Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/48fd603b-32a7-3914-8971-7bbb10a51a4e.roa
File:                     48fd603b-32a7-3914-8971-7bbb10a51a4e.roa (raw, json)
Hash identifier:          JPOawf0zjoDiIrR0mfmRtJpqbFNvjqhVPxx2RHzYEPk=
Subject key identifier:   30:DA:E3:CF:F6:1E:19:01:32:13:95:67:E8:AD:BD:FA:1A:3A:FA:E7
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F432858450EEAD473721A339A24690BE0
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/48fd603b-32a7-3914-8971-7bbb10a51a4e.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     36103
IP address blocks:        68.70.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:d4:73:72:1a:33:9a:24:69:0b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=4a2014d1-1456-4040-9b2a-b78e4d6c16fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:2f:d2:a6:96:72:ec:5d:7b:d6:ac:ee:1c:
                    98:bb:ef:4d:b7:70:db:ab:bf:f3:60:dd:13:79:2b:
                    8a:ec:e8:86:2c:38:3b:80:40:18:d2:0e:2c:29:e4:
                    98:bb:66:0b:33:44:f6:31:fd:2a:c3:bd:c0:ce:c9:
                    90:bb:ff:6d:63:43:53:1c:28:b2:bb:15:eb:bb:ca:
                    82:3b:13:ca:74:d3:80:55:9e:7e:c9:bb:22:28:3d:
                    f8:fa:1f:ae:27:c9:89:30:90:45:ec:9f:01:b3:6c:
                    b6:b9:ba:da:e0:c8:49:c6:49:b5:c6:1d:44:d5:3e:
                    f4:6f:71:b5:a5:37:57:91:02:50:d1:28:ad:24:cb:
                    d0:3a:9c:45:94:d5:41:11:6b:d8:b3:d3:c4:03:92:
                    74:9c:69:bb:70:0b:48:7b:a3:11:d3:56:da:06:57:
                    50:25:5f:c4:15:eb:e0:eb:1e:73:8b:11:1b:77:f5:
                    87:d0:d8:ff:3d:32:3a:ef:ec:e8:5b:dc:8b:a4:79:
                    c2:fd:99:43:64:e4:b4:b7:f9:df:64:fa:c5:8c:21:
                    2f:79:76:0e:8d:8d:df:e3:1c:a5:dc:ca:47:3b:57:
                    a2:df:ae:8d:18:ee:a5:fe:08:5e:8f:d5:a9:f1:d7:
                    e0:0c:97:c4:8c:94:fe:26:65:08:c6:17:16:89:5f:
                    b0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DA:E3:CF:F6:1E:19:01:32:13:95:67:E8:AD:BD:FA:1A:3A:FA:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/48fd603b-32a7-3914-8971-7bbb10a51a4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.70.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:8e:f5:1f:40:7e:bf:ba:8f:8f:f5:76:b3:cf:9c:d9:01:6c:
         4a:83:d6:fe:38:bd:ed:c2:e7:7a:d5:a8:34:06:1d:27:e4:f0:
         e5:3d:1a:f2:56:41:80:5d:78:2f:46:46:28:10:a8:cb:b0:1e:
         1b:d1:26:f7:2c:0f:6f:d9:6b:c1:2a:42:d9:0a:ab:f8:43:ed:
         74:7e:69:db:47:af:c8:80:69:b0:72:31:31:31:87:27:43:49:
         b6:c0:71:9a:6c:7c:56:0f:f9:1d:72:f5:13:89:c4:d6:46:bc:
         bf:b4:7a:a9:0b:ce:e4:a6:5f:97:75:ae:80:4a:22:d8:db:f6:
         fb:05:65:fa:2b:78:84:98:52:36:31:d1:a8:e6:79:60:f6:2a:
         3c:9a:0d:c5:2d:13:8b:d0:01:5a:68:fe:25:91:e8:80:7d:37:
         b5:80:3f:b9:ea:a0:a0:80:03:cd:e4:6e:c9:2c:ef:4c:ab:68:
         04:2c:cd:64:f1:3c:c9:c1:ff:1a:77:22:15:a8:3b:80:7b:15:
         7e:de:e6:3e:25:5d:10:07:5e:35:1a:b1:e1:05:a2:7f:55:e1:
         fd:f4:62:85:a3:84:46:18:59:58:1e:5e:fc:12:8a:f3:20:7f:
         0c:a7:a5:95:42:27:78:52:95:2d:1d:59:a5:01:56:09:dd:5f:
         8f:06:27:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUO6tRzchozmiRpC+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmE4YTZmNzktMDhmZi00NTEyLTlmM2UtNThjNDJhODRl
ZDI1MB4XDTI0MDMwMTAyMDAyN1oXDTI0MDUzMDAxMDAyN1owLzEtMCsGA1UEAxMk
NGEyMDE0ZDEtMTQ1Ni00MDQwLTliMmEtYjc4ZTRkNmMxNmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvov0qaWcuxde9as7hyYu+9Nt3Dbq7/zYN0T
eSuK7OiGLDg7gEAY0g4sKeSYu2YLM0T2Mf0qw73AzsmQu/9tY0NTHCiyuxXru8qC
OxPKdNOAVZ5+ybsiKD34+h+uJ8mJMJBF7J8Bs2y2ubra4MhJxkm1xh1E1T70b3G1
pTdXkQJQ0SitJMvQOpxFlNVBEWvYs9PEA5J0nGm7cAtIe6MR01baBldQJV/EFevg
6x5zixEbd/WH0Nj/PTI67+zoW9yLpHnC/ZlDZOS0t/nfZPrFjCEveXYOjY3f4xyl
3MpHO1ei366NGO6l/ghej9Wp8dfgDJfEjJT+JmUIxhcWiV+weQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDDa48/2HhkBMhOVZ+itvfoaOvrnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YThh
NmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0MmE4NGVkMjUvNDhmZDYwM2ItMzJhNy0z
OTE0LTg5NzEtN2JiYjEwYTUxYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmE4YTZmNzktMDhmZi00NTEyLTlm
M2UtNThjNDJhODRlZDI1LzZhOGE2Zjc5LTA4ZmYtNDUxMi05ZjNlLTU4YzQyYTg0
ZWQyNS5jcmwwHwYDVR0jBBgwFoAUwsB6azjvqoFVWA83c9qfk0ges38wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82YThhNmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0
MmE4NGVkMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREbsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHOO9R9Afr+6j4/1drPPnNkBbEqD1v44ve3C53rVqDQGHSfk8OU9GvJW
QYBdeC9GRigQqMuwHhvRJvcsD2/Za8EqQtkKq/hD7XR+adtHr8iAabByMTExhydD
SbbAcZpsfFYP+R1y9ROJxNZGvL+0eqkLzuSmX5d1roBKItjb9vsFZforeISYUjYx
0ajmeWD2KjyaDcUtE4vQAVpo/iWR6IB9N7WAP7nqoKCAA83kbsks70yraAQszWTx
PMnB/xp3IhWoO4B7FX7e5j4lXRAHXjUaseEFon9V4f30YoWjhEYYWVgeXvwSivMg
fwynpZVCJ3hSlS0dWaUBVgndX48GJ2k=
-----END CERTIFICATE-----
Generated at Fri May 17 17:49:18 2024 by rpki-client on console-ams.rpki-client.org