Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8baa5710-3903-3a6d-8148-fec2d5a33c00.roa
File:                     8baa5710-3903-3a6d-8148-fec2d5a33c00.roa (raw, json)
Hash identifier:          utqoMwy9wWXDpIQcB4BjxXn9jFjjCFKDJEQdfmuGm9M=
Subject key identifier:   5A:9A:D9:62:75:DF:DF:3B:F0:D9:0A:4D:F7:50:2D:A1:57:B3:F6:2A
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F4328584571E867B57535E4AC99ECBB80
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8baa5710-3903-3a6d-8148-fec2d5a33c00.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     19197
IP address blocks:        69.41.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:67:b5:75:35:e4:ac:99:ec:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=57645d67-8cbe-4ceb-af87-96a18d2454ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:c1:9d:69:e6:2c:b5:be:14:a4:87:75:73:
                    d9:6e:a1:9a:c2:9c:df:a7:b8:23:a6:6a:dd:d7:dc:
                    cc:5b:05:90:43:d8:08:fe:47:75:d3:05:82:c9:be:
                    3a:03:be:1d:c3:20:ad:d2:d7:be:9c:ab:43:fe:2c:
                    d2:12:e0:d7:30:6c:cb:0b:67:c2:f6:cf:2f:eb:54:
                    1f:d4:b6:b5:b5:4e:5f:77:cc:ef:1f:a0:8a:26:4a:
                    d7:cc:7f:06:13:7b:00:8e:cd:a0:3c:01:ca:4f:67:
                    4c:16:17:97:70:9c:91:8b:e6:f7:2a:78:b7:35:89:
                    0a:65:2f:91:cb:99:bd:6c:6d:ed:ad:44:ee:fc:af:
                    57:e2:03:c3:3f:51:2b:af:3b:8a:fb:3e:cb:80:72:
                    21:77:90:f1:86:92:29:08:23:3b:29:17:39:eb:a5:
                    ce:36:03:21:fa:b5:ca:94:bd:29:12:18:72:dc:2b:
                    1e:9d:1c:a1:d1:13:5e:bb:b5:e9:27:c7:ae:a3:fb:
                    47:d0:85:22:ce:2a:64:af:35:5b:9d:8a:88:82:72:
                    5b:69:ba:58:fc:de:23:99:33:66:b7:e8:e0:fa:4b:
                    1a:a3:2c:46:60:80:63:3f:94:3f:d2:2d:a5:91:08:
                    a7:2f:c3:aa:cb:9e:dc:f1:31:b4:96:59:43:e9:2b:
                    0d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9A:D9:62:75:DF:DF:3B:F0:D9:0A:4D:F7:50:2D:A1:57:B3:F6:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8baa5710-3903-3a6d-8148-fec2d5a33c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:6e:ad:1a:a9:ba:57:b2:1d:85:ea:f4:a3:fd:2c:c8:ca:f4:
         2a:c4:44:bd:37:00:fe:7f:91:c5:08:dc:92:8b:5c:5a:12:ba:
         61:0e:03:b8:63:7d:ed:e9:1b:26:67:7a:e9:7b:bb:43:45:f3:
         d8:b6:29:62:3c:17:d0:43:5b:b1:80:bf:84:46:67:0c:18:19:
         72:f8:7a:d2:99:8d:85:32:6c:17:2d:56:b5:86:66:25:32:d7:
         de:f3:94:93:94:6d:d1:89:85:00:6f:54:cd:b2:d8:2a:5c:e9:
         ad:08:42:dc:47:10:7c:6c:48:48:58:d8:83:66:bb:c5:b9:33:
         dc:72:62:69:6d:58:20:cb:bf:c7:be:ff:94:8b:5b:e8:29:c4:
         51:fd:04:12:45:b6:78:5d:2f:f5:bc:3c:98:16:d2:41:f2:82:
         a0:3a:35:a0:d3:c9:58:5d:37:6c:ba:42:96:53:fd:85:a4:97:
         8f:82:66:3f:13:20:4c:3e:2f:c2:af:96:4f:c0:c9:8c:a2:39:
         3c:96:ed:0c:87:d9:0b:21:55:ab:c5:7a:f7:b6:31:86:d5:df:
         d5:9d:66:d7:59:78:32:01:bc:74:5f:4d:39:0f:3d:bc:7e:54:
         06:ac:7a:55:dc:27:98:51:d6:f8:86:f7:ac:e0:61:db:1a:df:
         8b:4e:b1:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVx6Ge1dTXkrJnsu4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWY2Zjc2MjMtMDc4OC00MTBhLWI5ZGQtODA0MDg3OWFh
OTI0MB4XDTI0MDQwNTEzMDAzM1oXDTI0MDcwNDEzMDAzM1owLzEtMCsGA1UEAxMk
NTc2NDVkNjctOGNiZS00Y2ViLWFmODctOTZhMThkMjQ1NGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArALBnWnmLLW+FKSHdXPZbqGawpzfp7gjpmrd
19zMWwWQQ9gI/kd10wWCyb46A74dwyCt0te+nKtD/izSEuDXMGzLC2fC9s8v61Qf
1La1tU5fd8zvH6CKJkrXzH8GE3sAjs2gPAHKT2dMFheXcJyRi+b3Kni3NYkKZS+R
y5m9bG3trUTu/K9X4gPDP1ErrzuK+z7LgHIhd5DxhpIpCCM7KRc566XONgMh+rXK
lL0pEhhy3CsenRyh0RNeu7XpJ8euo/tH0IUizipkrzVbnYqIgnJbabpY/N4jmTNm
t+jg+ksaoyxGYIBjP5Q/0i2lkQinL8Oqy57c8TG0lllD6SsNaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFqa2WJ139878NkKTfdQLaFXs/YqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZjZm
NzYyMy0wNzg4LTQxMGEtYjlkZC04MDQwODc5YWE5MjQvOGJhYTU3MTAtMzkwMy0z
YTZkLTgxNDgtZmVjMmQ1YTMzYzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWY2Zjc2MjMtMDc4OC00MTBhLWI5
ZGQtODA0MDg3OWFhOTI0LzVmNmY3NjIzLTA3ODgtNDEwYS1iOWRkLTgwNDA4Nzlh
YTkyNC5jcmwwHwYDVR0jBBgwFoAUbPE4qdyRiteX1uAs/Tbql2Czz34wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZjZmNzYyMy0wNzg4LTQxMGEtYjlkZC04MDQw
ODc5YWE5MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSk6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALlurRqpuleyHYXq9KP9LMjK9CrERL03AP5/kcUI3JKLXFoSumEOA7hj
fe3pGyZneul7u0NF89i2KWI8F9BDW7GAv4RGZwwYGXL4etKZjYUybBctVrWGZiUy
197zlJOUbdGJhQBvVM2y2Cpc6a0IQtxHEHxsSEhY2INmu8W5M9xyYmltWCDLv8e+
/5SLW+gpxFH9BBJFtnhdL/W8PJgW0kHygqA6NaDTyVhdN2y6QpZT/YWkl4+CZj8T
IEw+L8Kvlk/AyYyiOTyW7QyH2QshVavFeve2MYbV39WdZtdZeDIBvHRfTTkPPbx+
VAaselXcJ5hR1viG96zgYdsa34tOsRE=
-----END CERTIFICATE-----
Generated at Sun May 12 01:37:37 2024 by rpki-client on console-fra.rpki-client.org