Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/62f63d7d-d20c-3b16-8dfb-e3b3c0b76c0f.roa
File:                     62f63d7d-d20c-3b16-8dfb-e3b3c0b76c0f.roa (raw, json)
Hash identifier:          qG4iFPLMTw90KP35FmkpUNML4GVJ6dCRg8ppQB8y16w=
Subject key identifier:   CB:69:F1:F8:D1:A1:A2:DF:3F:3A:B5:88:B8:49:A2:0F:A3:7B:C3:83
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583AE8FDF729DD58C878052CEB80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/62f63d7d-d20c-3b16-8dfb-e3b3c0b76c0f.roa
Signing time:             Fri 13 Aug 2021 04:00:00 +0000
ROA not before:           Fri 13 Aug 2021 04:00:00 +0000
ROA not after:            Sun 19 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.70.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:e8:fd:f7:29:dd:58:c8:78:05:2c:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 13 04:00:00 2021 GMT
            Not After : Sep 19 04:00:00 2027 GMT
        Subject: CN=25064171-6eda-488b-a451-d7a9a04344a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9d:b4:27:a0:05:25:e9:8f:a2:d1:91:fe:08:
                    27:5e:28:74:28:0c:b5:cc:a0:7e:fd:ba:78:d5:9b:
                    b6:92:cc:49:a1:db:05:63:e5:cb:0f:5d:79:b2:ad:
                    b4:26:63:01:11:c4:88:65:13:a2:c0:23:7e:29:c5:
                    c4:28:d7:27:04:cd:ab:8e:9f:b4:2b:4b:24:45:ef:
                    05:07:32:a1:fc:76:f1:11:b8:7c:d4:20:65:e6:9f:
                    8c:44:a1:93:ef:ea:40:16:67:fc:27:4f:c7:3d:a2:
                    d6:1d:9e:5f:19:09:22:13:4d:c9:36:b3:6a:79:6c:
                    db:7e:95:cf:17:1c:e5:91:a4:93:26:73:72:e9:85:
                    ee:f3:ff:4d:38:b8:6c:a4:39:da:4c:66:36:27:14:
                    53:32:bf:28:3d:6c:02:6d:01:1d:25:03:56:c2:ef:
                    76:34:9c:a5:10:24:90:02:9b:c0:6a:55:2b:a8:69:
                    85:b5:76:91:5b:e4:48:87:17:ed:09:9a:09:cc:33:
                    94:80:0d:1b:1f:11:71:81:39:d8:6c:a9:57:78:01:
                    6f:c9:65:3a:9d:69:a8:33:85:4f:c0:d5:b9:0e:91:
                    40:90:b8:c8:cb:1e:1c:f2:63:af:36:06:2e:6e:eb:
                    1b:ef:7a:74:8b:71:89:ef:ba:21:87:8e:72:02:9a:
                    5c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:69:F1:F8:D1:A1:A2:DF:3F:3A:B5:88:B8:49:A2:0F:A3:7B:C3:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/62f63d7d-d20c-3b16-8dfb-e3b3c0b76c0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b4:00:76:61:9b:e6:b0:65:59:93:a3:94:63:9a:bf:e5:f9:
         dd:77:3f:57:12:48:68:68:34:66:57:e0:38:96:be:b9:83:c7:
         0d:b7:d0:7b:25:ab:18:90:52:cf:64:99:7d:ac:7a:25:18:17:
         c1:8e:cc:6e:fe:3a:a8:5e:04:6b:e1:3f:ec:3c:3f:cc:25:9b:
         d5:df:07:20:5d:26:7f:35:6d:52:90:c0:ce:35:f3:0b:a7:57:
         d2:c1:e1:e6:96:50:8d:37:42:cd:c0:bd:fe:52:a6:97:48:e2:
         25:c4:c2:ff:53:cd:a3:a3:d0:76:7a:a5:f9:20:07:5e:28:a9:
         04:35:1c:d3:7b:d1:44:3e:68:4c:62:01:db:7a:92:70:3f:df:
         67:d8:10:e8:64:c7:ff:cc:1f:46:bd:00:3c:f6:cf:56:b6:c7:
         43:35:c6:0a:70:8e:14:c9:c5:e2:24:a3:e2:03:66:24:70:c1:
         e5:61:2c:08:07:e6:81:96:0f:dc:93:e1:e9:b3:15:89:b1:c1:
         44:9f:28:ac:04:78:af:c4:5d:88:63:39:c6:e6:08:6b:dd:28:
         95:06:4c:5f:d2:72:9d:0b:22:5b:2d:12:a6:ac:49:62:19:75:
         ec:4d:34:4b:c9:7a:b8:21:b8:b9:d3:4f:a1:d7:84:31:26:22:
         06:ba:c7:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDro/fcp3VjIeAUs64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTIxMDgxMzA0MDAwMFoXDTI3MDkxOTA0MDAwMFowLzEtMCsGA1UEAxMk
MjUwNjQxNzEtNmVkYS00ODhiLWE0NTEtZDdhOWEwNDM0NGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ20J6AFJemPotGR/ggnXih0KAy1zKB+/bp4
1Zu2ksxJodsFY+XLD115sq20JmMBEcSIZROiwCN+KcXEKNcnBM2rjp+0K0skRe8F
BzKh/HbxEbh81CBl5p+MRKGT7+pAFmf8J0/HPaLWHZ5fGQkiE03JNrNqeWzbfpXP
FxzlkaSTJnNy6YXu8/9NOLhspDnaTGY2JxRTMr8oPWwCbQEdJQNWwu92NJylECSQ
ApvAalUrqGmFtXaRW+RIhxftCZoJzDOUgA0bHxFxgTnYbKlXeAFvyWU6nWmoM4VP
wNW5DpFAkLjIyx4c8mOvNgYubusb73p0i3GJ77ohh45yAppcGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMtp8fjRoaLfPzq1iLhJog+je8ODMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjJmNjNkN2QtZDIwYy0z
YjE2LThkZmItZTNiM2MwYjc2YzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACi0AHZhm+awZVmTo5Rjmr/l+d13P1cSSGhoNGZX4DiWvrmDxw230Hsl
qxiQUs9kmX2seiUYF8GOzG7+OqheBGvhP+w8P8wlm9XfByBdJn81bVKQwM418wun
V9LB4eaWUI03Qs3Avf5SppdI4iXEwv9TzaOj0HZ6pfkgB14oqQQ1HNN70UQ+aExi
Adt6knA/32fYEOhkx//MH0a9ADz2z1a2x0M1xgpwjhTJxeIko+IDZiRwweVhLAgH
5oGWD9yT4emzFYmxwUSfKKwEeK/EXYhjOcbmCGvdKJUGTF/Scp0LIlstEqasSWIZ
dexNNEvJerghuLnTT6HXhDEmIga6x3o=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:59 2024 by rpki-client on console-fra.rpki-client.org