Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04f73d22-93a8-3bff-9132-cc7fcbf665e1.roa
File:                     04f73d22-93a8-3bff-9132-cc7fcbf665e1.roa (raw, json)
Hash identifier:          bw8UbKWgw2sFbbsNSQYbn4CXiLUz0G/dsLo02yT9JJU=
Subject key identifier:   11:ED:EF:75:FE:95:22:01:18:EA:55:66:46:19:2C:C8:E4:64:95:A3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D7D6F486D0BFE8A95B180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04f73d22-93a8-3bff-9132-cc7fcbf665e1.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:7d:6f:48:6d:0b:fe:8a:95:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=2853a070-1687-476e-9b72-7a163a278f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d9:a3:f3:37:ec:1d:2f:52:22:06:5a:29:02:
                    31:6c:a3:4b:2f:30:ea:b6:0e:5d:19:d0:d5:47:e1:
                    36:b2:78:d9:ca:4e:d2:33:ec:2b:c3:db:b6:7f:4b:
                    82:cd:1c:60:ef:82:aa:7e:7b:5e:fb:ab:cd:65:3b:
                    70:7a:3e:c1:3a:9a:f9:0c:03:7a:fb:d6:8c:7f:42:
                    06:00:c2:b0:9c:2e:dd:4d:91:9f:1c:6f:1a:7b:fa:
                    32:e7:93:89:b7:51:84:fb:bb:f9:56:b3:53:60:16:
                    38:34:c0:f3:f3:9a:e2:aa:2b:44:70:08:f9:05:0a:
                    5b:78:64:06:07:89:2a:bd:40:c7:05:63:b6:33:d8:
                    b7:49:79:53:2d:af:35:56:e0:ae:68:06:b6:a4:f4:
                    50:af:d3:83:59:75:2d:e0:17:34:3e:22:3e:be:46:
                    5f:f6:23:f3:9a:39:5f:2d:4d:e2:49:1c:e0:6c:3d:
                    44:65:6d:c5:cc:b2:95:69:6d:c3:ea:b8:e7:f5:71:
                    57:96:24:29:a6:53:b6:dd:c1:84:da:af:b5:dc:f7:
                    05:fd:8e:a6:5c:d4:40:7e:f8:20:12:13:3e:6c:ab:
                    6a:d8:15:cd:23:48:d1:88:da:41:3a:4b:02:ca:3c:
                    86:c9:59:8b:65:aa:94:4b:3d:fd:21:b7:4c:10:f0:
                    d6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:ED:EF:75:FE:95:22:01:18:EA:55:66:46:19:2C:C8:E4:64:95:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04f73d22-93a8-3bff-9132-cc7fcbf665e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:bb:1d:4c:e4:cb:04:01:37:dc:1b:1e:71:66:ee:94:10:29:
         a6:a6:20:28:0a:a4:88:f8:d0:aa:6c:eb:2a:35:e3:14:4d:ff:
         11:6d:7b:12:5c:8f:32:9e:62:65:fb:ec:c2:ba:7e:62:f7:f5:
         be:5d:7b:0d:0e:78:c4:60:66:29:23:9a:46:09:1a:74:02:1d:
         11:b9:f4:ea:1d:af:c2:be:b7:69:f1:05:e7:74:5b:29:0f:67:
         ea:32:a3:72:1d:a5:60:72:b7:6a:73:1c:68:e6:4c:8d:d4:02:
         3e:8a:45:7c:69:ff:8e:ba:bb:58:f8:ef:19:c9:ee:52:e4:67:
         fd:51:93:49:9b:ac:33:16:c7:c2:0b:a2:1c:d7:d1:6a:22:ec:
         3c:d5:d3:91:32:c3:b5:4b:d5:21:f1:a0:52:b8:4a:5c:2c:11:
         c5:25:32:9c:df:41:bb:ef:00:89:75:b3:81:1e:88:d0:5c:85:
         de:43:72:96:43:2a:fa:c1:6f:a7:9d:95:3f:af:e6:4c:9c:a6:
         5b:78:c9:da:b7:20:f7:90:53:1b:1c:d3:c9:01:73:7d:79:5c:
         2c:69:bb:d7:a3:97:06:34:8c:04:6a:3c:fa:75:b4:4b:ad:ba:
         61:06:2e:70:71:26:cd:44:85:22:a0:72:39:8e:73:63:8c:7d:
         e3:75:70:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPX1vSG0L/oqVsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
Mjg1M2EwNzAtMTY4Ny00NzZlLTliNzItN2ExNjNhMjc4ZjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtmj8zfsHS9SIgZaKQIxbKNLLzDqtg5dGdDV
R+E2snjZyk7SM+wrw9u2f0uCzRxg74Kqfnte+6vNZTtwej7BOpr5DAN6+9aMf0IG
AMKwnC7dTZGfHG8ae/oy55OJt1GE+7v5VrNTYBY4NMDz85riqitEcAj5BQpbeGQG
B4kqvUDHBWO2M9i3SXlTLa81VuCuaAa2pPRQr9ODWXUt4Bc0PiI+vkZf9iPzmjlf
LU3iSRzgbD1EZW3FzLKVaW3D6rjn9XFXliQpplO23cGE2q+13PcF/Y6mXNRAfvgg
EhM+bKtq2BXNI0jRiNpBOksCyjyGyVmLZaqUSz39IbdMEPDWrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBHt73X+lSIBGOpVZkYZLMjkZJWjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDRmNzNkMjItOTNhOC0z
YmZmLTkxMzItY2M3ZmNiZjY2NWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABG7HUzkywQBN9wbHnFm7pQQKaamICgKpIj40Kps6yo14xRN/xFtexJc
jzKeYmX77MK6fmL39b5dew0OeMRgZikjmkYJGnQCHRG59Oodr8K+t2nxBed0WykP
Z+oyo3IdpWByt2pzHGjmTI3UAj6KRXxp/466u1j47xnJ7lLkZ/1Rk0mbrDMWx8IL
ohzX0Woi7DzV05Eyw7VL1SHxoFK4SlwsEcUlMpzfQbvvAIl1s4EeiNBchd5DcpZD
KvrBb6edlT+v5kycplt4ydq3IPeQUxsc08kBc315XCxpu9ejlwY0jARqPPp1tEut
umEGLnBxJs1EhSKgcjmOc2OMfeN1cG8=
-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:28 2024 by rpki-client on console-ams.rpki-client.org