Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/7e7dfc09-f6dc-3df0-92f2-221c7cc8743b.roa
File:                     7e7dfc09-f6dc-3df0-92f2-221c7cc8743b.roa (raw, json)
Hash identifier:          L4J++DTqYymtrD2rkpNbC4xRVkrYgSv/rzVFEXUgli4=
Subject key identifier:   D6:D9:EE:53:F1:2A:95:2A:7A:51:66:38:60:D3:F1:5C:16:69:34:18
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F43285847872131BD1692E25499FCE810
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/7e7dfc09-f6dc-3df0-92f2-221c7cc8743b.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     3695
IP address blocks:        70.36.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:31:bd:16:92:e2:54:99:fc:e8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=e6eea6f5-3614-4eaa-b0c6-b271719725d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:52:0e:1d:91:ab:25:8e:da:2e:69:a8:fb:3c:
                    80:2e:68:82:59:c6:3f:a6:06:79:42:8f:f0:78:ff:
                    0d:87:ab:73:a3:62:d3:70:b3:6a:90:78:42:bd:1d:
                    f8:31:cd:82:95:11:71:76:af:a3:0a:1f:1a:d2:11:
                    66:d4:15:22:55:b1:6d:57:7a:b6:1e:c5:1b:ae:00:
                    05:b8:2e:77:32:ed:8f:ce:e1:61:23:21:3e:ba:b3:
                    b3:ed:e3:df:4c:e8:8c:aa:e5:92:01:5d:a3:ca:74:
                    98:35:ff:4a:48:c4:f8:28:02:46:3f:aa:89:a7:29:
                    f2:06:70:03:a3:67:09:2e:e9:4a:27:9f:11:34:e8:
                    1c:4a:aa:b7:ed:db:d5:ce:06:d2:bf:df:aa:5f:fa:
                    c3:31:2f:9a:a4:26:bc:93:8f:96:ef:8a:4b:90:5d:
                    a3:49:ea:04:f3:16:0c:92:83:45:8e:d4:b7:fa:f5:
                    f6:67:a4:f2:26:b2:6c:e7:ea:f1:e9:42:3d:17:c7:
                    c9:99:a2:95:a2:b3:e5:36:56:56:f6:1b:b3:4b:bb:
                    cd:bc:89:1e:51:7f:60:a4:0f:c9:6f:85:9c:fd:62:
                    96:99:fa:a2:0a:ab:13:c5:fb:8a:3f:13:24:22:12:
                    60:2b:b7:ed:b1:8f:7b:d5:60:c8:d9:bb:f5:7e:df:
                    c9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D9:EE:53:F1:2A:95:2A:7A:51:66:38:60:D3:F1:5C:16:69:34:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/7e7dfc09-f6dc-3df0-92f2-221c7cc8743b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e1:9f:47:7e:a1:9f:1e:af:e8:5b:36:6e:00:8a:44:1e:bf:
         41:54:58:e3:cb:71:56:38:72:7a:eb:e4:eb:aa:ac:f2:54:9d:
         7f:03:fa:3d:ed:c9:18:b6:7a:9e:fe:5c:9c:88:e9:bb:8e:63:
         5f:37:57:e0:9f:97:12:d9:c4:59:82:fb:91:18:be:75:ad:8b:
         00:e7:4f:4c:85:ab:56:e8:cd:4f:af:e4:6c:0d:e9:eb:a3:47:
         e5:06:d9:27:89:03:4e:76:37:4b:5a:9a:63:9e:e2:59:41:0d:
         d8:2c:13:a9:9b:3a:36:3e:d9:63:1c:ae:4f:ff:b2:3c:f0:28:
         82:5b:21:3b:f5:d3:bb:d0:90:93:b0:ee:39:df:31:2b:f4:16:
         9d:b4:2c:d5:fd:51:71:33:af:4c:ae:42:b5:2d:83:18:90:9c:
         33:da:13:bf:2f:2a:03:26:fb:35:6f:cf:d3:24:d5:d3:c3:a3:
         30:25:0a:77:bf:12:82:36:29:45:40:14:3e:fa:cc:85:23:41:
         df:e0:91:6d:3f:8e:88:a6:2a:85:5a:55:f8:9e:81:f3:a2:a1:
         f1:2f:55:d5:24:82:46:d8:b7:30:f2:05:1d:7a:a6:c8:6e:90:
         6c:8d:12:dc:62:c2:e7:53:ac:d2:f8:f5:9a:3e:d7:06:a2:62:
         a1:d0:1b:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeHITG9FpLiVJn86BAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi
NTIwMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk
ZTZlZWE2ZjUtMzYxNC00ZWFhLWIwYzYtYjI3MTcxOTcyNWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVIOHZGrJY7aLmmo+zyALmiCWcY/pgZ5Qo/w
eP8Nh6tzo2LTcLNqkHhCvR34Mc2ClRFxdq+jCh8a0hFm1BUiVbFtV3q2HsUbrgAF
uC53Mu2PzuFhIyE+urOz7ePfTOiMquWSAV2jynSYNf9KSMT4KAJGP6qJpynyBnAD
o2cJLulKJ58RNOgcSqq37dvVzgbSv9+qX/rDMS+apCa8k4+W74pLkF2jSeoE8xYM
koNFjtS3+vX2Z6TyJrJs5+rx6UI9F8fJmaKVorPlNlZW9huzS7vNvIkeUX9gpA/J
b4Wc/WKWmfqiCqsTxfuKPxMkIhJgK7ftsY971WDI2bv1ft/J6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNbZ7lPxKpUqelFmOGDT8VwWaTQYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk
OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvN2U3ZGZjMDktZjZkYy0z
ZGYwLTkyZjItMjIxYzdjYzg3NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0
MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm
YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw
NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEThn0d+oZ8er+hbNm4AikQev0FUWOPLcVY4cnrr5OuqrPJUnX8D+j3t
yRi2ep7+XJyI6buOY183V+CflxLZxFmC+5EYvnWtiwDnT0yFq1bozU+v5GwN6euj
R+UG2SeJA052N0tammOe4llBDdgsE6mbOjY+2WMcrk//sjzwKIJbITv107vQkJOw
7jnfMSv0Fp20LNX9UXEzr0yuQrUtgxiQnDPaE78vKgMm+zVvz9Mk1dPDozAlCne/
EoI2KUVAFD76zIUjQd/gkW0/joimKoVaVfiegfOiofEvVdUkgkbYtzDyBR16pshu
kGyNEtxiwudTrNL49Zo+1waiYqHQG40=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org