Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/2836314e-41d1-350f-9141-4df4bf027667.roa
File:                     2836314e-41d1-350f-9141-4df4bf027667.roa (raw, json)
Hash identifier:          qstmYoGlgsp+C3KozImpnSaJW4PUU/RVia/HVc1j/EM=
Subject key identifier:   5B:5F:90:32:F2:02:15:C4:C1:0B:D4:8D:B5:ED:A7:02:F3:39:E9:C4
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F43285848100A7E2379290E5A99B8EEC0
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/2836314e-41d1-350f-9141-4df4bf027667.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     19197
IP address blocks:        69.41.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:7e:23:79:29:0e:5a:99:b8:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=05a5b39e-c04a-49ed-afca-7d4e45bbe37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c7:63:a6:eb:86:66:8e:3e:06:38:ae:77:5b:
                    be:f4:18:c8:6f:d2:fa:81:fc:6b:c2:c6:21:f7:0d:
                    61:b8:89:f6:ab:26:d6:9f:da:2d:06:95:34:47:c9:
                    b8:de:5a:a6:14:62:45:e8:1a:94:89:44:68:27:73:
                    64:9d:5c:7d:c0:86:49:3e:8c:29:6a:9a:be:20:78:
                    50:a9:c2:39:2c:49:c2:8b:39:ab:e8:bc:c6:2a:80:
                    65:3e:e3:17:5b:53:d8:05:58:82:ac:11:e7:ba:70:
                    fc:24:42:23:fa:4a:08:d0:74:88:78:b2:49:b6:65:
                    5e:d5:86:9f:89:0d:35:8a:b3:f8:e0:ac:4f:e4:7c:
                    0c:90:7a:16:d6:4f:1a:b9:ef:17:a0:c0:3c:77:00:
                    c3:a3:92:d4:10:a3:05:2b:c9:1a:40:7a:6f:23:ed:
                    33:38:0d:a6:6b:c6:41:3b:3f:07:58:c8:bb:7e:03:
                    9f:bb:f3:24:72:2f:6d:a5:89:9a:1f:89:40:36:bf:
                    17:7b:64:47:7b:96:01:08:c2:62:fc:c8:e6:75:45:
                    54:a1:92:0e:f0:1e:96:9b:6d:49:bc:bf:30:d5:28:
                    4a:4a:8b:8f:3e:87:c6:69:e5:fc:37:7a:b9:35:ca:
                    59:95:5f:b6:b2:40:8b:bb:d7:0d:71:52:fa:b6:55:
                    72:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5F:90:32:F2:02:15:C4:C1:0B:D4:8D:B5:ED:A7:02:F3:39:E9:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/2836314e-41d1-350f-9141-4df4bf027667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ef:37:c2:3d:e2:52:3c:79:27:8c:49:df:89:ac:c5:17:a9:
         84:2d:f5:8a:cc:e4:f3:d5:16:e0:db:58:d7:e7:42:88:eb:79:
         23:bf:28:0f:89:3c:f6:77:53:0f:4c:6b:0d:7f:54:da:e7:dd:
         50:87:60:b3:05:60:ff:37:09:7c:b3:ed:17:96:3f:31:40:1b:
         bc:e1:51:d1:f4:ac:12:83:f3:49:8f:74:30:f3:41:88:33:4a:
         26:a3:46:c9:76:7b:4d:cb:0a:2a:5c:fc:e4:f3:82:9b:e8:56:
         56:58:9f:81:85:63:e1:9d:12:b9:2a:66:9b:49:a7:a7:5d:9a:
         b8:02:9d:ec:4f:5e:5d:28:12:74:6d:08:aa:d4:c7:b9:8e:f6:
         f2:6d:9d:6b:70:69:1c:c6:ef:11:d8:29:5f:ce:73:e8:e8:ba:
         88:f9:85:87:b9:60:03:a9:64:a7:a2:b7:5e:c1:ad:c3:26:e2:
         9c:2d:ef:7a:a9:bd:4c:7e:05:a6:39:56:5a:e9:fd:26:0d:bc:
         2b:01:79:62:1d:4f:bf:e1:94:a3:7b:ba:22:55:d3:c7:b3:86:
         89:71:18:7d:4c:25:0c:e2:67:da:38:dc:51:d0:02:6f:7b:a2:
         ef:84:34:9a:ec:9c:8c:bd:55:e8:3c:d3:93:4b:9c:2f:62:ee:
         13:12:f9:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCn4jeSkOWpm47sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWY2Zjc2MjMtMDc4OC00MTBhLWI5ZGQtODA0MDg3OWFh
OTI0MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
MDVhNWIzOWUtYzA0YS00OWVkLWFmY2EtN2Q0ZTQ1YmJlMzdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsdjpuuGZo4+Bjiud1u+9BjIb9L6gfxrwsYh
9w1huIn2qybWn9otBpU0R8m43lqmFGJF6BqUiURoJ3NknVx9wIZJPowpapq+IHhQ
qcI5LEnCizmr6LzGKoBlPuMXW1PYBViCrBHnunD8JEIj+koI0HSIeLJJtmVe1Yaf
iQ01irP44KxP5HwMkHoW1k8aue8XoMA8dwDDo5LUEKMFK8kaQHpvI+0zOA2ma8ZB
Oz8HWMi7fgOfu/Mkci9tpYmaH4lANr8Xe2RHe5YBCMJi/MjmdUVUoZIO8B6Wm21J
vL8w1ShKSouPPofGaeX8N3q5NcpZlV+2skCLu9cNcVL6tlVyzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFtfkDLyAhXEwQvUjbXtpwLzOenEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZjZm
NzYyMy0wNzg4LTQxMGEtYjlkZC04MDQwODc5YWE5MjQvMjgzNjMxNGUtNDFkMS0z
NTBmLTkxNDEtNGRmNGJmMDI3NjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWY2Zjc2MjMtMDc4OC00MTBhLWI5
ZGQtODA0MDg3OWFhOTI0LzVmNmY3NjIzLTA3ODgtNDEwYS1iOWRkLTgwNDA4Nzlh
YTkyNC5jcmwwHwYDVR0jBBgwFoAUbPE4qdyRiteX1uAs/Tbql2Czz34wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZjZmNzYyMy0wNzg4LTQxMGEtYjlkZC04MDQw
ODc5YWE5MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSk9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3vN8I94lI8eSeMSd+JrMUXqYQt9YrM5PPVFuDbWNfnQojreSO/KA+J
PPZ3Uw9Maw1/VNrn3VCHYLMFYP83CXyz7ReWPzFAG7zhUdH0rBKD80mPdDDzQYgz
SiajRsl2e03LCipc/OTzgpvoVlZYn4GFY+GdErkqZptJp6ddmrgCnexPXl0oEnRt
CKrUx7mO9vJtnWtwaRzG7xHYKV/Oc+jouoj5hYe5YAOpZKeit17BrcMm4pwt73qp
vUx+BaY5Vlrp/SYNvCsBeWIdT7/hlKN7uiJV08ezholxGH1MJQziZ9o43FHQAm97
ou+ENJrsnIy9Veg805NLnC9i7hMS+Vk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:21 2025 by rpki-client