Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/5f0f9220-7f1d-3bc2-a8c6-b58d27cd5950.roa
File:                     5f0f9220-7f1d-3bc2-a8c6-b58d27cd5950.roa (raw, json)
Hash identifier:          k0FWQ6hGCGQV7/hxoznVXJ48RuUj6fYgCyj/QzlUbUY=
Subject key identifier:   76:A6:AA:48:FC:F7:C5:D0:6C:90:A4:14:5A:93:D9:18:65:1C:19:CC
Certificate issuer:       /CN=beb73535-d0fb-4340-8d5e-4c26d6a59dc7
Certificate serial:       010D0C9F43285847A3C9C0CBAAF9463D396153E0
Authority key identifier: CC:F8:F7:81:D8:59:90:59:3F:D4:20:4D:A0:61:ED:65:26:1E:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/5f0f9220-7f1d-3bc2-a8c6-b58d27cd5950.roa
Signing time:             Wed 23 Oct 2024 19:23:13 +0000
ROA not before:           Wed 23 Oct 2024 19:23:13 +0000
ROA not after:            Tue 21 Jan 2025 20:23:13 +0000
asID:                     401338
IP address blocks:        67.22.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:c9:c0:cb:aa:f9:46:3d:39:61:53:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb73535-d0fb-4340-8d5e-4c26d6a59dc7
        Validity
            Not Before: Oct 23 19:23:13 2024 GMT
            Not After : Jan 21 20:23:13 2025 GMT
        Subject: CN=eb533bbb-7baa-49cd-b270-500758ce80a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:f8:83:f0:92:f7:ae:ed:56:2c:2f:72:a3:
                    96:11:dc:df:9a:cd:61:b7:df:06:2b:7a:27:76:68:
                    a4:85:75:ae:05:fb:fa:e8:f1:3f:7d:80:db:c3:88:
                    16:04:38:93:34:15:08:db:8f:8a:31:d5:a4:48:ba:
                    d5:37:a1:44:78:1c:85:74:6e:73:14:03:6f:59:f3:
                    9f:02:30:b6:b3:44:27:41:a4:30:3c:32:a6:ba:70:
                    90:8a:75:e1:9b:c3:94:50:8c:71:de:de:eb:bb:b0:
                    c0:fb:c6:77:16:c5:bd:bc:8e:10:0d:4a:23:8d:4c:
                    67:ff:1a:45:60:3c:19:15:7d:68:6d:2a:f7:80:7c:
                    dd:04:34:79:aa:75:43:b2:b8:7f:51:92:37:47:f8:
                    1a:b3:13:25:be:6e:ae:21:1c:69:4b:d4:68:d4:e3:
                    69:22:a5:83:c2:2d:dd:d7:b3:44:64:58:81:da:21:
                    8e:f2:fc:2c:84:bd:9b:26:b5:d2:13:ab:68:b1:5e:
                    89:60:63:0b:3a:37:03:88:73:99:d4:72:43:4d:54:
                    b5:37:e6:c4:40:9a:41:ae:37:75:58:6c:85:61:74:
                    c3:de:e6:39:6f:2a:cb:c1:83:a1:52:c5:7c:87:0c:
                    74:cf:50:75:66:0b:09:37:11:1c:f2:e9:f0:24:40:
                    7c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A6:AA:48:FC:F7:C5:D0:6C:90:A4:14:5A:93:D9:18:65:1C:19:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/5f0f9220-7f1d-3bc2-a8c6-b58d27cd5950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.crl

            X509v3 Authority Key Identifier:
