Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/113b908c-48a6-3148-8305-9a4a872712d4.roa
File:                     113b908c-48a6-3148-8305-9a4a872712d4.roa (raw, json)
Hash identifier:          4govKekPsU6XH9MS+wvPdl0b/MG+JiKGJ5kk9359CFo=
Subject key identifier:   34:48:2F:A4:64:84:F2:6C:14:60:0F:92:6B:92:B6:24:5E:6C:6A:3A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80D25B50C6C1FCA4D12F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/113b908c-48a6-3148-8305-9a4a872712d4.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        70.20.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:d2:5b:50:c6:c1:fc:a4:d1:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=3b311334-6c59-4f9f-b392-d320dab2bc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:4a:92:fb:45:b5:c2:78:87:f7:53:f4:33:
                    a6:ac:b8:d8:b3:bd:bf:95:1e:52:2e:4c:21:ea:98:
                    c5:29:21:69:48:ae:3d:f1:bd:d1:74:83:85:c5:36:
                    44:23:d4:65:ba:bd:07:0c:00:20:9f:4d:67:d8:8f:
                    e6:88:db:0a:b1:99:41:77:fe:0f:7c:71:3d:6e:9a:
                    cb:94:71:98:28:71:9e:40:ff:e9:e7:7a:f9:16:87:
                    34:3a:36:b7:0a:28:1b:ec:4c:78:ab:c7:16:c0:e3:
                    3d:11:6f:1a:21:8c:33:c7:1e:78:9b:65:6e:d6:d6:
                    df:fb:97:b4:34:ee:ee:a0:ce:6f:80:98:f2:8c:32:
                    75:e7:72:04:30:6a:37:8f:ef:fb:e8:9f:4b:5f:3b:
                    71:75:b3:f5:ac:e2:52:b0:90:ab:0e:ce:e5:5b:1a:
                    8c:1e:fe:26:08:60:54:84:d5:32:e7:bf:14:85:8a:
                    fb:88:a1:3a:cd:8b:85:2f:0b:78:f0:a6:2e:02:c8:
                    83:dc:36:9d:08:8b:fa:e7:7b:e0:2c:c1:5d:c1:36:
                    16:4f:c0:1b:f9:4c:ba:34:ba:29:eb:ec:ec:84:0e:
                    e1:b9:23:a7:d9:b0:fe:1c:16:5f:30:40:38:d4:ad:
                    e8:cf:1b:2c:f7:62:f9:a7:b9:8f:74:e4:d0:12:55:
                    fb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:48:2F:A4:64:84:F2:6C:14:60:0F:92:6B:92:B6:24:5E:6C:6A:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/113b908c-48a6-3148-8305-9a4a872712d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.20.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:3d:81:89:59:d2:86:00:3c:b2:5a:e2:dd:39:fe:a3:51:42:
         50:8b:af:1d:da:23:da:2d:0e:fc:6a:43:14:b5:a3:24:3c:e8:
         44:d6:4d:6d:de:2c:39:7b:56:43:12:cf:16:f0:be:e1:c6:c4:
         b6:d4:b2:13:e0:da:14:2a:85:a6:e2:69:87:d7:e3:8b:48:e2:
         8f:d9:d8:5e:c4:cf:42:21:29:3f:b1:c7:22:ea:e4:87:37:cc:
         c7:36:c6:23:1c:88:0f:5c:b3:0f:02:af:14:b7:c2:01:6b:08:
         a5:ab:03:9d:75:f4:e4:b8:47:da:d5:bf:f8:73:67:a1:e5:29:
         b2:74:cf:8e:47:d1:4c:5c:82:89:c3:e6:1e:6e:60:53:e5:f5:
         5e:61:c2:2f:1a:ad:52:a1:13:f4:fb:ce:df:da:16:1d:42:26:
         60:f8:e8:2b:8f:f7:77:f6:d4:e9:46:b7:46:66:dc:93:f7:6d:
         a0:8f:9f:cb:0d:04:f6:13:84:08:39:23:58:4a:9a:13:a0:0e:
         d8:c6:73:50:4a:c2:cc:d5:d9:b8:64:be:4e:45:27:45:0e:00:
         54:0e:53:a2:71:b8:74:a5:94:ad:16:3a:4e:7b:5e:6e:ee:20:
         7d:f3:b2:b0:75:f0:21:4f:81:bb:c5:3e:c9:c5:17:9e:8b:28:
         09:c2:22:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdMgNJbUMbB/KTRLwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkyMjEzMDA0MFoXDTI0MTIyMTE0MDA0MFowLzEtMCsGA1UEAxMk
M2IzMTEzMzQtNmM1OS00ZjlmLWIzOTItZDMyMGRhYjJiYzY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwJKkvtFtcJ4h/dT9DOmrLjYs72/lR5SLkwh
6pjFKSFpSK498b3RdIOFxTZEI9Rlur0HDAAgn01n2I/miNsKsZlBd/4PfHE9bprL
lHGYKHGeQP/p53r5Foc0Oja3Cigb7Ex4q8cWwOM9EW8aIYwzxx54m2Vu1tbf+5e0
NO7uoM5vgJjyjDJ153IEMGo3j+/76J9LXztxdbP1rOJSsJCrDs7lWxqMHv4mCGBU
hNUy578UhYr7iKE6zYuFLwt48KYuAsiD3DadCIv653vgLMFdwTYWT8Ab+Uy6NLop
6+zshA7huSOn2bD+HBZfMEA41K3ozxss92L5p7mPdOTQElX7xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDRIL6RkhPJsFGAPkmuStiRebGo6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTEzYjkwOGMtNDhhNi0z
MTQ4LTgzMDUtOWE0YTg3MjcxMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERhQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI09gYlZ0oYAPLJa4t05/qNRQlCLrx3aI9otDvxqQxS1oyQ86ETWTW3e
LDl7VkMSzxbwvuHGxLbUshPg2hQqhabiaYfX44tI4o/Z2F7Ez0IhKT+xxyLq5Ic3
zMc2xiMciA9csw8CrxS3wgFrCKWrA5119OS4R9rVv/hzZ6HlKbJ0z45H0UxcgonD
5h5uYFPl9V5hwi8arVKhE/T7zt/aFh1CJmD46CuP93f21OlGt0Zm3JP3baCPn8sN
BPYThAg5I1hKmhOgDtjGc1BKwszV2bhkvk5FJ0UOAFQOU6JxuHSllK0WOk57Xm7u
IH3zsrB18CFPgbvFPsnFF56LKAnCIoA=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:12 2024 by rpki-client on console-ams.rpki-client.org