Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3d33148-98bf-392f-be4e-c4d23b074c52.roa
File:                     c3d33148-98bf-392f-be4e-c4d23b074c52.roa (raw, json)
Hash identifier:          utHf35UweTBExBKydwY0XrT+1AWOIL4HWEb0LKZ/smk=
Subject key identifier:   FD:19:80:3F:A0:3C:0D:C5:3A:64:6B:1D:BE:28:EE:2A:B8:89:C1:77
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A3A1D5D8F0191447DE500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3d33148-98bf-392f-be4e-c4d23b074c52.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        70.41.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:3a:1d:5d:8f:01:91:44:7d:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=a4d1eca6-0920-4a75-ac3b-2021b32b78c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:46:71:e0:ab:8e:9f:50:b8:e6:af:2a:28:9c:
                    49:b6:9f:06:4f:7a:9a:1d:40:9d:19:ad:1e:db:14:
                    3b:90:d2:de:e2:64:c4:e8:24:96:2d:d3:9a:ed:81:
                    ca:75:d7:23:12:8b:ab:43:88:8f:64:c1:ef:46:ad:
                    4b:6e:78:f5:3d:06:3f:fe:5f:70:51:74:ab:62:8f:
                    52:73:4b:7a:c8:61:92:ec:f7:f2:7a:c9:46:6e:fe:
                    64:1f:c5:3d:3d:9b:83:c8:f9:9b:75:40:b8:8c:22:
                    c8:2b:cf:18:4f:85:65:b1:c1:d4:ac:47:62:f7:38:
                    4c:0f:ed:37:c6:33:26:fc:75:ec:e1:40:07:82:f2:
                    88:a3:eb:4d:2e:28:dc:89:d4:6b:f7:c5:30:df:a7:
                    8c:4f:b5:1c:0c:66:a8:f4:e6:71:ee:c4:7c:ab:c2:
                    23:91:f9:e1:56:25:d1:7a:ba:4d:cc:86:6a:fe:0e:
                    42:81:4c:c5:1d:34:1d:c4:4d:07:21:9a:b0:02:c0:
                    96:9e:53:ae:17:10:db:26:6a:a1:f6:b7:f0:bf:8d:
                    59:d6:dd:5e:1c:c3:3c:e1:2a:84:ab:ff:3e:1b:81:
                    38:5c:2f:2d:8b:ea:96:13:fa:9d:ba:e4:b5:ed:9e:
                    2d:22:12:af:e2:42:41:17:02:84:52:7a:ab:05:ec:
                    17:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:19:80:3F:A0:3C:0D:C5:3A:64:6B:1D:BE:28:EE:2A:B8:89:C1:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3d33148-98bf-392f-be4e-c4d23b074c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:dd:10:e6:64:5c:cf:da:6f:3e:c8:cf:03:68:e4:b4:5f:8e:
         9e:68:a4:70:84:ec:d0:9f:fa:85:3e:72:48:ed:30:b7:18:39:
         1a:af:8f:65:59:68:ed:78:3b:2c:8b:5d:c3:cf:fd:5a:a1:cc:
         11:73:28:81:e4:a4:52:02:41:83:b2:bc:fa:63:b7:63:c7:ab:
         ff:d4:c6:95:06:4e:c2:bc:2f:6d:4b:0f:31:7e:65:d4:2a:c9:
         8c:a1:92:06:f2:8e:d5:f3:95:f2:06:8b:6e:1c:7c:9b:af:05:
         b5:d3:b5:d9:c9:62:c0:86:da:7a:e3:d3:d8:d9:f4:22:b8:95:
         7f:44:46:e3:92:39:97:95:de:9b:99:11:3f:81:06:02:00:d2:
         51:e4:51:bf:f1:52:66:2d:d5:3b:a7:cf:9b:67:c3:0b:a6:d7:
         ad:84:93:66:82:cb:bb:72:e1:b7:4a:35:a7:ac:0e:7c:0e:81:
         07:f1:dc:78:ec:6e:5f:2a:97:5d:1c:87:fd:1a:c9:12:f6:ce:
         2e:b7:13:b7:61:1d:75:9a:ea:6a:61:bf:09:90:6e:cf:7b:41:
         90:a9:de:0a:07:0b:13:3b:f6:26:67:43:94:39:99:12:92:b9:
         21:13:ee:3c:89:1d:79:7c:ed:30:08:60:80:2a:71:46:d8:0e:
         87:e4:44:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKjodXY8BkUR95QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
YTRkMWVjYTYtMDkyMC00YTc1LWFjM2ItMjAyMWIzMmI3OGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0Zx4KuOn1C45q8qKJxJtp8GT3qaHUCdGa0e
2xQ7kNLe4mTE6CSWLdOa7YHKddcjEourQ4iPZMHvRq1Lbnj1PQY//l9wUXSrYo9S
c0t6yGGS7PfyeslGbv5kH8U9PZuDyPmbdUC4jCLIK88YT4VlscHUrEdi9zhMD+03
xjMm/HXs4UAHgvKIo+tNLijcidRr98Uw36eMT7UcDGao9OZx7sR8q8IjkfnhViXR
erpNzIZq/g5CgUzFHTQdxE0HIZqwAsCWnlOuFxDbJmqh9rfwv41Z1t1eHMM84SqE
q/8+G4E4XC8ti+qWE/qduuS17Z4tIhKv4kJBFwKEUnqrBewXEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP0ZgD+gPA3FOmRrHb4o7iq4icF3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzNkMzMxNDgtOThiZi0z
OTJmLWJlNGUtYzRkMjNiMDc0YzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvdEOZkXM/abz7IzwNo5LRfjp5opHCE7NCf+oU+ckjtMLcYORqvj2VZ
aO14OyyLXcPP/VqhzBFzKIHkpFICQYOyvPpjt2PHq//UxpUGTsK8L21LDzF+ZdQq
yYyhkgbyjtXzlfIGi24cfJuvBbXTtdnJYsCG2nrj09jZ9CK4lX9ERuOSOZeV3puZ
ET+BBgIA0lHkUb/xUmYt1Tunz5tnwwum162Ek2aCy7ty4bdKNaesDnwOgQfx3Hjs
bl8ql10ch/0ayRL2zi63E7dhHXWa6mphvwmQbs97QZCp3goHCxM79iZnQ5Q5mRKS
uSET7jyJHXl87TAIYIAqcUbYDofkRMY=
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:50:55 2024 by rpki-client on console-ams.rpki-client.org