Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76f8a49e-fa56-3e27-801d-a7d21f537a84.roa
File:                     76f8a49e-fa56-3e27-801d-a7d21f537a84.roa (raw, json)
Hash identifier:          brYtZ5LeUglfNyyOalXZmr4hN5WrUq13IvnGVHrf3Ys=
Subject key identifier:   5D:74:33:73:94:0A:2C:2E:53:C8:03:BC:65:37:13:9F:76:B4:D4:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC10B2C8B6153DE7D36D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76f8a49e-fa56-3e27-801d-a7d21f537a84.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33287
IP address blocks:        70.89.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:10:b2:c8:b6:15:3d:e7:d3:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=125220ef-5d09-4c8c-9d9e-96e3d6646134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:3c:0a:eb:b1:f8:d0:e1:5f:56:65:c0:a0:
                    80:3a:80:b4:cb:ab:aa:d1:27:e2:4a:68:9b:02:45:
                    3e:be:75:e6:f2:87:b2:e0:e7:3f:ca:2e:86:4b:0f:
                    d4:30:52:52:f7:49:6a:8d:b8:e9:af:9e:85:74:51:
                    76:5e:e1:b5:b9:99:10:69:70:8e:6c:0c:22:ee:e9:
                    11:a1:53:18:4f:d1:1b:bd:7a:65:6f:b1:47:8d:64:
                    e3:7f:1d:45:94:45:1b:c5:e7:b2:f0:10:c5:3f:76:
                    2c:34:7b:13:07:b8:6f:ff:f0:c8:33:ee:9a:22:a4:
                    66:98:a4:b6:44:83:28:14:9c:da:55:7f:89:3b:ee:
                    95:11:06:d8:a0:64:45:69:0c:96:23:95:c0:34:07:
                    74:1d:e0:e3:35:ce:3b:c2:ba:b4:bb:96:86:ff:e3:
                    f8:fb:cd:c6:44:b1:e9:53:e4:c1:e1:f1:66:84:f3:
                    7a:c8:15:71:cb:8c:32:a5:ce:3a:03:2d:e4:d6:76:
                    49:8a:6e:9a:96:45:d5:85:80:61:8b:0b:59:e9:4c:
                    24:9f:88:35:22:a4:fc:f5:6c:6b:51:21:0f:c1:4b:
                    2b:61:d0:4e:77:62:27:e1:a8:75:ec:28:5c:04:d5:
                    fe:7f:07:a7:14:2e:5e:df:52:91:35:4f:e4:32:ba:
                    83:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:74:33:73:94:0A:2C:2E:53:C8:03:BC:65:37:13:9F:76:B4:D4:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76f8a49e-fa56-3e27-801d-a7d21f537a84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.89.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ab:a2:c1:34:e1:9e:5b:ea:29:1b:92:1c:50:7f:1d:50:ef:
         91:e3:86:be:5d:3a:8d:4f:80:f7:cd:32:63:a5:2d:51:f2:70:
         ae:39:48:18:93:4b:00:9f:9b:87:15:db:04:1f:62:6c:28:c2:
         38:54:60:10:01:32:4a:04:09:27:f3:7f:af:ee:88:b5:23:8f:
         fa:3d:cf:29:75:ff:d4:19:f5:a9:07:94:70:86:16:f1:46:e3:
         9a:be:28:a2:24:d5:6c:ca:b9:d2:e5:de:42:78:59:47:04:15:
         aa:83:32:b7:20:54:7f:f9:15:6d:b2:ad:a3:2a:b3:7a:d0:49:
         d0:c0:62:9c:87:4e:67:73:74:a3:17:90:b9:de:e9:51:8c:3c:
         77:11:74:f6:32:42:f6:2b:58:e7:81:01:f7:9c:04:90:c6:5f:
         df:6b:61:77:83:a2:d2:35:53:c2:41:e8:50:b3:30:56:ba:31:
         c3:04:f8:5f:ef:e0:0a:8f:90:0c:7a:60:92:29:0b:83:e0:f0:
         a9:87:bd:4c:7b:6b:18:18:f7:07:aa:97:fd:51:bd:d8:32:5b:
         ec:3c:6f:4d:33:69:fd:58:8c:d2:a2:72:3d:d0:23:76:d0:a7:
         de:67:e1:22:e6:58:3b:4f:3c:81:47:a5:07:99:95:b9:5e:26:
         5c:03:4d:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrBCyyLYVPefTbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
MTI1MjIwZWYtNWQwOS00YzhjLTlkOWUtOTZlM2Q2NjQ2MTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7Q8Cuux+NDhX1ZlwKCAOoC0y6uq0SfiSmib
AkU+vnXm8oey4Oc/yi6GSw/UMFJS90lqjbjpr56FdFF2XuG1uZkQaXCObAwi7ukR
oVMYT9EbvXplb7FHjWTjfx1FlEUbxeey8BDFP3YsNHsTB7hv//DIM+6aIqRmmKS2
RIMoFJzaVX+JO+6VEQbYoGRFaQyWI5XANAd0HeDjNc47wrq0u5aG/+P4+83GRLHp
U+TB4fFmhPN6yBVxy4wypc46Ay3k1nZJim6alkXVhYBhiwtZ6Uwkn4g1IqT89Wxr
USEPwUsrYdBOd2In4ah17ChcBNX+fwenFC5e31KRNU/kMrqDiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF10M3OUCiwuU8gDvGU3E592tNTEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzZmOGE0OWUtZmE1Ni0z
ZTI3LTgwMWQtYTdkMjFmNTM3YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRlnMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAerosE04Z5b6ikbkhxQfx1Q75Hjhr5dOo1PgPfNMmOlLVHycK45SBiT
SwCfm4cV2wQfYmwowjhUYBABMkoECSfzf6/uiLUjj/o9zyl1/9QZ9akHlHCGFvFG
45q+KKIk1WzKudLl3kJ4WUcEFaqDMrcgVH/5FW2yraMqs3rQSdDAYpyHTmdzdKMX
kLne6VGMPHcRdPYyQvYrWOeBAfecBJDGX99rYXeDotI1U8JB6FCzMFa6McME+F/v
4AqPkAx6YJIpC4Pg8KmHvUx7axgY9weql/1RvdgyW+w8b00zaf1YjNKicj3QI3bQ
p95n4SLmWDtPPIFHpQeZlbleJlwDTXY=
-----END CERTIFICATE-----
Generated at Sun May 5 02:18:21 2024 by rpki-client on console-ams.rpki-client.org