Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c1cad078-8b5d-38b5-8141-35b1324af051.roa
File:                     c1cad078-8b5d-38b5-8141-35b1324af051.roa (raw, json)
Hash identifier:          hhcNqIgei5BsYmyCdQGtgMaENH07ifXyrHRNDvUxiqE=
Subject key identifier:   57:41:CE:8C:81:B5:32:4D:6C:F9:CD:9A:27:29:F5:B8:94:F1:D3:F5
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F432858477660F61CE0509EA2FF18A580
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c1cad078-8b5d-38b5-8141-35b1324af051.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     400040
IP address blocks:        68.67.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:60:f6:1c:e0:50:9e:a2:ff:18:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=9b640f1d-5dcd-424e-81aa-06c937e08229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:01:78:fb:ad:17:6f:ad:6d:bb:f8:f2:bb:20:
                    2b:a5:f7:dd:8a:4a:07:d2:ec:ef:3a:ef:53:52:b5:
                    a1:22:7e:53:9b:4b:a6:d9:18:f0:6b:ce:97:ad:51:
                    c5:e5:5d:73:d0:4a:a4:f6:86:eb:75:04:1c:dd:f6:
                    8d:6b:4f:eb:c6:b7:bc:2a:34:ee:45:5e:07:6d:08:
                    03:44:81:14:48:43:6e:0a:73:a2:e3:b6:58:dc:f6:
                    15:21:ce:60:bd:d6:a8:9a:24:6d:47:84:cb:96:0a:
                    b2:f5:f2:af:12:1c:66:08:43:cd:7b:3d:7c:f5:88:
                    f3:20:56:bb:29:ef:33:8f:d3:19:2a:75:1e:da:06:
                    90:90:a1:78:89:fd:1b:67:a6:c2:41:2c:7d:a7:0a:
                    b2:c1:fe:69:d9:cf:e8:b5:7f:44:88:33:c3:38:c6:
                    58:dc:a0:00:b3:35:8e:dc:5b:f6:09:8b:01:17:e2:
                    17:7c:bc:b1:9c:97:65:29:5d:fb:77:b6:77:02:83:
                    fe:fc:8d:df:20:07:ea:a2:1e:65:79:00:f7:0f:1f:
                    79:a1:8c:bd:df:ba:51:95:81:3f:08:dc:92:d3:1d:
                    5e:fb:62:ab:06:12:f4:d8:eb:c5:f6:a5:3e:31:96:
                    a2:86:54:a8:70:3c:03:00:87:76:d0:a7:22:d0:88:
                    be:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:41:CE:8C:81:B5:32:4D:6C:F9:CD:9A:27:29:F5:B8:94:F1:D3:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c1cad078-8b5d-38b5-8141-35b1324af051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:5f:8f:6a:3d:4c:10:94:79:9c:f5:1a:f1:10:fc:f7:e2:e5:
         e6:ca:da:24:8d:9e:e0:f7:40:00:29:f5:8d:30:58:3f:56:10:
         a4:1b:99:b9:e8:94:bf:62:7b:b2:a7:ba:1b:a4:c2:4b:18:d8:
         5a:47:52:c4:48:be:0e:41:96:04:b8:b7:5b:d7:2e:13:5c:f3:
         a8:cb:38:c5:86:96:bb:ee:34:6f:ea:07:d4:54:d5:dc:a4:10:
         7d:25:8b:a4:8d:78:d7:b9:34:91:9e:ec:5b:eb:19:9c:c5:7b:
         9e:5e:53:31:40:23:d7:f1:ab:8d:da:84:42:84:a7:8a:c1:35:
         87:f4:32:de:b5:64:04:af:6b:10:f9:5e:98:e8:96:20:9b:2d:
         aa:35:6b:f8:11:83:72:a9:4a:04:b9:f8:3b:d0:89:34:46:4e:
         0c:35:d8:b9:e1:f9:02:d5:04:8c:92:ea:c0:5c:ae:22:ea:8f:
         d4:2f:62:28:18:5e:02:27:88:35:75:87:2c:a9:1e:f2:91:5b:
         00:fe:e5:d2:05:98:80:d5:ae:c1:ea:d1:4f:c1:4b:ab:9e:19:
         c5:01:7b:43:24:f3:1a:5b:8e:bf:06:c8:39:bb:04:71:ab:96:
         d5:d2:c5:79:aa:de:03:0a:1d:16:81:34:2a:5b:44:3e:50:50:
         6a:f1:b0:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YPYc4FCeov8YpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli
NGU1MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk
OWI2NDBmMWQtNWRjZC00MjRlLTgxYWEtMDZjOTM3ZTA4MjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigF4+60Xb61tu/jyuyArpffdikoH0uzvOu9T
UrWhIn5Tm0um2Rjwa86XrVHF5V1z0Eqk9obrdQQc3faNa0/rxre8KjTuRV4HbQgD
RIEUSENuCnOi47ZY3PYVIc5gvdaomiRtR4TLlgqy9fKvEhxmCEPNez189YjzIFa7
Ke8zj9MZKnUe2gaQkKF4if0bZ6bCQSx9pwqywf5p2c/otX9EiDPDOMZY3KAAszWO
3Fv2CYsBF+IXfLyxnJdlKV37d7Z3AoP+/I3fIAfqoh5leQD3Dx95oYy937pRlYE/
CNyS0x1e+2KrBhL02OvF9qU+MZaihlSocDwDAId20Kci0Ii+EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFdBzoyBtTJNbPnNmicp9biU8dP1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk
NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvYzFjYWQwNzgtOGI1ZC0z
OGI1LTgxNDEtMzViMTMyNGFmMDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3
ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5
YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3
N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEFfj2o9TBCUeZz1GvEQ/Pfi5ebK2iSNnuD3QAAp9Y0wWD9WEKQbmbno
lL9ie7KnuhukwksY2FpHUsRIvg5BlgS4t1vXLhNc86jLOMWGlrvuNG/qB9RU1dyk
EH0li6SNeNe5NJGe7FvrGZzFe55eUzFAI9fxq43ahEKEp4rBNYf0Mt61ZASvaxD5
XpjoliCbLao1a/gRg3KpSgS5+DvQiTRGTgw12Lnh+QLVBIyS6sBcriLqj9QvYigY
XgIniDV1hyypHvKRWwD+5dIFmIDVrsHq0U/BS6ueGcUBe0Mk8xpbjr8GyDm7BHGr
ltXSxXmq3gMKHRaBNCpbRD5QUGrxsLw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:35 2024 by rpki-client on console-ams.rpki-client.org