Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/e0d41d80-bc3a-30ca-a6d8-db9aef437404.roa
File:                     e0d41d80-bc3a-30ca-a6d8-db9aef437404.roa (raw, json)
Hash identifier:          iMlznLHohKK+Ey5ghLEiJHHo/FBqAquwbHC0Nyeebug=
Subject key identifier:   DE:29:6F:20:4C:A0:68:F3:C7:67:AB:E9:F1:40:AE:30:57:CA:83:1F
Certificate issuer:       /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial:       010D0C9F432858454F02C4762C4CCC68875CE500
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/e0d41d80-bc3a-30ca-a6d8-db9aef437404.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     10753
IP address blocks:        64.29.70.0/24 maxlen: 24
                          66.180.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:c4:76:2c:4c:cc:68:87:5c:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=0e7d2c70-d243-40be-8cb3-fcca9d0a532f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:10:8f:6a:48:ea:dc:e7:c3:29:65:e6:a6:70:
                    92:f7:d4:3d:6f:ad:71:32:be:4d:67:60:f8:f4:d3:
                    15:90:88:bc:80:48:ce:d1:ea:a1:da:7e:aa:68:26:
                    92:03:52:68:11:ed:9d:4f:27:fc:f1:f6:1d:ca:a5:
                    0a:f0:66:99:ce:35:20:c7:11:74:08:48:8d:53:f7:
                    0e:35:06:81:6e:45:54:ef:1a:a9:e0:98:2c:62:2e:
                    76:fc:21:b0:e4:13:1f:38:2f:70:7b:8a:4e:a4:28:
                    14:a9:3d:d7:a5:75:6f:1a:b7:06:10:7f:f0:96:af:
                    c5:ec:9c:83:ee:ba:7d:37:f7:13:16:82:96:b0:dd:
                    98:ff:5b:ae:fc:f0:77:f6:df:fa:c0:2d:9b:ff:5f:
                    39:dc:fd:f9:f4:cb:93:67:fa:30:eb:17:2b:01:5f:
                    65:21:a7:42:73:8d:02:c6:59:b9:4f:5c:98:6e:d4:
                    cc:a0:41:97:7d:e6:73:80:b7:2b:22:d8:8e:ca:76:
                    a9:50:f2:8a:7f:2e:c5:b3:ab:e3:ac:27:96:43:08:
                    e8:ea:93:e8:ab:9b:a4:fa:3c:27:85:9e:65:7e:f1:
                    a3:ea:35:d6:a0:dc:97:8b:e8:23:16:58:58:9a:60:
                    c4:bf:70:22:e9:d6:87:2e:a7:81:1f:35:17:5f:93:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:29:6F:20:4C:A0:68:F3:C7:67:AB:E9:F1:40:AE:30:57:CA:83:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/e0d41d80-bc3a-30ca-a6d8-db9aef437404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.70.0/24
                  66.180.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:43:df:69:a0:d3:cf:95:e3:7e:2b:df:f2:e1:78:2c:42:8e:
         d1:db:91:73:55:2b:07:00:5c:c3:3e:f6:c7:89:28:44:52:ea:
         90:d2:db:31:55:80:62:11:3a:b9:10:3a:58:14:50:4f:3f:eb:
         89:b9:a4:07:ae:64:68:6e:70:37:66:7c:b3:99:6a:26:f0:36:
         6b:a8:71:0e:8d:8e:86:67:a6:a9:a1:0a:41:d7:64:0c:b5:5c:
         56:f6:48:1f:de:3e:d5:55:3a:a4:2b:e4:f8:bc:86:87:eb:b3:
         cd:9b:3c:7f:cf:d4:e6:74:9a:10:55:f0:1a:18:bf:62:50:1b:
         7d:7e:be:a8:df:cc:41:98:a0:f2:65:92:5a:94:72:6d:2b:f9:
         04:44:e8:25:4b:78:d7:be:8a:de:37:b2:37:d9:53:8e:c2:35:
         01:68:be:03:3b:97:77:f2:b7:9c:04:0f:6b:95:65:f8:2e:5a:
         32:41:e9:99:b1:16:3f:29:78:a5:5c:17:08:03:1d:db:8f:f3:
         9d:6c:0b:33:9b:6f:9c:d7:60:e8:3c:97:55:a2:95:66:93:f2:
         53:e5:f0:03:3c:6b:7d:e0:15:ce:7f:3d:c6:3d:31:27:03:78:
         fd:ee:16:d6:bc:05:f1:83:d8:41:3e:e9:77:cf:7a:5c:4d:ba:
         3b:28:85:3c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEVPAsR2LEzMaIdc5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU1MzY3MDEtZTQwYy00MjBhLWFiZDAtOTkzYmY4ZTBl
YWM4MB4XDTI0MDMyNDAxMDAyNFoXDTI0MDYyMjAxMDAyNFowLzEtMCsGA1UEAxMk
MGU3ZDJjNzAtZDI0My00MGJlLThjYjMtZmNjYTlkMGE1MzJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxCPakjq3OfDKWXmpnCS99Q9b61xMr5NZ2D4
9NMVkIi8gEjO0eqh2n6qaCaSA1JoEe2dTyf88fYdyqUK8GaZzjUgxxF0CEiNU/cO
NQaBbkVU7xqp4JgsYi52/CGw5BMfOC9we4pOpCgUqT3XpXVvGrcGEH/wlq/F7JyD
7rp9N/cTFoKWsN2Y/1uu/PB39t/6wC2b/1853P359MuTZ/ow6xcrAV9lIadCc40C
xlm5T1yYbtTMoEGXfeZzgLcrItiOynapUPKKfy7Fs6vjrCeWQwjo6pPoq5uk+jwn
hZ5lfvGj6jXWoNyXi+gjFlhYmmDEv3Ai6daHLqeBHzUXX5OX4wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFN4pbyBMoGjzx2er6fFArjBXyoMfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTUz
NjcwMS1lNDBjLTQyMGEtYWJkMC05OTNiZjhlMGVhYzgvZTBkNDFkODAtYmMzYS0z
MGNhLWE2ZDgtZGI5YWVmNDM3NDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU1MzY3MDEtZTQwYy00MjBhLWFi
ZDAtOTkzYmY4ZTBlYWM4LzFlNTM2NzAxLWU0MGMtNDIwYS1hYmQwLTk5M2JmOGUw
ZWFjOC5jcmwwHwYDVR0jBBgwFoAUTOj0knFEJlIJQflQP4AuKyHOilswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTUzNjcwMS1lNDBjLTQyMGEtYWJkMC05OTNi
ZjhlMGVhYzguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQB1GAwQA
QrSXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHZD32mg08+V434r3/LheCxCjtHbkXNVKwcAXMM+9seJKERS
6pDS2zFVgGIROrkQOlgUUE8/64m5pAeuZGhucDdmfLOZaibwNmuocQ6NjoZnpqmh
CkHXZAy1XFb2SB/ePtVVOqQr5Pi8hofrs82bPH/P1OZ0mhBV8BoYv2JQG31+vqjf
zEGYoPJlklqUcm0r+QRE6CVLeNe+it43sjfZU47CNQFovgM7l3fyt5wED2uVZfgu
WjJB6ZmxFj8peKVcFwgDHduP851sCzObb5zXYOg8l1WilWaT8lPl8AM8a33gFc5/
PcY9MScDeP3uFta8BfGD2EE+6XfPelxNujsohTw=
-----END CERTIFICATE-----
Generated at Thu May 2 04:05:51 2024 by rpki-client on console-fra.rpki-client.org