Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa
File:                     e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa (raw, json)
Hash identifier:          4F1Z8IJvvtqw+ywXm0uEkI77vLegfZULtHzyQq29gxY=
Subject key identifier:   C5:E4:EA:0E:42:61:9E:EC:13:2A:E5:FC:64:6C:82:0D:C4:6C:42:BD
Certificate issuer:       /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial:       010D0C9F4328584793B1127C78D9BB3934098A80
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     16509
IP address blocks:        208.70.136.0/23 maxlen: 23
                          208.70.138.0/24 maxlen: 24
                          208.70.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:12:7c:78:d9:bb:39:34:09:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=0f29df5e-f7d7-47d4-99a5-c91cb4da0255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:26:7b:06:66:c0:7b:28:71:e9:2e:5c:0b:e6:
                    3e:6c:49:ed:5e:7b:ea:fe:e7:ca:82:b5:87:f9:67:
                    66:e4:7a:bf:13:b7:66:ba:c5:c6:b7:dd:92:9f:67:
                    e9:00:56:e1:80:e7:99:0e:46:26:48:cb:90:b4:a3:
                    70:3e:2a:4d:5c:6c:48:ec:49:50:8f:d8:2e:d8:27:
                    4a:b3:9b:eb:28:60:ac:99:f6:23:1b:5c:df:b3:4b:
                    0c:07:17:fa:d4:d1:7f:71:a0:1c:4b:ec:e1:7f:37:
                    e3:c8:6c:ba:61:1a:27:15:0e:cd:1c:db:93:ca:2a:
                    a6:fb:9e:da:06:bc:2f:b3:f8:3a:38:16:ee:df:8b:
                    89:70:f7:fe:30:2d:fa:39:08:91:2a:7e:9b:15:f1:
                    50:8c:7a:bf:61:e4:0d:10:7f:84:9d:34:5e:29:13:
                    57:42:f9:43:89:c1:7f:54:58:e4:ac:02:d2:4b:9d:
                    56:23:29:b4:1a:17:3e:d1:4c:5a:6c:fe:5b:42:56:
                    70:ac:e8:75:ee:43:86:8b:92:02:45:a5:bb:e3:cc:
                    26:fb:60:fb:94:ec:b5:3b:21:03:1f:7d:b8:91:35:
                    e8:7d:45:21:99:69:bd:57:d5:d8:d8:83:3b:54:d2:
                    64:3b:78:48:45:76:f2:df:cd:32:42:75:16:83:59:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E4:EA:0E:42:61:9E:EC:13:2A:E5:FC:64:6C:82:0D:C4:6C:42:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:74:18:28:83:d7:ec:67:49:09:ca:d0:01:a7:ba:3a:24:82:
         54:2a:a9:44:7e:59:07:87:62:b0:b9:8a:0f:03:d5:15:25:72:
         82:04:41:cb:fc:c7:e4:d4:78:66:40:81:39:13:d8:60:b6:b0:
         a0:29:e6:d7:53:b5:92:db:88:eb:f5:20:67:3b:43:e7:f2:20:
         9f:41:e7:17:ea:34:21:19:fe:20:22:8f:5f:54:b6:ed:9a:ed:
         84:d8:82:03:3a:13:4d:f9:1f:03:0a:99:d7:dd:8c:3b:81:11:
         39:82:91:69:f5:d4:81:88:bc:60:0e:5b:b3:f1:52:37:64:10:
         45:35:26:88:2b:ad:b6:75:b7:d1:64:97:93:39:85:4b:66:7c:
         85:af:98:50:e6:03:dc:64:19:a3:2e:43:9c:c1:8c:bd:1d:d7:
         6e:fc:32:c2:52:cf:50:50:ee:95:68:25:fe:b2:5c:d5:8c:ca:
         9a:b6:06:b7:03:79:8a:c2:90:6c:9e:bc:a0:df:d8:fd:20:75:
         49:03:0a:1c:6f:d4:09:e7:49:f0:09:e1:94:ac:7a:d8:e2:da:
         f6:12:79:f6:eb:e3:89:29:f9:dd:82:f6:1e:9a:6d:b8:51:12:
         46:81:7d:f4:23:87:5b:27:59:e4:48:98:d3:e5:26:ac:4e:47:
         59:93:7f:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsRJ8eNm7OTQJioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjEzZTUzNjUtNWJlMy00MmY0LWEzZDEtN2Y3NGJiNDRk
ZjEzMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk
MGYyOWRmNWUtZjdkNy00N2Q0LTk5YTUtYzkxY2I0ZGEwMjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCZ7BmbAeyhx6S5cC+Y+bEntXnvq/ufKgrWH
+Wdm5Hq/E7dmusXGt92Sn2fpAFbhgOeZDkYmSMuQtKNwPipNXGxI7ElQj9gu2CdK
s5vrKGCsmfYjG1zfs0sMBxf61NF/caAcS+zhfzfjyGy6YRonFQ7NHNuTyiqm+57a
Brwvs/g6OBbu34uJcPf+MC36OQiRKn6bFfFQjHq/YeQNEH+EnTReKRNXQvlDicF/
VFjkrALSS51WIym0Ghc+0UxabP5bQlZwrOh17kOGi5ICRaW748wm+2D7lOy1OyED
H324kTXofUUhmWm9V9XY2IM7VNJkO3hIRXby380yQnUWg1mQMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMXk6g5CYZ7sEyrl/GRsgg3EbEK9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yMTNl
NTM2NS01YmUzLTQyZjQtYTNkMS03Zjc0YmI0NGRmMTMvZTlmMjhhMDktZmIzNS0z
YWQzLTlmNDgtZTdiYzBmMDZlYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjEzZTUzNjUtNWJlMy00MmY0LWEz
ZDEtN2Y3NGJiNDRkZjEzLzIxM2U1MzY1LTViZTMtNDJmNC1hM2QxLTdmNzRiYjQ0
ZGYxMy5jcmwwHwYDVR0jBBgwFoAUesHGDQ+FIB+5tE9s1pRMS9GI/PwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8yMTNlNTM2NS01YmUzLTQyZjQtYTNkMS03Zjc0
YmI0NGRmMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EaIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIp0GCiD1+xnSQnK0AGnujokglQqqUR+WQeHYrC5ig8D1RUlcoIEQcv8
x+TUeGZAgTkT2GC2sKAp5tdTtZLbiOv1IGc7Q+fyIJ9B5xfqNCEZ/iAij19Utu2a
7YTYggM6E035HwMKmdfdjDuBETmCkWn11IGIvGAOW7PxUjdkEEU1JogrrbZ1t9Fk
l5M5hUtmfIWvmFDmA9xkGaMuQ5zBjL0d1278MsJSz1BQ7pVoJf6yXNWMypq2BrcD
eYrCkGyevKDf2P0gdUkDChxv1AnnSfAJ4ZSsetji2vYSefbr44kp+d2C9h6abbhR
EkaBffQjh1snWeRImNPlJqxOR1mTf3U=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:18 2024 by rpki-client on console-ams.rpki-client.org