Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aaaac3ee-1605-31c1-81a4-003c07299c97.roa
File:                     aaaac3ee-1605-31c1-81a4-003c07299c97.roa (raw, json)
Hash identifier:          3ERAgxh+dn5AKqh8qkZwGFnKHRqmDh2MtievNGN7H7U=
Subject key identifier:   15:5A:4A:54:72:30:BD:4B:07:EE:35:C7:28:94:B1:29:7F:3F:4C:2E
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285847EBBF7DC52DAAFF29305FAA80
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aaaac3ee-1605-31c1-81a4-003c07299c97.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     55293
IP address blocks:        68.66.208.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:7d:c5:2d:aa:ff:29:30:5f:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=56799643-1110-44fc-bbcb-8fc129bd8d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b4:90:12:e7:82:6f:cb:70:a7:f4:b0:87:69:
                    1c:cb:25:7a:92:1c:89:ac:48:55:b6:f1:7d:02:d5:
                    5b:bc:14:fc:a5:d0:73:7c:53:8a:4c:8b:64:ac:e4:
                    9b:89:4b:24:4e:39:55:97:a4:b6:29:b1:4f:89:0a:
                    3e:ef:17:de:86:f6:be:86:2a:f1:4b:3e:20:89:39:
                    28:63:18:39:5d:bf:11:4f:ac:02:54:c6:87:5e:44:
                    64:7f:b3:f4:7d:b7:0c:b6:56:bb:53:f9:d8:41:bd:
                    03:4f:4e:5d:96:87:11:f0:ae:10:da:89:18:f9:b1:
                    1d:14:8f:1c:81:52:f1:d4:3c:1e:44:6e:26:f9:0c:
                    e1:e0:f5:1f:ce:80:04:b7:cb:1d:8f:4b:66:d6:5c:
                    c1:5c:2f:74:d0:a1:06:95:09:05:35:18:05:07:41:
                    6e:2b:eb:a1:26:10:ed:92:5b:72:2e:ac:76:1d:fb:
                    fa:9e:a2:cb:4c:05:c8:47:37:63:dc:55:b8:1c:a2:
                    86:18:17:8c:33:2f:2e:e6:20:63:b2:be:c6:51:9c:
                    31:bf:4b:1e:33:9e:f3:70:db:1e:b4:07:e8:b8:5a:
                    a7:8e:2a:68:9e:6b:3b:16:2b:bc:c9:c5:ea:53:39:
                    66:fd:8b:7c:8f:14:1a:a4:53:4b:21:18:61:d6:0b:
                    c6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5A:4A:54:72:30:BD:4B:07:EE:35:C7:28:94:B1:29:7F:3F:4C:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aaaac3ee-1605-31c1-81a4-003c07299c97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a3:db:1a:f5:41:39:43:a0:dc:43:2a:34:93:05:6c:8d:ff:
         64:cc:89:b8:f0:63:a6:64:35:f1:a8:8f:53:92:df:51:1f:13:
         3c:44:97:25:0d:4e:8e:c6:34:11:05:6d:e3:92:3b:e3:00:41:
         07:9d:67:07:26:28:4b:e5:4b:be:32:02:45:a0:45:8d:3d:26:
         a5:0e:e5:6a:22:1e:0d:77:78:89:0f:0b:fd:11:bb:90:42:27:
         ef:bc:c0:1f:f6:b6:bd:7b:20:80:d5:20:dc:b2:f3:06:60:bd:
         ce:70:1f:b5:f6:26:44:63:3a:c6:15:61:1a:77:27:3a:75:8e:
         3a:7c:29:23:3f:c2:44:cc:d7:94:34:fd:9f:f5:58:19:84:fc:
         5b:6d:dc:5a:c7:0e:e1:8f:ba:b9:0a:65:8b:11:39:66:b9:44:
         33:5b:06:15:f8:3b:8c:a2:36:fd:0e:6f:8a:73:c1:43:d1:46:
         88:0a:c7:24:9d:49:68:e1:fe:33:b4:fe:4b:38:45:c7:74:a6:
         4b:c2:30:97:c2:ac:84:0d:1d:0b:e0:f9:e8:99:be:dc:1f:e9:
         4e:6b:73:c0:c9:55:04:d0:57:3b:c1:ed:22:b0:21:47:e4:1c:
         5a:ff:72:7a:8e:57:e9:b7:ed:e5:52:ed:81:41:3f:da:25:2c:
         83:9e:68:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrv33FLar/KTBfqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTI0MTExODE0MDA0MFoXDTI1MDIxNjE0MDA0MFowLzEtMCsGA1UEAxMk
NTY3OTk2NDMtMTExMC00NGZjLWJiY2ItOGZjMTI5YmQ4ZDQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrSQEueCb8twp/Swh2kcyyV6khyJrEhVtvF9
AtVbvBT8pdBzfFOKTItkrOSbiUskTjlVl6S2KbFPiQo+7xfehva+hirxSz4giTko
Yxg5Xb8RT6wCVMaHXkRkf7P0fbcMtla7U/nYQb0DT05dlocR8K4Q2okY+bEdFI8c
gVLx1DweRG4m+Qzh4PUfzoAEt8sdj0tm1lzBXC900KEGlQkFNRgFB0FuK+uhJhDt
kltyLqx2Hfv6nqLLTAXIRzdj3FW4HKKGGBeMMy8u5iBjsr7GUZwxv0seM57zcNse
tAfouFqnjiponms7Fiu8ycXqUzlm/Yt8jxQapFNLIRhh1gvG3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBVaSlRyML1LB+41xyiUsSl/P0wuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvYWFhYWMzZWUtMTYwNS0z
MWMxLTgxYTQtMDAzYzA3Mjk5Yzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRELQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmj2xr1QTlDoNxDKjSTBWyN/2TMibjwY6ZkNfGoj1OS31EfEzxElyUN
To7GNBEFbeOSO+MAQQedZwcmKEvlS74yAkWgRY09JqUO5WoiHg13eIkPC/0Ru5BC
J++8wB/2tr17IIDVINyy8wZgvc5wH7X2JkRjOsYVYRp3Jzp1jjp8KSM/wkTM15Q0
/Z/1WBmE/Ftt3FrHDuGPurkKZYsROWa5RDNbBhX4O4yiNv0Ob4pzwUPRRogKxySd
SWjh/jO0/ks4Rcd0pkvCMJfCrIQNHQvg+eiZvtwf6U5rc8DJVQTQVzvB7SKwIUfk
HFr/cnqOV+m37eVS7YFBP9olLIOeaPg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:52 2024 by rpki-client on console-fra.rpki-client.org