Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2be55c2-045b-366e-9669-52a17acac6bc.roa
File:                     d2be55c2-045b-366e-9669-52a17acac6bc.roa (raw, json)
Hash identifier:          PBfhTQ70JvgVW2Nj/9bzwLtS+kCuc3OK0hhXM0HJ5B8=
Subject key identifier:   1E:76:F9:2F:3D:84:C7:15:72:EB:DC:4D:00:14:84:D3:01:91:4D:11
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80D1BFB656769F46CC3300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2be55c2-045b-366e-9669-52a17acac6bc.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        70.105.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:d1:bf:b6:56:76:9f:46:cc:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=16c7d31b-0e04-4b30-80d6-ec2d19909dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:a5:a6:56:f3:1e:6f:d4:5d:3e:56:3b:26:
                    28:0f:a6:89:79:bf:80:c5:fd:68:91:7a:8d:18:6d:
                    90:0d:d6:c7:6e:9f:37:ce:7c:d3:3b:ff:a0:28:b6:
                    fa:a4:6e:50:cb:33:e3:13:90:41:86:52:31:f9:7e:
                    72:f4:af:8d:a0:ed:f3:35:06:70:10:25:90:9f:25:
                    88:24:0d:23:87:1f:a7:a4:c2:12:5f:9f:16:fc:c0:
                    49:98:68:28:20:20:cc:98:eb:47:d3:ec:eb:5d:f5:
                    c3:2e:d5:48:b1:b3:3c:e4:06:4d:81:ec:6a:30:51:
                    ac:40:40:f5:54:df:0c:b3:26:f4:fa:21:e0:11:0e:
                    be:43:e4:f1:5f:e7:4e:3d:43:6d:9f:d2:0d:89:36:
                    7c:83:95:5d:ff:40:15:d1:bb:a8:50:7d:a7:a4:5c:
                    ed:86:68:ed:e9:78:36:f6:1b:7c:73:87:c1:2d:03:
                    fe:a0:f7:3c:48:d8:a6:39:41:b2:30:01:80:f4:66:
                    c7:e0:c2:3f:7b:9a:d5:9a:02:0d:81:ad:0b:3e:12:
                    ec:03:9e:c9:c2:1e:56:e6:99:19:21:f0:66:96:83:
                    e2:ef:4e:7e:f4:e0:a5:96:50:3b:cf:71:d2:19:0f:
                    c4:a4:6c:60:60:6d:a9:1d:7d:5d:a1:b9:fb:cf:6d:
                    f2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:76:F9:2F:3D:84:C7:15:72:EB:DC:4D:00:14:84:D3:01:91:4D:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2be55c2-045b-366e-9669-52a17acac6bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.105.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:5a:60:f8:48:3c:93:52:01:7c:ad:41:7f:bd:e2:d6:bc:d4:
         20:a0:7d:77:5e:a6:ec:d5:ce:66:fc:26:21:be:f5:fc:c6:07:
         42:85:1c:f4:e5:32:1e:64:63:2c:15:d6:f3:6d:c5:cd:d3:e7:
         81:0d:dd:21:85:2e:fc:a4:97:26:31:cc:99:07:95:92:3a:97:
         5e:d7:e7:59:4a:d5:5f:51:48:11:a3:a4:08:4c:db:3a:c6:0b:
         43:92:f0:4c:fb:a9:b5:4a:ed:1a:94:2b:a8:0a:a8:51:6c:89:
         fe:97:03:76:2f:1d:fa:ff:7c:fc:13:71:c5:02:62:be:0a:74:
         44:b7:0f:1d:f9:5e:6f:54:ca:10:96:b0:cb:3e:47:c3:27:b6:
         d4:eb:f9:c3:4e:2f:3c:f8:fa:9b:25:8c:ad:e0:6b:40:0f:12:
         83:f4:dc:4e:a7:49:20:b5:73:68:60:c8:c3:d9:f0:f4:9b:e2:
         4f:ff:7c:33:e9:16:7e:29:a7:16:c8:64:a1:62:a2:17:cc:15:
         69:d2:45:eb:12:f4:e3:62:02:a5:9a:b1:4f:1b:e7:d4:65:af:
         f1:d2:e0:50:0f:05:94:12:06:11:7c:1a:ad:7c:3a:b0:d2:1c:
         b7:1e:1b:4d:1d:c7:c9:74:4f:9e:76:32:a1:00:a4:b1:90:a8:
         3a:4f:f4:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdMgNG/tlZ2n0bMMwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkyMjEzMDA0MFoXDTI0MTIyMTE0MDA0MFowLzEtMCsGA1UEAxMk
MTZjN2QzMWItMGUwNC00YjMwLTgwZDYtZWMyZDE5OTA5ZGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHelplbzHm/UXT5WOyYoD6aJeb+Axf1okXqN
GG2QDdbHbp83znzTO/+gKLb6pG5QyzPjE5BBhlIx+X5y9K+NoO3zNQZwECWQnyWI
JA0jhx+npMISX58W/MBJmGgoICDMmOtH0+zrXfXDLtVIsbM85AZNgexqMFGsQED1
VN8Msyb0+iHgEQ6+Q+TxX+dOPUNtn9INiTZ8g5Vd/0AV0buoUH2npFzthmjt6Xg2
9ht8c4fBLQP+oPc8SNimOUGyMAGA9GbH4MI/e5rVmgINga0LPhLsA57Jwh5W5pkZ
IfBmloPi705+9OClllA7z3HSGQ/EpGxgYG2pHX1dobn7z23y+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB52+S89hMcVcuvcTQAUhNMBkU0RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDJiZTU1YzItMDQ1Yi0z
NjZlLTk2NjktNTJhMTdhY2FjNmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARmmEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALJaYPhIPJNSAXytQX+94ta81CCgfXdepuzVzmb8JiG+9fzGB0KFHPTl
Mh5kYywV1vNtxc3T54EN3SGFLvyklyYxzJkHlZI6l17X51lK1V9RSBGjpAhM2zrG
C0OS8Ez7qbVK7RqUK6gKqFFsif6XA3YvHfr/fPwTccUCYr4KdES3Dx35Xm9UyhCW
sMs+R8MnttTr+cNOLzz4+psljK3ga0APEoP03E6nSSC1c2hgyMPZ8PSb4k//fDPp
Fn4ppxbIZKFiohfMFWnSResS9ONiAqWasU8b59Rlr/HS4FAPBZQSBhF8Gq18OrDS
HLceG00dx8l0T552MqEApLGQqDpP9KM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:56 2024 by rpki-client on console-fra.rpki-client.org