Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b403e3a1-35d8-4314-a48b-4ba7ef443859/9914697f-6779-3712-b557-73ee495e4fcd.roa
File:                     9914697f-6779-3712-b557-73ee495e4fcd.roa (raw, json)
Hash identifier:          QJ1CpOTeRUlQsHqw3HwA2t4hUhvW3ojQD20TUzXNalw=
Subject key identifier:   D6:3F:52:5F:C9:BD:3A:19:2C:20:44:75:16:67:A1:48:A9:0F:87:AE
Certificate issuer:       /CN=b403e3a1-35d8-4314-a48b-4ba7ef443859
Certificate serial:       010D0C9F43285845734DB76199DC484D5E892800
Authority key identifier: 07:14:90:EB:F2:F8:A2:50:47:07:C0:74:D5:4C:E1:54:21:3D:6E:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b403e3a1-35d8-4314-a48b-4ba7ef443859.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b403e3a1-35d8-4314-a48b-4ba7ef443859/9914697f-6779-3712-b557-73ee495e4fcd.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     14061
IP address blocks:        69.55.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b403e3a1-35d8-4314-a48b-4ba7ef443859/b403e3a1-35d8-4314-a48b-4ba7ef443859.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b403e3a1-35d8-4314-a48b-4ba7ef443859/b403e3a1-35d8-4314-a48b-4ba7ef443859.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b403e3a1-35d8-4314-a48b-4ba7ef443859.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b7:61:99:dc:48:4d:5e:89:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b403e3a1-35d8-4314-a48b-4ba7ef443859
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=19d676ae-a025-4e1c-9e45-03185abe8136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:ff:31:a0:63:81:8a:b4:17:98:80:5b:1c:
                    6b:c4:c8:85:24:f9:42:8d:f7:31:f5:38:c2:dd:c3:
                    19:3e:bf:03:43:85:37:14:d9:eb:93:c4:a5:cc:ff:
                    40:e9:e4:3d:f2:af:42:dd:71:9d:01:71:b6:01:7a:
                    73:c9:35:cf:49:20:21:71:98:b8:22:b2:a6:0e:fc:
                    f7:76:de:60:3e:0d:0a:20:d4:24:dc:cd:33:27:60:
                    a2:75:26:80:63:46:11:4a:a5:99:84:b4:e5:69:01:
                    d2:0f:63:27:02:cb:51:94:78:f8:5e:22:24:2d:9d:
                    48:56:51:12:cb:37:8e:b6:85:bc:91:0f:41:dc:76:
                    57:06:c4:86:12:c9:52:b1:a0:2e:66:14:53:dc:09:
                    fb:e2:29:89:38:e3:12:69:95:67:28:c9:73:7b:72:
                    28:9d:92:93:d4:e2:fc:98:d3:ed:b3:3d:ea:e8:29:
                    de:b7:ef:08:de:b6:c4:d5:2d:e2:8a:ae:21:2e:e2:
                    17:37:fc:bd:e8:38:88:23:7f:74:56:af:db:63:18:
                    4c:a2:21:ae:e5:55:94:74:2d:41:ae:9b:d6:bf:30:
                    af:d1:69:88:67:53:45:b7:39:99:ea:f5:56:1d:10:
                    da:34:57:a9:36:be:59:41:af:70:2b:c7:71:4d:a3:
                    3f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3F:52:5F:C9:BD:3A:19:2C:20:44:75:16:67:A1:48:A9:0F:87:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b403e3a1-35d8-4314-a48b-4ba7ef443859/9914697f-6779-3712-b557-73ee495e4fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b403e3a1-35d8-4314-a48b-4ba7ef443859/b403e3a1-35d8-4314-a48b-4ba7ef443859.crl

