Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/a61c5744-6e34-3999-beb6-e7060977c75b.roa
File:                     a61c5744-6e34-3999-beb6-e7060977c75b.roa (raw, json)
Hash identifier:          AEq52YJ+rzykyWF2nNnbsWvlA/RnXmegHLcm7CyF7MY=
Subject key identifier:   38:15:20:AB:00:FE:18:D5:60:A3:1B:70:01:14:49:14:43:2C:14:E5
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F43285845C873ABB53271C05AE52CB2C0
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/a61c5744-6e34-3999-beb6-e7060977c75b.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     3695
IP address blocks:        70.36.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:ab:b5:32:71:c0:5a:e5:2c:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=e764e9ea-d32a-412b-81c6-4d7dff10bb24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:ea:56:52:da:e2:cb:b8:17:26:57:7b:23:
                    80:b4:23:7b:d1:2c:59:ef:61:17:60:32:8d:da:d0:
                    ed:9f:6b:c9:a0:41:ac:09:a2:81:6d:46:48:2b:ff:
                    29:35:dd:98:45:46:f9:f8:59:c6:34:8d:62:7c:e7:
                    5d:80:9e:ad:af:0a:60:a0:e1:09:aa:7c:af:30:93:
                    3a:bb:7c:ef:ff:b5:43:d8:8b:9b:ba:90:db:4f:f8:
                    ae:6c:3a:be:b7:63:b0:88:95:5e:26:0c:3b:16:34:
                    06:61:8a:4c:e0:10:ff:a3:35:63:65:bb:6d:36:e0:
                    68:04:7d:a4:73:9b:ab:39:51:da:a6:46:03:7d:82:
                    e4:4c:a8:d6:cb:c5:a2:69:66:3d:4a:f6:eb:37:b7:
                    59:3e:31:ea:97:57:ab:c5:3d:62:b5:39:9d:04:82:
                    4b:fd:a3:61:f5:f4:de:33:46:22:7e:bf:3d:b8:51:
                    3b:e5:d5:6d:8e:fa:2a:39:dc:c2:93:4f:d5:8f:3b:
                    86:d6:2d:8f:c8:a0:a3:aa:a2:75:9a:16:c3:a0:04:
                    7e:b5:8c:8f:a9:0c:9f:0e:ed:c7:42:89:52:af:52:
                    60:f4:80:cc:e1:3c:1b:74:54:a7:25:73:f1:5c:40:
                    1f:e2:f2:be:21:a4:19:79:b8:aa:fa:dd:f5:4c:21:
                    31:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:15:20:AB:00:FE:18:D5:60:A3:1B:70:01:14:49:14:43:2C:14:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/a61c5744-6e34-3999-beb6-e7060977c75b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c7:d3:60:72:da:a3:37:b9:85:e1:74:de:8e:36:44:4a:2e:
         65:d8:fd:0a:e8:92:b6:d1:54:80:a5:4a:e5:dc:5a:eb:c8:89:
         a2:05:05:ae:c6:e3:3d:5b:48:09:8f:7c:26:65:8c:f1:b9:16:
         4e:33:57:82:0e:10:77:e6:82:3e:08:f5:c8:61:c9:18:d1:d6:
         91:2f:46:f7:6d:50:ef:a1:da:5f:49:6c:0f:81:15:5f:e3:8b:
         a8:bd:26:db:b4:08:f1:92:dc:24:bf:af:b1:5d:89:25:96:8c:
         f7:b9:da:a7:9b:89:e1:d7:a7:1e:a6:c5:f7:fd:53:f6:68:6c:
         47:6a:aa:49:63:cd:2e:7f:2d:0f:69:ac:d0:1a:27:0f:77:e2:
         39:aa:05:1a:2b:9f:62:35:89:d9:06:a2:0a:81:d2:8a:7f:e7:
         b0:05:9e:e5:de:a4:94:aa:87:12:19:5c:f4:95:6a:78:49:c4:
         1b:a1:ea:cb:4f:6f:0d:b1:08:69:bd:0f:20:ce:b1:3d:b8:57:
         aa:ee:9d:50:02:26:f9:d6:3d:63:e4:cc:69:a3:ab:45:b4:f7:
         ed:e9:76:02:4a:e2:ae:dd:d6:5c:bb:a4:dc:dc:6f:96:78:c3:
         8d:75:0f:45:13:27:27:af:e2:59:a8:1e:1c:65:a6:74:20:af:
         07:52:6e:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXIc6u1MnHAWuUsssAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi
NTIwMB4XDTI0MDUwNjEzMDAzNFoXDTI0MDgwNDEzMDAzNFowLzEtMCsGA1UEAxMk
ZTc2NGU5ZWEtZDMyYS00MTJiLTgxYzYtNGQ3ZGZmMTBiYjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJDqVlLa4su4FyZXeyOAtCN70SxZ72EXYDKN
2tDtn2vJoEGsCaKBbUZIK/8pNd2YRUb5+FnGNI1ifOddgJ6trwpgoOEJqnyvMJM6
u3zv/7VD2IubupDbT/iubDq+t2OwiJVeJgw7FjQGYYpM4BD/ozVjZbttNuBoBH2k
c5urOVHapkYDfYLkTKjWy8WiaWY9SvbrN7dZPjHql1erxT1itTmdBIJL/aNh9fTe
M0Yifr89uFE75dVtjvoqOdzCk0/VjzuG1i2PyKCjqqJ1mhbDoAR+tYyPqQyfDu3H
QolSr1Jg9IDM4TwbdFSnJXPxXEAf4vK+IaQZebiq+t31TCEx9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDgVIKsA/hjVYKMbcAEUSRRDLBTlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk
OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvYTYxYzU3NDQtNmUzNC0z
OTk5LWJlYjYtZTcwNjA5NzdjNzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0
MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm
YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw
NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACPH02By2qM3uYXhdN6ONkRKLmXY/QrokrbRVIClSuXcWuvIiaIFBa7G
4z1bSAmPfCZljPG5Fk4zV4IOEHfmgj4I9chhyRjR1pEvRvdtUO+h2l9JbA+BFV/j
i6i9Jtu0CPGS3CS/r7FdiSWWjPe52qebieHXpx6mxff9U/ZobEdqqkljzS5/LQ9p
rNAaJw934jmqBRorn2I1idkGogqB0op/57AFnuXepJSqhxIZXPSVanhJxBuh6stP
bw2xCGm9DyDOsT24V6runVACJvnWPWPkzGmjq0W09+3pdgJK4q7d1ly7pNzcb5Z4
w411D0UTJyev4lmoHhxlpnQgrwdSbgA=
-----END CERTIFICATE-----
Generated at Mon May 20 14:55:21 2024 by rpki-client on console-ams.rpki-client.org