Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/c0ac2f53-beae-3b05-97d0-d26974f3905b.roa
File:                     c0ac2f53-beae-3b05-97d0-d26974f3905b.roa (raw, json)
Hash identifier:          EF0C/LwpwZ+kHCk622Sp4we1Bk4W9Xc9/1gdXo5elAQ=
Subject key identifier:   22:10:FB:90:DC:05:4D:0F:5B:1F:23:18:03:EF:92:45:C2:D5:F2:A6
Certificate issuer:       /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21
Certificate serial:       010D0C9F4328584574B31AA53C217102B2A4BD40
Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/c0ac2f53-beae-3b05-97d0-d26974f3905b.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     16713
IP address blocks:        208.70.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:1a:a5:3c:21:71:02:b2:a4:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=86c37c37-5d29-45bb-969b-6c2c606edd0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bf:44:b3:42:90:e4:5c:cb:40:c6:e1:1b:ba:
                    b3:83:da:a9:d2:1d:39:22:f8:e8:f7:88:67:9a:7c:
                    1b:ed:ae:87:6c:21:16:15:b2:32:76:8e:86:d1:54:
                    d2:bc:0a:4f:f4:fa:1e:45:7f:8f:43:7a:d5:81:0c:
                    d4:27:69:c2:53:34:0b:2c:5e:1c:01:89:08:9d:f4:
                    7e:d8:41:13:c9:4b:5e:5d:25:3a:1c:e8:20:44:ca:
                    c1:32:37:72:65:49:db:c0:f3:bb:25:18:9a:1f:d0:
                    b6:86:a4:9f:2a:9c:56:8e:c0:6e:4d:25:9a:b4:a2:
                    0a:24:48:a2:55:9d:11:21:c4:65:e5:b6:6b:df:9c:
                    6c:2c:ab:ab:73:bc:ba:1a:68:44:70:52:0e:aa:8f:
                    28:bd:35:6a:c2:19:02:93:3e:0f:b4:6a:d8:cd:97:
                    c2:3d:8c:c9:ec:1d:b5:6b:39:d5:da:2d:d3:13:bb:
                    92:70:d8:e1:7f:d7:21:fd:94:d9:66:f8:a8:54:e7:
                    64:92:22:c5:ff:b0:39:2f:4a:53:78:ff:50:fd:88:
                    47:90:51:06:56:d8:b4:0e:e0:d6:81:d4:2f:b5:29:
                    84:f8:86:be:51:cd:91:eb:5b:f3:ab:46:81:a1:53:
                    6f:36:ea:68:8f:ec:72:9a:5f:34:b8:78:2c:88:dd:
                    b6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:10:FB:90:DC:05:4D:0F:5B:1F:23:18:03:EF:92:45:C2:D5:F2:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/c0ac2f53-beae-3b05-97d0-d26974f3905b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:8d:06:f7:49:09:54:71:c3:2e:1d:b2:b0:ad:e4:93:0d:1a:
         65:ed:41:11:25:13:41:aa:c0:c8:74:d2:0b:61:d1:82:4d:25:
         d7:b4:7c:38:56:65:dc:26:40:92:5f:db:d5:54:34:e3:0c:96:
         f0:9e:4d:fc:15:00:1f:18:37:eb:03:b0:d2:a4:f0:cb:9d:07:
         ed:b7:dd:20:a0:94:9f:a6:ef:27:11:82:b7:2e:02:03:cd:f7:
         0e:de:2f:ef:c5:54:20:9a:b7:ff:e2:29:b9:30:1e:8d:07:a0:
         da:cc:d0:da:b0:8f:25:a9:ae:f6:60:84:61:7b:18:ed:20:a0:
         55:8c:08:46:31:c0:29:3f:1c:d6:66:e6:87:7c:26:09:10:4e:
         8c:78:ad:ea:7f:a2:15:8d:e7:53:b1:1d:d9:f4:f7:5c:56:fe:
         33:70:91:88:ea:b5:8f:56:22:c0:88:ea:a8:e4:a4:58:e4:6f:
         48:27:7f:e8:af:79:f8:be:6b:ed:77:3a:68:0e:c4:c3:92:cf:
         58:e7:3b:f3:cc:7a:2d:76:44:30:34:18:1f:0f:45:1b:bf:75:
         55:d9:b3:76:1d:01:2f:17:6b:e2:aa:41:c5:e6:1e:01:4b:17:
         ac:3f:cf:5e:08:1c:14:07:ad:37:d4:5e:aa:65:ca:ae:5c:d9:
         4b:20:95:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV0sxqlPCFxArKkvUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0
ZDIxMB4XDTI0MDQwNjEzMDAzNVoXDTI0MDcwNTEzMDAzNVowLzEtMCsGA1UEAxMk
ODZjMzdjMzctNWQyOS00NWJiLTk2OWItNmMyYzYwNmVkZDBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL9Es0KQ5FzLQMbhG7qzg9qp0h05Ivjo94hn
mnwb7a6HbCEWFbIydo6G0VTSvApP9PoeRX+PQ3rVgQzUJ2nCUzQLLF4cAYkInfR+
2EETyUteXSU6HOggRMrBMjdyZUnbwPO7JRiaH9C2hqSfKpxWjsBuTSWatKIKJEii
VZ0RIcRl5bZr35xsLKurc7y6GmhEcFIOqo8ovTVqwhkCkz4PtGrYzZfCPYzJ7B21
aznV2i3TE7uScNjhf9ch/ZTZZvioVOdkkiLF/7A5L0pTeP9Q/YhHkFEGVti0DuDW
gdQvtSmE+Ia+Uc2R61vzq0aBoVNvNupoj+xyml80uHgsiN22mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCIQ+5DcBU0PWx8jGAPvkkXC1fKmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz
YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvYzBhYzJmNTMtYmVhZS0z
YjA1LTk3ZDAtZDI2OTc0ZjM5MDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2
ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk
NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh
ZGY5ZDRkMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2NBvdJCVRxwy4dsrCt5JMNGmXtQRElE0GqwMh00gth0YJNJde0fDhW
ZdwmQJJf29VUNOMMlvCeTfwVAB8YN+sDsNKk8MudB+233SCglJ+m7ycRgrcuAgPN
9w7eL+/FVCCat//iKbkwHo0HoNrM0NqwjyWprvZghGF7GO0goFWMCEYxwCk/HNZm
5od8JgkQTox4rep/ohWN51OxHdn091xW/jNwkYjqtY9WIsCI6qjkpFjkb0gnf+iv
efi+a+13OmgOxMOSz1jnO/PMei12RDA0GB8PRRu/dVXZs3YdAS8Xa+KqQcXmHgFL
F6w/z14IHBQHrTfUXqplyq5c2Usgleg=
-----END CERTIFICATE-----
Generated at Thu May 2 03:28:34 2024 by rpki-client on console-ams.rpki-client.org