Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cbbdf1c-8a22-33bd-acd4-7f837e973d8c.roa
File:                     0cbbdf1c-8a22-33bd-acd4-7f837e973d8c.roa (raw, json)
Hash identifier:          1l62oC9oY48Mrb/M4BhD7Y5n5u6n3PdYYRrp6/XA0VU=
Subject key identifier:   BC:2C:FD:39:C8:07:AD:55:37:39:E6:23:EA:6B:4F:D7:79:58:B7:AA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583C0D9673EB168351C9D0995300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cbbdf1c-8a22-33bd-acd4-7f837e973d8c.roa
Signing time:             Fri 26 Nov 2021 05:00:00 +0000
ROA not before:           Fri 26 Nov 2021 05:00:00 +0000
ROA not after:            Sun 03 Oct 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.70.227.0/24 maxlen: 24
                          172.70.232.0/24 maxlen: 24
                          172.70.233.0/24 maxlen: 24
                          172.70.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:0d:96:73:eb:16:83:51:c9:d0:99:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 26 05:00:00 2021 GMT
            Not After : Oct  3 04:00:00 2027 GMT
        Subject: CN=8e647687-b3a7-4e05-b805-15f05956bdeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:02:f0:e9:52:28:5f:37:f4:5b:68:13:9e:4a:
                    72:7c:08:d0:5b:cf:64:66:d4:df:be:f2:4b:2e:63:
                    9f:49:dd:7c:d0:5f:c8:d6:2a:9f:6e:07:98:0a:73:
                    8f:06:e7:cc:46:d2:9a:43:0c:81:93:e4:f7:01:77:
                    22:cb:19:78:27:3c:e1:84:f8:d0:ea:26:21:18:e2:
                    e3:1e:73:04:5c:cf:e2:57:37:35:46:6d:f9:d1:99:
                    41:b9:3b:7e:db:c6:57:e4:bd:85:4a:cd:c6:fc:e2:
                    b0:c1:5f:13:7f:23:ad:58:40:0e:3e:f3:5c:1e:11:
                    7b:34:85:c5:e7:c5:4e:5f:ee:4f:dd:75:a8:d0:53:
                    9f:f2:60:fa:15:72:aa:fe:29:42:20:b9:e1:6c:43:
                    8b:ca:7f:97:ba:6c:4a:19:b1:4d:6c:78:2e:66:6d:
                    41:52:8d:19:50:1c:73:a7:2f:b7:6f:7b:91:59:b9:
                    6e:f2:ab:65:11:92:ba:32:32:33:df:d1:d0:00:34:
                    dc:cb:a4:6f:e2:75:90:04:2d:06:34:d4:6e:bc:ea:
                    00:7d:be:a7:6a:06:4a:47:87:49:20:5c:43:34:6b:
                    49:c3:db:ab:4b:f8:e2:36:94:fc:3d:4e:cd:d4:cd:
                    bc:4e:1d:48:2c:cd:fb:1f:b5:a9:18:dd:7e:ef:f1:
                    77:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2C:FD:39:C8:07:AD:55:37:39:E6:23:EA:6B:4F:D7:79:58:B7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cbbdf1c-8a22-33bd-acd4-7f837e973d8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.227.0/24
                  172.70.232.0-172.70.234.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:f6:ce:0c:0e:d4:0c:1e:3e:ff:1a:6b:1f:c4:f1:d1:cc:13:
         0f:24:a0:9f:ff:88:fa:0f:55:94:de:10:8d:2b:11:e4:29:53:
         ff:0a:f3:ad:7b:ed:77:0e:1c:1c:ee:b5:93:d2:cb:f2:21:c2:
         99:a7:ca:57:0d:49:6d:42:78:74:ef:f2:72:3e:e0:05:3f:15:
         76:53:1f:a1:ae:f2:bd:36:dd:e9:12:97:14:58:f3:9d:4d:92:
         53:ae:64:d6:f9:fd:fd:cb:2b:5e:69:81:21:6a:e1:11:e8:f8:
         65:43:a9:a5:57:e4:2e:e9:9a:4f:e6:10:b2:1c:ce:95:38:23:
         bb:35:da:77:c9:81:bf:66:61:66:39:e9:a5:4a:a3:85:6e:7d:
         3f:75:d0:91:1f:01:24:a0:52:20:c9:91:dd:e2:f9:83:a4:db:
         03:ad:d2:cf:46:63:e9:a2:86:eb:24:8e:aa:cd:92:98:f9:cf:
         6d:62:9c:91:d2:20:7b:57:73:7d:57:67:73:53:25:7a:81:f9:
         ef:e2:dc:29:10:72:00:0b:29:0c:4f:85:8e:d1:02:41:f8:8d:
         65:13:7e:8b:6b:68:4e:bd:53:87:67:b0:29:86:b8:05:50:1a:
         ec:37:59:f1:25:e9:a7:e1:02:23:76:d9:e2:fc:82:a3:c8:08:
         90:fd:e0:36
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWDwNlnPrFoNRydCZUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTIxMTEyNjA1MDAwMFoXDTI3MTAwMzA0MDAwMFowLzEtMCsGA1UEAxMk
OGU2NDc2ODctYjNhNy00ZTA1LWI4MDUtMTVmMDU5NTZiZGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQLw6VIoXzf0W2gTnkpyfAjQW89kZtTfvvJL
LmOfSd180F/I1iqfbgeYCnOPBufMRtKaQwyBk+T3AXciyxl4JzzhhPjQ6iYhGOLj
HnMEXM/iVzc1Rm350ZlBuTt+28ZX5L2FSs3G/OKwwV8TfyOtWEAOPvNcHhF7NIXF
58VOX+5P3XWo0FOf8mD6FXKq/ilCILnhbEOLyn+XumxKGbFNbHguZm1BUo0ZUBxz
py+3b3uRWblu8qtlEZK6MjIz39HQADTcy6Rv4nWQBC0GNNRuvOoAfb6nagZKR4dJ
IFxDNGtJw9urS/jiNpT8PU7N1M28Th1ILM37H7WpGN1+7/F3RQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFLws/TnIB61VNznmI+prT9d5WLeqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGNiYmRmMWMtOGEyMi0z
M2JkLWFjZDQtN2Y4MzdlOTczZDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQArEbjMAwD
BAOsRugDBACsRuowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAr/bODA7UDB4+/xprH8Tx0cwTDySgn/+I+g9V
lN4QjSsR5ClT/wrzrXvtdw4cHO61k9LL8iHCmafKVw1JbUJ4dO/ycj7gBT8VdlMf
oa7yvTbd6RKXFFjznU2SU65k1vn9/csrXmmBIWrhEej4ZUOppVfkLumaT+YQshzO
lTgjuzXad8mBv2ZhZjnppUqjhW59P3XQkR8BJKBSIMmR3eL5g6TbA63Sz0Zj6aKG
6ySOqs2SmPnPbWKckdIge1dzfVdnc1MleoH57+LcKRByAAspDE+FjtECQfiNZRN+
i2toTr1Th2ewKYa4BVAa7DdZ8SXpp+ECI3bZ4vyCo8gIkP3gNg==
-----END CERTIFICATE-----
Generated at Sun May 12 01:31:56 2024 by rpki-client on console-fra.rpki-client.org