Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5088dc1e-20ff-35e4-9dad-2532d7f9be4b.roa
File:                     5088dc1e-20ff-35e4-9dad-2532d7f9be4b.roa (raw, json)
Hash identifier:          Nykz4KJ2ZYKM2Jpmth38gd1YEO6CmocWTJIlLXb4NpA=
Subject key identifier:   E0:D0:DB:5F:B6:8F:3C:A4:AE:F4:6A:15:9C:ED:08:1D:7A:5D:88:8B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DE3A6FFB29875754F7500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5088dc1e-20ff-35e4-9dad-2532d7f9be4b.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     394551
IP address blocks:        70.60.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:e3:a6:ff:b2:98:75:75:4f:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=9d294189-ee6b-4c02-9a7d-ca15bb3d7427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:19:0a:f9:fb:62:ed:d6:99:f2:73:2f:b5:e7:
                    cb:4c:1e:4a:f0:87:c6:7e:be:b5:d5:a3:d0:78:03:
                    50:8b:31:89:71:77:bf:ba:38:c3:a2:b9:d8:ed:7d:
                    ae:81:9b:ae:f7:78:33:c1:52:ee:39:1a:56:c8:6b:
                    c9:bd:b5:7b:96:2c:27:c4:60:de:fb:32:33:80:5b:
                    ac:15:6c:b2:aa:e1:6a:24:da:37:a8:9c:ac:70:c6:
                    04:c2:17:1d:05:4b:fd:6c:26:34:79:eb:98:c0:79:
                    fd:e3:07:4f:23:bf:70:9e:87:8d:4d:6a:fa:f4:77:
                    99:ab:9f:8c:24:8b:47:cc:59:f3:f2:af:3f:87:fd:
                    3a:27:c3:96:4b:2a:b5:82:2f:b9:ab:f3:53:33:22:
                    06:2a:67:ea:a9:b2:e6:92:b5:ab:55:7c:ce:05:39:
                    20:73:7d:41:c4:af:cc:09:89:55:4e:56:85:92:2a:
                    f2:1a:4e:66:bd:7f:f6:78:31:cc:2d:4d:32:2b:8c:
                    20:82:d9:55:66:8b:43:d1:9a:cf:aa:23:23:ea:77:
                    1c:40:a5:27:a3:48:48:a2:b3:c3:34:0b:b5:0c:60:
                    cb:0a:b3:76:d5:7d:3a:b5:f7:e3:51:1c:54:13:50:
                    28:2d:de:b6:77:f2:a6:c5:64:f4:13:b9:76:29:6a:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D0:DB:5F:B6:8F:3C:A4:AE:F4:6A:15:9C:ED:08:1D:7A:5D:88:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5088dc1e-20ff-35e4-9dad-2532d7f9be4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.60.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:14:c0:82:e2:26:32:eb:f5:f1:fc:62:59:35:64:03:02:5a:
         b8:4e:f2:11:43:b2:45:83:63:58:c4:71:d4:47:79:d4:51:79:
         5f:a1:be:28:72:16:74:e9:e7:42:f7:2c:7d:32:dc:63:3d:7c:
         14:83:96:a0:52:69:6f:a5:b1:af:1b:de:68:c1:33:4c:94:3e:
         79:8f:cd:29:42:e6:f1:17:de:12:5e:68:2e:d3:58:0f:f8:1b:
         c9:9e:42:c3:d2:ca:5b:cb:e9:9a:9b:96:9b:4f:28:2f:ed:f0:
         c3:bb:7a:e5:70:4d:e1:cf:f0:76:c0:ee:12:94:45:80:91:e8:
         9a:62:70:6b:24:8c:b3:37:af:2a:49:b9:01:c1:de:0c:6e:c5:
         0b:03:8a:90:56:f1:5d:42:d9:87:cb:ab:2d:2d:3f:3f:89:c4:
         e0:40:4c:2a:f9:07:a2:13:18:33:86:c8:27:1d:6d:2e:79:6f:
         80:0d:23:9f:26:37:6f:c9:bd:25:b0:73:cc:23:c7:0b:66:4a:
         2e:ad:84:6c:ba:e6:5b:41:fd:96:99:6f:96:db:23:06:d1:6f:
         1a:6b:65:28:84:38:6a:3e:d1:d9:17:21:c0:a1:31:3e:7a:d7:
         74:e7:32:56:8a:15:8a:c9:96:e5:a1:07:b0:f2:da:73:10:23:
         e2:64:91:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijeOm/7KYdXVPdQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
OWQyOTQxODktZWU2Yi00YzAyLTlhN2QtY2ExNWJiM2Q3NDI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBkK+fti7daZ8nMvtefLTB5K8IfGfr611aPQ
eANQizGJcXe/ujjDornY7X2ugZuu93gzwVLuORpWyGvJvbV7liwnxGDe+zIzgFus
FWyyquFqJNo3qJyscMYEwhcdBUv9bCY0eeuYwHn94wdPI79wnoeNTWr69HeZq5+M
JItHzFnz8q8/h/06J8OWSyq1gi+5q/NTMyIGKmfqqbLmkrWrVXzOBTkgc31BxK/M
CYlVTlaFkiryGk5mvX/2eDHMLU0yK4wggtlVZotD0ZrPqiMj6nccQKUno0hIorPD
NAu1DGDLCrN21X06tffjURxUE1AoLd62d/KmxWT0E7l2KWpuGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFODQ21+2jzykrvRqFZztCB16XYiLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNTA4OGRjMWUtMjBmZi0z
NWU0LTlkYWQtMjUzMmQ3ZjliZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARjz4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGMUwILiJjLr9fH8Ylk1ZAMCWrhO8hFDskWDY1jEcdRHedRReV+hvihy
FnTp50L3LH0y3GM9fBSDlqBSaW+lsa8b3mjBM0yUPnmPzSlC5vEX3hJeaC7TWA/4
G8meQsPSylvL6ZqblptPKC/t8MO7euVwTeHP8HbA7hKURYCR6JpicGskjLM3rypJ
uQHB3gxuxQsDipBW8V1C2YfLqy0tPz+JxOBATCr5B6ITGDOGyCcdbS55b4ANI58m
N2/JvSWwc8wjxwtmSi6thGy65ltB/ZaZb5bbIwbRbxprZSiEOGo+0dkXIcChMT56
13TnMlaKFYrJluWhB7Dy2nMQI+Jkkdk=
-----END CERTIFICATE-----
Generated at Wed May 1 15:55:57 2024 by rpki-client on console-ams.rpki-client.org