Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/961f473d-9eeb-39b2-9418-d471e2fe5ac2.roa
File:                     961f473d-9eeb-39b2-9418-d471e2fe5ac2.roa (raw, json)
Hash identifier:          /yxgoi3pvSdpztpq+zWzBbCMEkIf33RWVwj++jchk5M=
Subject key identifier:   41:1F:07:97:70:A9:CE:E7:3D:EC:74:07:94:26:76:23:1E:48:37:77
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F432858473C8854D5BB1C1902026FA6C0
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/961f473d-9eeb-39b2-9418-d471e2fe5ac2.roa
Signing time:             Mon 16 Sep 2024 19:43:08 +0000
ROA not before:           Mon 16 Sep 2024 19:43:08 +0000
ROA not after:            Sun 15 Dec 2024 20:43:08 +0000
asID:                     22504
IP address blocks:        67.58.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:88:54:d5:bb:1c:19:02:02:6f:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Sep 16 19:43:08 2024 GMT
            Not After : Dec 15 20:43:08 2024 GMT
        Subject: CN=3226c485-5d32-454a-9742-abfda62daae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:55:2d:12:0d:fa:77:c7:12:e4:96:9c:cd:e5:
                    1a:fd:01:b3:3f:c5:a8:a0:e1:67:54:ce:b7:7f:a6:
                    a5:fb:56:01:0a:4a:ef:7b:29:d2:a4:7c:4a:c4:e2:
                    1f:7d:54:0f:74:b6:ac:5f:7f:d4:02:8d:90:53:19:
                    a4:85:2e:84:18:ef:c5:85:05:94:7b:72:c9:37:d1:
                    c5:e9:72:08:4e:6a:94:00:53:8e:34:08:23:96:f2:
                    1a:56:71:2f:68:74:60:6e:0e:bd:ba:95:bb:6a:e0:
                    3b:fa:b6:b9:fc:45:be:1a:45:68:19:7b:97:42:8a:
                    e6:4a:70:52:9e:a2:9f:48:a4:83:9f:28:5a:cf:76:
                    88:14:57:82:76:95:a0:cb:c7:53:bc:26:ef:a6:00:
                    44:80:88:97:36:1e:9a:54:53:a1:99:be:e6:0b:9b:
                    77:9e:ac:5f:1a:ba:54:34:4c:c7:3a:40:9e:71:86:
                    53:13:ab:0e:fb:19:6e:8b:03:8c:75:a4:85:22:75:
                    91:ba:4f:0b:d2:c2:44:82:08:4c:f9:0d:74:22:ba:
                    15:53:16:4a:ed:3e:7f:17:1c:b1:84:0d:cd:95:dc:
                    82:99:7e:06:62:83:39:57:dd:fc:fc:b1:f3:9f:f8:
                    54:92:6e:a0:9c:99:ce:0c:66:91:d9:dc:6c:0e:50:
                    a9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1F:07:97:70:A9:CE:E7:3D:EC:74:07:94:26:76:23:1E:48:37:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/961f473d-9eeb-39b2-9418-d471e2fe5ac2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.58.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:08:22:ff:95:23:17:73:67:8a:9a:6b:32:17:ae:64:0c:10:
         c6:26:d4:05:bb:d6:65:4e:24:57:2d:3b:52:06:a8:2c:c8:2d:
         14:28:87:cf:11:5f:bd:5d:f9:99:4d:0f:5b:ab:d3:ca:dc:e7:
         cc:79:d1:6f:ac:01:b3:aa:7f:50:3f:74:3c:a8:f8:77:61:35:
         b0:85:3a:d1:ad:19:3e:e5:70:18:d5:ad:c6:45:c6:d7:e4:eb:
         f1:67:f0:cb:e1:5b:2e:e8:87:fe:a4:a2:0d:d4:e2:74:54:c4:
         ea:dd:9b:41:2d:b0:47:98:4f:2d:59:40:43:45:8b:e8:cf:81:
         b8:0a:02:c6:f4:10:3d:b3:5d:7b:d0:5e:98:9b:98:4f:cf:1f:
         a6:8c:78:18:de:d0:40:1a:cb:4e:88:38:dd:ca:d0:ad:48:6b:
         0c:47:82:3b:d9:53:f6:59:40:ab:1f:94:ae:bb:bf:f0:93:5b:
         e7:fe:7a:7c:a7:98:f9:1f:ac:11:2b:de:e7:b2:8d:23:35:49:
         90:2b:42:f3:b5:41:0e:f3:57:8d:e3:24:45:67:55:e7:50:57:
         14:29:70:fe:23:f7:dd:f6:18:8f:14:d2:7c:91:d4:ff:f1:2f:
         70:a0:35:f8:e2:c2:1e:ea:60:a3:72:fd:99:48:1d:b0:c8:99:
         0c:54:cc:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc8iFTVuxwZAgJvpsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi
MGY2MB4XDTI0MDkxNjE5NDMwOFoXDTI0MTIxNTIwNDMwOFowLzEtMCsGA1UEAxMk
MzIyNmM0ODUtNWQzMi00NTRhLTk3NDItYWJmZGE2MmRhYWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FUtEg36d8cS5JaczeUa/QGzP8WooOFnVM63
f6al+1YBCkrveynSpHxKxOIffVQPdLasX3/UAo2QUxmkhS6EGO/FhQWUe3LJN9HF
6XIITmqUAFOONAgjlvIaVnEvaHRgbg69upW7auA7+ra5/EW+GkVoGXuXQormSnBS
nqKfSKSDnyhaz3aIFFeCdpWgy8dTvCbvpgBEgIiXNh6aVFOhmb7mC5t3nqxfGrpU
NEzHOkCecYZTE6sO+xluiwOMdaSFInWRuk8L0sJEgghM+Q10IroVUxZK7T5/Fxyx
hA3NldyCmX4GYoM5V938/LHzn/hUkm6gnJnODGaR2dxsDlCpIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEEfB5dwqc7nPex0B5QmdiMeSDd3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz
NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvOTYxZjQ3M2QtOWVlYi0z
OWIyLTk0MTgtZDQ3MWUyZmU1YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2
OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3
YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx
MTVjN2IwZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQzpUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGEIIv+VIxdzZ4qaazIXrmQMEMYm1AW71mVOJFctO1IGqCzILRQoh88R
X71d+ZlND1ur08rc58x50W+sAbOqf1A/dDyo+HdhNbCFOtGtGT7lcBjVrcZFxtfk
6/Fn8MvhWy7oh/6kog3U4nRUxOrdm0EtsEeYTy1ZQENFi+jPgbgKAsb0ED2zXXvQ
XpibmE/PH6aMeBje0EAay06ION3K0K1IawxHgjvZU/ZZQKsflK67v/CTW+f+enyn
mPkfrBEr3ueyjSM1SZArQvO1QQ7zV43jJEVnVedQVxQpcP4j9932GI8U0nyR1P/x
L3CgNfjiwh7qYKNy/ZlIHbDImQxUzDg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:09 2024 by rpki-client on console-fra.rpki-client.org