Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/dc428267-e526-3e81-a048-b8c3dae27046.roa
File:                     dc428267-e526-3e81-a048-b8c3dae27046.roa (raw, json)
Hash identifier:          RWBJQmMfAUxk4G4kWrzO75P/mZiJipUe+5W1j8C3Ztc=
Subject key identifier:   23:00:8E:7A:03:6C:7F:03:5C:01:FD:88:12:76:3E:CE:D2:8C:D5:A6
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F43285847362B4F6ED79C800E8F2C2480
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/dc428267-e526-3e81-a048-b8c3dae27046.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     394074
IP address blocks:        69.55.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:4f:6e:d7:9c:80:0e:8f:2c:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=b0f9c329-509b-4da3-8740-db0f9521bd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8b:61:43:0a:cd:eb:6c:f1:8b:52:05:17:04:
                    e1:ba:eb:10:ee:2c:ed:52:31:9e:bd:21:b4:64:1f:
                    30:5c:4f:0e:1c:0e:94:b2:93:ea:c9:71:cb:a4:d0:
                    5b:3e:af:e0:2a:07:6d:6e:df:6a:49:f2:bb:86:88:
                    82:c7:13:e2:52:5e:4e:fd:77:4b:99:30:a0:a8:1d:
                    8a:b0:e1:5e:29:d8:1f:78:35:be:78:00:31:0c:c1:
                    c6:b0:c7:38:76:ff:4b:98:a0:24:e9:ff:ff:4f:d3:
                    ab:ee:fa:7c:21:b7:7a:06:a2:db:04:4c:55:e1:e8:
                    e2:2e:cf:2f:43:a1:a0:e5:b7:9f:c2:94:da:90:ef:
                    a2:c1:1b:a3:6e:40:e2:0d:82:ed:1d:9a:a8:a8:e5:
                    43:7f:44:98:6d:9d:5f:10:79:c2:9b:92:94:82:27:
                    cc:5b:ff:68:4f:13:9a:fd:d4:0f:02:63:ae:9d:14:
                    9a:1c:ea:bf:b1:d6:b8:7c:33:ad:80:10:eb:0d:4a:
                    40:77:4d:bc:a1:8c:d0:c8:17:89:9f:1a:72:e9:d3:
                    29:ae:5a:a9:5d:96:85:70:6e:54:a5:4d:8c:e1:f6:
                    9d:b6:a6:4f:5e:85:cf:54:96:10:4d:3e:06:ee:fb:
                    98:03:13:6d:43:aa:98:9c:d4:89:2d:6d:a8:04:b3:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:00:8E:7A:03:6C:7F:03:5C:01:FD:88:12:76:3E:CE:D2:8C:D5:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/dc428267-e526-3e81-a048-b8c3dae27046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.55.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ca:29:e0:4e:3c:6a:d1:3a:4d:5e:7f:66:a0:61:96:88:70:
         7f:b8:92:76:b8:f2:1d:7a:95:f6:32:17:cc:df:94:0f:12:ec:
         b0:64:c6:4e:ea:bb:ae:7c:5c:bd:85:20:87:81:4c:0c:bc:58:
         f4:8c:8a:8d:39:2b:cc:73:0c:fb:e5:9f:43:78:78:55:98:57:
         23:31:31:70:44:3c:b5:11:7b:33:6b:97:22:93:89:cc:8e:16:
         2e:24:d8:28:ee:e1:4f:5b:5d:3a:dd:6f:fa:c8:42:89:12:c3:
         22:f8:d0:fc:cb:c3:28:f7:92:36:cf:98:92:6e:67:5f:39:17:
         c0:cd:c1:e1:c8:79:7a:ff:2e:4a:9c:6d:95:ff:81:82:f3:c6:
         4a:f4:ef:d5:dc:21:0a:60:8a:60:29:b8:75:dc:35:92:f4:bf:
         a6:e4:89:ef:6b:0f:d6:0c:02:7c:2f:fd:6e:d2:a7:12:28:56:
         9f:9a:5b:92:c6:2e:4b:b7:e4:6a:25:02:c9:eb:68:3e:de:6a:
         68:94:d1:db:9e:cc:35:65:0c:c0:7c:ca:94:c4:1b:ae:8c:c5:
         a0:cf:73:41:ef:c1:67:76:8b:2b:b1:9a:72:eb:fb:aa:39:55:
         ab:73:b5:ad:7a:5c:a0:d4:f6:8f:02:b6:17:83:04:c6:c2:b8:
         bd:48:2c:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc2K09u15yADo8sJIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMxZmJkOGItNGVkOS00ZjVkLWE4ZjAtNzU1OWQ5MWJm
M2M4MB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk
YjBmOWMzMjktNTA5Yi00ZGEzLTg3NDAtZGIwZjk1MjFiZDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnothQwrN62zxi1IFFwThuusQ7iztUjGevSG0
ZB8wXE8OHA6UspPqyXHLpNBbPq/gKgdtbt9qSfK7hoiCxxPiUl5O/XdLmTCgqB2K
sOFeKdgfeDW+eAAxDMHGsMc4dv9LmKAk6f//T9Or7vp8Ibd6BqLbBExV4ejiLs8v
Q6Gg5befwpTakO+iwRujbkDiDYLtHZqoqOVDf0SYbZ1fEHnCm5KUgifMW/9oTxOa
/dQPAmOunRSaHOq/sda4fDOtgBDrDUpAd028oYzQyBeJnxpy6dMprlqpXZaFcG5U
pU2M4fadtqZPXoXPVJYQTT4G7vuYAxNtQ6qYnNSJLW2oBLNa6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCMAjnoDbH8DXAH9iBJ2Ps7SjNWmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFm
YmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5ZDkxYmYzYzgvZGM0MjgyNjctZTUyNi0z
ZTgxLWEwNDgtYjhjM2RhZTI3MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmMxZmJkOGItNGVkOS00ZjVkLWE4
ZjAtNzU1OWQ5MWJmM2M4L2ZjMWZiZDhiLTRlZDktNGY1ZC1hOGYwLTc1NTlkOTFi
ZjNjOC5jcmwwHwYDVR0jBBgwFoAUbKtKsvVYO/RVBP3F8Yue3m5JAT0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFmYmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5
ZDkxYmYzYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTfTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGLKKeBOPGrROk1ef2agYZaIcH+4kna48h16lfYyF8zflA8S7LBkxk7q
u658XL2FIIeBTAy8WPSMio05K8xzDPvln0N4eFWYVyMxMXBEPLURezNrlyKTicyO
Fi4k2Cju4U9bXTrdb/rIQokSwyL40PzLwyj3kjbPmJJuZ185F8DNweHIeXr/Lkqc
bZX/gYLzxkr079XcIQpgimApuHXcNZL0v6bkie9rD9YMAnwv/W7SpxIoVp+aW5LG
Lku35GolAsnraD7eamiU0duezDVlDMB8ypTEG66MxaDPc0HvwWd2iyuxmnLr+6o5
Vatzta16XKDU9o8CtheDBMbCuL1ILAs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:56 2024 by rpki-client on console-fra.rpki-client.org