Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/30818404-0faf-386a-8dbb-ab3e92ff949f.roa
File:                     30818404-0faf-386a-8dbb-ab3e92ff949f.roa (raw, json)
Hash identifier:          gd4eQ5J9oouQrYs1Ov72m37EBbmI03aiHSivJ2rh2+o=
Subject key identifier:   2C:3B:AD:29:B1:A5:8B:AC:3C:5F:4F:A9:14:23:AB:F3:A8:17:CD:F6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0EE26960D829949941D100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/30818404-0faf-386a-8dbb-ab3e92ff949f.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        76.70.230.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:e2:69:60:d8:29:94:99:41:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=25d1f9a1-d8f6-4670-9dd2-d434f3207121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2a:b1:7f:a2:2f:7f:32:b1:67:16:f6:2d:ac:
                    91:a9:5f:c3:e5:81:34:61:9e:7f:e8:53:64:98:dc:
                    f8:29:e1:a5:57:e3:c8:5c:2a:92:66:b9:c0:2c:9a:
                    05:51:7c:66:f3:a6:d1:71:00:29:b4:31:ab:08:57:
                    19:31:1d:43:10:ba:68:6c:30:28:a6:44:30:f6:50:
                    b8:88:6f:78:bd:bb:05:da:a0:21:3c:c3:04:a8:a9:
                    d6:58:7e:3a:2e:df:37:df:f2:ae:1c:f3:e4:7d:49:
                    50:88:ab:78:08:2d:c8:34:02:5e:29:f5:4b:a3:56:
                    0e:0c:26:ea:00:55:62:58:f6:6b:ae:19:ca:cf:cb:
                    df:a4:25:40:db:30:77:dd:fc:95:7c:0b:4a:71:24:
                    fd:f9:6f:d5:55:b7:8b:46:70:36:cd:61:46:de:36:
                    8a:23:b6:2a:03:a4:93:58:30:91:56:41:90:e6:a8:
                    56:0c:ae:5c:eb:c5:06:a2:3f:e4:ce:14:26:cc:84:
                    82:e9:ff:f5:13:7e:02:a6:71:3e:9c:0c:b9:7c:d8:
                    f5:3a:64:02:46:69:cf:e0:4e:f0:1d:ef:2e:d7:ec:
                    90:a0:62:a8:03:d9:f7:93:b5:3e:8a:3d:a4:b3:cf:
                    48:71:6b:19:1b:55:91:9e:47:4d:ed:d7:f7:e3:64:
                    e8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3B:AD:29:B1:A5:8B:AC:3C:5F:4F:A9:14:23:AB:F3:A8:17:CD:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/30818404-0faf-386a-8dbb-ab3e92ff949f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.70.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:91:e9:07:83:cc:aa:d8:9d:5e:42:29:d3:13:a1:b6:0a:2b:
         2a:06:25:2d:ba:58:f8:bf:3c:6e:de:dd:ac:59:c2:03:ba:fc:
         0b:b7:06:05:04:65:70:5c:3c:a5:e0:83:8a:81:2f:a3:1e:6a:
         6e:13:50:eb:c1:f4:01:bf:3e:e8:dc:88:12:f7:15:e2:b8:90:
         03:84:8c:80:6d:cb:a9:14:fe:70:86:18:bc:e6:38:aa:26:85:
         7b:77:25:b5:bc:8b:91:65:17:a1:b2:35:0b:ad:40:a7:21:cc:
         d7:a2:e4:5e:5f:af:f0:c0:cf:8a:64:be:61:be:97:3f:95:a3:
         ad:be:1d:31:11:35:4d:f9:d5:f2:ec:4a:14:bc:a5:b2:57:93:
         92:3b:9f:70:8e:3e:fc:92:de:71:7a:6d:33:59:5c:4b:ae:27:
         32:e2:1e:63:eb:ba:0f:a6:41:18:b6:48:4e:72:51:78:70:de:
         de:c7:bf:bf:40:1e:e9:f5:93:37:42:b5:43:3e:13:91:f5:69:
         06:c8:0b:03:19:ff:7a:62:fa:0b:4c:75:2b:74:ef:79:f8:6b:
         06:01:21:4b:b9:08:d3:fe:9c:64:cc:e3:47:6c:eb:f9:19:c4:
         16:96:c8:cf:a1:85:ea:4c:0a:8f:ec:8d:1a:07:36:1d:c7:2e:
         04:43:9f:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrDuJpYNgplJlB0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
MjVkMWY5YTEtZDhmNi00NjcwLTlkZDItZDQzNGYzMjA3MTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yqxf6IvfzKxZxb2LayRqV/D5YE0YZ5/6FNk
mNz4KeGlV+PIXCqSZrnALJoFUXxm86bRcQAptDGrCFcZMR1DELpobDAopkQw9lC4
iG94vbsF2qAhPMMEqKnWWH46Lt833/KuHPPkfUlQiKt4CC3INAJeKfVLo1YODCbq
AFViWPZrrhnKz8vfpCVA2zB33fyVfAtKcST9+W/VVbeLRnA2zWFG3jaKI7YqA6ST
WDCRVkGQ5qhWDK5c68UGoj/kzhQmzISC6f/1E34CpnE+nAy5fNj1OmQCRmnP4E7w
He8u1+yQoGKoA9n3k7U+ij2ks89IcWsZG1WRnkdN7df342TopwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCw7rSmxpYusPF9PqRQjq/OoF832MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMzA4MTg0MDQtMGZhZi0z
ODZhLThkYmItYWIzZTkyZmY5NDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTEbmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOR6QeDzKrYnV5CKdMTobYKKyoGJS26WPi/PG7e3axZwgO6/Au3BgUE
ZXBcPKXgg4qBL6Meam4TUOvB9AG/PujciBL3FeK4kAOEjIBty6kU/nCGGLzmOKom
hXt3JbW8i5FlF6GyNQutQKchzNei5F5fr/DAz4pkvmG+lz+Vo62+HTERNU351fLs
ShS8pbJXk5I7n3COPvyS3nF6bTNZXEuuJzLiHmPrug+mQRi2SE5yUXhw3t7Hv79A
Hun1kzdCtUM+E5H1aQbICwMZ/3pi+gtMdSt073n4awYBIUu5CNP+nGTM40ds6/kZ
xBaWyM+hhepMCo/sjRoHNh3HLgRDn54=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org