
Generated at Sat May 18 04:05:27 2024 by rpki-client on console-ams.rpki-client.org