Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/72651577-2a29-309f-ae96-58c82b2bb2c2.roa
File:                     72651577-2a29-309f-ae96-58c82b2bb2c2.roa (raw, json)
Hash identifier:          R6qMvT7FqVIlrvee0nMLoat0iPolCwmQF+J+KtKU1rM=
Subject key identifier:   12:FA:1B:DC:72:1D:01:CD:22:27:B5:EA:53:BC:97:A3:5E:8A:01:23
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858431173589784E25B45CDCDB400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/72651577-2a29-309f-ae96-58c82b2bb2c2.roa
Signing time:             Wed 30 Aug 2023 12:00:00 +0000
ROA not before:           Wed 30 Aug 2023 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.68.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:11:73:58:97:84:e2:5b:45:cd:cd:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 30 12:00:00 2023 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=c01c6237-a9f5-4a61-8305-ceadc89b392f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:be:f5:fe:ab:86:47:12:47:cf:b7:ac:5e:75:
                    92:fc:48:48:32:f7:1b:94:6b:b9:2d:b4:4a:11:f8:
                    25:78:d0:a3:9e:9a:9f:6a:23:8f:36:da:ce:d6:3a:
                    de:f2:fc:9e:85:57:92:5b:32:1d:5d:e1:30:26:d0:
                    bd:84:c6:e1:9a:58:1d:d8:cf:3e:b9:5f:4d:6f:0b:
                    17:e3:a9:2a:a5:3a:51:ef:3a:92:f5:26:2b:fa:4b:
                    4c:68:d3:8b:d2:ac:0c:09:3e:56:7a:85:ca:f1:b1:
                    11:82:51:0d:0d:e5:5c:44:8e:b0:67:da:6c:24:e4:
                    d9:fe:6b:af:09:b7:27:6f:a3:04:73:3f:01:43:17:
                    0b:83:82:08:fd:b7:ac:3f:a4:5e:e3:b4:d2:ca:43:
                    91:04:64:32:0e:e9:65:f8:03:60:24:e1:a7:80:d0:
                    7d:00:f5:9f:2f:58:30:a0:c6:be:87:ed:1b:fd:d9:
                    cd:24:2f:0c:07:70:04:7b:7c:50:4d:39:38:72:cf:
                    16:f2:5d:8d:bd:b6:d2:95:b4:3b:0a:80:a4:0a:2c:
                    1c:5c:21:b7:eb:1a:8d:7e:8e:5b:4d:9a:c8:5b:de:
                    29:60:db:c3:4e:d4:b0:b5:6c:87:1a:99:88:3b:f0:
                    79:f7:cf:4a:3d:36:af:7c:47:4e:ba:15:3a:6d:85:
                    17:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FA:1B:DC:72:1D:01:CD:22:27:B5:EA:53:BC:97:A3:5E:8A:01:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/72651577-2a29-309f-ae96-58c82b2bb2c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:e0:8d:38:b9:5e:c8:43:e3:7f:ec:3e:95:fd:98:17:41:df:
         4d:30:9d:79:86:41:36:12:bd:2d:d6:42:aa:47:9a:73:40:5c:
         b2:4e:d7:8b:f0:02:88:ef:b5:fd:7b:0f:54:1e:1a:9b:66:09:
         c6:6a:7e:3b:47:54:08:35:3f:da:95:27:c4:f1:b5:18:56:03:
         5a:dc:20:a3:11:d9:cd:d1:91:1e:5f:f2:8f:06:99:3c:74:d6:
         cd:f9:f2:27:78:64:a7:ae:8f:79:0d:bb:75:40:57:65:f4:80:
         dc:2e:69:bf:81:76:47:a9:09:88:48:ea:a0:f6:28:ea:a2:fd:
         f2:35:58:53:fb:9a:b5:a4:c0:4e:db:51:5a:95:08:38:bf:ef:
         88:69:3b:58:fd:41:dd:12:fc:d6:64:72:0d:47:3a:dd:59:b0:
         d3:b2:13:a1:e0:4c:54:40:70:cb:aa:1f:22:7c:d4:17:9c:80:
         5e:3b:8f:b3:fa:cc:c8:c5:3c:01:56:58:df:5d:00:67:64:37:
         dd:7f:67:34:39:9f:9f:fe:8e:84:61:38:bf:5e:54:80:37:9f:
         d5:f4:0e:1b:fd:b8:e5:af:cc:c6:3a:bd:db:92:1b:47:78:97:
         92:a1:fc:1d:16:4d:cb:01:bd:76:12:c8:bd:f6:49:8c:06:f2:
         57:d9:41:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMRc1iXhOJbRc3NtAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTIzMDgzMDEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
YzAxYzYyMzctYTlmNS00YTYxLTgzMDUtY2VhZGM4OWIzOTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr71/quGRxJHz7esXnWS/EhIMvcblGu5LbRK
EfgleNCjnpqfaiOPNtrO1jre8vyehVeSWzIdXeEwJtC9hMbhmlgd2M8+uV9NbwsX
46kqpTpR7zqS9SYr+ktMaNOL0qwMCT5WeoXK8bERglENDeVcRI6wZ9psJOTZ/muv
Cbcnb6MEcz8BQxcLg4II/besP6Re47TSykORBGQyDull+ANgJOGngNB9APWfL1gw
oMa+h+0b/dnNJC8MB3AEe3xQTTk4cs8W8l2NvbbSlbQ7CoCkCiwcXCG36xqNfo5b
TZrIW94pYNvDTtSwtWyHGpmIO/B5989KPTavfEdOuhU6bYUXzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBL6G9xyHQHNIie16lO8l6NeigEjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzI2NTE1NzctMmEyOS0z
MDlmLWFlOTYtNThjODJiMmJiMmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEvgjTi5XshD43/sPpX9mBdB300wnXmGQTYSvS3WQqpHmnNAXLJO14vw
Aojvtf17D1QeGptmCcZqfjtHVAg1P9qVJ8TxtRhWA1rcIKMR2c3RkR5f8o8GmTx0
1s358id4ZKeuj3kNu3VAV2X0gNwuab+BdkepCYhI6qD2KOqi/fI1WFP7mrWkwE7b
UVqVCDi/74hpO1j9Qd0S/NZkcg1HOt1ZsNOyE6HgTFRAcMuqHyJ81BecgF47j7P6
zMjFPAFWWN9dAGdkN91/ZzQ5n5/+joRhOL9eVIA3n9X0Dhv9uOWvzMY6vduSG0d4
l5Kh/B0WTcsBvXYSyL32SYwG8lfZQUg=
-----END CERTIFICATE-----
Generated at Sun May 12 03:26:01 2024 by rpki-client on console-fra.rpki-client.org