Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cefb5961-7929-373f-8517-c202b2dd963e.roa
File:                     cefb5961-7929-373f-8517-c202b2dd963e.roa (raw, json)
Hash identifier:          F6XDzNEguDhO+9CxCRiW99bdJsb1j67qU0w8vcTewoQ=
Subject key identifier:   74:5B:CA:B2:6B:CC:24:D9:FA:73:C8:F5:8D:99:8B:C4:9F:D4:82:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAFDDC8D69600E5C75963C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cefb5961-7929-373f-8517-c202b2dd963e.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33287
IP address blocks:        70.90.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:dd:c8:d6:96:00:e5:c7:59:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=4c857237-7edb-4abb-b691-dd5ea1ff093c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:95:60:77:b8:0b:8b:2d:8c:2f:8e:8a:a3:
                    48:92:cf:8e:1d:c4:be:9b:f6:95:1b:da:94:59:bf:
                    c2:fd:8b:e7:1a:0f:44:ff:7f:23:82:b6:01:de:ed:
                    0b:aa:98:a9:2c:60:f1:e1:40:b8:61:ef:7a:a3:de:
                    e1:ac:a3:01:b2:bc:23:c4:01:59:10:2f:10:dc:cb:
                    1c:6d:e5:41:1f:7d:b4:0a:52:5e:6a:50:10:8e:ba:
                    a4:20:fd:3e:fc:88:6b:21:0a:a5:33:b2:80:30:be:
                    03:60:94:98:e9:64:89:8a:fa:a2:fd:d9:fb:37:24:
                    26:73:87:ff:72:9e:e3:a6:67:86:51:eb:fa:64:df:
                    fe:26:40:63:72:59:0b:a1:fb:72:e7:74:a2:5c:2c:
                    78:15:b9:1a:e0:d0:7e:5c:55:57:0e:a0:72:57:6c:
                    f9:85:01:5a:bd:f5:b2:f6:23:4d:5a:04:62:06:75:
                    80:01:d8:24:1a:1b:84:4e:89:ed:66:81:96:82:77:
                    cc:71:1e:e5:6e:79:dc:21:04:a8:2e:74:32:13:c8:
                    a3:15:b0:8a:b5:e8:fc:19:f2:2f:ee:3a:bb:65:27:
                    ef:58:ac:63:84:cd:48:0e:09:a8:10:4f:fc:82:95:
                    3a:8f:24:cb:e4:6f:76:2f:08:a0:5c:2f:43:5d:fb:
                    50:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5B:CA:B2:6B:CC:24:D9:FA:73:C8:F5:8D:99:8B:C4:9F:D4:82:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cefb5961-7929-373f-8517-c202b2dd963e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.90.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:37:9e:04:ab:74:d3:62:78:96:64:70:e8:84:d0:2c:21:7e:
         da:d9:21:31:39:cd:68:20:e6:c1:21:c5:14:f5:53:55:71:8a:
         c4:f6:1d:32:1f:ac:72:cb:88:63:4d:86:8d:69:7e:38:52:3e:
         5f:19:54:8c:76:35:cc:62:b0:da:b5:a0:02:a5:67:e9:bf:55:
         a1:21:8c:58:4e:a7:47:58:c5:ab:41:9d:34:28:48:ed:c4:aa:
         f8:0c:92:2c:21:c7:8a:c1:a8:32:48:0d:60:ea:de:d6:1b:54:
         40:30:61:7b:44:3c:7b:4f:17:b9:e7:cd:66:0f:39:2f:bb:05:
         2e:f5:71:0a:13:04:58:27:7c:38:72:0e:c1:37:0b:19:35:9f:
         6e:60:35:ad:18:80:d0:23:cf:ba:99:9c:43:48:a0:9e:0c:90:
         cf:44:82:21:29:aa:8a:a5:1f:a6:20:2a:6a:67:6f:49:28:73:
         0e:ca:48:3a:1b:0a:41:8a:00:97:d5:41:8d:13:ce:ca:16:9c:
         b1:ec:a3:53:80:21:19:a9:4d:f4:10:75:b4:83:01:fe:1a:fa:
         2d:2d:0d:0e:95:8e:56:b0:34:cd:ad:96:06:ad:66:1d:2c:b3:
         85:18:b9:dd:56:0b:73:6e:6e:a2:a9:ef:fc:83:68:a9:5e:c1:
         dd:a0:85:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfr93I1pYA5cdZY8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
NGM4NTcyMzctN2VkYi00YWJiLWI2OTEtZGQ1ZWExZmYwOTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjmVYHe4C4stjC+OiqNIks+OHcS+m/aVG9qU
Wb/C/YvnGg9E/38jgrYB3u0LqpipLGDx4UC4Ye96o97hrKMBsrwjxAFZEC8Q3Msc
beVBH320ClJealAQjrqkIP0+/IhrIQqlM7KAML4DYJSY6WSJivqi/dn7NyQmc4f/
cp7jpmeGUev6ZN/+JkBjclkLofty53SiXCx4Fbka4NB+XFVXDqByV2z5hQFavfWy
9iNNWgRiBnWAAdgkGhuETontZoGWgnfMcR7lbnncIQSoLnQyE8ijFbCKtej8GfIv
7jq7ZSfvWKxjhM1IDgmoEE/8gpU6jyTL5G92LwigXC9DXftQ1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHRbyrJrzCTZ+nPI9Y2Zi8Sf1IL7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2VmYjU5NjEtNzkyOS0z
NzNmLTg1MTctYzIwMmIyZGQ5NjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRloAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHc3ngSrdNNieJZkcOiE0CwhftrZITE5zWgg5sEhxRT1U1VxisT2HTIf
rHLLiGNNho1pfjhSPl8ZVIx2NcxisNq1oAKlZ+m/VaEhjFhOp0dYxatBnTQoSO3E
qvgMkiwhx4rBqDJIDWDq3tYbVEAwYXtEPHtPF7nnzWYPOS+7BS71cQoTBFgnfDhy
DsE3Cxk1n25gNa0YgNAjz7qZnENIoJ4MkM9EgiEpqoqlH6YgKmpnb0kocw7KSDob
CkGKAJfVQY0TzsoWnLHso1OAIRmpTfQQdbSDAf4a+i0tDQ6VjlawNM2tlgatZh0s
s4UYud1WC3NubqKp7/yDaKlewd2ghaE=
-----END CERTIFICATE-----
Generated at Sun May 5 02:22:21 2024 by rpki-client on console-ams.rpki-client.org