Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7288e10f-3acf-3954-8944-fda616a3c43c.roa
File:                     7288e10f-3acf-3954-8944-fda616a3c43c.roa (raw, json)
Hash identifier:          4mvJaO8z+bhutUGGzGyD/dlvWCDBoMHqQf91HOWbJ0w=
Subject key identifier:   AA:EB:04:AA:EF:1B:61:60:10:F9:9C:77:E8:1D:67:FF:F0:31:B3:B1
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285844EED00682491184E4179CB280
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7288e10f-3acf-3954-8944-fda616a3c43c.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     11404
IP address blocks:        68.67.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:d0:06:82:49:11:84:e4:17:9c:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=ce4125ed-2c8a-4358-a7cc-8e3baa0bf85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:07:1b:db:a1:c6:16:67:7b:a1:90:7c:f6:97:
                    3e:04:9c:ef:b4:25:f5:e2:e7:a9:ea:ef:42:a8:76:
                    28:e6:ad:76:21:29:f9:4f:40:92:e6:cd:08:8f:c8:
                    73:a8:4a:a7:da:d5:8b:f8:e5:a7:85:47:89:27:2b:
                    87:28:e3:02:f4:bc:34:3a:09:f5:41:2c:62:5c:73:
                    e2:34:8b:f0:6b:ca:b6:bb:c2:7e:a2:0d:a4:d1:ae:
                    2a:d4:cc:05:b2:18:d9:4e:9b:44:14:5e:0c:56:72:
                    26:d7:24:18:87:14:2e:cd:2c:d7:d5:7b:b5:11:ae:
                    b6:6c:97:ee:19:21:49:0c:5b:90:9d:6b:c1:9e:a6:
                    81:3b:ac:c3:54:76:4e:0b:97:40:a4:49:fe:af:3b:
                    2b:6f:12:38:ef:90:22:c8:7e:93:60:ad:4d:b4:01:
                    70:97:82:5b:cf:c1:b4:5e:df:ba:42:bf:b9:eb:07:
                    70:fb:31:5b:7e:ba:d1:8d:88:28:af:19:74:16:91:
                    ac:6c:07:22:80:6d:45:99:1c:00:c1:df:a8:89:a4:
                    49:b1:a0:93:7e:1c:2d:62:43:0b:37:88:b1:bb:0c:
                    15:56:25:4b:d4:64:9f:16:47:1d:f4:89:21:e8:5d:
                    b6:d1:8f:ec:8f:fb:bb:93:f6:75:9f:9a:13:ef:73:
                    7f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EB:04:AA:EF:1B:61:60:10:F9:9C:77:E8:1D:67:FF:F0:31:B3:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7288e10f-3acf-3954-8944-fda616a3c43c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:10:d3:51:76:c7:e9:64:ec:b1:64:9b:13:5d:6c:3c:1f:50:
         a3:bf:2b:b8:c5:ac:7c:5a:c3:0f:fa:ef:c2:e3:66:92:e0:d7:
         7a:65:a9:f9:29:0b:49:3f:df:18:66:18:f9:ab:58:c2:c1:34:
         a8:02:5b:53:5a:12:18:41:b0:08:71:3c:88:b5:f1:e1:bb:a2:
         1d:c0:85:76:af:92:3e:54:b6:03:d1:b1:80:cd:1f:ca:60:dc:
         00:eb:0e:e3:39:4c:67:d6:df:84:9c:c5:a9:45:3a:74:b4:d9:
         b4:33:08:77:f0:f1:6b:e5:0b:89:4b:c5:19:89:6a:94:50:56:
         10:42:b9:74:95:5a:c7:40:c5:07:38:c4:91:b4:82:dd:7f:a8:
         ba:e3:a8:a7:3b:62:39:4f:da:ff:29:96:01:90:b0:77:fa:69:
         d4:eb:66:cd:67:a0:fe:0a:71:73:7e:28:6e:e4:03:5c:85:30:
         aa:6a:19:46:08:3f:10:97:60:10:59:17:30:ff:30:31:79:55:
         62:4a:ff:37:28:0e:45:c2:97:0e:45:1b:38:d5:d2:04:6b:98:
         29:77:b6:88:24:54:e3:d0:d4:b6:94:2c:83:dd:7d:9e:38:14:
         d9:b3:21:8d:f1:48:25:46:5d:44:a3:ed:5a:a5:74:fc:36:fa:
         c6:6c:84:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETu0AaCSRGE5BecsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk
Y2U0MTI1ZWQtMmM4YS00MzU4LWE3Y2MtOGUzYmFhMGJmODViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgcb26HGFmd7oZB89pc+BJzvtCX14uep6u9C
qHYo5q12ISn5T0CS5s0Ij8hzqEqn2tWL+OWnhUeJJyuHKOMC9Lw0Ogn1QSxiXHPi
NIvwa8q2u8J+og2k0a4q1MwFshjZTptEFF4MVnIm1yQYhxQuzSzX1Xu1Ea62bJfu
GSFJDFuQnWvBnqaBO6zDVHZOC5dApEn+rzsrbxI475AiyH6TYK1NtAFwl4Jbz8G0
Xt+6Qr+56wdw+zFbfrrRjYgorxl0FpGsbAcigG1FmRwAwd+oiaRJsaCTfhwtYkML
N4ixuwwVViVL1GSfFkcd9Ikh6F220Y/sj/u7k/Z1n5oT73N/twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKrrBKrvG2FgEPmcd+gdZ//wMbOxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNzI4OGUxMGYtM2FjZi0z
OTU0LTg5NDQtZmRhNjE2YTNjNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERENQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACYQ01F2x+lk7LFkmxNdbDwfUKO/K7jFrHxaww/678LjZpLg13plqfkp
C0k/3xhmGPmrWMLBNKgCW1NaEhhBsAhxPIi18eG7oh3AhXavkj5UtgPRsYDNH8pg
3ADrDuM5TGfW34ScxalFOnS02bQzCHfw8WvlC4lLxRmJapRQVhBCuXSVWsdAxQc4
xJG0gt1/qLrjqKc7YjlP2v8plgGQsHf6adTrZs1noP4KcXN+KG7kA1yFMKpqGUYI
PxCXYBBZFzD/MDF5VWJK/zcoDkXClw5FGzjV0gRrmCl3togkVOPQ1LaULIPdfZ44
FNmzIY3xSCVGXUSj7VqldPw2+sZshIQ=
-----END CERTIFICATE-----
Generated at Thu May 2 15:00:01 2024 by rpki-client on console-ams.rpki-client.org