Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/f3259c64-3c17-367c-af81-37923ba31d59.roa
File:                     f3259c64-3c17-367c-af81-37923ba31d59.roa (raw, json)
Hash identifier:          x7MVRe4RZKS7nefIyhlrTmBSzuxn2fILrqazeNbSpZk=
Subject key identifier:   39:FA:B1:F0:61:DC:39:0D:22:01:C2:41:5A:05:A2:69:B3:9C:F4:B6
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F43285847B10160493EC6906B712F3300
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/f3259c64-3c17-367c-af81-37923ba31d59.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     35950
IP address blocks:        204.156.70.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:60:49:3e:c6:90:6b:71:2f:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=8be891c1-e028-4982-910b-3d87f9a3fb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:cd:69:dd:46:18:d2:e4:7d:5a:03:a8:68:
                    9d:6c:53:7b:f4:63:67:01:73:1c:43:0b:d0:e2:55:
                    a4:92:fb:75:c9:aa:db:dd:62:71:8b:b7:e1:74:1b:
                    d3:27:d9:53:b1:6c:c1:6a:43:cf:06:af:d3:3f:a4:
                    f4:07:66:df:1b:ea:ec:a2:00:e7:61:f7:a4:c4:81:
                    5a:da:f9:a4:ce:26:d3:59:99:8d:8e:93:57:09:5a:
                    be:40:e7:35:9a:8d:b2:c3:f2:5b:ba:91:0d:2a:3d:
                    0d:2a:f9:60:9d:8c:51:25:f0:e7:53:8f:c5:ce:ce:
                    8b:7f:92:a2:6c:4f:d0:ea:c2:7e:c3:9e:e2:47:55:
                    36:77:65:9b:f1:1f:d6:b2:46:34:ca:87:36:b9:28:
                    82:b7:5d:ad:89:16:5f:6c:de:a1:ba:e2:9d:ef:dd:
                    20:80:0a:92:fd:c1:7f:4f:eb:4c:fb:9b:84:c3:52:
                    d1:d7:95:d0:fc:3a:04:ca:4f:c5:30:bb:a1:b6:55:
                    e2:06:6a:e1:0a:92:cb:e2:2f:56:98:1a:a1:73:9c:
                    ee:43:0a:a2:41:22:08:f5:f8:df:b5:05:64:14:26:
                    f4:90:6c:d2:c1:81:f0:75:13:f9:e8:69:51:27:a4:
                    64:d0:06:7c:29:52:35:b4:cb:6d:a1:b5:84:c1:50:
                    91:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FA:B1:F0:61:DC:39:0D:22:01:C2:41:5A:05:A2:69:B3:9C:F4:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/f3259c64-3c17-367c-af81-37923ba31d59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:1e:e8:67:c0:28:6d:8f:52:cf:00:00:d7:0c:89:f3:56:37:
         32:3e:d1:72:56:62:f7:42:6d:1c:8b:5d:56:da:fe:6c:b2:c6:
         db:98:1e:f5:fc:14:17:57:a4:d3:fc:bd:fa:6b:e5:07:1a:21:
         5d:f1:41:ad:1d:46:ab:47:62:be:46:d1:1d:ac:fc:e1:33:eb:
         2c:ea:98:60:b6:26:b9:10:72:5a:0a:e0:9a:44:10:42:f4:30:
         50:5c:8b:ab:19:b9:da:87:62:6c:f2:04:47:d2:80:5b:35:3a:
         f4:21:5b:49:fb:c3:8f:10:b8:fa:1a:29:38:3d:8f:12:7a:7e:
         d0:87:7d:cf:ec:3d:e3:45:a3:fb:f4:7a:5e:98:b9:56:bd:02:
         88:4e:e5:67:8b:2f:df:99:7e:a8:07:99:55:43:8c:b9:e3:59:
         71:bc:e5:2e:ab:d7:1d:0c:46:ed:48:dd:9c:c8:c0:7d:3c:c2:
         3d:d7:31:1e:f9:f2:75:89:8a:d3:2e:b6:9d:02:eb:06:53:2e:
         ba:1d:bf:b9:b2:67:88:55:43:0a:3e:87:a8:c5:17:b6:46:ab:
         1a:87:05:eb:f0:b5:b9:5e:41:83:f1:5f:39:0c:8b:e5:ca:5f:
         a6:96:21:f7:ad:b0:0d:5a:0c:46:7d:9d:d2:48:fa:28:33:6e:
         9f:c1:2b:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAWBJPsaQa3EvMwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2JjNzM0ODMtNjAzNC00ZGMwLWJiZjUtZTRkODJiZjI4
YWY5MB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk
OGJlODkxYzEtZTAyOC00OTgyLTkxMGItM2Q4N2Y5YTNmYjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstfNad1GGNLkfVoDqGidbFN79GNnAXMcQwvQ
4lWkkvt1yarb3WJxi7fhdBvTJ9lTsWzBakPPBq/TP6T0B2bfG+rsogDnYfekxIFa
2vmkzibTWZmNjpNXCVq+QOc1mo2yw/JbupENKj0NKvlgnYxRJfDnU4/Fzs6Lf5Ki
bE/Q6sJ+w57iR1U2d2Wb8R/WskY0yoc2uSiCt12tiRZfbN6huuKd790ggAqS/cF/
T+tM+5uEw1LR15XQ/DoEyk/FMLuhtlXiBmrhCpLL4i9WmBqhc5zuQwqiQSII9fjf
tQVkFCb0kGzSwYHwdRP56GlRJ6Rk0AZ8KVI1tMttobWEwVCRvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDn6sfBh3DkNIgHCQVoFommznPS2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYmM3
MzQ4My02MDM0LTRkYzAtYmJmNS1lNGQ4MmJmMjhhZjkvZjMyNTljNjQtM2MxNy0z
NjdjLWFmODEtMzc5MjNiYTMxZDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2JjNzM0ODMtNjAzNC00ZGMwLWJi
ZjUtZTRkODJiZjI4YWY5L2NiYzczNDgzLTYwMzQtNGRjMC1iYmY1LWU0ZDgyYmYy
OGFmOS5jcmwwHwYDVR0jBBgwFoAUXtsNbM5NizgqaOXw+ekRwi1IZsQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYmM3MzQ4My02MDM0LTRkYzAtYmJmNS1lNGQ4
MmJmMjhhZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzJxGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADge6GfAKG2PUs8AANcMifNWNzI+0XJWYvdCbRyLXVba/myyxtuYHvX8
FBdXpNP8vfpr5QcaIV3xQa0dRqtHYr5G0R2s/OEz6yzqmGC2JrkQcloK4JpEEEL0
MFBci6sZudqHYmzyBEfSgFs1OvQhW0n7w48QuPoaKTg9jxJ6ftCHfc/sPeNFo/v0
el6YuVa9AohO5WeLL9+ZfqgHmVVDjLnjWXG85S6r1x0MRu1I3ZzIwH08wj3XMR75
8nWJitMutp0C6wZTLrodv7myZ4hVQwo+h6jFF7ZGqxqHBevwtbleQYPxXzkMi+XK
X6aWIfetsA1aDEZ9ndJI+igzbp/BK7o=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:04 2024 by rpki-client on console-ams.rpki-client.org