Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/327dca82-1257-3b96-8181-5fdd1f6a9b6f.roa
File:                     327dca82-1257-3b96-8181-5fdd1f6a9b6f.roa (raw, json)
Hash identifier:          fKxRB7Xz8K8mmTyKTZ443GGXTukw3EWKvnfT1ITNU5E=
Subject key identifier:   B6:6D:F1:5D:13:F8:40:30:1B:16:28:C0:B1:84:48:AE:72:88:F7:37
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DF7436755014586DC7C40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/327dca82-1257-3b96-8181-5fdd1f6a9b6f.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        70.41.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:f7:43:67:55:01:45:86:dc:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=5fdc5494-1654-4b99-a9dc-7624f486e16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bd:22:1b:68:bc:bf:73:c8:1c:6b:03:97:08:
                    08:10:d9:97:60:37:96:97:02:d7:27:f1:8c:8b:35:
                    13:f0:39:1e:71:41:aa:f0:eb:cf:27:d9:cf:7e:5a:
                    6e:17:b9:b3:ca:32:b6:5e:db:51:f2:9b:c1:90:d4:
                    a0:b7:b4:36:e5:31:00:62:b1:12:64:f9:db:0c:d5:
                    30:09:77:e4:d7:38:31:b5:67:bf:cd:99:7a:a2:70:
                    6d:3f:e2:83:01:f8:77:ac:71:78:4f:d4:bd:79:07:
                    aa:ba:8e:47:09:15:7b:3b:80:11:9f:bc:db:65:d1:
                    cf:76:d1:b7:04:18:31:ea:b4:40:a5:9b:6e:13:51:
                    16:9a:ac:29:0e:8c:c1:9f:7b:62:7f:96:04:c7:e4:
                    c7:2d:41:ed:ef:46:d9:12:f9:84:b2:24:ee:41:2a:
                    58:70:b0:ca:a9:c2:44:d8:1d:ef:c0:a3:ae:ea:6a:
                    47:ee:c6:0a:8f:a3:8f:e7:82:04:60:23:fb:a5:54:
                    e6:8b:71:f3:01:62:02:8a:33:08:92:dd:e3:57:88:
                    31:dd:28:6d:fe:88:11:e1:3d:b2:e5:e9:8b:15:0d:
                    dd:fd:2f:3b:38:38:91:3a:6c:ab:70:50:76:2d:63:
                    7f:40:44:dc:18:fd:16:b7:81:26:b1:b4:ff:79:ce:
                    5a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6D:F1:5D:13:F8:40:30:1B:16:28:C0:B1:84:48:AE:72:88:F7:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/327dca82-1257-3b96-8181-5fdd1f6a9b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:29:c0:ad:a0:8c:5e:fc:42:80:80:3b:89:21:08:69:f9:67:
         15:f7:9f:37:d4:0b:f8:2d:da:06:fc:b8:56:e1:0f:53:c7:d9:
         fb:0a:77:bb:84:b5:77:a1:5b:7c:74:6f:7c:60:e3:00:a3:4f:
         7d:ae:b6:39:19:3c:ab:b5:5b:d2:14:15:c0:a6:2e:04:77:c2:
         c4:81:b1:0b:ba:bf:75:ed:b9:5b:d6:5f:d1:9d:8f:a9:af:b5:
         c0:2a:2b:22:a3:a1:41:ca:c2:ca:76:2d:ca:0c:01:f8:3f:ac:
         b3:f3:56:8a:5f:96:5a:f5:48:10:4e:b4:35:eb:f0:89:0a:14:
         0b:4e:a8:5a:1a:d7:6d:fb:3f:37:45:c1:df:6f:05:9f:53:ba:
         bc:b1:6e:4d:dd:1f:96:35:97:42:9f:c9:17:81:54:f8:51:d5:
         93:1f:b9:b3:57:c9:ce:d9:5d:1c:6b:7d:84:1c:4f:df:44:bb:
         6b:13:91:67:2c:9f:7f:b6:25:70:ec:83:fd:e7:4a:bf:c3:85:
         6a:ce:76:c8:6c:1f:f8:e4:63:b1:af:b3:f9:1e:ba:95:17:4e:
         34:c9:93:37:8e:a6:78:bc:b9:42:2e:b7:9b:88:fe:93:a1:f4:
         94:ba:9b:b8:21:fa:06:fb:84:ff:e4:ce:5c:c2:0b:c8:e0:b3:
         95:cb:72:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPfdDZ1UBRYbcfEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
NWZkYzU0OTQtMTY1NC00Yjk5LWE5ZGMtNzYyNGY0ODZlMTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6L0iG2i8v3PIHGsDlwgIENmXYDeWlwLXJ/GM
izUT8DkecUGq8OvPJ9nPflpuF7mzyjK2XttR8pvBkNSgt7Q25TEAYrESZPnbDNUw
CXfk1zgxtWe/zZl6onBtP+KDAfh3rHF4T9S9eQequo5HCRV7O4ARn7zbZdHPdtG3
BBgx6rRApZtuE1EWmqwpDozBn3tif5YEx+THLUHt70bZEvmEsiTuQSpYcLDKqcJE
2B3vwKOu6mpH7sYKj6OP54IEYCP7pVTmi3HzAWICijMIkt3jV4gx3Sht/ogR4T2y
5emLFQ3d/S87ODiROmyrcFB2LWN/QETcGP0Wt4EmsbT/ec5aHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLZt8V0T+EAwGxYowLGESK5yiPc3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzI3ZGNhODItMTI1Ny0z
Yjk2LTgxODEtNWZkZDFmNmE5YjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFEpwK2gjF78QoCAO4khCGn5ZxX3nzfUC/gt2gb8uFbhD1PH2fsKd7uE
tXehW3x0b3xg4wCjT32utjkZPKu1W9IUFcCmLgR3wsSBsQu6v3XtuVvWX9Gdj6mv
tcAqKyKjoUHKwsp2LcoMAfg/rLPzVopfllr1SBBOtDXr8IkKFAtOqFoa1237PzdF
wd9vBZ9Turyxbk3dH5Y1l0KfyReBVPhR1ZMfubNXyc7ZXRxrfYQcT99Eu2sTkWcs
n3+2JXDsg/3nSr/DhWrOdshsH/jkY7Gvs/keupUXTjTJkzeOpni8uUIut5uI/pOh
9JS6m7gh+gb7hP/kzlzCC8jgs5XLcgI=
-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:34 2024 by rpki-client on console-ams.rpki-client.org