Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5d9bac24-42c5-32f4-89cc-d256e7767bce.roa
File:                     5d9bac24-42c5-32f4-89cc-d256e7767bce.roa (raw, json)
Hash identifier:          yVHpwp14CqOzbI0D1LNCiGaekmX2kUrx5AFnVMXnbog=
Subject key identifier:   47:57:1C:C0:A7:E2:94:15:9D:D4:4B:7D:B6:29:E8:4A:01:22:90:BB
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285847AE36C3E900A4336A53D23F80
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5d9bac24-42c5-32f4-89cc-d256e7767bce.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     834
IP address blocks:        67.43.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c3:e9:00:a4:33:6a:53:d2:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=8ae8c2f0-573f-495c-8f2a-7ffea3d6af93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c4:aa:2a:18:0e:df:55:88:c7:cc:75:9f:7a:
                    15:4e:ad:87:da:61:6e:cf:6c:d7:e5:70:9f:75:ef:
                    4c:eb:c8:8b:c9:14:c7:1b:c5:cc:1c:e4:b5:ed:5b:
                    49:d3:f4:82:04:ea:63:e3:04:83:94:e2:70:12:d6:
                    9b:ed:37:6f:a2:29:ac:a1:b3:0f:c1:44:46:99:7c:
                    f5:7e:e5:9e:03:e5:14:d4:38:c2:5a:28:5b:c0:7b:
                    1a:a3:e3:f8:fc:52:69:d3:d4:85:06:4c:80:f0:2d:
                    ff:5b:73:42:98:1f:03:d9:0d:af:99:35:73:7d:b9:
                    eb:ff:d7:e1:e4:63:d5:3d:6c:88:a6:7f:6e:04:4a:
                    c0:0f:4c:4a:4e:63:f6:b7:3b:21:fc:14:c2:6e:61:
                    f3:a0:f2:f2:ab:c7:d6:c5:00:79:d6:a8:bc:fe:5f:
                    0b:3e:7f:9d:7d:0b:4a:10:6f:d0:9c:da:bd:dd:d6:
                    f0:c9:94:b3:2a:21:86:5a:5f:57:d0:ae:78:9e:32:
                    e4:65:8e:f0:35:69:a8:21:a1:7e:e4:de:77:76:49:
                    48:af:e3:51:57:80:e9:f5:fa:de:f2:d0:ee:63:30:
                    9e:6e:33:68:51:38:e6:04:0a:ec:20:71:61:57:2e:
                    d4:7e:dd:e7:ea:76:90:6a:eb:d1:aa:27:d6:05:41:
                    79:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:57:1C:C0:A7:E2:94:15:9D:D4:4B:7D:B6:29:E8:4A:01:22:90:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5d9bac24-42c5-32f4-89cc-d256e7767bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:7b:3b:e9:43:bc:e0:dd:c0:cc:0c:63:32:25:cc:95:44:3e:
         b4:22:99:43:fd:45:d5:eb:a3:15:2e:c3:31:32:61:56:bb:cc:
         37:49:f4:20:9e:8b:e1:54:33:ec:40:a6:91:04:b2:98:d4:63:
         15:67:ba:41:10:25:03:9e:02:0a:cb:ac:dd:15:ba:8f:b0:29:
         a4:73:60:b1:48:43:6c:7b:49:2d:a9:05:01:dd:5c:55:54:84:
         b3:fb:3d:32:40:a4:41:ea:55:7b:de:73:82:28:5b:e2:24:40:
         93:29:c6:5c:7c:ad:0a:d6:fe:eb:cf:13:a9:63:6b:bb:c8:8b:
         24:85:35:25:dd:b4:bd:bd:a2:44:85:55:12:83:3e:c7:e7:b7:
         83:2e:e4:c7:7f:6f:4e:6e:4e:69:76:ba:21:be:7f:f1:a7:03:
         b4:ea:b2:8e:1c:fa:78:30:7a:3d:45:ea:4e:b3:21:0a:fe:a5:
         ec:15:86:1e:4a:4f:bd:9a:a2:62:52:d5:2c:00:e9:8c:3c:c4:
         4e:a6:2c:2c:bf:0b:e4:ba:ac:87:3b:c8:e2:70:bd:d5:21:32:
         39:22:e1:35:21:d4:9f:cf:87:20:6a:6a:69:b4:ce:94:ea:f4:
         f7:c4:87:27:9e:ab:31:e0:0c:96:25:6f:3f:8a:71:8e:54:82:
         52:80:04:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeuNsPpAKQzalPSP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli
NGU1MB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
OGFlOGMyZjAtNTczZi00OTVjLThmMmEtN2ZmZWEzZDZhZjkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMSqKhgO31WIx8x1n3oVTq2H2mFuz2zX5XCf
de9M68iLyRTHG8XMHOS17VtJ0/SCBOpj4wSDlOJwEtab7TdvoimsobMPwURGmXz1
fuWeA+UU1DjCWihbwHsao+P4/FJp09SFBkyA8C3/W3NCmB8D2Q2vmTVzfbnr/9fh
5GPVPWyIpn9uBErAD0xKTmP2tzsh/BTCbmHzoPLyq8fWxQB51qi8/l8LPn+dfQtK
EG/QnNq93dbwyZSzKiGGWl9X0K54njLkZY7wNWmoIaF+5N53dklIr+NRV4Dp9fre
8tDuYzCebjNoUTjmBArsIHFhVy7Uft3n6naQauvRqifWBUF5LwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEdXHMCn4pQVndRLfbYp6EoBIpC7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk
NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvNWQ5YmFjMjQtNDJjNS0z
MmY0LTg5Y2MtZDI1NmU3NzY3YmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3
ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5
YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3
N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQysoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE17O+lDvODdwMwMYzIlzJVEPrQimUP9RdXroxUuwzEyYVa7zDdJ9CCe
i+FUM+xAppEEspjUYxVnukEQJQOeAgrLrN0Vuo+wKaRzYLFIQ2x7SS2pBQHdXFVU
hLP7PTJApEHqVXvec4IoW+IkQJMpxlx8rQrW/uvPE6lja7vIiySFNSXdtL29okSF
VRKDPsfnt4Mu5Md/b05uTml2uiG+f/GnA7Tqso4c+ngwej1F6k6zIQr+pewVhh5K
T72aomJS1SwA6Yw8xE6mLCy/C+S6rIc7yOJwvdUhMjki4TUh1J/PhyBqamm0zpTq
9PfEhyeeqzHgDJYlbz+KcY5UglKABJs=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:11:59 2024 by rpki-client on console-ams.rpki-client.org