Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/b232adc7-2cd2-3502-b2a7-7b534ff320ab.roa
File:                     b232adc7-2cd2-3502-b2a7-7b534ff320ab.roa (raw, json)
Hash identifier:          WBagOZVXqNngRJpD3ttoHBGo8Oyo55hK7jc3/Y2h7Uk=
Subject key identifier:   0C:76:2A:56:BE:1F:14:3F:0D:73:86:2F:93:6D:26:2D:49:47:0C:41
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285841E42B0C79F592EFDD60FFDB00
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/b232adc7-2cd2-3502-b2a7-7b534ff320ab.roa
Signing time:             Mon 15 May 2023 16:08:10 +0000
ROA not before:           Mon 15 May 2023 16:08:10 +0000
ROA not after:            Sun 18 Jun 2023 07:37:52 +0000
asID:                     20473
IP address blocks:        67.43.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 May 2023 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:2b:0c:79:f5:92:ef:dd:60:ff:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: May 15 16:08:10 2023 GMT
            Not After : Jun 18 07:37:52 2023 GMT
        Subject: CN=07527457-f1ac-44b5-88e9-4a05c011d2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:09:c0:2d:1c:fd:a0:10:93:c6:27:65:4f:1f:
                    5b:2d:43:2f:4c:d2:5f:a7:7b:a2:5a:49:09:fc:63:
                    48:45:ad:bf:e4:78:32:b8:a0:a2:d9:2c:94:c4:8d:
                    88:97:ed:62:53:a4:9b:0a:19:6c:4a:b7:e3:d2:12:
                    67:ab:93:6d:72:b4:b3:c3:88:6b:b8:fb:68:24:ab:
                    c3:69:22:3d:6e:ba:05:1f:5e:94:1e:d9:90:4b:38:
                    bd:d3:94:6d:14:b1:3e:48:51:67:64:ae:43:88:81:
                    8f:f3:5a:b7:8b:9b:74:80:95:ff:b2:9a:93:fe:48:
                    ca:68:d0:24:01:62:5d:e5:af:21:8f:12:7d:12:57:
                    73:38:d8:ad:b3:96:a4:d0:2c:dc:88:ae:4d:9d:f9:
                    53:32:f1:53:3e:d8:fd:2b:17:00:4c:68:33:05:d2:
                    62:17:56:bb:cf:b3:99:e6:93:99:b3:c4:c5:3a:3d:
                    a6:ac:51:7b:cf:b4:c9:ad:84:25:0f:ce:d6:42:a6:
                    eb:97:35:d2:c4:a1:8b:02:25:aa:d9:43:39:01:d0:
                    0b:54:b5:27:09:5e:03:ab:5c:b0:ae:18:28:76:02:
                    88:70:e3:49:e1:87:ec:3c:2f:ad:53:93:e3:20:91:
                    cd:33:cb:c0:f9:d2:36:c6:86:ba:c7:97:42:f8:be:
                    69:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0C:76:2A:56:BE:1F:14:3F:0D:73:86:2F:93:6D:26:2D:49:47:0C:41
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/b232adc7-2cd2-3502-b2a7-7b534ff320ab.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier: 
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:da:3e:83:c8:cc:d7:ce:77:d1:d2:55:08:58:77:9d:40:47:
         8a:64:38:6d:aa:f2:20:0d:cf:67:00:bf:fe:1f:25:30:63:7d:
         fd:22:26:91:8c:7a:b0:4a:83:18:e4:94:95:ad:75:9b:bf:20:
         0d:ba:23:c9:32:61:06:43:e3:2e:ec:16:00:81:0f:03:75:76:
         0f:7b:61:a6:c7:1a:ad:8a:b5:31:55:5d:09:30:fe:3a:75:ed:
         37:a5:fa:46:79:e1:b2:35:08:78:68:8b:4a:fb:39:45:ac:53:
         8c:14:83:2c:13:d0:ef:39:9c:5e:d8:b6:3a:ea:7d:a3:21:46:
         a0:ec:17:26:1b:30:59:62:76:7d:0c:ba:95:38:38:53:1d:0c:
         d0:33:50:eb:c0:19:92:04:4c:df:9f:35:83:cd:25:5c:e7:5e:
         49:8d:43:40:91:f5:30:51:75:ee:c8:0e:b1:57:50:ff:6c:fd:
         6c:2d:b6:af:36:a8:ef:b8:62:07:c9:24:96:26:79:94:19:5b:
         bd:d3:5c:9d:b9:66:f2:6e:8d:f6:d3:fc:a0:93:12:46:80:1f:
         61:4f:be:32:7a:e6:f9:f3:c3:50:f6:aa:95:e5:e8:2b:fa:93:
         52:21:52:f9:7c:8d:de:fc:14:8d:79:d1:e1:88:06:df:03:9b:
         d1:01:8c:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkKwx59ZLv3WD/2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli
NGU1MB4XDTIzMDUxNTE2MDgxMFoXDTIzMDYxODA3Mzc1MlowLzEtMCsGA1UEAxMk
MDc1Mjc0NTctZjFhYy00NGI1LTg4ZTktNGEwNWMwMTFkMmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQnALRz9oBCTxidlTx9bLUMvTNJfp3uiWkkJ
/GNIRa2/5HgyuKCi2SyUxI2Il+1iU6SbChlsSrfj0hJnq5NtcrSzw4hruPtoJKvD
aSI9broFH16UHtmQSzi905RtFLE+SFFnZK5DiIGP81q3i5t0gJX/spqT/kjKaNAk
AWJd5a8hjxJ9EldzONits5ak0CzciK5NnflTMvFTPtj9KxcATGgzBdJiF1a7z7OZ
5pOZs8TFOj2mrFF7z7TJrYQlD87WQqbrlzXSxKGLAiWq2UM5AdALVLUnCV4Dq1yw
rhgodgKIcONJ4YfsPC+tU5PjIJHNM8vA+dI2xoa6x5dC+L5pqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAx2Kla+HxQ/DXOGL5NtJi1JRwxBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk
NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvYjIzMmFkYzctMmNkMi0z
NTAyLWIyYTctN2I1MzRmZjMyMGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3
ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5
YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3
N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQysqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADPaPoPIzNfOd9HSVQhYd51AR4pkOG2q8iANz2cAv/4fJTBjff0iJpGM
erBKgxjklJWtdZu/IA26I8kyYQZD4y7sFgCBDwN1dg97YabHGq2KtTFVXQkw/jp1
7Tel+kZ54bI1CHhoi0r7OUWsU4wUgywT0O85nF7YtjrqfaMhRqDsFyYbMFlidn0M
upU4OFMdDNAzUOvAGZIETN+fNYPNJVznXkmNQ0CR9TBRde7IDrFXUP9s/Wwttq82
qO+4YgfJJJYmeZQZW73TXJ25ZvJujfbT/KCTEkaAH2FPvjJ65vnzw1D2qpXl6Cv6
k1IhUvl8jd78FI150eGIBt8Dm9EBjKw=
-----END CERTIFICATE-----
Generated at Mon May 15 16:58:22 2023 by rpki-client on console-ams.rpki-client.org