Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/699b8c0d-b668-3aa7-93f5-0b36e116f993.roa
File:                     699b8c0d-b668-3aa7-93f5-0b36e116f993.roa (raw, json)
Hash identifier:          /+BvI0Y07cnX70yPsqt0450i0aL2wAwkqJ/ThO/TxKs=
Subject key identifier:   16:BF:3A:BE:C1:0E:D1:C7:A7:8C:6D:EC:E7:34:41:69:CE:87:DC:45
Certificate issuer:       /CN=3b0b4e45-c916-48be-ae0d-b57b80a30cdc
Certificate serial:       010D0C9F432858457A48728F4FE488095B5BFC20
Authority key identifier: CD:F0:0E:4B:F1:FB:B5:39:ED:3F:7A:94:3C:D7:4A:2B:C2:0E:F7:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/699b8c0d-b668-3aa7-93f5-0b36e116f993.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     399612
IP address blocks:        68.68.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:72:8f:4f:e4:88:09:5b:5b:fc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0b4e45-c916-48be-ae0d-b57b80a30cdc
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=998e8896-cb53-496f-bfe0-b2ac138cae70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:39:16:59:9f:a2:c2:29:b1:78:b6:9e:41:99:
                    4d:1a:f8:f1:a6:89:81:34:51:07:b8:dc:e3:04:0a:
                    97:bd:8c:3f:92:24:0f:9a:27:6b:20:2f:51:f5:7e:
                    48:f3:1c:26:be:47:5d:42:85:59:81:78:0a:c7:89:
                    58:c4:20:94:02:c4:2f:55:59:84:77:a8:02:cb:45:
                    d5:df:7e:63:0c:17:88:36:ca:b5:1d:f8:6d:bf:20:
                    8e:29:b6:a6:7d:3f:17:63:0e:ce:79:ce:f3:4f:42:
                    46:6d:3e:54:fd:c2:45:73:9d:89:eb:9f:02:d7:b8:
                    7c:9c:40:16:a4:5e:7e:47:33:56:c2:da:02:51:c9:
                    57:3d:d5:cb:b6:ec:58:01:0d:a0:64:11:41:18:2e:
                    cb:79:2d:ca:f9:8c:ad:ec:b8:e3:b3:f3:35:83:c6:
                    ac:2e:96:e8:de:e4:00:0d:b0:1c:f7:2f:2b:ae:bb:
                    30:b1:ef:64:87:1d:8c:b0:c5:b3:68:ab:d7:29:77:
                    78:23:bc:f5:a3:38:cd:fc:6a:4d:bb:83:5f:7e:ed:
                    58:aa:27:5b:c0:eb:e0:e5:ec:64:b6:43:37:be:42:
                    47:21:ef:0a:61:20:5b:39:9a:fc:57:c4:ec:c8:75:
                    0c:40:b8:53:91:b4:f1:02:0c:fe:b8:8f:81:03:89:
                    5e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BF:3A:BE:C1:0E:D1:C7:A7:8C:6D:EC:E7:34:41:69:CE:87:DC:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/699b8c0d-b668-3aa7-93f5-0b36e116f993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.crl

            X509v3 Authority Key Identifier:
                keyid:CD:F0:0E:4B:F1:FB:B5:39:ED:3F:7A:94:3C:D7:4A:2B:C2:0E:F7:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:28:03:84:5f:14:2c:d3:e7:05:b0:66:41:19:74:14:73:5d:
