Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/62b60a0a-2df1-3e7a-8192-108b0e86b27b.roa
File:                     62b60a0a-2df1-3e7a-8192-108b0e86b27b.roa (raw, json)
Hash identifier:          YpFYCWVba+3ybHO2cNmBeqKxrcgAse7wQAK5QijhLQc=
Subject key identifier:   C6:51:CA:8C:6B:9A:A1:16:B6:7F:F3:ED:68:F2:27:D0:1C:A6:F8:5F
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F432858458B088B6083D24BBE2E595B00
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/62b60a0a-2df1-3e7a-8192-108b0e86b27b.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     64269
IP address blocks:        208.56.0.0/18 maxlen: 24
                          168.245.216.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:8b:60:83:d2:4b:be:2e:59:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=2916fd9b-a90d-4c77-aa75-ed191efd266b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cf:8e:15:53:41:57:27:1f:5a:48:7f:cc:8a:
                    bf:6c:f2:29:4b:3d:28:f9:71:2e:c0:de:d6:40:c9:
                    db:80:f8:83:8d:c2:e7:51:e8:d0:63:0d:01:c8:ae:
                    59:80:7d:7f:bb:ae:28:71:96:93:3c:fe:4e:9f:e1:
                    01:38:8c:23:bf:16:45:c5:50:13:d0:c5:b2:23:1a:
                    9f:5a:0e:5d:aa:14:b9:ce:34:2e:11:83:d7:6f:b3:
                    7b:26:66:da:bc:5f:2b:5c:d6:94:29:f8:c7:3c:d0:
                    5e:5e:c4:f0:f0:22:42:4b:ee:cd:82:69:f8:d1:f3:
                    73:3a:34:c8:81:52:53:92:41:01:e0:b2:dc:16:5b:
                    fe:8c:e0:03:6e:1e:48:2c:5d:26:81:16:b0:74:9f:
                    ed:1e:59:04:78:ca:f0:71:2d:60:81:e5:83:66:48:
                    06:ca:f4:69:65:f2:b7:26:7b:0a:be:a6:5c:fe:ef:
                    ab:bc:34:43:65:8d:73:e5:90:54:0c:34:37:48:ee:
                    ee:02:f3:1a:ae:61:5b:1c:ea:36:f1:8d:e7:e2:13:
                    e1:cb:dc:53:87:cd:ee:b5:3d:c1:c7:28:63:86:8c:
                    6f:43:99:cf:76:bf:a0:77:9e:21:bd:9c:4d:2e:88:
                    f4:8f:9b:04:f2:55:f9:9d:98:0b:e7:25:b2:25:7b:
                    cf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:51:CA:8C:6B:9A:A1:16:B6:7F:F3:ED:68:F2:27:D0:1C:A6:F8:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/62b60a0a-2df1-3e7a-8192-108b0e86b27b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.216.0/21
                  208.56.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:fa:0f:39:61:ec:66:fb:26:b8:84:bb:23:6c:05:07:b4:e5:
         34:35:3f:ab:71:9a:14:12:1f:5e:c4:9b:5f:9f:14:a8:bb:b0:
         01:a2:ec:ba:e7:73:38:9c:ae:7e:1b:c4:76:2c:08:c1:4a:48:
         8e:2d:a7:36:f0:a3:34:40:0c:71:3f:22:56:25:83:a0:ae:dd:
         98:af:ca:91:11:48:09:4d:40:84:35:2c:91:5c:bb:b7:9f:98:
         ce:ae:27:0d:d4:a4:4a:04:ec:f4:fd:f5:d4:ef:b5:e8:89:67:
         23:da:87:ca:05:a2:47:ae:00:59:c3:0e:00:bc:14:e4:99:0f:
         d5:9e:0d:b0:90:11:b8:9e:92:4c:37:5a:c0:2b:01:93:5a:88:
         cd:a3:e5:a2:d1:7a:3e:5e:f0:0e:e7:19:24:ca:17:93:d8:6d:
         4c:9f:d0:50:5f:40:25:c4:fc:51:38:10:f0:67:27:af:77:bf:
         72:4a:1c:6a:35:0e:f2:b9:13:d2:12:3b:08:62:e2:4f:3b:7a:
         93:35:46:fc:0b:ff:d0:48:8f:8c:f5:84:c3:e7:a4:ed:8a:dd:
         18:c3:59:60:53:a9:78:d2:a9:25:3b:c6:9a:86:f7:a5:8a:3a:
         5a:00:cb:4b:c6:df:87:10:a3:54:29:e4:96:91:20:c9:ac:a3:
         4d:69:8d:f1
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEWLCItgg9JLvi5ZWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy
OTQ1MB4XDTI0MDQxNDEzMDAzNFoXDTI0MDcxMzEzMDAzNFowLzEtMCsGA1UEAxMk
MjkxNmZkOWItYTkwZC00Yzc3LWFhNzUtZWQxOTFlZmQyNjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM+OFVNBVycfWkh/zIq/bPIpSz0o+XEuwN7W
QMnbgPiDjcLnUejQYw0ByK5ZgH1/u64ocZaTPP5On+EBOIwjvxZFxVAT0MWyIxqf
Wg5dqhS5zjQuEYPXb7N7JmbavF8rXNaUKfjHPNBeXsTw8CJCS+7Ngmn40fNzOjTI
gVJTkkEB4LLcFlv+jOADbh5ILF0mgRawdJ/tHlkEeMrwcS1ggeWDZkgGyvRpZfK3
JnsKvqZc/u+rvDRDZY1z5ZBUDDQ3SO7uAvMarmFbHOo28Y3n4hPhy9xTh83utT3B
xyhjhoxvQ5nPdr+gd54hvZxNLoj0j5sE8lX5nZgL5yWyJXvPSQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMZRyoxrmqEWtn/z7WjyJ9AcpvhfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi
ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvNjJiNjBhMGEtMmRmMS0z
ZTdhLTgxOTItMTA4YjBlODZiMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy
MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1
Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2
YjUwNTI5NDUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDqPXYAwQG
0DgAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHf6Dzlh7Gb7JriEuyNsBQe05TQ1P6txmhQSH17Em1+fFKi7
sAGi7Lrnczicrn4bxHYsCMFKSI4tpzbwozRADHE/IlYlg6Cu3ZivypERSAlNQIQ1
LJFcu7efmM6uJw3UpEoE7PT99dTvteiJZyPah8oFokeuAFnDDgC8FOSZD9WeDbCQ
Ebiekkw3WsArAZNaiM2j5aLRej5e8A7nGSTKF5PYbUyf0FBfQCXE/FE4EPBnJ693
v3JKHGo1DvK5E9ISOwhi4k87epM1RvwL/9BIj4z1hMPnpO2K3RjDWWBTqXjSqSU7
xpqG96WKOloAy0vG34cQo1Qp5JaRIMmso01pjfE=
-----END CERTIFICATE-----
Generated at Wed May 1 20:51:42 2024 by rpki-client on console-ams.rpki-client.org