                keyid:CC:F8:F7:81:D8:59:90:59:3F:D4:20:4D:A0:61:ED:65:26:1E:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.22.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:a9:a1:67:bd:66:7b:8d:5d:d5:d5:60:66:f9:a7:60:ea:d9:
         33:d7:ee:81:d4:28:71:86:34:c5:91:ad:23:a4:62:42:c4:13:
         3a:80:8c:ef:cf:bb:b0:23:5f:ee:7d:3e:ae:1f:fe:51:e8:5f:
         aa:18:01:9b:3c:86:37:b4:14:c9:ff:0d:06:6d:a7:eb:91:9d:
         cc:94:30:81:bd:44:dc:2b:62:8d:6f:39:38:0f:d8:cf:ac:c4:
         f2:fd:eb:b7:8c:96:6e:87:91:36:d8:c0:ab:59:b2:3d:81:89:
         0f:ce:33:a1:5f:cf:49:c1:18:e3:3e:88:05:8f:2d:7f:c6:58:
         d6:d1:11:94:f6:2e:ba:cd:58:2c:43:48:db:b6:2e:7a:a2:f1:
         d2:ea:31:74:df:86:0c:a4:44:ee:d5:e9:6b:d8:b2:fe:fa:71:
         8d:7d:b5:fb:9c:d6:1f:19:6f:23:e4:81:d4:5f:51:19:d4:8b:
         ac:f8:bf:ca:d3:5d:99:d2:93:7c:28:72:cd:b7:ce:40:79:bb:
         9c:04:bc:22:ef:80:f8:66:f0:36:fc:c4:f4:2b:a0:d1:eb:aa:
         23:bf:2c:4c:cf:1e:58:15:52:54:d0:a7:01:c3:2a:47:73:49:
         7c:93:7b:f2:76:2d:4a:40:a5:97:00:79:a9:ac:d4:0f:df:1c:
         f4:af:ff:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejycDLqvlGPTlhU+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmViNzM1MzUtZDBmYi00MzQwLThkNWUtNGMyNmQ2YTU5
ZGM3MB4XDTI0MTAyMzE5MjMxM1oXDTI1MDEyMTIwMjMxM1owLzEtMCsGA1UEAxMk
ZWI1MzNiYmItN2JhYS00OWNkLWIyNzAtNTAwNzU4Y2U4MGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqon4g/CS967tViwvcqOWEdzfms1ht98GK3on
dmikhXWuBfv66PE/fYDbw4gWBDiTNBUI24+KMdWkSLrVN6FEeByFdG5zFANvWfOf
AjC2s0QnQaQwPDKmunCQinXhm8OUUIxx3t7ru7DA+8Z3FsW9vI4QDUojjUxn/xpF
YDwZFX1obSr3gHzdBDR5qnVDsrh/UZI3R/gasxMlvm6uIRxpS9Ro1ONpIqWDwi3d
17NEZFiB2iGO8vwshL2bJrXSE6tosV6JYGMLOjcDiHOZ1HJDTVS1N+bEQJpBrjd1
WGyFYXTD3uY5byrLwYOhUsV8hwx0z1B1ZgsJNxEc8unwJEB88QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHamqkj898XQbJCkFFqT2RhlHBnMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iZWI3
MzUzNS1kMGZiLTQzNDAtOGQ1ZS00YzI2ZDZhNTlkYzcvNWYwZjkyMjAtN2YxZC0z
YmMyLWE4YzYtYjU4ZDI3Y2Q1OTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmViNzM1MzUtZDBmYi00MzQwLThk
NWUtNGMyNmQ2YTU5ZGM3L2JlYjczNTM1LWQwZmItNDM0MC04ZDVlLTRjMjZkNmE1
OWRjNy5jcmwwHwYDVR0jBBgwFoAUzPj3gdhZkFk/1CBNoGHtZSYeDIIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iZWI3MzUzNS1kMGZiLTQzNDAtOGQ1ZS00YzI2
ZDZhNTlkYzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQxZgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEupoWe9ZnuNXdXVYGb5p2Dq2TPX7oHUKHGGNMWRrSOkYkLEEzqAjO/P
u7AjX+59Pq4f/lHoX6oYAZs8hje0FMn/DQZtp+uRncyUMIG9RNwrYo1vOTgP2M+s
xPL967eMlm6HkTbYwKtZsj2BiQ/OM6Ffz0nBGOM+iAWPLX/GWNbREZT2LrrNWCxD
SNu2Lnqi8dLqMXTfhgykRO7V6WvYsv76cY19tfuc1h8ZbyPkgdRfURnUi6z4v8rT
XZnSk3wocs23zkB5u5wEvCLvgPhm8Db8xPQroNHrqiO/LEzPHlgVUlTQpwHDKkdz
SXyTe/J2LUpApZcAeams1A/fHPSv/7U=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:31 2024 by rpki-client on console-ams.rpki-client.org