Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31/665cc02d-f73c-3a64-ba89-b5cb975b7c0b.roa
File:                     665cc02d-f73c-3a64-ba89-b5cb975b7c0b.roa (raw, json)
Hash identifier:          FWxdxye3jYdf6XG+66g6jTNOFF87Rt8MY1GeHNIdQPA=
Subject key identifier:   D2:2C:83:E0:42:59:CF:79:F5:D6:9A:52:BE:32:3C:22:29:1E:1F:57
Certificate issuer:       /CN=e87e7197-115d-4b17-bafc-0f9752e38b31
Certificate serial:       010D0C9F43285847A30BF4B4832DC934D2FD0C80
Authority key identifier: E9:0F:2B:5C:D4:BD:D1:46:B0:8F:DB:7A:D9:B0:64:7C:9F:AE:FF:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31/665cc02d-f73c-3a64-ba89-b5cb975b7c0b.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     13742
IP address blocks:        70.37.192.0/20 maxlen: 20
                          70.37.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31/e87e7197-115d-4b17-bafc-0f9752e38b31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31/e87e7197-115d-4b17-bafc-0f9752e38b31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:f4:b4:83:2d:c9:34:d2:fd:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87e7197-115d-4b17-bafc-0f9752e38b31
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=a371efc7-65c1-4390-b45f-33445a2ed59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:71:21:00:18:cb:f2:42:bd:e1:11:ca:08:81:
                    c1:4f:8c:c0:64:be:85:82:62:2c:22:24:97:d0:7b:
                    d6:61:84:36:d2:90:6c:c1:d3:d8:bb:54:60:93:6a:
                    49:0a:a3:37:55:75:71:a5:c6:0f:ff:1f:eb:16:4f:
                    0f:dc:5b:df:f9:a3:77:85:44:c8:b7:21:f6:08:a6:
                    a9:4f:aa:4d:c1:6b:09:fe:ee:d9:b5:55:cb:55:24:
                    cb:81:12:b5:f8:32:16:92:87:97:f3:b7:44:a7:62:
                    79:24:ee:7f:9c:96:30:0c:85:14:75:9b:6b:20:17:
                    7e:94:c3:aa:84:a1:82:14:f0:1e:4a:b9:b1:89:9b:
                    66:e1:aa:7c:fc:c7:02:a6:af:27:a5:59:3f:b6:6d:
                    63:09:99:df:dc:50:b8:a0:f8:ab:86:fb:bb:0e:a4:
                    ef:3c:22:fe:6b:bb:fd:bd:d9:d6:57:43:f0:57:10:
                    98:e3:54:09:a0:8a:e8:21:d8:25:a3:b7:59:05:07:
                    41:5b:ce:99:9e:3a:ce:84:e6:63:01:d3:da:63:30:
                    14:df:5c:57:c8:8a:fd:14:ad:66:70:b2:14:5c:47:
                    21:27:e4:6c:fb:72:a1:11:cd:b1:b3:a7:a9:fd:d7:
                    c7:46:d9:d8:7c:86:b3:23:44:ff:04:2c:86:57:37:
                    68:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2C:83:E0:42:59:CF:79:F5:D6:9A:52:BE:32:3C:22:29:1E:1F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31/665cc02d-f73c-3a64-ba89-b5cb975b7c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31/e87e7197-115d-4b17-bafc-0f9752e38b31.crl

            X509v3 Authority Key Identifier:
