Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/3750f6f6-4326-3661-8ce8-211ce13d34e3.roa
File:                     3750f6f6-4326-3661-8ce8-211ce13d34e3.roa (raw, json)
Hash identifier:          IY+wBow+3tknSDYW60w4ASSnFTBfWzW4FZhmaXfO8aw=
Subject key identifier:   22:48:45:B3:56:EC:13:BC:2D:B8:CB:E7:D8:CA:A7:03:33:A3:BE:58
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F43285847A30BED7BFB545E69355ED800
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/3750f6f6-4326-3661-8ce8-211ce13d34e3.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     11260
IP address blocks:        142.67.162.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:ed:7b:fb:54:5e:69:35:5e:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=6a43c638-e3e8-4619-a93f-e33b70fea6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:13:66:2e:a7:9b:a2:36:a3:f6:0d:82:91:
                    7b:6a:23:ea:ed:f1:41:91:c8:03:6d:8e:6b:4a:df:
                    43:a6:2d:76:c7:cd:da:34:16:e8:22:18:7f:1a:e4:
                    ec:77:57:a2:b3:4c:11:75:38:5f:ff:b6:83:56:c4:
                    19:0c:98:57:15:b7:ff:21:e9:bc:f9:11:fc:03:b8:
                    03:b4:98:c2:0c:20:b2:6c:a8:1f:7c:bc:a4:f1:69:
                    e3:7b:9a:3d:e2:e7:0d:4b:1a:4d:b8:0d:14:1e:55:
                    ee:60:80:83:7c:ab:52:a8:74:39:07:87:85:08:5b:
                    0e:75:91:7c:b3:ff:32:8f:1e:f5:5c:bd:3c:f5:68:
                    64:9e:35:5b:b3:23:59:ab:d1:82:c9:0a:5e:c7:0c:
                    5f:6b:ef:d9:2c:3d:95:9c:83:93:8c:eb:39:f5:1f:
                    e0:9c:27:d1:ea:4f:b2:df:39:ad:27:55:7d:01:74:
                    93:0a:7c:6f:47:14:88:0e:81:38:80:40:66:b8:a6:
                    88:b9:e9:f3:5d:90:5e:b7:f5:57:ac:ac:47:24:57:
                    f7:ef:0a:db:2b:38:88:82:ed:17:8d:28:d7:03:76:
                    bf:c4:ea:10:94:16:d8:68:45:94:04:e4:13:22:8f:
                    ed:a2:6d:fe:42:c8:9a:2d:f6:58:4a:72:d6:ce:4e:
                    1f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:48:45:B3:56:EC:13:BC:2D:B8:CB:E7:D8:CA:A7:03:33:A3:BE:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/3750f6f6-4326-3661-8ce8-211ce13d34e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.67.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:4d:88:d7:8f:78:72:b7:1b:bd:3c:d0:fa:07:c5:e7:31:43:
         ce:2e:ee:d3:77:0f:88:a5:37:67:a2:d0:05:57:27:fe:ae:1f:
         7d:1a:2c:d3:1c:83:f5:16:e4:44:ca:6f:3e:92:b2:c4:db:6e:
         8e:26:ec:8e:6f:8f:8f:4e:d6:1b:bd:af:f7:9f:96:29:80:df:
         4e:cc:d5:64:53:19:99:9d:a6:34:f1:40:b9:f6:02:d2:c7:0e:
         c4:a5:d1:13:28:83:ec:f6:7c:d6:ee:0b:3e:d0:f6:25:f4:47:
         f9:6d:3e:d8:0e:66:e3:af:3f:e7:c5:9f:81:48:71:f3:f1:9d:
         fa:41:9a:e0:f2:d2:d1:60:34:3d:38:2a:21:dc:90:6c:de:1f:
         ca:f1:38:4e:78:2c:63:bd:c9:96:ab:10:eb:8b:0f:94:ad:ca:
         35:81:9f:ea:e4:79:5e:cd:61:fe:d3:1a:22:28:a9:1b:d0:96:
         a6:5d:78:31:79:99:cc:14:6a:ae:f6:0f:5d:b2:a9:1e:7c:66:
         52:24:a5:5f:89:51:50:dd:23:25:34:64:2e:30:08:57:bd:8a:
         52:1e:3e:35:99:21:e8:28:03:0d:a9:cc:0d:15:ff:39:6a:2e:
         04:ea:c9:4f:08:a2:97:be:53:c1:6b:2d:40:c9:ca:0d:02:ac:
         32:55:2a:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejC+17+1ReaTVe2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4
OTViMB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk
NmE0M2M2MzgtZTNlOC00NjE5LWE5M2YtZTMzYjcwZmVhNmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaYTZi6nm6I2o/YNgpF7aiPq7fFBkcgDbY5r
St9Dpi12x83aNBboIhh/GuTsd1eis0wRdThf/7aDVsQZDJhXFbf/Iem8+RH8A7gD
tJjCDCCybKgffLyk8Wnje5o94ucNSxpNuA0UHlXuYICDfKtSqHQ5B4eFCFsOdZF8
s/8yjx71XL089WhknjVbsyNZq9GCyQpexwxfa+/ZLD2VnIOTjOs59R/gnCfR6k+y
3zmtJ1V9AXSTCnxvRxSIDoE4gEBmuKaIuenzXZBet/VXrKxHJFf37wrbKziIgu0X
jSjXA3a/xOoQlBbYaEWUBOQTIo/tom3+QsiaLfZYSnLWzk4fowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCJIRbNW7BO8LbjL59jKpwMzo75YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4
MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvMzc1MGY2ZjYtNDMyNi0z
NjYxLThjZTgtMjExY2UxM2QzNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi
NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh
ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy
M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjkOiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNNiNePeHK3G7080PoHxecxQ84u7tN3D4ilN2ei0AVXJ/6uH30aLNMc
g/UW5ETKbz6SssTbbo4m7I5vj49O1hu9r/eflimA307M1WRTGZmdpjTxQLn2AtLH
DsSl0RMog+z2fNbuCz7Q9iX0R/ltPtgOZuOvP+fFn4FIcfPxnfpBmuDy0tFgND04
KiHckGzeH8rxOE54LGO9yZarEOuLD5StyjWBn+rkeV7NYf7TGiIoqRvQlqZdeDF5
mcwUaq72D12yqR58ZlIkpV+JUVDdIyU0ZC4wCFe9ilIePjWZIegoAw2pzA0V/zlq
LgTqyU8Iope+U8FrLUDJyg0CrDJVKn8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:39 2024 by rpki-client on console-fra.rpki-client.org