Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/853571da-877d-32ba-9ac4-e9f21b486e5a.roa
File:                     853571da-877d-32ba-9ac4-e9f21b486e5a.roa (raw, json)
Hash identifier:          Cb0xqCPs0MLpfTJlu+am6zvewq5HjR+6KcGdkHO63U4=
Subject key identifier:   CA:35:45:7C:06:54:16:9B:69:A2:DF:1A:38:9D:C4:51:81:11:79:EB
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328583CC400B89FD9E7187C45AFA800
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/853571da-877d-32ba-9ac4-e9f21b486e5a.roa
Signing time:             Sun 30 Jan 2022 05:00:00 +0000
ROA not before:           Sun 30 Jan 2022 05:00:00 +0000
ROA not after:            Sun 23 Jan 2028 05:00:00 +0000
asID:                     19905
IP address blocks:        68.66.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:c4:00:b8:9f:d9:e7:18:7c:45:af:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jan 30 05:00:00 2022 GMT
            Not After : Jan 23 05:00:00 2028 GMT
        Subject: CN=18bdb0f6-16ef-4af4-b7b5-da713f295be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:42:15:da:66:15:25:3d:f0:a0:59:d0:6d:ec:
                    37:46:53:dd:b4:a5:64:b8:e8:d3:43:00:67:b4:b3:
                    70:e1:c6:c1:97:ca:de:91:32:37:ec:bf:0d:93:06:
                    33:4d:f6:e7:d0:53:5d:e8:0b:cb:50:47:cd:e0:c3:
                    5a:94:87:78:8e:03:ee:9d:c3:0b:0a:77:af:27:cd:
                    1b:e7:53:97:55:67:ff:9f:9a:56:d9:cd:5b:cf:1e:
                    d2:87:8b:17:c1:a0:44:9b:84:74:78:98:c6:fa:c3:
                    ac:3f:42:4d:20:bb:ae:38:02:f7:55:90:43:96:73:
                    27:f4:1d:e5:da:c1:f0:59:dd:2f:db:1d:74:9e:ee:
                    f0:fa:39:7b:84:11:7a:eb:bd:61:39:32:5c:b7:db:
                    8f:13:d0:6b:0f:ba:35:7b:19:c6:05:42:48:4f:02:
                    af:68:e0:2f:a0:dd:ed:3d:d8:02:25:d0:f6:ef:61:
                    e7:3d:8a:04:8d:1d:b1:18:e7:00:c6:22:2d:8c:15:
                    79:c1:1c:4e:44:ab:cb:6d:ae:08:3b:cc:03:3b:d3:
                    db:3d:91:51:cf:df:ae:d3:98:21:44:94:c4:a4:6f:
                    40:be:12:56:31:f1:91:89:17:6e:46:9b:fe:27:ae:
                    8e:d8:ca:6d:12:b9:3a:96:0f:53:84:e0:54:92:2b:
                    75:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:35:45:7C:06:54:16:9B:69:A2:DF:1A:38:9D:C4:51:81:11:79:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/853571da-877d-32ba-9ac4-e9f21b486e5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:75:ed:42:38:62:29:ba:cf:7a:0c:37:32:d3:32:51:c0:9d:
         73:49:dc:f0:48:fb:4b:2e:90:75:cf:75:ad:3f:83:84:f5:b3:
         23:81:75:a1:a1:32:2c:f6:a4:1a:f3:3e:60:35:50:d8:9e:1b:
         f9:ff:30:21:b2:1d:d0:ef:22:5c:e2:e0:bd:51:e9:c1:32:95:
         d3:27:c6:0f:1e:53:02:20:28:e9:7c:7f:aa:8c:5c:88:77:7c:
         89:73:82:6c:b7:89:2b:c6:13:15:0c:f6:df:dc:ec:2d:a1:1a:
         ae:ef:d2:3a:ce:a8:84:9c:bb:5d:56:83:30:88:e0:3d:19:b2:
         ed:2a:77:71:fd:ee:d7:5d:17:75:8b:6f:68:ac:8a:2d:73:a4:
         f7:a2:65:ba:26:ba:80:8e:9f:0f:20:5a:51:05:30:c7:9c:9e:
         19:8c:f3:d6:c5:a3:3f:91:18:f5:5d:f6:e5:7d:d2:80:b4:db:
         d5:97:38:7d:77:bd:b9:ce:d1:8d:93:cf:39:bb:6c:69:40:80:
         7e:7d:61:d8:89:00:cd:9d:c8:99:c8:1b:09:1f:63:d5:02:fe:
         95:95:08:96:21:15:fa:31:42:a9:29:70:75:fd:29:74:40:5d:
         13:7d:81:a3:59:99:b6:bf:36:10:71:c0:29:ae:1b:d9:e0:33:
         56:54:db:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDzEALif2ecYfEWvqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTIyMDEzMDA1MDAwMFoXDTI4MDEyMzA1MDAwMFowLzEtMCsGA1UEAxMk
MThiZGIwZjYtMTZlZi00YWY0LWI3YjUtZGE3MTNmMjk1YmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkIV2mYVJT3woFnQbew3RlPdtKVkuOjTQwBn
tLNw4cbBl8rekTI37L8NkwYzTfbn0FNd6AvLUEfN4MNalId4jgPuncMLCnevJ80b
51OXVWf/n5pW2c1bzx7Sh4sXwaBEm4R0eJjG+sOsP0JNILuuOAL3VZBDlnMn9B3l
2sHwWd0v2x10nu7w+jl7hBF6671hOTJct9uPE9BrD7o1exnGBUJITwKvaOAvoN3t
PdgCJdD272HnPYoEjR2xGOcAxiItjBV5wRxORKvLba4IO8wDO9PbPZFRz9+u05gh
RJTEpG9AvhJWMfGRiRduRpv+J66O2MptErk6lg9ThOBUkit1GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMo1RXwGVBabaaLfGjidxFGBEXnrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvODUzNTcxZGEtODc3ZC0z
MmJhLTlhYzQtZTlmMjFiNDg2ZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERELAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJZ17UI4Yim6z3oMNzLTMlHAnXNJ3PBI+0sukHXPda0/g4T1syOBdaGh
Miz2pBrzPmA1UNieG/n/MCGyHdDvIlzi4L1R6cEyldMnxg8eUwIgKOl8f6qMXIh3
fIlzgmy3iSvGExUM9t/c7C2hGq7v0jrOqIScu11WgzCI4D0Zsu0qd3H97tddF3WL
b2isii1zpPeiZbomuoCOnw8gWlEFMMecnhmM89bFoz+RGPVd9uV90oC029WXOH13
vbnO0Y2Tzzm7bGlAgH59YdiJAM2dyJnIGwkfY9UC/pWVCJYhFfoxQqkpcHX9KXRA
XRN9gaNZmba/NhBxwCmuG9ngM1ZU250=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:00 2024 by rpki-client on console-ams.rpki-client.org