Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/4516f892-63b2-3973-9283-54cdbb072576.roa
File:                     4516f892-63b2-3973-9283-54cdbb072576.roa (raw, json)
Hash identifier:          6BtKQZpyyhEChtBn5ewK4OKAB0MPUEHETcrOWdgy9Zc=
Subject key identifier:   33:00:D9:D0:42:3C:10:0E:C6:5D:9B:AF:1D:03:7B:B4:5A:72:F6:A5
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F432858456C5305AF6375E14BFDA61300
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/4516f892-63b2-3973-9283-54cdbb072576.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     42
IP address blocks:        70.40.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:05:af:63:75:e1:4b:fd:a6:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=758f34f4-55cf-46f0-b2b7-43af3cbcc1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a3:ff:1c:e8:1f:fa:57:8c:65:09:87:29:03:
                    7d:ad:0d:67:ed:07:82:6e:d1:c6:50:48:90:89:99:
                    80:2b:ed:d5:48:c5:db:f4:fc:13:6b:43:5a:fd:b5:
                    5c:b8:2e:73:0e:83:ff:b5:a6:c9:df:83:83:81:c2:
                    3f:59:d9:f6:f7:33:2b:8c:b3:47:fe:9d:ba:53:d8:
                    6f:f8:af:ca:b9:d5:87:13:76:a8:8b:f9:ba:58:13:
                    2f:65:8f:81:e3:23:b9:84:0a:c9:c9:0e:ce:0c:df:
                    3d:37:ca:22:98:51:d4:22:97:65:f6:df:bc:90:a4:
                    47:50:3f:c8:29:14:24:8c:d2:3e:e5:68:4d:4c:6e:
                    71:80:d5:1c:05:ac:4f:f5:18:a2:ce:73:ab:e8:c9:
                    15:63:95:77:28:b3:45:22:b3:de:49:7b:83:0e:56:
                    f7:33:2f:5d:15:41:58:be:99:6f:0f:76:3c:aa:70:
                    21:2f:97:85:e5:e9:84:07:77:8a:d7:ad:69:76:e5:
                    61:40:54:74:3f:11:74:86:ba:ac:02:93:90:3c:30:
                    4f:60:b6:7e:be:f4:24:bb:8e:16:b5:86:96:b9:d0:
                    b8:d4:e8:be:7d:28:8d:1e:d6:4e:3c:11:bb:09:59:
                    86:a7:22:7a:0b:7b:57:03:a1:e8:cd:a2:88:85:40:
                    40:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:00:D9:D0:42:3C:10:0E:C6:5D:9B:AF:1D:03:7B:B4:5A:72:F6:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/4516f892-63b2-3973-9283-54cdbb072576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.40.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:4e:27:77:cb:2a:02:ca:20:e9:65:b6:d8:c9:d9:27:a0:a0:
         32:82:f5:8d:d1:7f:c3:84:ad:f1:bc:55:26:bc:e2:64:72:c0:
         47:dc:1e:00:66:72:11:cc:90:8f:83:1e:aa:31:66:27:c5:57:
         c0:3d:ef:50:28:f3:02:a9:64:45:1a:eb:a2:a8:3d:7e:db:dd:
         d1:52:8a:45:e2:df:94:1b:ac:f0:3e:3c:a0:2d:3f:8c:e5:99:
         78:99:a7:57:5e:cc:61:77:f7:1f:53:ac:10:b5:7f:00:fe:8e:
         9e:51:84:83:57:d6:1a:fe:d2:72:a3:38:0a:10:2a:7c:4c:29:
         a9:3e:ce:22:5e:79:fc:1a:2c:3e:52:b4:b3:3a:b6:57:c3:e8:
         d3:49:89:76:0f:c5:d2:4e:69:6a:bc:fb:d2:8b:04:c4:76:7a:
         0a:59:a9:a6:5c:75:a0:37:f9:aa:fb:7e:00:ab:7d:19:8f:54:
         14:8e:81:b0:c9:09:53:1f:3c:bb:85:f7:93:66:db:27:6e:0a:
         9d:a4:f5:78:be:39:13:f2:c3:df:f2:1a:19:4f:16:b4:fd:98:
         d6:6e:84:7e:52:59:b3:6d:28:ed:66:ba:c5:58:5d:30:6b:d5:
         0b:c2:cc:89:e2:af:f9:f0:e1:f7:92:06:25:04:e7:13:ab:9a:
         94:ad:0a:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVsUwWvY3XhS/2mEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3
MTAzMB4XDTI0MDQwMzEzMDAzN1oXDTI0MDcwMjEzMDAzN1owLzEtMCsGA1UEAxMk
NzU4ZjM0ZjQtNTVjZi00NmYwLWIyYjctNDNhZjNjYmNjMWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qP/HOgf+leMZQmHKQN9rQ1n7QeCbtHGUEiQ
iZmAK+3VSMXb9PwTa0Na/bVcuC5zDoP/tabJ34ODgcI/Wdn29zMrjLNH/p26U9hv
+K/KudWHE3aoi/m6WBMvZY+B4yO5hArJyQ7ODN89N8oimFHUIpdl9t+8kKRHUD/I
KRQkjNI+5WhNTG5xgNUcBaxP9RiiznOr6MkVY5V3KLNFIrPeSXuDDlb3My9dFUFY
vplvD3Y8qnAhL5eF5emEB3eK161pduVhQFR0PxF0hrqsApOQPDBPYLZ+vvQku44W
tYaWudC41Oi+fSiNHtZOPBG7CVmGpyJ6C3tXA6HozaKIhUBA2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMA2dBCPBAOxl2brx0De7RacvalMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy
NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvNDUxNmY4OTItNjNiMi0z
OTczLTkyODMtNTRjZGJiMDcyNTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4
ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj
NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2
MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRigIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZOJ3fLKgLKIOllttjJ2SegoDKC9Y3Rf8OErfG8VSa84mRywEfcHgBm
chHMkI+DHqoxZifFV8A971Ao8wKpZEUa66KoPX7b3dFSikXi35QbrPA+PKAtP4zl
mXiZp1dezGF39x9TrBC1fwD+jp5RhINX1hr+0nKjOAoQKnxMKak+ziJeefwaLD5S
tLM6tlfD6NNJiXYPxdJOaWq8+9KLBMR2egpZqaZcdaA3+ar7fgCrfRmPVBSOgbDJ
CVMfPLuF95Nm2yduCp2k9Xi+ORPyw9/yGhlPFrT9mNZuhH5SWbNtKO1musVYXTBr
1QvCzInir/nw4feSBiUE5xOrmpStCmo=
-----END CERTIFICATE-----
Generated at Fri May 10 03:02:16 2024 by rpki-client on console-ams.rpki-client.org