Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec087e29-42a5-35ea-a463-36eb1398b91d.roa
File:                     ec087e29-42a5-35ea-a463-36eb1398b91d.roa (raw, json)
Hash identifier:          Kwh02X68YHbvg/Ofuouy4IOGodrR8+hDuAHc9xxi4yU=
Subject key identifier:   88:53:1E:5C:95:E3:C1:4B:F4:36:60:AD:D8:8B:1D:FB:79:3C:2E:05
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583BE3FFB85FA2D0885092136F08
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec087e29-42a5-35ea-a463-36eb1398b91d.roa
Signing time:             Thu 11 Nov 2021 05:00:00 +0000
ROA not before:           Thu 11 Nov 2021 05:00:00 +0000
ROA not after:            Sat 18 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.70.220.0/24 maxlen: 24
                          172.70.221.0/24 maxlen: 24
                          172.70.222.0/24 maxlen: 24
                          172.70.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:e3:ff:b8:5f:a2:d0:88:50:92:13:6f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 11 05:00:00 2021 GMT
            Not After : Sep 18 04:00:00 2027 GMT
        Subject: CN=c3fa3729-8c20-4f1d-92d2-92fb49840a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:f9:2f:32:08:14:45:b0:e5:36:cb:41:b9:
                    ec:24:0c:b7:fb:f3:de:c7:94:d5:75:c3:bb:5a:bb:
                    38:88:05:8a:4d:fb:ff:78:7f:9c:69:53:02:09:6a:
                    07:0d:85:50:63:98:be:4f:63:4a:38:71:a0:56:ca:
                    1d:f3:bd:ae:3a:3c:ea:b5:79:fa:d6:88:16:a5:7b:
                    33:36:e0:fe:41:3a:a5:f9:34:ed:0d:fc:b1:a0:8c:
                    2b:9c:47:da:0c:e4:9b:03:5d:6b:cf:af:db:cf:5e:
                    57:a4:b1:4f:b5:13:a1:44:55:1f:6d:61:be:62:a5:
                    0a:8b:0c:3a:b1:31:2d:8e:96:d6:1f:16:97:ec:40:
                    3c:3c:0e:8b:a6:ce:e5:af:3f:71:55:88:3b:3a:d6:
                    99:31:42:48:e7:3c:11:1f:1e:28:eb:4c:19:23:32:
                    ca:e2:e2:e8:c6:35:cf:2b:bb:ad:db:e3:c9:2a:fc:
                    5d:01:b6:bd:80:88:c9:bb:02:98:d2:ee:d0:ff:78:
                    27:85:5d:f3:45:98:f8:9a:1a:98:82:dc:74:98:af:
                    e5:45:b5:ff:2d:e2:e7:d0:ae:42:02:fb:bb:6f:af:
                    22:8e:1a:3f:d7:4f:94:67:33:37:b5:8d:3f:dc:a0:
                    6f:7f:df:5f:a7:64:18:15:d5:77:f1:70:6b:df:07:
                    82:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:53:1E:5C:95:E3:C1:4B:F4:36:60:AD:D8:8B:1D:FB:79:3C:2E:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec087e29-42a5-35ea-a463-36eb1398b91d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:dd:e2:3e:55:2b:33:ca:c8:6c:6e:e2:6b:56:3a:60:1e:3a:
         70:37:ca:b5:c9:0a:c2:ad:53:cd:31:40:bc:4e:2f:2f:0c:b0:
         57:79:e2:21:90:ef:4d:d9:16:ba:46:63:1b:5a:43:28:05:92:
         cd:8b:bb:78:5c:83:02:e7:87:98:b6:7b:83:09:d2:ff:18:8b:
         12:98:bd:8b:1a:4a:d3:52:bf:a4:0a:e5:f9:c7:2b:46:5a:c5:
         f2:59:3a:b3:4b:2b:61:5e:14:55:e5:50:fd:e9:22:df:e9:bc:
         4a:1f:52:96:d4:47:95:aa:55:fc:de:2d:83:9e:89:54:81:b7:
         26:71:94:76:6a:9e:3b:a6:ec:ec:51:90:bf:94:fb:6a:31:63:
         35:7a:ca:f6:12:18:66:23:dc:b5:33:a7:fa:07:eb:3b:0c:84:
         eb:07:c9:af:05:ab:59:d9:61:2a:eb:d5:e3:87:d3:66:a5:fc:
         f8:9d:67:39:46:56:a0:1c:0e:9c:c1:68:51:08:ff:93:1a:51:
         89:0f:5f:17:4f:c1:e2:9c:bf:21:12:07:e4:47:a3:7d:c4:32:
         56:02:4e:f7:f5:e5:69:c5:93:41:f8:69:68:8a:6f:45:42:e6:
         a0:4d:f0:55:4b:3b:59:a8:51:de:42:7d:5f:95:3a:d1:f9:e5:
         6d:ac:56:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDvj/7hfotCIUJITbwgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTIxMTExMTA1MDAwMFoXDTI3MDkxODA0MDAwMFowLzEtMCsGA1UEAxMk
YzNmYTM3MjktOGMyMC00ZjFkLTkyZDItOTJmYjQ5ODQwYTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttD5LzIIFEWw5TbLQbnsJAy3+/Pex5TVdcO7
Wrs4iAWKTfv/eH+caVMCCWoHDYVQY5i+T2NKOHGgVsod872uOjzqtXn61ogWpXsz
NuD+QTql+TTtDfyxoIwrnEfaDOSbA11rz6/bz15XpLFPtROhRFUfbWG+YqUKiww6
sTEtjpbWHxaX7EA8PA6Lps7lrz9xVYg7OtaZMUJI5zwRHx4o60wZIzLK4uLoxjXP
K7ut2+PJKvxdAba9gIjJuwKY0u7Q/3gnhV3zRZj4mhqYgtx0mK/lRbX/LeLn0K5C
Avu7b68ijho/10+UZzM3tY0/3KBvf99fp2QYFdV38XBr3weCLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIhTHlyV48FL9DZgrdiLHft5PC4FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWMwODdlMjktNDJhNS0z
NWVhLWE0NjMtMzZlYjEzOThiOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEbcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKLd4j5VKzPKyGxu4mtWOmAeOnA3yrXJCsKtU80xQLxOLy8MsFd54iGQ
703ZFrpGYxtaQygFks2Lu3hcgwLnh5i2e4MJ0v8YixKYvYsaStNSv6QK5fnHK0Za
xfJZOrNLK2FeFFXlUP3pIt/pvEofUpbUR5WqVfzeLYOeiVSBtyZxlHZqnjum7OxR
kL+U+2oxYzV6yvYSGGYj3LUzp/oH6zsMhOsHya8Fq1nZYSrr1eOH02al/PidZzlG
VqAcDpzBaFEI/5MaUYkPXxdPweKcvyESB+RHo33EMlYCTvf15WnFk0H4aWiKb0VC
5qBN8FVLO1moUd5CfV+VOtH55W2sVhk=
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:10:57 2024 by rpki-client on console-ams.rpki-client.org