Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/70f7c180-9c4d-371e-a4a4-d0a8d7b4d6df.roa
File:                     70f7c180-9c4d-371e-a4a4-d0a8d7b4d6df.roa (raw, json)
Hash identifier:          STIzeLgDCEqAD8lCCEH/3zmQbdMbzwMEDeQHnOBJSkQ=
Subject key identifier:   59:6E:B7:0D:F1:0D:AE:30:A2:E3:32:35:40:2C:D7:00:EE:B7:57:D1
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F43285845E193D1139838C1AF1A8B2D00
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/70f7c180-9c4d-371e-a4a4-d0a8d7b4d6df.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     10506
IP address blocks:        168.99.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:d1:13:98:38:c1:af:1a:8b:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=514ec391-055b-47d9-8e6a-79f61348bde7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d2:56:ee:d6:92:ab:5c:ff:45:84:dc:74:05:
                    45:ea:15:42:10:41:a5:4a:c0:c7:01:cf:f2:50:ce:
                    3c:6c:a2:d5:a0:7d:4d:bb:3a:52:3d:de:9b:ad:cf:
                    fa:59:4a:a3:ed:8b:e7:a0:21:b9:be:ed:95:42:2d:
                    95:de:5a:a9:2a:be:dd:95:20:a1:4d:9f:65:00:c4:
                    c7:94:a9:03:b8:aa:25:9a:d3:12:74:2b:fa:a5:30:
                    b3:56:cf:ab:d0:ff:2b:c7:14:5f:09:64:5a:8e:e9:
                    af:ae:ad:c9:19:65:8e:3b:6a:7e:9f:f4:37:ef:34:
                    27:0d:71:d0:3b:87:f1:13:74:27:e0:bf:e5:97:1c:
                    26:0e:cd:80:70:ea:b0:00:59:7c:6c:36:c7:f9:da:
                    e4:55:ad:c0:ee:48:b7:da:86:b6:c8:0c:b7:f3:9b:
                    ea:00:5e:16:1a:eb:fd:fc:db:4d:8c:62:e1:56:67:
                    ca:11:20:c3:8f:96:52:b2:69:0d:ba:74:75:04:32:
                    2a:e5:44:ec:20:ee:f4:36:bb:c0:08:b2:be:dc:70:
                    15:e7:71:12:5c:6e:3b:87:46:88:cc:4f:18:5e:60:
                    8c:a2:19:24:cd:a6:ba:6b:f5:9c:27:90:a6:05:6f:
                    be:d3:2f:60:ac:eb:56:75:1e:95:12:99:5f:ab:f0:
                    0a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6E:B7:0D:F1:0D:AE:30:A2:E3:32:35:40:2C:D7:00:EE:B7:57:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/70f7c180-9c4d-371e-a4a4-d0a8d7b4d6df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.99.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:4b:cf:ea:ec:d5:8c:75:a2:ef:85:98:4c:12:89:15:6e:f4:
         6a:a5:be:92:64:98:c0:7b:5b:48:08:f0:ad:8a:77:31:7f:83:
         a9:da:8e:cd:3b:34:1c:d2:ed:bd:c2:61:4e:53:e5:ba:53:64:
         8e:f6:b5:bc:19:5f:66:4c:d7:19:e8:1f:5b:9c:6a:f3:20:19:
         e6:2b:2b:6b:81:a1:b9:48:99:78:0d:91:61:11:e6:b0:14:29:
         e2:6e:f3:91:db:05:6a:cf:ce:3a:8a:38:f0:b7:87:b7:de:8b:
         86:52:19:92:28:fc:dc:dc:b7:e1:a4:37:15:39:21:a9:ea:8e:
         f7:b7:fe:3a:0b:21:d9:51:0c:03:8c:67:c5:08:aa:65:39:3c:
         6a:c7:b2:cc:2d:51:c2:fa:de:7b:c1:b9:22:f1:d8:b8:e2:01:
         50:88:a1:24:3a:53:85:d7:5c:cd:bc:7f:f4:45:eb:30:c5:4c:
         89:f3:93:11:2d:4a:46:25:55:70:51:b1:a4:f8:18:de:2b:f9:
         aa:0d:7c:7f:ef:bc:e6:e4:87:6d:a7:dc:da:5e:f5:c6:50:7b:
         04:45:66:14:91:fa:c0:a2:96:0f:b6:3a:2a:2f:32:6f:21:e9:
         83:58:7e:b8:a0:d7:e3:44:bb:7d:c1:bb:a1:5e:4c:4e:d9:c8:
         81:95:6d:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXhk9ETmDjBrxqLLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk
ODE2MB4XDTI0MDUxNTEzMDAzNFoXDTI0MDgxMzEzMDAzNFowLzEtMCsGA1UEAxMk
NTE0ZWMzOTEtMDU1Yi00N2Q5LThlNmEtNzlmNjEzNDhiZGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9JW7taSq1z/RYTcdAVF6hVCEEGlSsDHAc/y
UM48bKLVoH1NuzpSPd6brc/6WUqj7YvnoCG5vu2VQi2V3lqpKr7dlSChTZ9lAMTH
lKkDuKolmtMSdCv6pTCzVs+r0P8rxxRfCWRajumvrq3JGWWOO2p+n/Q37zQnDXHQ
O4fxE3Qn4L/llxwmDs2AcOqwAFl8bDbH+drkVa3A7ki32oa2yAy385vqAF4WGuv9
/NtNjGLhVmfKESDDj5ZSsmkNunR1BDIq5UTsIO70NrvACLK+3HAV53ESXG47h0aI
zE8YXmCMohkkzaa6a/WcJ5CmBW++0y9grOtWdR6VEplfq/AKZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFlutw3xDa4wouMyNUAs1wDut1fRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5
OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvNzBmN2MxODAtOWM0ZC0z
NzFlLWE0YTQtZDBhOGQ3YjRkNmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj
YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh
ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx
NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqGM4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABBLz+rs1Yx1ou+FmEwSiRVu9GqlvpJkmMB7W0gI8K2KdzF/g6najs07
NBzS7b3CYU5T5bpTZI72tbwZX2ZM1xnoH1ucavMgGeYrK2uBoblImXgNkWER5rAU
KeJu85HbBWrPzjqKOPC3h7fei4ZSGZIo/Nzct+GkNxU5Ianqjve3/joLIdlRDAOM
Z8UIqmU5PGrHsswtUcL63nvBuSLx2LjiAVCIoSQ6U4XXXM28f/RF6zDFTInzkxEt
SkYlVXBRsaT4GN4r+aoNfH/vvObkh22n3Npe9cZQewRFZhSR+sCilg+2OiovMm8h
6YNYfrig1+NEu33Bu6FeTE7ZyIGVbbE=
-----END CERTIFICATE-----
Generated at Sun Jun 2 22:50:24 2024 by rpki-client on console-ams.rpki-client.org