Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/710ca580-1dad-387f-97c9-134d9d0a2ed7.roa
File:                     710ca580-1dad-387f-97c9-134d9d0a2ed7.roa (raw, json)
Hash identifier:          TjYycZzBO0j91TaJJNTzVTfSAq9fJlmbwyFWFvtd6fE=
Subject key identifier:   5B:D4:13:A3:4A:7B:B5:A4:D3:21:0F:1B:59:B4:0D:B9:A9:8B:A6:7E
Certificate issuer:       /CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247
Certificate serial:       010D0C9F43285845734DB371425DACFEDB615590
Authority key identifier: 42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/710ca580-1dad-387f-97c9-134d9d0a2ed7.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     17216
IP address blocks:        67.212.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b3:71:42:5d:ac:fe:db:61:55:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=f341fdb8-0b76-431a-8731-81f7140f81ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3c:f0:54:30:8d:ae:de:22:17:62:4a:59:3f:
                    ec:74:95:2a:b3:58:51:51:f3:a0:9e:0e:4a:6c:ed:
                    34:02:21:ef:4f:2c:49:a9:e2:25:5e:f1:ec:d7:27:
                    8d:f6:31:cd:86:7a:56:3d:68:14:7f:2f:e1:f9:5a:
                    b5:9f:e2:9a:87:b2:d7:67:2f:69:b9:cb:38:79:6f:
                    7d:41:30:0f:22:29:00:2a:87:06:a5:d3:54:30:ab:
                    e7:92:c5:a4:fa:f1:70:ec:74:ac:0f:f6:6e:fa:99:
                    59:bb:d2:e1:56:99:08:38:5c:d2:93:27:27:be:29:
                    d8:ce:e9:48:00:23:40:4f:6a:c3:a4:6a:69:a1:56:
                    e5:d3:3d:52:a1:06:12:2e:46:87:e7:7e:b8:8c:43:
                    46:8d:81:c5:c6:e4:e7:c3:7b:6c:5b:a0:90:bd:33:
                    c5:40:65:42:3f:03:c2:6b:ed:5a:6b:51:e9:2f:28:
                    c0:24:28:07:69:a8:99:7a:3b:aa:fb:46:23:55:f4:
                    b7:d6:70:fb:7d:09:4c:d2:35:26:d0:28:60:e8:ab:
                    6a:a6:0b:a3:18:77:35:32:1f:3e:84:a3:21:de:1f:
                    3f:05:eb:ca:c3:00:c5:3e:6a:11:56:3f:22:27:76:
                    04:b4:ef:f9:df:6e:d5:df:16:d7:12:ee:62:63:6a:
                    9c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D4:13:A3:4A:7B:B5:A4:D3:21:0F:1B:59:B4:0D:B9:A9:8B:A6:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/710ca580-1dad-387f-97c9-134d9d0a2ed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl

            X509v3 Authority Key Identifier:
                keyid:42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:b1:cc:ee:b1:d5:82:c3:c1:5b:32:34:12:fc:80:fd:57:73:
         7b:4a:74:2c:44:86:47:c4:f6:cb:cf:d9:f7:00:e6:1b:3c:49:
         64:97:d1:41:95:00:fe:d3:f1:6c:20:02:23:32:75:4e:2e:31:
         33:4e:59:4f:43:1a:01:57:62:1c:23:d0:24:0e:51:7f:26:07:
         60:de:1e:3f:6c:8a:dd:30:07:a0:05:3c:d0:69:69:80:8c:86:
         a1:39:26:2a:d1:0a:cb:ad:6a:d9:be:d4:4b:a5:50:5e:fc:b4:
         71:5d:bc:a3:b8:e5:1a:40:c2:43:46:cb:c9:66:89:93:28:f5:
         fd:02:0c:a5:94:d7:86:9d:9c:64:51:80:58:43:66:d1:bd:3a:
         b4:ec:98:9b:af:89:21:3b:72:93:7c:c1:b8:46:dd:25:79:b4:
         19:3f:3a:f1:36:19:2c:23:6b:04:d1:65:94:1d:eb:5f:47:3a:
         a2:59:b5:84:11:8e:1e:3a:21:96:eb:da:84:0c:6e:e5:8a:5e:
         57:fd:65:d5:fb:b7:19:0a:71:c9:2f:67:6f:bf:55:d7:ac:45:
         dd:89:85:ec:df:21:97:b1:d1:14:e1:07:45:2b:aa:c6:68:28:
         90:d0:4f:21:17:11:ac:59:e8:da:c3:60:85:2c:99:60:21:95:
         23:39:ba:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVzTbNxQl2s/tthVZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiYjk3NzUtOTYzMS00YmU0LWE5YzYtMTFiOGRkZmU2
MjQ3MB4XDTI0MDQwNjAxMDAyNloXDTI0MDcwNTAxMDAyNlowLzEtMCsGA1UEAxMk
ZjM0MWZkYjgtMGI3Ni00MzFhLTg3MzEtODFmNzE0MGY4MWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTzwVDCNrt4iF2JKWT/sdJUqs1hRUfOgng5K
bO00AiHvTyxJqeIlXvHs1yeN9jHNhnpWPWgUfy/h+Vq1n+Kah7LXZy9pucs4eW99
QTAPIikAKocGpdNUMKvnksWk+vFw7HSsD/Zu+plZu9LhVpkIOFzSkycnvinYzulI
ACNAT2rDpGppoVbl0z1SoQYSLkaH5364jENGjYHFxuTnw3tsW6CQvTPFQGVCPwPC
a+1aa1HpLyjAJCgHaaiZejuq+0YjVfS31nD7fQlM0jUm0Chg6KtqpgujGHc1Mh8+
hKMh3h8/BevKwwDFPmoRVj8iJ3YEtO/5327V3xbXEu5iY2qcAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFvUE6NKe7Wk0yEPG1m0Dbmpi6Z+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2Ji
OTc3NS05NjMxLTRiZTQtYTljNi0xMWI4ZGRmZTYyNDcvNzEwY2E1ODAtMWRhZC0z
ODdmLTk3YzktMTM0ZDlkMGEyZWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTdiYjk3NzUtOTYzMS00YmU0LWE5
YzYtMTFiOGRkZmU2MjQ3L2U3YmI5Nzc1LTk2MzEtNGJlNC1hOWM2LTExYjhkZGZl
NjI0Ny5jcmwwHwYDVR0jBBgwFoAUQs7CZnUe84HwJTWBQIOwBNdo65kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2JiOTc3NS05NjMxLTRiZTQtYTljNi0xMWI4
ZGRmZTYyNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9QAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKaxzO6x1YLDwVsyNBL8gP1Xc3tKdCxEhkfE9svP2fcA5hs8SWSX0UGV
AP7T8WwgAiMydU4uMTNOWU9DGgFXYhwj0CQOUX8mB2DeHj9sit0wB6AFPNBpaYCM
hqE5JirRCsutatm+1EulUF78tHFdvKO45RpAwkNGy8lmiZMo9f0CDKWU14adnGRR
gFhDZtG9OrTsmJuviSE7cpN8wbhG3SV5tBk/OvE2GSwjawTRZZQd619HOqJZtYQR
jh46IZbr2oQMbuWKXlf9ZdX7txkKcckvZ2+/VdesRd2JhezfIZex0RThB0UrqsZo
KJDQTyEXEaxZ6NrDYIUsmWAhlSM5ulM=
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:12:27 2024 by rpki-client on console-ams.rpki-client.org