Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/5e44192e-f545-3343-9375-5f961aee2b74.roa
File:                     5e44192e-f545-3343-9375-5f961aee2b74.roa (raw, json)
Hash identifier:          j8c+MXYnXACqIUhLJn1WSe+yUDRK60Oi7KxGk/Ms5Gk=
Subject key identifier:   8F:08:4B:3E:17:CA:14:65:D0:5D:81:D3:26:0D:8B:B6:67:CF:08:82
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F432858475E1ACF031DAED7C2C14EC160
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/5e44192e-f545-3343-9375-5f961aee2b74.roa
Signing time:             Sat 28 Sep 2024 20:19:57 +0000
ROA not before:           Sat 28 Sep 2024 20:19:57 +0000
ROA not after:            Fri 27 Dec 2024 21:19:57 +0000
asID:                     19107
IP address blocks:        68.235.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:1a:cf:03:1d:ae:d7:c2:c1:4e:c1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Sep 28 20:19:57 2024 GMT
            Not After : Dec 27 21:19:57 2024 GMT
        Subject: CN=ea97fbfd-fe35-4394-b99d-567c1b8587bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ac:87:a8:83:75:c9:79:d2:0d:e6:bb:ce:8f:
                    f3:8c:8d:fe:13:1a:f6:8e:6d:fe:a2:eb:ac:91:ad:
                    ed:84:18:ff:97:8b:05:78:55:f0:b5:07:52:a0:de:
                    a0:70:95:66:79:8c:1f:14:95:e2:42:e7:e9:19:fe:
                    3b:8d:90:fb:6e:3c:5b:33:e8:c4:9e:53:33:17:a2:
                    47:ce:e3:70:8a:b7:19:31:b0:45:be:21:fb:9e:65:
                    89:36:c9:bf:c5:6d:a7:84:92:ad:b6:e3:ca:80:47:
                    fb:18:47:66:84:e1:e9:8f:08:76:28:d8:ce:2e:68:
                    c7:03:ca:ea:19:d8:55:db:04:4d:b5:cd:f5:1d:a1:
                    dd:d5:fb:a3:53:1a:7e:10:9f:cc:33:5f:fd:3b:9f:
                    1a:60:3d:72:bb:aa:fd:c2:1b:da:46:4d:3e:e2:19:
                    dd:d3:c2:e9:6b:3f:0f:71:06:5e:9c:92:b9:45:9f:
                    1a:09:60:7b:b3:cb:8f:73:ad:bb:58:da:24:b1:97:
                    c5:95:7c:57:f7:55:d5:1d:ca:23:28:2d:bc:b8:92:
                    0c:d7:96:35:ae:62:89:3b:68:05:e7:94:3b:92:43:
                    36:59:24:ed:ce:a0:bb:8a:2f:44:99:14:0f:d4:08:
                    eb:de:60:9d:cd:14:ed:16:79:2c:c5:58:20:a0:71:
                    14:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:08:4B:3E:17:CA:14:65:D0:5D:81:D3:26:0D:8B:B6:67:CF:08:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/5e44192e-f545-3343-9375-5f961aee2b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a2:e3:ce:bf:a1:fb:98:12:f7:87:9b:66:27:85:bd:72:2c:
         48:24:3a:34:39:05:6b:e1:80:7c:01:27:49:e1:c1:7d:6f:34:
         12:de:05:1b:40:93:40:3e:d9:a0:5b:a6:f1:34:10:8d:b3:15:
         c1:51:6a:16:d1:0f:b3:ff:18:1c:2a:18:1d:1b:74:cc:78:63:
         35:b5:66:5c:41:12:51:91:52:3d:59:fb:48:97:3d:4e:79:92:
         8d:77:80:b6:7c:f6:c6:20:ea:5b:36:58:6e:c2:32:4f:dd:a4:
         c6:66:4e:d2:61:ae:c2:f2:6d:c3:5d:8a:4e:7b:79:6d:ed:78:
         29:13:30:53:4e:f4:75:7b:d6:fd:43:41:1b:23:14:a9:ef:2d:
         62:75:ee:00:37:3d:c7:f3:17:30:30:39:42:6d:02:65:e6:e7:
         76:95:34:cf:6b:27:96:24:fb:93:2f:97:ee:4b:0b:88:cd:24:
         04:95:29:c2:fb:8b:26:79:6a:2f:e7:65:11:9a:85:a5:24:94:
         2c:41:a7:78:2d:f3:92:16:0e:13:6a:17:63:17:49:d6:06:1f:
         d7:36:69:c8:58:31:0a:46:82:31:01:61:e0:12:c8:69:6e:10:
         dd:0d:2e:32:df:aa:8b:80:03:25:d0:67:49:6c:b6:94:fa:b7:
         61:59:1c:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdeGs8DHa7XwsFOwWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2
ODZiMB4XDTI0MDkyODIwMTk1N1oXDTI0MTIyNzIxMTk1N1owLzEtMCsGA1UEAxMk
ZWE5N2ZiZmQtZmUzNS00Mzk0LWI5OWQtNTY3YzFiODU4N2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6yHqIN1yXnSDea7zo/zjI3+Exr2jm3+ouus
ka3thBj/l4sFeFXwtQdSoN6gcJVmeYwfFJXiQufpGf47jZD7bjxbM+jEnlMzF6JH
zuNwircZMbBFviH7nmWJNsm/xW2nhJKttuPKgEf7GEdmhOHpjwh2KNjOLmjHA8rq
GdhV2wRNtc31HaHd1fujUxp+EJ/MM1/9O58aYD1yu6r9whvaRk0+4hnd08Lpaz8P
cQZenJK5RZ8aCWB7s8uPc627WNoksZfFlXxX91XVHcojKC28uJIM15Y1rmKJO2gF
55Q7kkM2WSTtzqC7ii9EmRQP1Ajr3mCdzRTtFnksxVggoHEU7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI8ISz4XyhRl0F2B0yYNi7ZnzwiCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz
YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvNWU0NDE5MmUtZjU0NS0z
MzQzLTkzNzUtNWY5NjFhZWUyYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3
M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh
Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2
NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOi486/ofuYEveHm2Ynhb1yLEgkOjQ5BWvhgHwBJ0nhwX1vNBLeBRtA
k0A+2aBbpvE0EI2zFcFRahbRD7P/GBwqGB0bdMx4YzW1ZlxBElGRUj1Z+0iXPU55
ko13gLZ89sYg6ls2WG7CMk/dpMZmTtJhrsLybcNdik57eW3teCkTMFNO9HV71v1D
QRsjFKnvLWJ17gA3PcfzFzAwOUJtAmXm53aVNM9rJ5Yk+5Mvl+5LC4jNJASVKcL7
iyZ5ai/nZRGahaUklCxBp3gt85IWDhNqF2MXSdYGH9c2achYMQpGgjEBYeASyGlu
EN0NLjLfqouAAyXQZ0lstpT6t2FZHGM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:19 2024 by rpki-client on console-fra.rpki-client.org