Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa
File:                     fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa (raw, json)
Hash identifier:          KndALhDHVhy6NVakIeJBxFlqKxe2KetCCO704Njk9Ac=
Subject key identifier:   3F:D6:62:40:B5:00:1D:C7:75:D8:6A:BB:BC:AC:41:F5:BA:62:FA:54
Certificate issuer:       /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
Certificate serial:       010D0C9F432858473D25DFC07304E897FAB3AFC0
Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     16941
IP address blocks:        208.70.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Sep 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:df:c0:73:04:e8:97:fa:b3:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=cd9872b9-76bb-4f6b-b117-c8c329a812ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:36:0c:df:11:69:28:ea:b6:3d:f7:10:b9:ce:
                    06:25:52:37:e7:df:0a:6f:47:05:b4:57:d9:1f:c4:
                    0b:7e:e7:2b:cf:14:46:7c:64:2a:99:0e:38:82:df:
                    13:e9:43:09:57:cf:30:b8:ba:f3:bb:83:22:aa:80:
                    f7:ec:65:ca:a3:62:3a:d1:cd:4d:69:78:f4:4d:52:
                    bf:60:8b:04:fa:ab:1a:13:57:65:76:39:f6:a5:65:
                    59:99:ce:76:65:d2:da:3e:a3:91:ce:ce:8a:02:75:
                    47:9e:44:96:16:51:41:e2:ed:d7:8e:39:05:42:a1:
                    56:6c:2e:ae:ff:00:16:d7:e2:51:e7:04:e2:4b:a4:
                    6c:b8:bf:8c:cf:20:20:af:b1:ee:70:1a:e7:24:1c:
                    a7:c5:f8:47:a4:5a:bf:cd:e3:fa:7e:b8:01:fd:0e:
                    75:07:4d:87:ed:56:a8:ca:85:6c:a9:0f:07:bb:08:
                    d5:b7:02:b0:94:15:0c:7a:f3:39:58:33:d6:4e:f0:
                    3b:82:96:d8:24:e2:49:df:56:8b:ea:63:b9:57:e4:
                    35:c9:a2:c2:4f:9c:06:11:c7:8f:7e:d9:29:fc:54:
                    ab:3d:d1:1a:bb:bf:46:6e:b3:de:6d:96:b2:b2:d4:
                    6f:57:18:d5:a4:51:ed:e9:c6:02:96:57:ad:09:30:
                    78:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D6:62:40:B5:00:1D:C7:75:D8:6A:BB:BC:AC:41:F5:BA:62:FA:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl

            X509v3 Authority Key Identifier:
                keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a5:82:bf:48:e6:04:cc:0f:63:4e:96:ee:6e:6e:3a:9a:79:
         e8:9d:7d:79:16:a3:95:3a:5c:6b:fd:c2:38:39:8c:33:a9:77:
         cb:bc:15:3c:46:9a:06:3e:be:c7:1f:40:5a:84:7b:a4:f3:73:
         6a:24:bc:7e:78:f2:94:4c:74:4e:c5:0a:b5:0f:c2:7c:4a:f7:
         b5:12:7a:58:84:5d:e1:51:43:7b:6f:1f:c5:64:cc:e5:c4:8e:
         c2:51:71:b1:83:a8:d8:f6:2e:ef:6c:dd:b5:d8:d3:12:a2:0e:
         8b:d4:c4:b1:90:f6:d9:cd:7a:bc:fc:d2:01:37:b1:c0:64:bf:
         ed:0f:30:5f:58:a2:8e:7c:5e:1d:21:d5:eb:e3:10:1d:0e:f1:
         9a:c0:d6:45:9f:1d:75:ee:e5:1d:d5:65:1b:14:b3:1c:12:8e:
         71:14:f6:79:64:94:ce:2a:f9:e3:b3:7f:fa:61:9f:73:bb:fc:
         95:45:d2:71:06:b1:1e:9c:8a:59:65:ba:39:23:6f:e8:86:ae:
         bd:50:f3:ec:25:f9:52:1a:de:82:80:8c:59:62:02:3c:c5:c8:
         88:94:a1:27:62:34:4e:93:ef:c8:81:c3:00:1a:9f:5b:af:60:
         38:73:4a:f7:8c:ab:32:c8:3b:8c:21:31:08:34:d4:2f:2c:69:
         73:56:a9:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc9Jd/AcwTol/qzr8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc2YmI1YTQtNzFlNS00OTdmLWE0YTQtZWIzZjFhOGFm
ZDFjMB4XDTI0MDkxNzAxMDAzMVoXDTI0MTIxNjAyMDAzMVowLzEtMCsGA1UEAxMk
Y2Q5ODcyYjktNzZiYi00ZjZiLWIxMTctYzhjMzI5YTgxMmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijYM3xFpKOq2PfcQuc4GJVI3598Kb0cFtFfZ
H8QLfucrzxRGfGQqmQ44gt8T6UMJV88wuLrzu4MiqoD37GXKo2I60c1NaXj0TVK/
YIsE+qsaE1dldjn2pWVZmc52ZdLaPqORzs6KAnVHnkSWFlFB4u3XjjkFQqFWbC6u
/wAW1+JR5wTiS6RsuL+MzyAgr7HucBrnJBynxfhHpFq/zeP6frgB/Q51B02H7Vao
yoVsqQ8HuwjVtwKwlBUMevM5WDPWTvA7gpbYJOJJ31aL6mO5V+Q1yaLCT5wGEceP
ftkp/FSrPdEau79GbrPebZaystRvVxjVpFHt6cYClletCTB4AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/WYkC1AB3Hddhqu7ysQfW6YvpUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzZi
YjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNmMWE4YWZkMWMvZmNiZTc2YzQtNDk1Ni0z
ZWRjLWIzMWItZWNmYzk3OGYwZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc2YmI1YTQtNzFlNS00OTdmLWE0
YTQtZWIzZjFhOGFmZDFjLzg3NmJiNWE0LTcxZTUtNDk3Zi1hNGE0LWViM2YxYThh
ZmQxYy5jcmwwHwYDVR0jBBgwFoAUE2GiTAhkvDkz5Ehc1jDniqqapGEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NzZiYjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNm
MWE4YWZkMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABmlgr9I5gTMD2NOlu5ubjqaeeidfXkWo5U6XGv9wjg5jDOpd8u8FTxG
mgY+vscfQFqEe6Tzc2okvH548pRMdE7FCrUPwnxK97USeliEXeFRQ3tvH8VkzOXE
jsJRcbGDqNj2Lu9s3bXY0xKiDovUxLGQ9tnNerz80gE3scBkv+0PMF9Yoo58Xh0h
1evjEB0O8ZrA1kWfHXXu5R3VZRsUsxwSjnEU9nlklM4q+eOzf/phn3O7/JVF0nEG
sR6cilllujkjb+iGrr1Q8+wl+VIa3oKAjFliAjzFyIiUoSdiNE6T78iBwwAan1uv
YDhzSveMqzLIO4whMQg01C8saXNWqUw=
-----END CERTIFICATE-----
Generated at Wed Sep 18 18:36:04 2024 by rpki-client on console-fra.rpki-client.org