Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a3c913bd-38a7-3113-91a3-43cfa8207222.roa
File:                     a3c913bd-38a7-3113-91a3-43cfa8207222.roa (raw, json)
Hash identifier:          5cXRjPY47bTZPpdONPe3lAVDQLhKwNXCrrNvJfdkJug=
Subject key identifier:   1B:DE:F4:0A:10:B3:D7:E8:11:F8:8E:9C:45:FD:35:1C:62:99:E8:42
Certificate issuer:       /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial:       010D0C9F4328584563F30684CCFB8C3C974690C8
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a3c913bd-38a7-3113-91a3-43cfa8207222.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     33717
IP address blocks:        208.70.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:06:84:cc:fb:8c:3c:97:46:90:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=e0eab98a-c665-4132-b4d4-0bf068d2de79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0e:a4:4d:25:5f:e7:9a:54:1f:7b:7f:97:d1:
                    11:cb:24:ad:2d:bc:cc:c1:f3:12:20:67:a5:ec:86:
                    06:56:a8:a4:fa:25:7c:5c:4a:e7:99:74:9e:c0:1a:
                    80:2d:fd:99:91:95:83:01:74:91:8d:23:36:69:ba:
                    c8:b5:4a:1d:bc:ab:a1:fa:3c:3d:84:d2:66:ad:63:
                    f9:20:df:23:d0:e1:b3:f5:25:31:5c:99:4b:d5:86:
                    39:2b:15:37:d5:35:5b:17:b5:d4:e2:36:b0:f9:a5:
                    13:ec:dc:07:01:64:ac:cb:6a:e6:47:5d:29:c3:c7:
                    17:62:21:3d:56:f9:1e:21:81:30:5b:55:2e:a8:46:
                    cf:65:a8:41:82:94:31:8c:43:30:7a:f7:6e:c6:26:
                    a2:53:ad:3a:30:94:b0:c2:f4:38:08:56:5a:77:73:
                    d6:42:a4:59:e5:f1:90:50:15:4c:e2:12:29:0c:99:
                    23:60:da:c7:2b:27:05:f2:89:aa:1a:34:ca:23:c8:
                    74:57:09:41:a5:39:02:de:8e:c8:72:22:7f:eb:0e:
                    ff:e2:63:fc:7d:56:2f:c6:f0:6e:c8:c3:96:c2:c2:
                    ad:01:a1:f4:17:a7:f1:4d:db:f2:74:34:21:7b:a9:
                    3c:de:28:92:27:ba:03:32:c6:69:ed:69:4a:7b:4c:
                    09:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DE:F4:0A:10:B3:D7:E8:11:F8:8E:9C:45:FD:35:1C:62:99:E8:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a3c913bd-38a7-3113-91a3-43cfa8207222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl

            X509v3 Authority Key Identifier:
                keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:a3:3f:f1:57:bf:5a:bf:ca:08:8e:7a:d8:31:54:8b:a9:46:
         7a:29:a9:62:b9:15:9e:76:b9:13:6d:3a:58:1b:b1:68:53:c5:
         bb:26:68:ac:b6:be:c6:d9:db:10:92:73:4c:2d:0d:39:fc:0d:
         e2:07:c0:48:4d:e7:f5:53:93:7d:67:e1:82:19:bc:52:78:d2:
         1c:73:20:b6:73:1f:d3:d1:48:b7:01:91:7f:9e:ee:4e:ed:a4:
         fe:04:a2:fe:d9:83:44:6a:57:51:a2:40:f5:63:7c:b5:92:0a:
         71:5b:34:14:88:b1:1d:ba:1b:a2:25:1a:70:74:93:a5:b3:65:
         e4:b4:2a:4b:e4:25:60:34:73:0c:4c:f5:75:04:67:02:2a:6d:
         9e:d8:c3:a4:29:85:35:0c:36:2e:9c:15:1d:2a:c3:8f:d0:e0:
         45:f1:80:27:57:b8:d6:90:64:b7:0f:dc:d5:f3:01:a6:37:76:
         99:62:29:5f:e1:e6:49:f0:0f:91:d6:88:da:a8:94:e6:10:0e:
         fd:6a:9a:d2:ed:d7:30:1c:cd:45:88:fe:a6:67:f1:a1:a0:83:
         ba:0a:59:26:19:a2:b6:f3:ea:f8:05:2a:3c:a0:2c:9c:6c:b0:
         9f:53:c1:89:44:fc:5a:a2:c0:b3:7b:e4:0d:eb:e7:68:9d:27:
         1f:b1:ec:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:10:45 2024 by rpki-client on console-ams.rpki-client.org