Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/3417a786-7b86-3a8b-b46d-8a3c31130d6f.roa
File:                     3417a786-7b86-3a8b-b46d-8a3c31130d6f.roa (raw, json)
Hash identifier:          YSstk6+PLtEviYVGtnXmIHrz7aFHJOTZdxRnGvQQdXU=
Subject key identifier:   5D:F9:44:F4:28:D9:FA:8B:4A:44:2A:E7:40:DB:B0:64:FE:C0:AA:F5
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858457083042188E53B9134F56FE8
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/3417a786-7b86-3a8b-b46d-8a3c31130d6f.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     25611
IP address blocks:        69.27.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:83:04:21:88:e5:3b:91:34:f5:6f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=7bd49b6d-c1b8-4fd5-9a84-077a0b0088b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:81:e7:9b:33:90:a6:0b:5a:fc:94:b3:00:ea:
                    e2:e1:c2:03:a8:37:11:df:58:df:cb:3f:a1:f8:17:
                    90:a9:13:87:c0:8c:dd:5c:bc:34:c4:30:9d:21:b7:
                    bc:d0:2a:cb:a9:fe:b6:0c:50:3b:4d:6c:28:10:4e:
                    e4:73:a3:42:be:32:61:91:f2:a5:2e:16:f3:73:a0:
                    71:b6:82:18:78:d7:f7:36:48:e9:ed:13:b7:09:e1:
                    9b:b4:c6:9d:e2:b3:25:70:b4:40:0a:db:30:15:5d:
                    48:e6:7c:e4:69:bd:4e:60:32:84:2f:23:f1:62:af:
                    96:5c:41:f8:c5:c9:ec:79:f5:5d:de:e3:02:29:93:
                    14:d7:cc:0a:20:5a:1e:7e:8b:f7:13:84:90:8a:5a:
                    61:9e:14:30:61:0e:72:56:e3:f0:d1:46:8f:44:7c:
                    c5:53:f1:c4:a1:41:5a:72:87:07:90:e3:72:40:d2:
                    77:e9:8a:b0:89:52:26:95:d7:5e:d8:ca:6d:5b:15:
                    09:9f:f2:e9:ce:80:0c:3f:2d:0c:cc:fa:ee:19:55:
                    66:72:a9:fd:25:02:bf:f4:74:f9:8b:03:5f:d0:64:
                    5d:a7:88:50:b3:09:51:fa:0f:77:40:91:ce:6d:66:
                    01:00:cb:87:a5:33:55:2c:1f:bf:8e:7b:57:cd:39:
                    ed:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F9:44:F4:28:D9:FA:8B:4A:44:2A:E7:40:DB:B0:64:FE:C0:AA:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/3417a786-7b86-3a8b-b46d-8a3c31130d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.27.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:48:8c:07:52:5c:82:82:9c:1f:73:0f:cf:c5:93:37:13:bb:
         19:90:1b:5b:16:c5:9b:ec:77:f2:44:0e:77:62:8e:84:be:6d:
         5b:84:59:e9:2f:dc:95:72:32:22:4b:bb:aa:94:26:55:09:36:
         cf:fe:a2:2b:39:ff:a1:6c:3f:19:aa:05:e7:22:b9:4d:87:ea:
         16:ee:90:d2:55:18:03:91:1f:87:eb:34:3d:c6:c5:5b:60:eb:
         b7:85:21:ea:fd:95:de:1f:ca:44:41:81:24:9d:57:a3:2f:0c:
         54:c0:5a:ab:be:da:bc:81:b3:3e:cc:32:75:58:d0:dc:13:41:
         40:28:44:ba:f1:49:fe:a6:c7:dc:5e:b6:af:04:6e:21:a3:06:
         d5:a8:2b:1b:ec:d8:91:d6:3f:88:58:c0:31:1e:23:dd:37:de:
         b6:38:fa:73:b2:b8:e7:bc:87:40:c7:23:d7:8d:10:49:2a:b2:
         08:ba:d0:c2:09:01:2e:03:18:9d:c4:49:e0:3e:90:87:a1:ec:
         06:7b:4e:76:3f:ba:5b:cc:ef:2b:d5:26:25:cc:61:ea:21:82:
         99:b6:37:56:c7:2e:92:2f:b2:d2:42:27:2f:a8:74:eb:87:b4:
         e5:71:f4:a4:e0:83:51:04:d4:87:67:7b:dd:54:3a:d2:47:bf:
         44:c3:eb:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVwgwQhiOU7kTT1b+gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI0MDQwNTAxMDAyOFoXDTI0MDcwNDAxMDAyOFowLzEtMCsGA1UEAxMk
N2JkNDliNmQtYzFiOC00ZmQ1LTlhODQtMDc3YTBiMDA4OGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4HnmzOQpgta/JSzAOri4cIDqDcR31jfyz+h
+BeQqROHwIzdXLw0xDCdIbe80CrLqf62DFA7TWwoEE7kc6NCvjJhkfKlLhbzc6Bx
toIYeNf3Nkjp7RO3CeGbtMad4rMlcLRACtswFV1I5nzkab1OYDKELyPxYq+WXEH4
xcnsefVd3uMCKZMU18wKIFoefov3E4SQilphnhQwYQ5yVuPw0UaPRHzFU/HEoUFa
cocHkONyQNJ36YqwiVImldde2MptWxUJn/LpzoAMPy0MzPruGVVmcqn9JQK/9HT5
iwNf0GRdp4hQswlR+g93QJHObWYBAMuHpTNVLB+/jntXzTntPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF35RPQo2fqLSkQq50DbsGT+wKr1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvMzQxN2E3ODYtN2I4Ni0z
YThiLWI0NmQtOGEzYzMxMTMwZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARRvlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9IjAdSXIKCnB9zD8/FkzcTuxmQG1sWxZvsd/JEDndijoS+bVuEWekv
3JVyMiJLu6qUJlUJNs/+ois5/6FsPxmqBeciuU2H6hbukNJVGAORH4frND3GxVtg
67eFIer9ld4fykRBgSSdV6MvDFTAWqu+2ryBsz7MMnVY0NwTQUAoRLrxSf6mx9xe
tq8EbiGjBtWoKxvs2JHWP4hYwDEeI9033rY4+nOyuOe8h0DHI9eNEEkqsgi60MIJ
AS4DGJ3ESeA+kIeh7AZ7TnY/ulvM7yvVJiXMYeohgpm2N1bHLpIvstJCJy+odOuH
tOVx9KTgg1EE1Idne91UOtJHv0TD62M=
-----END CERTIFICATE-----
Generated at Tue May 7 07:04:40 2024 by rpki-client on console-fra.rpki-client.org