Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ea8c8f15-c687-3daa-b878-45a8368b74d7.roa
File:                     ea8c8f15-c687-3daa-b878-45a8368b74d7.roa (raw, json)
Hash identifier:          b1uJiRqLTpo49VXWmrmxyTgfYBOzSZd4gc0FrJSvstA=
Subject key identifier:   BF:97:AF:69:E0:97:EE:97:FA:E7:C0:FC:40:C0:AA:9B:19:D9:C8:8F
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285847161055283CE3822775648000
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ea8c8f15-c687-3daa-b878-45a8368b74d7.roa
Signing time:             Tue 03 Sep 2024 01:00:31 +0000
ROA not before:           Tue 03 Sep 2024 01:00:31 +0000
ROA not after:            Mon 02 Dec 2024 02:00:31 +0000
asID:                     55246
IP address blocks:        209.237.70.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:16:10:55:28:3c:e3:82:27:75:64:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Sep  3 01:00:31 2024 GMT
            Not After : Dec  2 02:00:31 2024 GMT
        Subject: CN=d4040d7b-21d8-4c89-8e51-7d1e0332196c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:28:60:c8:3a:8a:e7:b4:1f:47:0f:ed:84:4c:
                    60:ff:ad:91:c9:a1:12:63:a9:71:9e:5e:2e:6a:db:
                    8d:64:5a:75:15:69:43:28:4b:73:23:ed:64:55:e9:
                    55:a3:8e:da:49:84:6c:46:b9:b0:e2:2d:5e:03:d2:
                    3c:90:32:0c:50:71:02:25:8e:3d:7d:ad:c7:3d:ac:
                    39:e2:84:69:4d:90:2d:e8:8c:27:43:71:b4:bf:4f:
                    b9:f3:0b:77:6c:2d:78:f0:f6:18:d5:5a:1b:7d:38:
                    da:e3:5f:8f:24:46:a0:57:63:7b:84:66:7e:c3:75:
                    20:bd:b1:ed:20:7f:b1:9c:b1:42:56:c7:1b:b9:5d:
                    6b:ac:65:1a:5f:ed:c3:0f:51:b5:e6:6c:f1:69:8e:
                    1e:9d:39:41:01:1a:32:d1:ca:4a:59:b3:94:13:d6:
                    9c:da:1b:47:b9:c1:6a:14:a8:43:e2:58:8d:b1:43:
                    86:73:bc:6c:60:5b:53:6a:79:f9:c1:dd:52:1a:66:
                    a6:49:27:66:8e:09:b6:31:ba:2e:28:8c:18:11:57:
                    11:bf:33:7f:82:a8:a9:db:ea:fc:d3:44:d5:c3:2e:
                    45:c4:4a:42:57:85:7d:2a:16:39:f2:86:d1:98:3e:
                    fc:2e:02:85:87:b8:a5:8f:05:56:80:88:96:20:a5:
                    db:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:97:AF:69:E0:97:EE:97:FA:E7:C0:FC:40:C0:AA:9B:19:D9:C8:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ea8c8f15-c687-3daa-b878-45a8368b74d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c2:58:76:2a:cc:e7:87:f6:1b:af:8e:b6:f9:b1:c0:56:24:
         e3:58:bd:54:38:2a:44:5a:cd:22:19:bd:55:3c:20:f2:55:36:
         7f:ed:ca:c6:85:32:06:98:41:42:00:92:c2:2b:d8:29:9a:bc:
         f0:65:7c:39:ac:81:f0:5a:b0:9f:03:27:83:fd:fd:da:a3:25:
         48:cf:74:97:70:37:5c:69:19:3e:3b:67:21:52:20:1d:5d:ac:
         34:f4:57:e8:cc:6f:96:bb:01:2a:86:cf:88:c3:8e:01:3b:9e:
         68:5c:94:d1:03:b9:db:03:f5:32:71:f0:91:5b:ee:05:64:5e:
         f8:0d:37:5c:26:e6:04:15:89:10:df:46:f3:e4:2d:53:4a:53:
         b0:6c:d1:6c:db:d7:1c:47:d2:58:ba:e5:ae:66:a2:be:c6:12:
         ac:7f:67:3d:cc:b9:8a:ce:21:1e:25:75:17:d4:ab:8b:2c:7a:
         21:80:8d:86:f8:c0:5d:e9:dc:15:32:94:b4:cf:07:e6:27:ae:
         86:42:c4:21:6b:75:76:fb:95:90:26:e3:c6:fd:b5:20:fa:71:
         e1:e1:d5:3f:cd:0f:c9:5b:3b:e4:03:8f:cd:82:b2:b1:eb:ff:
         10:df:f6:2b:a9:ba:23:ac:f4:90:16:2f:6c:da:88:3f:79:06:
         91:bd:f0:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcWEFUoPOOCJ3VkgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI0MDkwMzAxMDAzMVoXDTI0MTIwMjAyMDAzMVowLzEtMCsGA1UEAxMk
ZDQwNDBkN2ItMjFkOC00Yzg5LThlNTEtN2QxZTAzMzIxOTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkShgyDqK57QfRw/thExg/62RyaESY6lxnl4u
atuNZFp1FWlDKEtzI+1kVelVo47aSYRsRrmw4i1eA9I8kDIMUHECJY49fa3HPaw5
4oRpTZAt6IwnQ3G0v0+58wt3bC148PYY1VobfTja41+PJEagV2N7hGZ+w3UgvbHt
IH+xnLFCVscbuV1rrGUaX+3DD1G15mzxaY4enTlBARoy0cpKWbOUE9ac2htHucFq
FKhD4liNsUOGc7xsYFtTann5wd1SGmamSSdmjgm2MbouKIwYEVcRvzN/gqip2+r8
00TVwy5FxEpCV4V9KhY58obRmD78LgKFh7iljwVWgIiWIKXbfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL+Xr2ngl+6X+ufA/EDAqpsZ2ciPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZWE4YzhmMTUtYzY4Ny0z
ZGFhLWI4NzgtNDVhODM2OGI3NGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0e1GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJDCWHYqzOeH9huvjrb5scBWJONYvVQ4KkRazSIZvVU8IPJVNn/tysaF
MgaYQUIAksIr2CmavPBlfDmsgfBasJ8DJ4P9/dqjJUjPdJdwN1xpGT47ZyFSIB1d
rDT0V+jMb5a7ASqGz4jDjgE7nmhclNEDudsD9TJx8JFb7gVkXvgNN1wm5gQViRDf
RvPkLVNKU7Bs0Wzb1xxH0li65a5mor7GEqx/Zz3MuYrOIR4ldRfUq4sseiGAjYb4
wF3p3BUylLTPB+YnroZCxCFrdXb7lZAm48b9tSD6ceHh1T/ND8lbO+QDj82CsrHr
/xDf9iupuiOs9JAWL2zaiD95BpG98Nc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:02 2024 by rpki-client on console-fra.rpki-client.org