Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa
File:                     fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa (raw, json)
Hash identifier:          mSOJk/uXiEg1yTW+u0VxFfU8Ltkn6IrLVN0R5y7+G34=
Subject key identifier:   68:AD:1D:A9:6E:A5:4A:A4:E4:DF:05:1B:0B:66:3B:10:FB:B1:48:0D
Certificate issuer:       /CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
Certificate serial:       010D0C9F43285845FC1927DA5D1792F6E85E9040
Authority key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa
Signing time:             Sat 25 May 2024 01:00:27 +0000
ROA not before:           Sat 25 May 2024 01:00:27 +0000
ROA not after:            Fri 23 Aug 2024 01:00:27 +0000
asID:                     64227
IP address blocks:        64.237.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:fc:19:27:da:5d:17:92:f6:e8:5e:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
        Validity
            Not Before: May 25 01:00:27 2024 GMT
            Not After : Aug 23 01:00:27 2024 GMT
        Subject: CN=8ec2af92-e787-47b9-983e-19e1e6a0ff0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:70:d1:8a:f3:28:7f:3a:bd:53:1d:ca:64:5d:
                    54:79:a2:66:6b:52:c0:7a:99:26:0c:b0:e5:59:75:
                    da:ec:81:7d:d0:34:af:f9:31:26:8f:fe:e0:eb:ab:
                    f9:0b:5e:b9:fa:d9:05:fc:a2:ad:dc:86:8c:67:24:
                    d7:8e:64:ff:fb:bd:3f:bd:1c:db:85:b3:ee:a5:33:
                    7a:ec:d0:9b:19:61:56:d7:96:ed:7c:a9:f7:56:1d:
                    02:38:52:d3:50:70:69:84:1d:c9:10:4a:2a:9a:01:
                    a0:f8:df:40:fe:5a:b3:06:81:14:30:08:86:7f:79:
                    2f:40:06:8a:4b:81:57:6a:80:7a:25:f9:bf:16:6c:
                    ba:70:b9:59:4d:71:b3:72:3d:93:c8:57:f6:c0:63:
                    2b:2d:55:cd:28:46:21:4a:05:04:a4:ff:ea:01:e9:
                    e7:d3:2d:fe:ba:9e:7f:c7:4e:50:74:e4:e7:54:07:
                    43:dc:e5:1d:4b:3d:76:b2:af:73:97:ec:5d:15:45:
                    e6:87:97:5b:70:89:a8:6e:da:5c:9e:7d:80:94:49:
                    ea:6d:8a:dc:f0:92:38:e3:1e:0e:0e:45:b9:c3:41:
                    fe:94:f8:f1:7b:c0:7f:7e:92:73:ce:c6:10:06:17:
                    d2:d0:fc:ea:ef:c7:be:bb:e7:8d:ef:5c:a4:70:da:
                    39:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AD:1D:A9:6E:A5:4A:A4:E4:DF:05:1B:0B:66:3B:10:FB:B1:48:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl

            X509v3 Authority Key Identifier:
                keyid:2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:b8:6b:af:c8:19:65:d8:a1:73:04:75:e1:2d:7a:37:f8:b5:
         05:ac:3b:32:0c:cd:b4:a5:bd:bb:d3:13:a1:1c:16:57:b9:c4:
         53:93:c8:68:34:d8:34:98:e1:cc:59:82:34:49:54:31:a2:57:
         d6:6f:ac:83:d5:05:d9:c4:17:6b:2e:3c:03:6f:de:81:e0:f5:
         72:da:05:48:7f:b4:c2:46:03:4e:cc:e8:6c:49:8a:6c:08:9e:
         c3:e5:05:ad:38:9e:2f:0d:70:78:bd:67:b3:89:dd:55:4f:c7:
         88:f0:d8:39:6e:ae:ed:ac:51:d0:52:ec:40:52:f3:00:6b:37:
         49:01:51:0d:b6:56:31:d2:ee:e6:5b:84:7c:b4:13:a9:ca:4f:
         e8:40:ba:97:85:9f:f4:a8:18:94:b9:8f:3d:37:20:54:85:07:
         88:8c:6c:2f:44:72:a3:c4:b3:c0:38:97:d5:a4:57:c0:cb:03:
         02:48:14:dc:9e:2a:06:fb:a4:1e:40:11:03:a5:f7:15:85:0d:
         49:2c:2d:9c:2f:93:9d:f5:a5:78:20:6b:60:c1:44:c7:18:8e:
         a7:a3:ec:67:d2:b0:c2:33:0f:34:c9:76:74:a9:d0:3a:5e:15:
         d3:ea:bb:88:5c:41:15:ac:ed:da:08:f3:9b:8d:89:db:43:e0:
         37:e2:94:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEX8GSfaXReS9uhekEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzcwYjg2ZjUtMGFlNy00ZTZjLWEzMmUtMDgzMTAxNTZk
ZjNmMB4XDTI0MDUyNTAxMDAyN1oXDTI0MDgyMzAxMDAyN1owLzEtMCsGA1UEAxMk
OGVjMmFmOTItZTc4Ny00N2I5LTk4M2UtMTllMWU2YTBmZjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3DRivMofzq9Ux3KZF1UeaJma1LAepkmDLDl
WXXa7IF90DSv+TEmj/7g66v5C165+tkF/KKt3IaMZyTXjmT/+70/vRzbhbPupTN6
7NCbGWFW15btfKn3Vh0COFLTUHBphB3JEEoqmgGg+N9A/lqzBoEUMAiGf3kvQAaK
S4FXaoB6Jfm/Fmy6cLlZTXGzcj2TyFf2wGMrLVXNKEYhSgUEpP/qAenn0y3+up5/
x05QdOTnVAdD3OUdSz12sq9zl+xdFUXmh5dbcImobtpcnn2AlEnqbYrc8JI44x4O
DkW5w0H+lPjxe8B/fpJzzsYQBhfS0Pzq78e+u+eN71ykcNo5owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGitHalupUqk5N8FGwtmOxD7sUgNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzBi
ODZmNS0wYWU3LTRlNmMtYTMyZS0wODMxMDE1NmRmM2YvZmM2MDFiZGEtNmRkMC0z
YzY2LWJjNjQtNjgyYzljMGRmZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzcwYjg2ZjUtMGFlNy00ZTZjLWEz
MmUtMDgzMTAxNTZkZjNmLzM3MGI4NmY1LTBhZTctNGU2Yy1hMzJlLTA4MzEwMTU2
ZGYzZi5jcmwwHwYDVR0jBBgwFoAUKnBuVYRj4+5yYJDqTSbO8pwumNAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzBiODZmNS0wYWU3LTRlNmMtYTMyZS0wODMx
MDE1NmRmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQO1oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+4a6/IGWXYoXMEdeEtejf4tQWsOzIMzbSlvbvTE6EcFle5xFOTyGg0
2DSY4cxZgjRJVDGiV9ZvrIPVBdnEF2suPANv3oHg9XLaBUh/tMJGA07M6GxJimwI
nsPlBa04ni8NcHi9Z7OJ3VVPx4jw2Dluru2sUdBS7EBS8wBrN0kBUQ22VjHS7uZb
hHy0E6nKT+hAupeFn/SoGJS5jz03IFSFB4iMbC9EcqPEs8A4l9WkV8DLAwJIFNye
Kgb7pB5AEQOl9xWFDUksLZwvk531pXgga2DBRMcYjqej7GfSsMIzDzTJdnSp0Dpe
FdPqu4hcQRWs7doI85uNidtD4DfilI4=
-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:08 2024 by rpki-client on console-fra.rpki-client.org