                keyid:E9:0F:2B:5C:D4:BD:D1:46:B0:8F:DB:7A:D9:B0:64:7C:9F:AE:FF:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e87e7197-115d-4b17-bafc-0f9752e38b31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.37.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:61:db:6c:1f:ce:6f:4e:af:11:4a:12:53:a0:f7:c8:b5:ea:
         53:3f:aa:6d:bf:96:27:eb:01:ca:92:32:1f:b5:41:ce:b3:ed:
         70:99:68:a5:87:95:e6:1f:b4:57:c2:11:a7:33:97:ac:9a:c5:
         12:93:80:18:8d:78:91:7a:74:62:88:c6:fe:05:f1:25:27:9d:
         65:d3:4b:45:1a:35:0a:18:a5:8e:c3:db:12:8e:4f:b3:2e:48:
         b4:e6:25:d1:9c:1b:8e:3c:b3:61:05:93:48:46:c5:66:e1:be:
         87:32:55:8b:0f:74:2e:81:b0:2f:56:7c:d8:25:18:8d:b7:a4:
         34:ec:75:71:19:60:f3:e9:34:a2:e3:45:9d:14:bf:db:a8:0f:
         80:9b:06:1b:db:7a:b6:2e:8f:eb:9b:13:6a:cf:e8:e6:c8:85:
         56:c2:19:f4:f9:a5:52:5e:c6:43:0a:2d:89:5c:62:31:93:28:
         f8:26:82:4c:82:ea:50:7c:b5:02:33:10:5a:2b:80:2f:f6:f6:
         28:b4:7c:2c:c8:8b:a7:b8:5b:52:58:92:1a:fb:b3:e9:b1:d3:
         c5:a0:24:b6:21:55:a6:1b:90:da:dd:af:e8:7d:31:1d:0a:75:
         c8:af:1b:c2:50:de:8b:94:ea:7e:7f:71:c0:c1:cf:75:fd:54:
         ab:61:bb:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejC/S0gy3JNNL9DIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTg3ZTcxOTctMTE1ZC00YjE3LWJhZmMtMGY5NzUyZTM4
YjMxMB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk
YTM3MWVmYzctNjVjMS00MzkwLWI0NWYtMzM0NDVhMmVkNTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHEhABjL8kK94RHKCIHBT4zAZL6FgmIsIiSX
0HvWYYQ20pBswdPYu1Rgk2pJCqM3VXVxpcYP/x/rFk8P3Fvf+aN3hUTItyH2CKap
T6pNwWsJ/u7ZtVXLVSTLgRK1+DIWkoeX87dEp2J5JO5/nJYwDIUUdZtrIBd+lMOq
hKGCFPAeSrmxiZtm4ap8/McCpq8npVk/tm1jCZnf3FC4oPirhvu7DqTvPCL+a7v9
vdnWV0PwVxCY41QJoIroIdglo7dZBQdBW86ZnjrOhOZjAdPaYzAU31xXyIr9FK1m
cLIUXEchJ+Rs+3KhEc2xs6ep/dfHRtnYfIazI0T/BCyGVzdokwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNIsg+BCWc959daaUr4yPCIpHh9XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lODdl
NzE5Ny0xMTVkLTRiMTctYmFmYy0wZjk3NTJlMzhiMzEvNjY1Y2MwMmQtZjczYy0z
YTY0LWJhODktYjVjYjk3NWI3YzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTg3ZTcxOTctMTE1ZC00YjE3LWJh
ZmMtMGY5NzUyZTM4YjMxL2U4N2U3MTk3LTExNWQtNGIxNy1iYWZjLTBmOTc1MmUz
OGIzMS5jcmwwHwYDVR0jBBgwFoAU6Q8rXNS90Uawj9t62bBkfJ+u/x0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lODdlNzE5Ny0xMTVkLTRiMTctYmFmYy0wZjk3
NTJlMzhiMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRiXAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9h22wfzm9OrxFKElOg98i16lM/qm2/lifrAcqSMh+1Qc6z7XCZaKWH
leYftFfCEaczl6yaxRKTgBiNeJF6dGKIxv4F8SUnnWXTS0UaNQoYpY7D2xKOT7Mu
SLTmJdGcG448s2EFk0hGxWbhvocyVYsPdC6BsC9WfNglGI23pDTsdXEZYPPpNKLj
RZ0Uv9uoD4CbBhvberYuj+ubE2rP6ObIhVbCGfT5pVJexkMKLYlcYjGTKPgmgkyC
6lB8tQIzEForgC/29ii0fCzIi6e4W1JYkhr7s+mx08WgJLYhVaYbkNrdr+h9MR0K
dcivG8JQ3ouU6n5/ccDBz3X9VKthuy0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:22 2024 by rpki-client on console-ams.rpki-client.org