Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5ee0f977-43dd-38c8-a4b3-779f758db35f.roa
File:                     5ee0f977-43dd-38c8-a4b3-779f758db35f.roa (raw, json)
Hash identifier:          mF/tn7Sp00dxOzXkox3VnMl3j5mIy/L0DKGrINTRsfk=
Subject key identifier:   83:EB:A1:AC:4A:DA:57:E2:DE:8E:9C:DE:23:7B:BE:0F:71:63:7E:62
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0EDB093A7294F13508A080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5ee0f977-43dd-38c8-a4b3-779f758db35f.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        76.70.200.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:db:09:3a:72:94:f1:35:08:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=e5f42cf5-5e39-4f07-8a85-a43fc6060664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:60:87:de:a2:6c:4b:ad:25:09:0a:a6:25:be:
                    a8:1b:34:c3:9d:10:41:ad:11:be:10:8c:9d:7f:97:
                    90:f4:37:08:1f:c1:c1:82:97:50:09:ab:86:da:cd:
                    76:3f:ff:a6:12:4a:ab:5a:fe:c6:df:58:a7:d9:ef:
                    90:69:5b:55:15:1e:a4:cd:72:57:04:28:2f:ed:d9:
                    a6:6c:02:8a:e8:da:78:eb:8a:a5:fe:6b:62:60:6d:
                    3b:1f:7b:64:35:6f:5f:7b:ed:76:c5:dc:6b:90:05:
                    d5:9a:e2:bf:40:10:01:6c:36:0f:e5:5d:60:c9:74:
                    3f:7a:bd:e6:31:bc:8a:5f:57:ea:06:0c:b2:67:07:
                    e5:8b:c6:b2:44:11:a8:18:e8:8f:2c:cb:c6:44:de:
                    43:dd:9a:01:5b:b3:92:e9:63:10:4e:58:2e:00:4f:
                    03:37:89:0b:a3:99:6d:33:97:0b:26:18:cb:ef:cd:
                    cd:56:12:c2:39:35:a4:9e:d3:73:fa:bd:37:0f:43:
                    a8:13:b0:86:f4:c7:5e:ed:2e:82:0b:7c:5d:9d:79:
                    33:ea:56:20:cc:18:21:4d:cf:37:a5:fb:8b:b5:52:
                    33:4d:42:3e:61:e1:fd:46:cd:07:35:1b:43:58:26:
                    6c:71:da:c5:6c:52:54:ec:4d:41:bb:22:1e:c6:0a:
                    3f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EB:A1:AC:4A:DA:57:E2:DE:8E:9C:DE:23:7B:BE:0F:71:63:7E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5ee0f977-43dd-38c8-a4b3-779f758db35f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.70.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:b3:bd:eb:a3:d5:21:5d:3b:a9:f8:e2:85:98:e4:e5:39:a0:
         f4:bc:d2:dd:99:f0:5a:d4:07:58:8e:a8:b3:ed:6a:af:d4:1e:
         89:ef:9e:ce:f3:67:5e:7a:8e:15:25:0a:1e:98:cc:d2:59:56:
         5a:33:83:56:05:7b:75:22:55:05:a7:4b:5f:45:42:48:a8:e6:
         2c:5e:b5:cb:74:96:5c:13:b0:95:4a:ac:dc:2d:30:24:28:6c:
         af:9d:b5:8b:b5:af:47:3f:94:fd:46:04:51:88:03:cf:40:93:
         96:c4:e9:c8:5d:c6:ba:e3:db:e3:fc:6c:d8:26:93:89:a0:c9:
         81:af:b4:21:4c:63:d5:2b:8b:5e:3c:a8:b1:ac:ce:b4:f3:b0:
         d9:44:94:f5:f3:d2:89:32:47:fa:0d:cf:ef:67:8e:e3:1a:1c:
         c5:f8:40:8b:ae:7c:b4:b9:4f:bd:67:f5:eb:07:2c:c1:41:95:
         ba:f3:21:3e:28:e1:05:60:cf:1e:b8:ed:2a:f3:c2:3e:82:47:
         fb:be:be:69:64:09:16:74:3b:64:a0:22:81:b9:4e:05:91:e5:
         bd:92:df:32:2f:63:9c:d0:40:a2:d4:c7:ec:18:75:b8:c6:ba:
         04:89:3a:55:b3:2b:81:79:ed:e0:ea:b3:ed:6b:bc:e8:62:01:
         ab:de:e9:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrDtsJOnKU8TUIoIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZTVmNDJjZjUtNWUzOS00ZjA3LThhODUtYTQzZmM2MDYwNjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGCH3qJsS60lCQqmJb6oGzTDnRBBrRG+EIyd
f5eQ9DcIH8HBgpdQCauG2s12P/+mEkqrWv7G31in2e+QaVtVFR6kzXJXBCgv7dmm
bAKK6Np464ql/mtiYG07H3tkNW9fe+12xdxrkAXVmuK/QBABbDYP5V1gyXQ/er3m
MbyKX1fqBgyyZwfli8ayRBGoGOiPLMvGRN5D3ZoBW7OS6WMQTlguAE8DN4kLo5lt
M5cLJhjL783NVhLCOTWkntNz+r03D0OoE7CG9Mde7S6CC3xdnXkz6lYgzBghTc83
pfuLtVIzTUI+YeH9Rs0HNRtDWCZscdrFbFJU7E1BuyIexgo/owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIProaxK2lfi3o6c3iN7vg9xY35iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNWVlMGY5NzctNDNkZC0z
OGM4LWE0YjMtNzc5Zjc1OGRiMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTEbIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIuzveuj1SFdO6n44oWY5OU5oPS80t2Z8FrUB1iOqLPtaq/UHonvns7z
Z156jhUlCh6YzNJZVlozg1YFe3UiVQWnS19FQkio5ixetct0llwTsJVKrNwtMCQo
bK+dtYu1r0c/lP1GBFGIA89Ak5bE6chdxrrj2+P8bNgmk4mgyYGvtCFMY9Uri148
qLGszrTzsNlElPXz0okyR/oNz+9njuMaHMX4QIuufLS5T71n9esHLMFBlbrzIT4o
4QVgzx647Srzwj6CR/u+vmlkCRZ0O2SgIoG5TgWR5b2S3zIvY5zQQKLUx+wYdbjG
ugSJOlWzK4F57eDqs+1rvOhiAave6Vg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org