            X509v3 Authority Key Identifier:
                keyid:07:14:90:EB:F2:F8:A2:50:47:07:C0:74:D5:4C:E1:54:21:3D:6E:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b403e3a1-35d8-4314-a48b-4ba7ef443859.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.55.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:f5:22:af:7a:f0:15:95:d4:36:52:19:81:dd:6f:64:8e:b0:
         6f:d4:06:a1:cb:4c:00:91:67:fa:36:e8:df:af:84:42:20:7e:
         e8:c4:94:4a:2a:88:16:21:ee:ed:2b:4f:9d:0b:95:1d:1e:45:
         5f:78:f8:bb:86:e8:21:56:c1:71:73:b3:b8:1e:49:45:cd:38:
         ea:b3:8a:bd:3d:ad:7f:1f:b6:8a:e3:c6:d1:b5:f2:06:f4:af:
         ff:57:99:38:45:ab:8a:82:27:81:05:ff:15:dc:97:22:ac:ba:
         0c:67:be:e3:10:76:9d:ad:53:96:44:82:3e:8b:f4:c1:03:3a:
         7f:cc:16:7d:31:96:61:3c:00:56:6e:0f:fc:d4:63:a8:45:77:
         ba:e6:d5:d5:56:63:63:01:57:01:eb:a1:69:47:b3:2a:5b:79:
         0a:4f:5d:65:55:51:db:dc:7b:fc:ac:6f:58:78:73:8a:89:91:
         bc:41:be:de:8b:b7:5b:fd:aa:88:38:62:4e:a5:79:37:0e:f4:
         21:d6:1b:96:d5:66:be:e4:44:59:44:0c:a4:11:02:39:06:10:
         c6:48:41:b5:f5:c9:6f:39:3f:19:f8:23:b8:1b:ac:74:f7:6d:
         a7:d2:51:1e:cc:65:a8:25:0a:44:1a:37:65:d4:e9:2e:16:9e:
         fb:c1:34:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVzTbdhmdxITV6JKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQwM2UzYTEtMzVkOC00MzE0LWE0OGItNGJhN2VmNDQz
ODU5MB4XDTI0MDQwNjAxMDAyNloXDTI0MDcwNTAxMDAyNlowLzEtMCsGA1UEAxMk
MTlkNjc2YWUtYTAyNS00ZTFjLTllNDUtMDMxODVhYmU4MTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8H/MaBjgYq0F5iAWxxrxMiFJPlCjfcx9TjC
3cMZPr8DQ4U3FNnrk8SlzP9A6eQ98q9C3XGdAXG2AXpzyTXPSSAhcZi4IrKmDvz3
dt5gPg0KINQk3M0zJ2CidSaAY0YRSqWZhLTlaQHSD2MnAstRlHj4XiIkLZ1IVlES
yzeOtoW8kQ9B3HZXBsSGEslSsaAuZhRT3An74imJOOMSaZVnKMlze3IonZKT1OL8
mNPtsz3q6Cnet+8I3rbE1S3iiq4hLuIXN/y96DiII390Vq/bYxhMoiGu5VWUdC1B
rpvWvzCv0WmIZ1NFtzmZ6vVWHRDaNFepNr5ZQa9wK8dxTaM/WQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNY/Ul/JvToZLCBEdRZnoUipD4euMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNDAz
ZTNhMS0zNWQ4LTQzMTQtYTQ4Yi00YmE3ZWY0NDM4NTkvOTkxNDY5N2YtNjc3OS0z
NzEyLWI1NTctNzNlZTQ5NWU0ZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjQwM2UzYTEtMzVkOC00MzE0LWE0
OGItNGJhN2VmNDQzODU5L2I0MDNlM2ExLTM1ZDgtNDMxNC1hNDhiLTRiYTdlZjQ0
Mzg1OS5jcmwwHwYDVR0jBBgwFoAUBxSQ6/L4olBHB8B01UzhVCE9bvIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNDAzZTNhMS0zNWQ4LTQzMTQtYTQ4Yi00YmE3
ZWY0NDM4NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERTcwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHT1Iq968BWV1DZSGYHdb2SOsG/UBqHLTACRZ/o26N+vhEIgfujElEoq
iBYh7u0rT50LlR0eRV94+LuG6CFWwXFzs7geSUXNOOqzir09rX8ftorjxtG18gb0
r/9XmThFq4qCJ4EF/xXclyKsugxnvuMQdp2tU5ZEgj6L9MEDOn/MFn0xlmE8AFZu
D/zUY6hFd7rm1dVWY2MBVwHroWlHsypbeQpPXWVVUdvce/ysb1h4c4qJkbxBvt6L
t1v9qog4Yk6leTcO9CHWG5bVZr7kRFlEDKQRAjkGEMZIQbX1yW85Pxn4I7gbrHT3
bafSUR7MZaglCkQaN2XU6S4WnvvBNLU=
-----END CERTIFICATE-----
Generated at Mon May 20 06:51:40 2024 by rpki-client on console-ams.rpki-client.org