Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7e03c240-d40c-3273-b7bb-24a81d00abf6.roa
File:                     7e03c240-d40c-3273-b7bb-24a81d00abf6.roa (raw, json)
Hash identifier:          cN2AaK/vaXiMZUtpWwaXgCrW1zXHEb3GKawmIDU47/E=
Subject key identifier:   A2:12:5F:8E:76:BD:E5:05:85:AE:41:0A:B8:5E:80:E6:93:7F:18:EB
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453747FE993DBB6D4A859AA600
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7e03c240-d40c-3273-b7bb-24a81d00abf6.roa
Signing time:             Fri 15 Mar 2024 13:00:32 +0000
ROA not before:           Fri 15 Mar 2024 13:00:32 +0000
ROA not after:            Thu 13 Jun 2024 13:00:32 +0000
asID:                     852
IP address blocks:        209.53.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:37:47:fe:99:3d:bb:6d:4a:85:9a:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 15 13:00:32 2024 GMT
            Not After : Jun 13 13:00:32 2024 GMT
        Subject: CN=a4444183-38b8-493a-a227-807d55f04692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:e7:9d:7a:44:81:d7:f1:54:79:94:08:30:
                    61:25:c7:3f:c7:2d:22:67:13:0b:ad:c3:03:be:6d:
                    ee:34:49:28:73:73:1c:1d:b1:91:5e:00:68:64:53:
                    56:8b:f8:8a:67:6d:91:59:88:56:59:02:42:c9:ed:
                    4d:df:b1:0a:1f:3f:1d:6b:07:97:1f:60:32:01:98:
                    24:48:ba:07:9a:fb:58:87:06:43:c8:ec:e3:3b:13:
                    4d:9e:83:0a:0b:d2:06:69:66:51:4a:b4:44:01:dc:
                    3a:82:31:fb:9a:e1:11:81:45:e4:09:8d:8f:c9:b0:
                    9a:40:bb:76:4f:82:be:c1:16:d8:3e:e3:f1:d8:cd:
                    28:bd:04:34:27:82:d7:fb:1a:34:ce:4b:9a:ca:0a:
                    1c:da:5e:92:56:b2:ad:6f:ef:93:25:bb:7e:64:ca:
                    41:02:a8:7d:86:b5:cb:fc:b8:6a:57:2a:77:8f:d5:
                    dd:de:97:ff:07:3a:77:1c:a5:1a:b9:16:c0:20:50:
                    9a:ec:ea:d4:f4:34:aa:bb:b2:c7:c6:ab:4b:3c:78:
                    e9:89:95:1e:70:a8:98:c4:5a:1e:60:81:74:52:e1:
                    89:98:39:d5:4a:a9:2b:d0:69:ad:bf:54:06:c5:93:
                    85:d9:e9:64:0c:81:a5:44:5b:bd:30:67:79:76:f0:
                    11:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:12:5F:8E:76:BD:E5:05:85:AE:41:0A:B8:5E:80:E6:93:7F:18:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7e03c240-d40c-3273-b7bb-24a81d00abf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:1f:97:4f:0c:f6:ff:8a:42:67:1c:f8:1b:22:67:2d:ef:4f:
         29:c1:82:15:34:6c:91:ff:40:60:08:a6:67:a6:c5:88:3d:bb:
         10:73:90:2b:a9:54:f2:09:a1:3d:7a:ce:f6:58:b3:a1:2c:58:
         3f:5d:53:e4:d0:25:c4:f8:b8:bb:82:e6:92:d0:41:a2:0f:f5:
         25:4a:88:81:64:6e:df:c4:c3:f0:f5:58:bd:57:9b:30:53:fc:
         5c:4a:78:21:12:8b:22:4f:53:f5:a2:e9:11:33:47:d5:ed:ac:
         d9:f9:f7:b9:a3:08:dd:bc:cf:b8:95:13:03:2f:6b:00:94:26:
         58:23:d4:05:b6:b3:a4:4a:38:0b:fa:5b:f2:57:d4:d0:73:ce:
         7e:a7:b4:40:06:c7:33:65:f8:97:47:8a:47:ff:2e:0a:2c:2f:
         02:23:3f:18:0b:98:f1:a8:a2:55:0c:8f:28:9b:1f:83:c0:b3:
         36:5f:59:16:73:e9:99:64:07:74:ba:e0:57:5e:11:17:36:36:
         1b:40:f6:b8:b1:8e:0e:f8:42:aa:06:2b:6a:3b:f1:16:2e:30:
         02:82:e9:66:67:c4:be:60:03:48:1c:a9:b3:d7:3a:2e:e5:f5:
         ff:49:51:36:58:dc:ce:aa:15:b4:a1:bd:13:cf:16:6c:03:ff:
         92:03:c3:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU3R/6ZPbttSoWapgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDMxNTEzMDAzMloXDTI0MDYxMzEzMDAzMlowLzEtMCsGA1UEAxMk
YTQ0NDQxODMtMzhiOC00OTNhLWEyMjctODA3ZDU1ZjA0NjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZfnnXpEgdfxVHmUCDBhJcc/xy0iZxMLrcMD
vm3uNEkoc3McHbGRXgBoZFNWi/iKZ22RWYhWWQJCye1N37EKHz8daweXH2AyAZgk
SLoHmvtYhwZDyOzjOxNNnoMKC9IGaWZRSrREAdw6gjH7muERgUXkCY2PybCaQLt2
T4K+wRbYPuPx2M0ovQQ0J4LX+xo0zkuaygoc2l6SVrKtb++TJbt+ZMpBAqh9hrXL
/LhqVyp3j9Xd3pf/Bzp3HKUauRbAIFCa7OrU9DSqu7LHxqtLPHjpiZUecKiYxFoe
YIF0UuGJmDnVSqkr0Gmtv1QGxZOF2elkDIGlRFu9MGd5dvAR8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKISX452veUFha5BCrhegOaTfxjrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvN2UwM2MyNDAtZDQwYy0z
MjczLWI3YmItMjRhODFkMDBhYmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TVEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0fl08M9v+KQmcc+BsiZy3vTynBghU0bJH/QGAIpmemxYg9uxBzkCup
VPIJoT16zvZYs6EsWD9dU+TQJcT4uLuC5pLQQaIP9SVKiIFkbt/Ew/D1WL1XmzBT
/FxKeCESiyJPU/Wi6REzR9XtrNn597mjCN28z7iVEwMvawCUJlgj1AW2s6RKOAv6
W/JX1NBzzn6ntEAGxzNl+JdHikf/LgosLwIjPxgLmPGoolUMjyibH4PAszZfWRZz
6ZlkB3S64FdeERc2NhtA9rixjg74QqoGK2o78RYuMAKC6WZnxL5gA0gcqbPXOi7l
9f9JUTZY3M6qFbShvRPPFmwD/5IDwwk=
-----END CERTIFICATE-----
Generated at Sat May 25 15:56:46 2024 by rpki-client on console-ams.rpki-client.org