Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/ac82c1e8-a4fe-310f-aabb-542370b44ca8.roa
File:                     ac82c1e8-a4fe-310f-aabb-542370b44ca8.roa (raw, json)
Hash identifier:          ezJ9ZULZIbne6PnccA5tCH3rNL3IQ1gg5q4Op28x9fE=
Subject key identifier:   07:47:10:15:4C:B1:84:BC:1F:A1:16:E1:C2:C2:FD:FA:CC:0E:30:88
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F43285847600B90F5CEBCFE0CE21F1180
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/ac82c1e8-a4fe-310f-aabb-542370b44ca8.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     174
IP address blocks:        65.160.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:90:f5:ce:bc:fe:0c:e2:1f:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=b50d6c58-19b9-4c8b-9cbe-f1db843410e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4e:a3:3d:2a:51:bb:3b:9b:1d:e7:15:5b:f9:
                    32:c4:7b:1d:e3:78:18:24:c8:88:61:61:1a:73:12:
                    58:29:5e:9b:27:6c:92:20:3d:93:e6:fc:9e:b7:8f:
                    6d:1d:c0:2e:6b:1f:ed:84:2d:a4:e0:03:bf:fa:6e:
                    fb:3c:97:80:35:0b:cb:2b:06:06:ab:a9:77:8f:07:
                    90:a6:25:70:87:02:16:3b:ef:3a:bd:77:b7:c5:1d:
                    9b:8e:6e:8a:42:e3:00:d7:2f:fd:7a:d1:c3:2c:82:
                    f5:66:e8:fd:b0:2c:cb:51:73:e3:57:1d:9f:6a:ba:
                    9e:6a:89:c0:e1:05:86:0b:15:05:bc:3d:ea:be:7f:
                    73:23:5b:38:79:89:90:6e:bc:47:fa:ae:47:26:94:
                    8c:5f:32:8a:b0:0e:df:80:c3:46:d7:7b:16:8a:94:
                    23:b2:67:84:22:dd:dd:f9:bc:d2:d1:5f:df:74:29:
                    9c:4d:57:9c:94:47:7a:b5:f7:f0:b8:a3:bf:cc:a4:
                    6d:14:27:25:d8:4a:d4:a2:91:40:56:7c:06:68:50:
                    78:60:f5:87:23:47:9e:f4:bf:a3:de:be:44:67:8c:
                    65:5a:8d:42:0e:1e:51:02:6f:5c:46:35:f8:17:de:
                    2f:83:ef:7a:08:0d:b3:c4:ce:ef:6d:17:d3:6d:97:
                    1c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:47:10:15:4C:B1:84:BC:1F:A1:16:E1:C2:C2:FD:FA:CC:0E:30:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/ac82c1e8-a4fe-310f-aabb-542370b44ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.160.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:21:f7:82:51:23:8d:8f:59:7b:b3:22:c0:c4:af:cf:e0:6b:
         d5:18:fd:ef:32:3a:37:2c:a4:53:b5:47:4c:ab:28:23:a9:58:
         3a:2e:20:35:47:46:d1:b6:ac:66:8e:f0:f5:e2:e1:58:a3:ea:
         0b:76:3f:cf:4b:17:2e:c2:71:1d:e9:94:4f:de:d6:b3:1f:3a:
         dd:d5:b7:a1:1d:d2:e8:3c:5a:9f:e3:24:0e:51:7f:8e:0f:cf:
         e3:6d:e6:73:a8:be:52:fa:6f:f2:3f:9b:b3:d5:44:e3:c1:aa:
         9b:1e:b9:ae:2e:7c:d8:12:46:92:bd:72:94:29:c4:75:40:e6:
         da:7c:1b:43:e5:5f:3f:d9:31:5a:f6:ea:a6:62:77:dc:14:0b:
         e9:10:f1:9a:e9:74:fe:8d:a4:76:7d:ec:98:50:6a:c8:0b:7f:
         e2:92:44:25:3c:9d:70:47:8e:de:25:3a:b1:ad:43:28:05:dd:
         eb:6c:07:0c:ae:6c:0d:08:ae:f6:d2:2b:52:a3:d4:03:0a:ba:
         65:e2:c6:1a:12:a7:6b:bb:db:5b:05:bb:bb:8f:e2:d6:09:63:
         4d:f8:42:fb:6d:f0:83:1f:46:4a:d0:0b:74:09:41:51:e3:2b:
         39:3b:30:21:94:3a:06:38:db:9d:7b:52:14:c9:9d:c1:9a:f0:
         a4:be:7c:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC5D1zrz+DOIfEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk
ZjZkMB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
YjUwZDZjNTgtMTliOS00YzhiLTljYmUtZjFkYjg0MzQxMGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk6jPSpRuzubHecVW/kyxHsd43gYJMiIYWEa
cxJYKV6bJ2ySID2T5vyet49tHcAuax/thC2k4AO/+m77PJeANQvLKwYGq6l3jweQ
piVwhwIWO+86vXe3xR2bjm6KQuMA1y/9etHDLIL1Zuj9sCzLUXPjVx2farqeaonA
4QWGCxUFvD3qvn9zI1s4eYmQbrxH+q5HJpSMXzKKsA7fgMNG13sWipQjsmeEIt3d
+bzS0V/fdCmcTVeclEd6tffwuKO/zKRtFCcl2ErUopFAVnwGaFB4YPWHI0ee9L+j
3r5EZ4xlWo1CDh5RAm9cRjX4F94vg+96CA2zxM7vbRfTbZccfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAdHEBVMsYS8H6EW4cLC/frMDjCIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm
MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvYWM4MmMxZTgtYTRmZS0z
MTBmLWFhYmItNTQyMzcwYjQ0Y2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw
MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy
ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy
ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQaBGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABUh94JRI42PWXuzIsDEr8/ga9UY/e8yOjcspFO1R0yrKCOpWDouIDVH
RtG2rGaO8PXi4Vij6gt2P89LFy7CcR3plE/e1rMfOt3Vt6Ed0ug8Wp/jJA5Rf44P
z+Nt5nOovlL6b/I/m7PVROPBqpseua4ufNgSRpK9cpQpxHVA5tp8G0PlXz/ZMVr2
6qZid9wUC+kQ8ZrpdP6NpHZ97JhQasgLf+KSRCU8nXBHjt4lOrGtQygF3etsBwyu
bA0IrvbSK1Kj1AMKumXixhoSp2u721sFu7uP4tYJY034Qvtt8IMfRkrQC3QJQVHj
Kzk7MCGUOgY42517UhTJncGa8KS+fPI=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:56:28 2024 by rpki-client on console-ams.rpki-client.org