Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/565d44ec-bec4-3ec2-934f-75404fa3de9f.roa
File:                     565d44ec-bec4-3ec2-934f-75404fa3de9f.roa (raw, json)
Hash identifier:          5q77WXIJjZulolGe7r/siUJrsU26nivkb+odUKwIms0=
Subject key identifier:   2B:EF:AF:AE:02:65:A0:6A:E2:3E:8B:83:D1:0F:6C:CA:2D:D4:E9:92
Certificate issuer:       /CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6
Certificate serial:       010D0C9F43285848424ACDDE81B05EC9A5852300
Authority key identifier: A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/565d44ec-bec4-3ec2-934f-75404fa3de9f.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     3257
IP address blocks:        68.69.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:cd:de:81:b0:5e:c9:a5:85:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=8bc43070-44e1-4069-b8ff-2a3c6db9df5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5b:dc:1d:bb:ad:12:7f:3e:68:e6:fc:26:95:
                    59:0c:e2:e2:fc:23:d0:65:90:e6:cd:72:01:d4:77:
                    c7:b8:2d:29:90:28:6e:6a:ff:c3:8f:c4:99:70:7c:
                    bc:2a:0f:f4:11:3b:44:b6:70:d7:20:75:59:0f:46:
                    6d:55:18:f2:c4:d2:11:3a:c7:28:97:8a:26:9f:30:
                    f7:1b:1e:5d:a8:c7:74:54:93:ef:9c:4a:eb:86:74:
                    cd:e3:85:be:70:a3:e2:48:15:ed:31:db:02:cb:9e:
                    35:eb:24:fd:d2:04:6d:99:89:88:95:9c:b3:cb:1a:
                    7b:3f:be:c6:1c:4d:d5:8e:6d:03:6e:fb:80:93:64:
                    66:fb:bd:fd:e7:94:8a:4e:53:ae:a0:ac:56:27:b0:
                    99:11:cf:58:e3:80:f6:12:fe:e3:05:fa:24:9d:64:
                    9b:18:bb:a2:dc:86:e5:41:5a:d8:e3:a3:23:52:36:
                    99:44:07:aa:e8:14:90:da:58:44:e6:6e:61:ae:39:
                    10:9e:81:d8:e6:05:99:ac:38:c5:9f:53:73:bd:6c:
                    d3:83:47:9e:8f:89:34:bc:2f:23:bd:d4:17:f7:5a:
                    c2:62:51:6c:2a:c2:d7:39:49:d3:d7:11:24:41:19:
                    0b:ff:64:b1:d8:54:b0:3c:55:cf:ca:04:c5:ea:35:
                    2f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EF:AF:AE:02:65:A0:6A:E2:3E:8B:83:D1:0F:6C:CA:2D:D4:E9:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/565d44ec-bec4-3ec2-934f-75404fa3de9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl

            X509v3 Authority Key Identifier:
                keyid:A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:75:44:d9:52:11:cc:32:09:a0:3f:49:d3:46:e2:57:5f:b5:
         ec:c5:b4:2d:45:64:29:6d:da:fe:1c:ae:0a:84:4d:ff:e5:06:
         9c:fe:66:eb:4c:aa:a6:3f:23:a5:b5:5e:dd:78:b1:ec:74:42:
         5b:ea:bf:a0:95:f5:fd:2c:ce:ef:4c:af:c2:9d:1c:44:6e:53:
         65:f1:96:41:59:54:07:68:9f:f1:b1:a0:b9:30:fc:4b:fa:3a:
         8b:68:96:3c:7a:c6:d3:33:69:c4:62:d1:40:9c:70:a4:1b:84:
         4d:17:d5:64:19:aa:7b:47:f4:2f:f4:b7:33:98:a3:ee:e3:db:
         6d:6c:34:7a:12:9a:85:ab:fb:fe:88:0b:af:fc:84:08:9d:cb:
         b3:41:0c:4e:b6:09:b6:28:4a:43:21:6e:f0:d7:58:18:b7:6e:
         e3:24:a1:2a:98:32:26:0d:6c:6c:2d:ca:dd:0b:78:ab:04:78:
         9e:1f:02:06:3d:24:84:66:85:f8:5c:71:3f:23:51:00:ab:cb:
         c4:6d:5a:cd:73:a1:63:f4:fa:ba:66:c8:b3:4f:de:33:cd:88:
         35:4b:0a:35:11:78:cd:5d:3f:88:14:3b:c2:7f:0e:26:c7:57:
         4d:3f:36:0a:d7:c0:9f:05:75:58:02:76:83:c4:57:db:61:b1:
         22:70:98:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCSs3egbBeyaWFIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM1ZmY4YzMtZmFlNS00MDNmLWJlMDItMzgwNzJhZTJk
ZGM2MB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
OGJjNDMwNzAtNDRlMS00MDY5LWI4ZmYtMmEzYzZkYjlkZjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlvcHbutEn8+aOb8JpVZDOLi/CPQZZDmzXIB
1HfHuC0pkChuav/Dj8SZcHy8Kg/0ETtEtnDXIHVZD0ZtVRjyxNIROscol4omnzD3
Gx5dqMd0VJPvnErrhnTN44W+cKPiSBXtMdsCy5416yT90gRtmYmIlZyzyxp7P77G
HE3Vjm0DbvuAk2Rm+73955SKTlOuoKxWJ7CZEc9Y44D2Ev7jBfoknWSbGLui3Ibl
QVrY46MjUjaZRAeq6BSQ2lhE5m5hrjkQnoHY5gWZrDjFn1NzvWzTg0eej4k0vC8j
vdQX91rCYlFsKsLXOUnT1xEkQRkL/2Sx2FSwPFXPygTF6jUvXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvvr64CZaBq4j6Lg9EPbMot1OmSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYzVm
ZjhjMy1mYWU1LTQwM2YtYmUwMi0zODA3MmFlMmRkYzYvNTY1ZDQ0ZWMtYmVjNC0z
ZWMyLTkzNGYtNzU0MDRmYTNkZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGM1ZmY4YzMtZmFlNS00MDNmLWJl
MDItMzgwNzJhZTJkZGM2L2RjNWZmOGMzLWZhZTUtNDAzZi1iZTAyLTM4MDcyYWUy
ZGRjNi5jcmwwHwYDVR0jBBgwFoAUo+ykYmiJjakTFOimXaT52AJvdbowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kYzVmZjhjMy1mYWU1LTQwM2YtYmUwMi0zODA3
MmFlMmRkYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREW8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH91RNlSEcwyCaA/SdNG4ldftezFtC1FZClt2v4crgqETf/lBpz+ZutM
qqY/I6W1Xt14sex0Qlvqv6CV9f0szu9Mr8KdHERuU2XxlkFZVAdon/GxoLkw/Ev6
Ootoljx6xtMzacRi0UCccKQbhE0X1WQZqntH9C/0tzOYo+7j221sNHoSmoWr+/6I
C6/8hAidy7NBDE62CbYoSkMhbvDXWBi3buMkoSqYMiYNbGwtyt0LeKsEeJ4fAgY9
JIRmhfhccT8jUQCry8RtWs1zoWP0+rpmyLNP3jPNiDVLCjUReM1dP4gUO8J/DibH
V00/NgrXwJ8FdVgCdoPEV9thsSJwmAE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:18 2025 by rpki-client