Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ae68d36c-45dd-3d00-aef2-523dceb603d4.roa
File:                     ae68d36c-45dd-3d00-aef2-523dceb603d4.roa (raw, json)
Hash identifier:          XF/69mP6qnC+rE7nY+9WS5rwH5PkWgkU6W/d8Au+ACs=
Subject key identifier:   C9:43:E7:94:BE:32:35:1A:09:E4:42:03:6F:8F:2E:66:96:40:31:EF
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F432858486D905437DEB57E9C9FCBAF00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ae68d36c-45dd-3d00-aef2-523dceb603d4.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     26744
IP address blocks:        68.170.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:54:37:de:b5:7e:9c:9f:cb:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=9dd347c3-169f-4105-b74d-02142f6c7345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:77:ef:fe:9d:aa:d0:83:13:10:98:fb:25:fd:
                    f5:ad:81:ad:fe:5c:82:19:7c:00:b9:98:4f:5a:57:
                    f1:2d:73:1a:39:ec:1d:b2:e2:27:4a:fa:54:d4:f2:
                    ff:8e:e7:ae:dc:1c:8b:5b:c6:4b:34:13:5b:c2:b3:
                    8b:2f:26:74:a0:a6:e8:32:0e:0a:b3:ac:06:02:23:
                    47:f9:8f:fb:44:86:ff:cb:05:e6:7e:95:65:52:ba:
                    e4:71:4c:9d:9a:0f:8b:67:6a:f3:a1:47:6b:7b:ca:
                    d3:08:8a:ab:49:8f:30:28:22:72:59:22:bb:b3:d9:
                    12:0a:ef:50:ed:5d:1e:6f:90:65:e9:9c:1e:0b:57:
                    7a:1a:23:0b:9d:1a:09:74:dd:f5:79:42:08:1f:e4:
                    8e:b1:c9:af:0e:0b:a9:44:74:34:43:13:5b:7b:5b:
                    23:45:91:08:5b:05:b6:50:17:b3:ec:ac:10:09:ae:
                    bd:c0:e2:07:8b:b0:e3:7a:37:e0:36:52:21:62:92:
                    59:81:5f:25:e5:f9:c0:ad:e1:b0:71:8c:fa:42:b6:
                    c3:d9:80:2a:fd:e7:8c:1b:26:67:ff:d6:5a:93:0f:
                    07:9d:c1:b3:2a:51:9c:27:0b:2e:10:ee:98:58:74:
                    c0:b9:e3:5d:01:2d:3e:cb:3e:27:97:2f:3e:fd:65:
                    ac:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:43:E7:94:BE:32:35:1A:09:E4:42:03:6F:8F:2E:66:96:40:31:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ae68d36c-45dd-3d00-aef2-523dceb603d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a1:24:c2:d2:d2:3f:a6:0b:a6:d0:74:12:e5:26:2e:26:2a:
         bf:f9:c9:ed:b6:be:2e:e9:d0:61:ef:38:bb:a7:f8:0c:c4:6d:
         6a:57:cf:c3:ec:40:2c:95:e9:8d:7c:12:60:0a:1e:a3:01:45:
         fb:50:82:94:b5:6f:8c:07:f6:c0:0a:ad:1a:54:81:9d:6f:89:
         d9:f1:80:c8:ae:18:6a:4d:40:0a:1a:43:02:0a:41:a5:ea:d3:
         be:76:76:f5:77:67:ca:82:ee:5f:08:91:31:82:b9:55:4e:37:
         71:20:45:37:3a:60:b9:38:a0:e9:de:00:4b:c6:6c:08:6a:20:
         d5:a0:6d:a3:6d:a6:b5:c8:e3:79:db:20:7a:2e:5d:58:dc:b4:
         cb:ae:91:49:84:a5:ef:7a:7e:d7:8d:40:01:fb:1e:c7:21:44:
         07:32:e4:4c:bd:95:52:f3:a0:6e:a1:54:c2:ec:4c:30:6a:c7:
         11:bb:c8:30:a6:7d:c6:bf:26:d0:aa:44:d3:59:ce:7a:08:67:
         3d:9a:a4:be:59:26:82:b1:05:bd:dc:cf:e5:26:a0:43:b4:88:
         6b:10:26:2a:34:c0:79:b6:98:41:75:62:88:ba:05:56:69:08:
         ed:bc:d2:8d:13:1a:36:4d:41:40:82:8c:44:2c:9d:fe:62:e7:
         9b:b6:82:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkFQ33rV+nJ/LrwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
OWRkMzQ3YzMtMTY5Zi00MTA1LWI3NGQtMDIxNDJmNmM3MzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXfv/p2q0IMTEJj7Jf31rYGt/lyCGXwAuZhP
WlfxLXMaOewdsuInSvpU1PL/jueu3ByLW8ZLNBNbwrOLLyZ0oKboMg4Ks6wGAiNH
+Y/7RIb/ywXmfpVlUrrkcUydmg+LZ2rzoUdre8rTCIqrSY8wKCJyWSK7s9kSCu9Q
7V0eb5Bl6ZweC1d6GiMLnRoJdN31eUIIH+SOscmvDgupRHQ0QxNbe1sjRZEIWwW2
UBez7KwQCa69wOIHi7DjejfgNlIhYpJZgV8l5fnAreGwcYz6QrbD2YAq/eeMGyZn
/9Zakw8HncGzKlGcJwsuEO6YWHTAueNdAS0+yz4nly8+/WWsywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMlD55S+MjUaCeRCA2+PLmaWQDHvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvYWU2OGQzNmMtNDVkZC0z
ZDAwLWFlZjItNTIzZGNlYjYwM2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKrzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFChJMLS0j+mC6bQdBLlJi4mKr/5ye22vi7p0GHvOLun+AzEbWpXz8Ps
QCyV6Y18EmAKHqMBRftQgpS1b4wH9sAKrRpUgZ1vidnxgMiuGGpNQAoaQwIKQaXq
0752dvV3Z8qC7l8IkTGCuVVON3EgRTc6YLk4oOneAEvGbAhqINWgbaNtprXI43nb
IHouXVjctMuukUmEpe96fteNQAH7HschRAcy5Ey9lVLzoG6hVMLsTDBqxxG7yDCm
fca/JtCqRNNZznoIZz2apL5ZJoKxBb3cz+UmoEO0iGsQJio0wHm2mEF1Yoi6BVZp
CO280o0TGjZNQUCCjEQsnf5i55u2gjI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:14 2025 by rpki-client