Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/40bcae07-9b09-355c-a3c0-9d2bb5d44c86.roa
File:                     40bcae07-9b09-355c-a3c0-9d2bb5d44c86.roa (raw, json)
Hash identifier:          QyyCnAaB8YqS41cv8rBYpFraZcx9SfMxY56TbjUOJNQ=
Subject key identifier:   21:C6:51:D5:AB:A1:CB:C9:E1:9E:D9:89:DC:F0:E2:5F:D1:3C:DA:CC
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F432858473095F6E78A3D9BB86146E7E0
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/40bcae07-9b09-355c-a3c0-9d2bb5d44c86.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     3356
IP address blocks:        69.41.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:f6:e7:8a:3d:9b:b8:61:46:e7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=be87882b-3baa-4915-b671-ee4e3380d3d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:34:af:f4:10:40:4c:3a:e1:87:78:cc:b6:24:
                    ff:cb:0f:37:bf:dc:41:cb:a2:2a:04:65:e6:0a:de:
                    24:f6:16:ca:0a:ca:50:ed:7e:61:5e:fe:4d:ed:1f:
                    0d:22:30:b7:28:b1:e4:fc:85:70:04:16:08:39:30:
                    29:72:52:3e:da:0d:e0:4c:bb:0a:7a:7d:36:c3:ac:
                    19:8c:d9:5e:23:98:17:e9:1b:30:9a:4d:45:70:8f:
                    55:ff:83:d4:33:7f:ae:ce:33:34:a4:57:44:45:ab:
                    b0:02:7b:95:a9:42:4b:c2:59:ab:10:ce:aa:e5:0a:
                    2c:1b:0b:d8:87:55:ed:2a:c6:c4:ec:ea:8c:23:89:
                    d0:3d:c7:8b:f4:8b:71:45:80:43:19:95:ae:7a:3a:
                    78:66:d6:68:cd:70:cb:27:c3:ef:78:c8:65:de:9d:
                    fb:79:1e:0e:62:b2:2c:aa:3b:ef:d0:2c:da:7d:bb:
                    20:2b:24:b0:56:e8:ce:0c:a0:b9:60:ef:41:6d:24:
                    b3:9b:af:31:46:a4:d9:b6:b4:c4:f0:5b:2f:62:17:
                    76:25:3a:db:7c:63:4e:4f:e2:92:6b:e2:2f:cc:fe:
                    50:9b:a1:29:52:e9:55:28:75:a5:8f:f6:d5:ea:01:
                    76:75:83:29:fc:59:b6:11:88:f1:08:ec:04:be:63:
                    53:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C6:51:D5:AB:A1:CB:C9:E1:9E:D9:89:DC:F0:E2:5F:D1:3C:DA:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/40bcae07-9b09-355c-a3c0-9d2bb5d44c86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:93:dc:9e:81:78:19:56:e6:1a:2d:52:e0:10:e6:66:c1:da:
         ef:38:2a:4e:7d:3d:43:c8:39:dc:ea:8a:0b:ea:11:13:84:bf:
         43:5e:1e:fb:d5:b0:54:38:a9:03:be:a3:57:3f:98:3c:04:8c:
         53:7b:97:d7:d9:9c:67:8c:d6:09:d6:13:3d:47:c3:4f:a5:6e:
         be:6e:50:fa:29:21:0d:77:91:e4:86:9e:20:2b:fe:67:dc:07:
         34:54:33:af:d3:46:46:cc:9b:b3:6f:2f:f3:bc:91:00:be:53:
         f9:f7:1c:c4:b1:b9:c2:bc:d4:23:74:23:f0:fb:1d:3c:cb:48:
         7d:a3:c6:81:a9:d0:a5:bb:9e:5f:2b:82:09:bb:57:dc:15:29:
         8c:f1:00:66:25:bc:ea:f7:78:52:c6:4f:bc:8a:ee:b4:3d:36:
         55:ee:06:c0:a1:68:2d:20:f2:a5:49:89:6c:ca:c0:51:00:c0:
         68:83:dd:ce:f4:68:9b:4a:0f:8e:c7:ba:9f:a9:29:e8:ff:72:
         7c:4c:ee:48:a3:c5:ae:07:da:12:ad:f8:e1:a1:41:ac:fd:a5:
         98:23:31:a6:6a:36:31:1a:75:cb:41:a1:de:ca:fa:e1:e8:5d:
         8e:5d:24:14:54:b7:28:89:8a:2c:e3:61:f4:19:8f:a9:71:5a:
         af:95:1d:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwlfbnij2buGFG5+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWY2Zjc2MjMtMDc4OC00MTBhLWI5ZGQtODA0MDg3OWFh
OTI0MB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk
YmU4Nzg4MmItM2JhYS00OTE1LWI2NzEtZWU0ZTMzODBkM2Q2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTSv9BBATDrhh3jMtiT/yw83v9xBy6IqBGXm
Ct4k9hbKCspQ7X5hXv5N7R8NIjC3KLHk/IVwBBYIOTApclI+2g3gTLsKen02w6wZ
jNleI5gX6Rswmk1FcI9V/4PUM3+uzjM0pFdERauwAnuVqUJLwlmrEM6q5QosGwvY
h1XtKsbE7OqMI4nQPceL9ItxRYBDGZWuejp4ZtZozXDLJ8PveMhl3p37eR4OYrIs
qjvv0CzafbsgKySwVujODKC5YO9BbSSzm68xRqTZtrTE8FsvYhd2JTrbfGNOT+KS
a+IvzP5Qm6EpUulVKHWlj/bV6gF2dYMp/Fm2EYjxCOwEvmNTKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCHGUdWrocvJ4Z7Zidzw4l/RPNrMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZjZm
NzYyMy0wNzg4LTQxMGEtYjlkZC04MDQwODc5YWE5MjQvNDBiY2FlMDctOWIwOS0z
NTVjLWEzYzAtOWQyYmI1ZDQ0Yzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWY2Zjc2MjMtMDc4OC00MTBhLWI5
ZGQtODA0MDg3OWFhOTI0LzVmNmY3NjIzLTA3ODgtNDEwYS1iOWRkLTgwNDA4Nzlh
YTkyNC5jcmwwHwYDVR0jBBgwFoAUbPE4qdyRiteX1uAs/Tbql2Czz34wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZjZmNzYyMy0wNzg4LTQxMGEtYjlkZC04MDQw
ODc5YWE5MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSkuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGaT3J6BeBlW5hotUuAQ5mbB2u84Kk59PUPIOdzqigvqEROEv0NeHvvV
sFQ4qQO+o1c/mDwEjFN7l9fZnGeM1gnWEz1Hw0+lbr5uUPopIQ13keSGniAr/mfc
BzRUM6/TRkbMm7NvL/O8kQC+U/n3HMSxucK81CN0I/D7HTzLSH2jxoGp0KW7nl8r
ggm7V9wVKYzxAGYlvOr3eFLGT7yK7rQ9NlXuBsChaC0g8qVJiWzKwFEAwGiD3c70
aJtKD47Hup+pKej/cnxM7kijxa4H2hKt+OGhQaz9pZgjMaZqNjEadctBod7K+uHo
XY5dJBRUtyiJiizjYfQZj6lxWq+VHfE=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:18 2024 by rpki-client on console-ams.rpki-client.org