Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/4b101789-80f2-392a-9f76-3a1bf4f4dc1e.roa
File:                     4b101789-80f2-392a-9f76-3a1bf4f4dc1e.roa (raw, json)
Hash identifier:          kjXBN6L0Zp1PyKST2PZcDJJSkdnpTz8KVp/0yJWRFNA=
Subject key identifier:   02:5E:95:B6:0A:A5:11:B9:6A:4B:AC:2F:51:F4:16:BE:27:BA:64:4C
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F43285845840DC8767EACA2CFF8070B00
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/4b101789-80f2-392a-9f76-3a1bf4f4dc1e.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     11269
IP address blocks:        69.17.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:c8:76:7e:ac:a2:cf:f8:07:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=644289cf-4395-46f9-93d6-eba78de81356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b6:7c:ea:43:59:7d:79:b8:c6:f9:2a:25:07:
                    1b:d6:4c:2e:e6:58:53:e7:06:8e:c3:51:54:61:15:
                    5c:e8:26:ab:31:c9:58:90:b8:30:ef:d3:e0:d7:ce:
                    a2:9e:18:76:9f:83:d0:ba:74:ab:9e:7d:26:4f:0d:
                    25:0d:db:31:6c:22:7b:08:c0:5e:5b:c4:31:1a:02:
                    af:34:3a:14:1c:c2:a7:ef:e7:41:4d:41:05:6d:a0:
                    17:d3:80:78:a8:91:61:7f:d2:98:b8:c3:9e:13:2e:
                    83:03:c2:c2:01:ec:01:a0:5f:9f:3a:ae:48:b4:df:
                    a5:98:3b:53:e6:bf:40:9d:7e:b5:e3:d9:39:9c:b6:
                    19:f4:cb:d5:79:37:7a:e6:1a:31:ce:1f:ec:45:e0:
                    61:17:95:5a:5a:7d:73:cf:73:ff:a4:e3:cd:af:f0:
                    a4:c2:2b:19:89:4a:a3:49:19:cc:20:72:f3:31:26:
                    c8:b7:74:38:83:b3:dc:2d:e3:75:f5:1d:4e:bd:4d:
                    4d:81:7c:61:60:46:1d:9c:cb:ba:7e:fb:5c:33:71:
                    bf:a4:1d:31:35:42:d9:02:ee:4a:e9:34:58:83:10:
                    bb:c1:de:90:e1:0d:29:35:1e:57:3d:85:c7:21:07:
                    b3:bc:83:eb:84:30:1d:3d:30:db:2b:3c:b1:c6:8a:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5E:95:B6:0A:A5:11:B9:6A:4B:AC:2F:51:F4:16:BE:27:BA:64:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/4b101789-80f2-392a-9f76-3a1bf4f4dc1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:8f:8f:b4:89:e2:eb:6c:fd:26:f9:65:be:4e:2f:f4:3e:6a:
         64:dc:0a:2b:04:e9:ce:07:21:a3:49:c1:88:9d:68:81:fb:f2:
         b2:ef:46:80:bb:ee:a2:5f:c5:6a:cd:33:cf:84:e7:3e:78:13:
         4e:47:94:6b:76:88:27:0b:ca:be:9c:91:43:37:be:0f:a1:67:
         7e:df:90:7f:52:3d:7a:88:de:e3:02:ba:71:58:08:9a:e4:9d:
         bb:91:0f:12:ec:7c:71:31:1f:d0:96:49:81:95:e0:e2:7f:ca:
         d0:48:93:fc:e0:16:17:45:82:20:bd:b0:19:55:22:c2:ef:ba:
         2e:10:4a:28:48:1c:11:18:3c:16:75:3b:cb:91:26:1a:fc:4e:
         60:0a:d6:6b:e2:bb:62:d9:e7:07:27:af:ce:80:e2:7e:8b:0c:
         d5:c6:25:cb:1a:74:ec:1a:3b:39:40:ca:0f:d4:00:bf:64:c1:
         54:ba:6f:ab:92:33:30:50:f8:95:6d:a3:97:ad:32:00:3b:88:
         40:c4:e0:77:be:43:c9:57:36:81:e1:7f:3a:6a:89:98:ac:20:
         97:f1:2c:d3:72:af:7d:69:fc:e4:55:fb:74:63:3f:cc:c1:8b:
         bb:ea:0f:40:c1:f4:a5:71:f9:1f:93:9d:ef:80:40:4c:a4:a3:
         79:27:4e:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWEDch2fqyiz/gHCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg2MjRjYmItYmExOS00N2E2LWI1YWMtZDA3NDcxNDk3
MTRjMB4XDTI0MDQxMjAxMDAyNloXDTI0MDcxMTAxMDAyNlowLzEtMCsGA1UEAxMk
NjQ0Mjg5Y2YtNDM5NS00NmY5LTkzZDYtZWJhNzhkZTgxMzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorZ86kNZfXm4xvkqJQcb1kwu5lhT5waOw1FU
YRVc6CarMclYkLgw79Pg186inhh2n4PQunSrnn0mTw0lDdsxbCJ7CMBeW8QxGgKv
NDoUHMKn7+dBTUEFbaAX04B4qJFhf9KYuMOeEy6DA8LCAewBoF+fOq5ItN+lmDtT
5r9AnX6149k5nLYZ9MvVeTd65hoxzh/sReBhF5VaWn1zz3P/pOPNr/CkwisZiUqj
SRnMIHLzMSbIt3Q4g7PcLeN19R1OvU1NgXxhYEYdnMu6fvtcM3G/pB0xNULZAu5K
6TRYgxC7wd6Q4Q0pNR5XPYXHIQezvIPrhDAdPTDbKzyxxopkTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAJelbYKpRG5akusL1H0Fr4numRMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODYy
NGNiYi1iYTE5LTQ3YTYtYjVhYy1kMDc0NzE0OTcxNGMvNGIxMDE3ODktODBmMi0z
OTJhLTlmNzYtM2ExYmY0ZjRkYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2MjRjYmItYmExOS00N2E2LWI1
YWMtZDA3NDcxNDk3MTRjL2I4NjI0Y2JiLWJhMTktNDdhNi1iNWFjLWQwNzQ3MTQ5
NzE0Yy5jcmwwHwYDVR0jBBgwFoAUcWpaIe5mK5wQZ/DiOAd4yxKMjKcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iODYyNGNiYi1iYTE5LTQ3YTYtYjVhYy1kMDc0
NzE0OTcxNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARRHeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWPj7SJ4uts/Sb5Zb5OL/Q+amTcCisE6c4HIaNJwYidaIH78rLvRoC7
7qJfxWrNM8+E5z54E05HlGt2iCcLyr6ckUM3vg+hZ37fkH9SPXqI3uMCunFYCJrk
nbuRDxLsfHExH9CWSYGV4OJ/ytBIk/zgFhdFgiC9sBlVIsLvui4QSihIHBEYPBZ1
O8uRJhr8TmAK1mviu2LZ5wcnr86A4n6LDNXGJcsadOwaOzlAyg/UAL9kwVS6b6uS
MzBQ+JVto5etMgA7iEDE4He+Q8lXNoHhfzpqiZisIJfxLNNyr31p/ORV+3RjP8zB
i7vqD0DB9KVx+R+Tne+AQEyko3knTps=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:35 2024 by rpki-client on console-ams.rpki-client.org