Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43a1ddb9-3f74-3a3c-8125-138aed250648.roa
File:                     43a1ddb9-3f74-3a3c-8125-138aed250648.roa (raw, json)
Hash identifier:          VX3cnWF4cyikVlnx/YcudHbiV/z471cRChenaLV2CaY=
Subject key identifier:   96:87:2B:71:E0:CA:46:36:4E:2C:9B:03:68:1A:F7:08:25:3C:ED:76
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B35DF3A4B6BEF370A77080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43a1ddb9-3f74-3a3c-8125-138aed250648.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        76.70.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:5d:f3:a4:b6:be:f3:70:a7:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=461b47d2-2e51-4954-8248-adef14029e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7a:b1:54:3f:c2:47:e0:36:14:62:e9:b1:9a:
                    05:d3:d2:a8:26:eb:f8:5e:78:47:f5:5d:88:48:f6:
                    21:32:21:7a:d0:25:bc:41:0a:a1:98:93:69:4e:be:
                    02:80:ea:1c:27:85:1a:0a:2b:71:30:b9:a2:8c:90:
                    76:86:b6:ef:de:cc:ef:0d:bb:cc:c2:93:a8:5b:1b:
                    fd:65:79:38:99:dd:6d:e4:db:5c:5e:40:d2:26:23:
                    f0:69:01:76:7e:8c:f2:e0:1b:79:ce:80:91:ab:de:
                    47:1a:b7:6b:09:9e:4e:b8:ad:33:01:ba:c3:a5:48:
                    5b:49:8a:c6:0f:4c:7f:82:c6:9a:c7:c4:29:f5:16:
                    79:f9:0e:8f:0a:0d:af:43:c6:40:07:15:0a:6b:9e:
                    51:27:64:21:8c:35:df:b8:19:13:04:62:f4:27:db:
                    4f:e7:c2:2e:0b:b2:d3:db:e8:60:c0:19:56:ca:9b:
                    a8:52:30:50:e4:4c:34:58:15:3a:13:42:d5:23:1f:
                    30:b3:c0:d4:41:11:4a:ff:00:db:a9:c1:d9:95:a9:
                    a1:eb:df:10:69:5d:ec:eb:c9:e0:39:80:67:11:b2:
                    46:2a:cb:3f:61:33:93:ba:95:f3:e0:19:86:ee:f6:
                    f4:fd:9d:13:5a:84:0b:c2:9f:30:99:2b:f2:dd:2e:
                    18:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:87:2B:71:E0:CA:46:36:4E:2C:9B:03:68:1A:F7:08:25:3C:ED:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43a1ddb9-3f74-3a3c-8125-138aed250648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.70.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:15:5e:e7:b9:b1:5e:c5:1b:ca:f5:a7:4b:8b:4d:f5:26:f2:
         ca:64:96:30:81:ea:51:34:a2:84:ad:a5:e5:8e:6e:04:61:11:
         2d:88:55:cb:af:6b:03:9f:d7:f8:ef:d2:d7:cd:81:88:25:d5:
         b4:b5:9b:e4:0c:c8:e1:c8:57:00:cf:bd:19:69:85:4d:49:e7:
         1e:6a:b6:1a:e2:13:8b:d6:18:08:99:ad:c4:98:5e:8d:8c:43:
         d3:82:50:10:9c:10:9d:9c:d2:08:12:3d:ed:a2:99:77:53:9b:
         2d:d4:c8:2b:ea:dc:c0:00:b7:30:42:3c:c1:02:41:88:fe:d7:
         c8:18:78:c4:e2:36:31:82:04:41:a0:a8:16:23:58:f7:fc:10:
         0d:8f:21:35:81:c7:70:9d:5b:0a:f2:a0:e0:e9:4d:cb:ed:c3:
         f6:d1:b6:db:31:80:2d:69:f9:1f:e3:80:74:ef:0e:82:bc:35:
         ed:58:01:5a:77:b7:b9:b6:a4:33:79:91:22:d0:11:e9:dc:35:
         3e:70:ce:4c:ef:1f:fd:c0:7d:4a:fa:df:3d:a4:65:51:4d:17:
         ff:ee:5d:9b:40:46:b5:ca:1c:a5:ef:13:5b:1c:80:b8:3d:6a:
         e4:12:1e:4b:b2:69:a3:88:8d:65:c2:b2:4f:75:e3:5b:1b:d1:
         ef:8c:f6:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWs13zpLa+83CncIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
NDYxYjQ3ZDItMmU1MS00OTU0LTgyNDgtYWRlZjE0MDI5ZTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXqxVD/CR+A2FGLpsZoF09KoJuv4XnhH9V2I
SPYhMiF60CW8QQqhmJNpTr4CgOocJ4UaCitxMLmijJB2hrbv3szvDbvMwpOoWxv9
ZXk4md1t5NtcXkDSJiPwaQF2fozy4Bt5zoCRq95HGrdrCZ5OuK0zAbrDpUhbSYrG
D0x/gsaax8Qp9RZ5+Q6PCg2vQ8ZABxUKa55RJ2QhjDXfuBkTBGL0J9tP58IuC7LT
2+hgwBlWypuoUjBQ5Ew0WBU6E0LVIx8ws8DUQRFK/wDbqcHZlamh698QaV3s68ng
OYBnEbJGKss/YTOTupXz4BmG7vb0/Z0TWoQLwp8wmSvy3S4YRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJaHK3HgykY2TiybA2ga9wglPO12MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNDNhMWRkYjktM2Y3NC0z
YTNjLTgxMjUtMTM4YWVkMjUwNjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTEbQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUVXue5sV7FG8r1p0uLTfUm8spkljCB6lE0ooStpeWObgRhES2IVcuv
awOf1/jv0tfNgYgl1bS1m+QMyOHIVwDPvRlphU1J5x5qthriE4vWGAiZrcSYXo2M
Q9OCUBCcEJ2c0ggSPe2imXdTmy3UyCvq3MAAtzBCPMECQYj+18gYeMTiNjGCBEGg
qBYjWPf8EA2PITWBx3CdWwryoODpTcvtw/bRttsxgC1p+R/jgHTvDoK8Ne1YAVp3
t7m2pDN5kSLQEencNT5wzkzvH/3AfUr63z2kZVFNF//uXZtARrXKHKXvE1scgLg9
auQSHkuyaaOIjWXCsk9141sb0e+M9hk=
-----END CERTIFICATE-----
Generated at Sat May 18 15:59:43 2024 by rpki-client on console-ams.rpki-client.org