Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/46bbea22-6e18-332e-981a-ddbe837828f4.roa
File:                     46bbea22-6e18-332e-981a-ddbe837828f4.roa (raw, json)
Hash identifier:          1CXftEy3UUkFZBo52KvJKmIh0qVRQK8ViMHUWIZ+SM0=
Subject key identifier:   45:DB:00:2A:81:5C:6D:D1:49:CD:7E:D4:84:3E:39:60:10:78:D3:61
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285847A0414D2711E23474219F0880
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/46bbea22-6e18-332e-981a-ddbe837828f4.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     16417
IP address blocks:        68.232.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:4d:27:11:e2:34:74:21:9f:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=fe6c04fd-e3ef-4ba8-a5f2-4347b54e5ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:81:ec:d0:6e:c3:73:2c:20:21:96:0d:7e:ff:
                    4a:bb:a2:13:87:27:84:18:c4:61:22:b5:69:9d:db:
                    0d:32:4a:fb:4b:c8:f6:8c:39:84:7a:6a:4c:f2:ab:
                    9c:eb:3e:a2:88:47:ad:29:4f:c3:37:cc:23:22:bd:
                    ed:a4:7f:79:a3:80:fd:55:c1:52:c1:0d:92:c1:80:
                    85:ad:70:07:bc:7e:3d:25:2d:92:30:f9:69:0e:b2:
                    45:e3:4a:b0:1f:8b:71:2b:c6:21:81:ce:ae:2c:1e:
                    41:5c:6c:42:d0:c1:71:9b:eb:b8:14:69:60:08:58:
                    72:75:17:d9:d4:d0:1e:13:b6:cd:31:f1:d5:49:79:
                    88:9c:85:af:d1:a0:c4:32:48:ab:17:9c:46:45:b1:
                    49:fb:ff:e0:a3:b5:4b:90:d9:65:c7:05:69:55:4e:
                    06:e7:f7:c1:2c:4d:03:ca:45:e0:f6:06:ae:99:3c:
                    c1:96:ff:16:39:db:45:41:2f:ca:15:8b:cf:82:8a:
                    48:8e:d0:7b:91:81:82:c6:49:c6:ef:69:39:28:19:
                    c0:4e:b0:a5:da:6c:b2:d6:51:d9:c9:09:6d:70:75:
                    c8:61:07:69:a9:aa:7e:b3:6f:ad:ae:2b:b3:d8:40:
                    c8:f6:51:78:99:a3:e9:c8:07:f9:e8:5c:a6:7e:65:
                    4f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DB:00:2A:81:5C:6D:D1:49:CD:7E:D4:84:3E:39:60:10:78:D3:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/46bbea22-6e18-332e-981a-ddbe837828f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.232.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:54:fc:49:49:80:35:cd:e8:ed:71:e7:ef:0d:99:04:58:b8:
         a6:da:3c:34:82:05:94:57:cf:0d:ad:35:62:70:96:d0:18:47:
         3f:5b:c0:41:e0:f9:43:59:2c:7d:7e:9f:5c:5c:04:39:56:d9:
         9c:e9:3a:7d:af:a4:7d:82:37:7b:45:95:c0:19:cb:a7:79:e8:
         3d:c6:e1:cd:23:5a:a3:09:61:34:87:d4:ba:7c:6f:0e:84:7e:
         18:f4:72:01:e4:f1:85:1c:d1:53:1f:59:3a:52:9c:ad:7e:73:
         c6:7a:6d:9d:da:bb:e0:02:b7:b6:e2:c3:bb:2a:6f:21:85:13:
         a3:d8:62:02:ef:74:74:d6:20:9b:c1:92:36:a4:81:e6:4a:6c:
         16:ba:9a:87:36:ed:d1:eb:08:02:a9:7a:c6:ca:d1:96:f9:d2:
         06:d1:d7:64:e9:17:60:cb:c4:7e:df:7d:7b:72:3c:27:60:03:
         71:3c:42:ce:3a:30:b8:c4:54:8d:5a:9c:b0:5a:87:fe:fb:cc:
         53:f1:a4:14:49:54:8c:e3:63:fb:7f:e7:03:f2:eb:50:ef:94:
         c7:58:b1:fc:d0:97:09:39:aa:66:27:22:cc:3e:07:b0:a8:91:
         f5:5b:7d:31:92:a3:61:55:52:f3:04:0f:a8:73:d7:c5:81:37:
         59:ab:17:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQU0nEeI0dCGfCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk
ZmU2YzA0ZmQtZTNlZi00YmE4LWE1ZjItNDM0N2I1NGU1ZWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoHs0G7DcywgIZYNfv9Ku6IThyeEGMRhIrVp
ndsNMkr7S8j2jDmEempM8quc6z6iiEetKU/DN8wjIr3tpH95o4D9VcFSwQ2SwYCF
rXAHvH49JS2SMPlpDrJF40qwH4txK8Yhgc6uLB5BXGxC0MFxm+u4FGlgCFhydRfZ
1NAeE7bNMfHVSXmInIWv0aDEMkirF5xGRbFJ+//go7VLkNllxwVpVU4G5/fBLE0D
ykXg9gaumTzBlv8WOdtFQS/KFYvPgopIjtB7kYGCxknG72k5KBnATrCl2myy1lHZ
yQltcHXIYQdpqap+s2+triuz2EDI9lF4maPpyAf56FymfmVPtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEXbACqBXG3RSc1+1IQ+OWAQeNNhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNDZiYmVhMjItNmUxOC0z
MzJlLTk4MWEtZGRiZTgzNzgyOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROieMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL9U/ElJgDXN6O1x5+8NmQRYuKbaPDSCBZRXzw2tNWJwltAYRz9bwEHg
+UNZLH1+n1xcBDlW2ZzpOn2vpH2CN3tFlcAZy6d56D3G4c0jWqMJYTSH1Lp8bw6E
fhj0cgHk8YUc0VMfWTpSnK1+c8Z6bZ3au+ACt7biw7sqbyGFE6PYYgLvdHTWIJvB
kjakgeZKbBa6moc27dHrCAKpesbK0Zb50gbR12TpF2DLxH7ffXtyPCdgA3E8Qs46
MLjEVI1anLBah/77zFPxpBRJVIzjY/t/5wPy61DvlMdYsfzQlwk5qmYnIsw+B7Co
kfVbfTGSo2FVUvMED6hz18WBN1mrF0w=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:35 2024 by rpki-client on console-fra.rpki-client.org