Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b52a449-4acc-378f-8abb-f501dea017d5.roa
File:                     0b52a449-4acc-378f-8abb-f501dea017d5.roa (raw, json)
Hash identifier:          aCPa7tkJ4oDiDJEpgGl8osaGo2M//mXQYCBkzGHqsy8=
Subject key identifier:   2C:E5:55:0F:C1:2D:B3:48:C3:1E:DE:06:B6:20:FF:00:97:1F:77:C2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DFA9D040920DA67072240
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b52a449-4acc-378f-8abb-f501dea017d5.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:fa:9d:04:09:20:da:67:07:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=cd8bd31d-5b50-4ea6-a489-5010c0f655f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:ef:dc:99:aa:46:eb:21:76:0c:28:36:cc:
                    d6:11:11:ae:7f:72:88:0c:03:99:70:80:5b:f5:fb:
                    53:61:cd:a0:18:b5:33:c3:f1:ce:6d:88:6f:d7:d2:
                    d8:e1:75:07:f6:22:d0:75:f2:1c:fb:be:29:4c:3e:
                    59:b9:22:ea:f4:ae:0e:9c:18:02:26:b1:f9:1e:e1:
                    08:23:70:e9:5e:8a:b8:4f:0d:d7:9c:1d:04:13:c1:
                    68:d4:69:02:47:c7:e0:81:01:8b:1b:64:19:b4:56:
                    45:4d:ad:66:cd:39:f2:22:66:05:11:11:a6:6d:0a:
                    7d:44:7c:ba:2c:7a:1c:20:f7:12:7b:0e:c9:78:ad:
                    f5:22:84:70:ab:7d:ab:12:12:18:9d:a7:42:f6:60:
                    2e:cb:0d:d7:7f:31:7e:1f:98:10:24:11:50:e1:b5:
                    2f:b2:88:41:27:cd:63:8e:03:99:4f:31:12:e9:32:
                    02:7d:46:2f:46:58:59:b8:79:f0:31:7b:53:9d:df:
                    6b:30:23:df:66:b6:13:47:07:ed:8d:b0:da:f4:21:
                    1c:66:a0:ee:13:d5:e9:df:c0:55:8f:c6:6a:0d:fd:
                    29:0c:d6:c2:5a:ae:f9:c8:35:c1:d0:26:cb:b0:82:
                    d4:be:c4:94:7c:2e:30:07:95:9c:f2:dd:90:72:be:
                    53:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E5:55:0F:C1:2D:B3:48:C3:1E:DE:06:B6:20:FF:00:97:1F:77:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b52a449-4acc-378f-8abb-f501dea017d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:af:e3:76:e7:ce:ba:28:46:af:fd:42:df:b5:0b:88:6b:54:
         a0:28:ba:b3:cd:19:28:17:78:40:dd:4c:57:da:7d:b5:79:5f:
         96:e7:f6:4f:be:f2:d0:fb:54:56:42:49:e9:09:3c:08:42:d9:
         5f:d9:8c:8a:ba:65:59:f5:46:9d:62:30:e0:a4:34:53:7d:d7:
         3a:21:8e:94:4b:b0:f9:20:80:26:3b:1b:01:7b:0b:80:e7:a9:
         6f:7d:bf:46:2f:55:bf:cd:0f:5d:b5:04:8b:76:34:7e:dc:d5:
         0a:34:f8:ed:3a:6f:1b:7c:92:df:ba:43:7a:9a:69:e4:ed:3c:
         0f:68:1b:44:ac:b4:8e:96:5e:ec:ef:ff:17:a5:32:21:4a:30:
         63:c4:83:0a:60:e0:89:5e:8b:0d:09:e2:2c:f8:a1:1c:7a:22:
         03:f4:88:77:55:55:5e:c7:51:fd:2b:36:95:94:59:2a:3c:3d:
         e6:59:db:0a:65:fd:ac:44:be:31:dc:47:36:5e:e5:ff:32:67:
         b0:1e:d1:e8:c2:00:d2:58:51:fb:59:2a:1a:b5:99:b4:4d:1f:
         56:50:b0:07:4c:59:50:a3:41:2b:a5:89:c9:72:a1:17:2c:ab:
         34:02:73:c5:19:ec:80:0c:e9:f4:ad:e3:0a:51:17:72:4b:32:
         04:61:6a:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPfqdBAkg2mcHIkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
Y2Q4YmQzMWQtNWI1MC00ZWE2LWE0ODktNTAxMGMwZjY1NWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpXv3JmqRushdgwoNszWERGuf3KIDAOZcIBb
9ftTYc2gGLUzw/HObYhv19LY4XUH9iLQdfIc+74pTD5ZuSLq9K4OnBgCJrH5HuEI
I3DpXoq4Tw3XnB0EE8Fo1GkCR8fggQGLG2QZtFZFTa1mzTnyImYFERGmbQp9RHy6
LHocIPcSew7JeK31IoRwq32rEhIYnadC9mAuyw3XfzF+H5gQJBFQ4bUvsohBJ81j
jgOZTzES6TICfUYvRlhZuHnwMXtTnd9rMCPfZrYTRwftjbDa9CEcZqDuE9Xp38BV
j8ZqDf0pDNbCWq75yDXB0CbLsILUvsSUfC4wB5Wc8t2Qcr5T0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCzlVQ/BLbNIwx7eBrYg/wCXH3fCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGI1MmE0NDktNGFjYy0z
NzhmLThhYmItZjUwMWRlYTAxN2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARim6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIav43bnzrooRq/9Qt+1C4hrVKAourPNGSgXeEDdTFfafbV5X5bn9k++
8tD7VFZCSekJPAhC2V/ZjIq6ZVn1Rp1iMOCkNFN91zohjpRLsPkggCY7GwF7C4Dn
qW99v0YvVb/ND121BIt2NH7c1Qo0+O06bxt8kt+6Q3qaaeTtPA9oG0SstI6WXuzv
/xelMiFKMGPEgwpg4Ileiw0J4iz4oRx6IgP0iHdVVV7HUf0rNpWUWSo8PeZZ2wpl
/axEvjHcRzZe5f8yZ7Ae0ejCANJYUftZKhq1mbRNH1ZQsAdMWVCjQSuliclyoRcs
qzQCc8UZ7IAM6fSt4wpRF3JLMgRhauI=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:31 2024 by rpki-client on console-ams.rpki-client.org