         b2:e4:d3:54:13:bf:e5:d0:1b:27:52:bc:c0:bd:02:05:76:02:
         b7:5e:97:07:00:b5:36:c7:96:6e:79:ce:d5:2c:4c:ea:9f:94:
         f6:1c:e8:5b:54:7d:53:59:bd:dc:47:02:d2:93:58:14:d6:01:
         9a:85:f9:fb:c5:f6:07:30:50:22:23:71:67:68:72:aa:ee:64:
         fe:87:65:6e:49:d9:25:3d:85:f8:60:1f:10:02:5d:48:6f:69:
         5f:f3:d6:d9:88:7f:5d:64:c7:35:ef:b1:67:33:0a:b2:cf:b1:
         fe:23:ba:6c:93:97:d4:70:78:78:c2:76:c8:be:2c:03:a4:58:
         2a:b0:54:21:ce:1b:ef:af:21:d9:ae:50:21:b2:08:f0:5b:56:
         14:61:db:46:ee:70:8f:b9:3f:9e:87:cf:a8:dd:bb:3b:f0:c8:
         14:ab:df:bc:fd:4d:0b:7a:05:6d:bf:ef:ce:62:4e:64:76:0d:
         d2:c9:76:8e:e4:d0:73:4e:2e:f4:5d:ab:a5:b2:a0:b4:43:58:
         d3:98:6b:2b:f9:23:b6:f3:72:ea:82:ba:e9:e8:67:de:5c:85:
         82:6d:44:b9:e3:a4:19:31:17:2f:c2:51:da:ea:bf:e5:56:cf:
         d3:4c:f1:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV6SHKPT+SICVtb/CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2IwYjRlNDUtYzkxNi00OGJlLWFlMGQtYjU3YjgwYTMw
Y2RjMB4XDTI0MDQwODEzMDAzNFoXDTI0MDcwNzEzMDAzNFowLzEtMCsGA1UEAxMk
OTk4ZTg4OTYtY2I1My00OTZmLWJmZTAtYjJhYzEzOGNhZTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTkWWZ+iwimxeLaeQZlNGvjxpomBNFEHuNzj
BAqXvYw/kiQPmidrIC9R9X5I8xwmvkddQoVZgXgKx4lYxCCUAsQvVVmEd6gCy0XV
335jDBeINsq1HfhtvyCOKbamfT8XYw7Oec7zT0JGbT5U/cJFc52J658C17h8nEAW
pF5+RzNWwtoCUclXPdXLtuxYAQ2gZBFBGC7LeS3K+Yyt7Ljjs/M1g8asLpbo3uQA
DbAc9y8rrrswse9khx2MsMWzaKvXKXd4I7z1ozjN/GpNu4Nffu1YqidbwOvg5exk
tkM3vkJHIe8KYSBbOZr8V8TsyHUMQLhTkbTxAgz+uI+BA4leXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBa/Or7BDtHHp4xt7Oc0QWnOh9xFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYjBi
NGU0NS1jOTE2LTQ4YmUtYWUwZC1iNTdiODBhMzBjZGMvNjk5YjhjMGQtYjY2OC0z
YWE3LTkzZjUtMGIzNmUxMTZmOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2IwYjRlNDUtYzkxNi00OGJlLWFl
MGQtYjU3YjgwYTMwY2RjLzNiMGI0ZTQ1LWM5MTYtNDhiZS1hZTBkLWI1N2I4MGEz
MGNkYy5jcmwwHwYDVR0jBBgwFoAUzfAOS/H7tTntP3qUPNdKK8IO9xYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zYjBiNGU0NS1jOTE2LTQ4YmUtYWUwZC1iNTdi
ODBhMzBjZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARETdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFkoA4RfFCzT5wWwZkEZdBRzXbLk01QTv+XQGydSvMC9AgV2ArdelwcA
tTbHlm55ztUsTOqflPYc6FtUfVNZvdxHAtKTWBTWAZqF+fvF9gcwUCIjcWdocqru
ZP6HZW5J2SU9hfhgHxACXUhvaV/z1tmIf11kxzXvsWczCrLPsf4jumyTl9RweHjC
dsi+LAOkWCqwVCHOG++vIdmuUCGyCPBbVhRh20bucI+5P56Hz6jduzvwyBSr37z9
TQt6BW2/785iTmR2DdLJdo7k0HNOLvRdq6WyoLRDWNOYayv5I7bzcuqCuunoZ95c
hYJtRLnjpBkxFy/CUdrqv+VWz9NM8bY=
-----END CERTIFICATE-----
Generated at Tue Apr 16 01:34:22 2024 by rpki-client on console-ams.rpki-client.org