Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ea8c8f15-c687-3daa-b878-45a8368b74d7.roa
File:                     ea8c8f15-c687-3daa-b878-45a8368b74d7.roa (raw, json)
Hash identifier:          tJTFnnePLbj2EhaHNifyzoh7kYq4MQ4k/keQ6P4Tjmk=
Subject key identifier:   38:4C:08:57:6D:61:7B:1A:97:D9:17:13:3D:71:4A:42:5A:CF:1C:30
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858455762CDA8A9526DD5D3601F00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ea8c8f15-c687-3daa-b878-45a8368b74d7.roa
Signing time:             Wed 27 Mar 2024 01:00:26 +0000
ROA not before:           Wed 27 Mar 2024 01:00:26 +0000
ROA not after:            Tue 25 Jun 2024 01:00:26 +0000
asID:                     55246
IP address blocks:        209.237.70.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:57:62:cd:a8:a9:52:6d:d5:d3:60:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Mar 27 01:00:26 2024 GMT
            Not After : Jun 25 01:00:26 2024 GMT
        Subject: CN=ecd467c9-8159-4c78-9e2c-e6dbe51d8647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3f:1f:ea:d9:90:ec:ff:69:90:93:f9:6f:e3:
                    12:f3:40:a8:e0:40:11:97:c2:62:3f:2e:8c:d8:b5:
                    eb:0f:31:f2:f4:f7:e9:bf:6c:68:a8:04:b1:36:90:
                    ad:39:58:ff:ba:b9:71:14:36:7e:7c:06:57:71:ba:
                    23:23:08:1d:11:9d:8b:99:dc:1e:47:ef:66:13:5f:
                    bc:57:af:67:c8:45:d2:9e:ea:84:38:d1:9e:b4:fd:
                    19:0d:56:9a:80:2c:a1:72:a4:e6:c0:0c:3f:5d:22:
                    a4:e6:aa:2b:f0:3c:56:03:29:d0:f0:38:bc:af:dc:
                    45:e6:f3:d0:56:79:31:56:ca:67:f6:1a:a4:d7:ab:
                    e3:6d:92:bf:56:cd:20:05:5f:ed:55:35:a5:73:86:
                    a4:9e:a4:52:d1:7e:02:01:b6:7b:33:d2:08:d3:bd:
                    56:dc:f9:7c:8a:f5:4e:f6:df:95:bf:7b:c2:75:9f:
                    68:d6:11:7d:8d:c0:de:c7:af:2e:5b:80:fb:0c:cf:
                    46:c8:ac:25:50:56:86:e9:bd:cd:3f:f7:50:c4:f9:
                    ef:c7:cc:30:4f:9e:e9:18:9a:4f:04:97:08:17:f3:
                    09:3f:8a:30:1a:69:a5:30:e7:e1:0f:60:94:db:68:
                    bb:37:35:ef:93:d2:f4:07:4f:37:4d:12:0e:03:d8:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4C:08:57:6D:61:7B:1A:97:D9:17:13:3D:71:4A:42:5A:CF:1C:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ea8c8f15-c687-3daa-b878-45a8368b74d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ed:23:d5:6c:fd:ae:c1:86:d0:54:28:58:8f:fc:91:9c:b8:
         d5:3d:a6:f0:36:08:e4:a8:a2:97:a4:97:77:17:a8:e7:f9:35:
         04:3c:64:c3:6f:09:9f:ed:63:30:35:e6:23:0c:8a:c5:61:78:
         36:3a:83:32:df:87:40:12:ee:f2:e1:f4:c5:7a:5d:03:fe:6b:
         4d:04:98:dc:3b:4f:e3:a3:67:d1:86:ea:05:8b:39:0c:d8:2c:
         fb:02:ca:bd:ec:7d:8a:76:16:99:30:9b:5a:34:f2:1b:31:94:
         27:e6:2a:fe:0f:47:d2:a1:9c:94:60:e2:0a:d7:6f:3e:3e:9d:
         48:b5:f3:25:1c:38:6d:ba:11:65:4c:42:96:dc:63:2f:37:5d:
         d5:05:91:8a:04:ca:f2:a2:42:7c:69:90:23:1b:92:13:47:83:
         61:1b:4c:45:71:c3:7b:bd:7b:64:bf:40:b1:19:0f:e6:7a:aa:
         b1:13:b3:07:9f:bc:6b:fd:cc:8f:5a:1b:3d:9a:6d:ea:db:3b:
         31:f7:d6:46:e9:dd:fd:7a:7a:41:95:0d:1f:d6:d5:ca:25:28:
         cf:29:11:24:ee:0b:70:61:97:d1:79:22:8e:a8:65:f0:45:e1:
         40:b9:59:0b:da:d8:dd:06:b1:06:8a:14:92:0b:2e:16:13:2b:
         02:42:f2:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVXYs2oqVJt1dNgHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI0MDMyNzAxMDAyNloXDTI0MDYyNTAxMDAyNlowLzEtMCsGA1UEAxMk
ZWNkNDY3YzktODE1OS00Yzc4LTllMmMtZTZkYmU1MWQ4NjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T8f6tmQ7P9pkJP5b+MS80Co4EARl8JiPy6M
2LXrDzHy9Pfpv2xoqASxNpCtOVj/urlxFDZ+fAZXcbojIwgdEZ2LmdweR+9mE1+8
V69nyEXSnuqEONGetP0ZDVaagCyhcqTmwAw/XSKk5qor8DxWAynQ8Di8r9xF5vPQ
VnkxVspn9hqk16vjbZK/Vs0gBV/tVTWlc4aknqRS0X4CAbZ7M9II071W3Pl8ivVO
9t+Vv3vCdZ9o1hF9jcDex68uW4D7DM9GyKwlUFaG6b3NP/dQxPnvx8wwT57pGJpP
BJcIF/MJP4owGmmlMOfhD2CU22i7NzXvk9L0B083TRIOA9gQ8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDhMCFdtYXsal9kXEz1xSkJazxwwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZWE4YzhmMTUtYzY4Ny0z
ZGFhLWI4NzgtNDVhODM2OGI3NGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0e1GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC7tI9Vs/a7BhtBUKFiP/JGcuNU9pvA2COSoopekl3cXqOf5NQQ8ZMNv
CZ/tYzA15iMMisVheDY6gzLfh0AS7vLh9MV6XQP+a00EmNw7T+OjZ9GG6gWLOQzY
LPsCyr3sfYp2Fpkwm1o08hsxlCfmKv4PR9KhnJRg4grXbz4+nUi18yUcOG26EWVM
QpbcYy83XdUFkYoEyvKiQnxpkCMbkhNHg2EbTEVxw3u9e2S/QLEZD+Z6qrETswef
vGv9zI9aGz2aberbOzH31kbp3f16ekGVDR/W1colKM8pESTuC3Bhl9F5Io6oZfBF
4UC5WQva2N0GsQaKFJILLhYTKwJC8u4=
-----END CERTIFICATE-----
Generated at Mon May 20 13:10:45 2024 by rpki-client on console-fra.rpki-client.org