Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa
File:                     bff72a2e-13a9-31ab-bb47-124e89b56abc.roa (raw, json)
Hash identifier:          QNHpgkYsZy5maclmYWLJqTIeNNcb+wFHVeBN5luAkg4=
Subject key identifier:   FD:4A:66:9C:9C:A8:03:09:ED:A5:C6:90:F1:19:29:9D:AC:53:AE:6B
Certificate issuer:       /CN=8b860252-78e2-47ac-a6f1-f1dc5a900776
Certificate serial:       010D0C9F432858478E1BB7C755271435928A6160
Authority key identifier: 7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     20099
IP address blocks:        192.44.70.0/24 maxlen: 24
                          2620:89:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:b7:c7:55:27:14:35:92:8a:61:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b860252-78e2-47ac-a6f1-f1dc5a900776
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=dff15bc9-64f2-48f9-9ca5-85083ddca1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9c:84:a7:5f:97:bc:a7:d8:ee:94:45:6f:da:
                    22:4f:0b:50:39:5d:ae:d2:cc:5c:55:ff:ff:af:61:
                    aa:fa:bf:11:4c:42:e3:c4:19:26:bc:67:98:c4:2a:
                    41:ae:24:db:3a:0a:9e:98:95:60:9b:6d:a4:3d:fe:
                    cb:be:ee:18:0e:37:a3:4a:e2:da:73:3b:a8:1a:92:
                    fe:b9:ec:71:77:a5:f1:f5:cd:43:97:b4:f2:8c:77:
                    54:64:59:3a:a3:aa:81:7c:6e:1e:5c:e9:d6:29:0a:
                    c3:6b:22:08:ec:6c:80:e4:6c:5a:47:df:cd:a0:2f:
                    ce:41:0b:a0:5e:65:cf:55:32:75:45:e0:41:43:db:
                    2a:05:08:b2:da:da:75:93:72:e9:b5:9d:3e:0b:7b:
                    ac:7f:7b:42:fd:2f:bc:ab:30:68:dd:82:4a:0e:e1:
                    8f:53:3f:a5:75:17:34:67:f2:9e:6a:b5:6e:0a:71:
                    8d:90:5d:ba:19:4a:ad:da:07:18:a4:ef:25:20:1b:
                    b1:f0:f2:a4:b4:f5:30:88:63:2f:de:dd:70:35:cd:
                    64:d3:37:49:16:d9:78:b5:89:4c:23:f8:a6:1e:3f:
                    bc:2a:2b:9c:3b:f2:b5:98:11:9e:f7:f3:b0:36:f1:
                    37:82:96:af:e6:9d:16:db:de:54:a1:da:b3:bf:2e:
                    a5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4A:66:9C:9C:A8:03:09:ED:A5:C6:90:F1:19:29:9D:AC:53:AE:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.crl

            X509v3 Authority Key Identifier:
                keyid:7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.44.70.0/24
                IPv6:
                  2620:89:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:d5:0b:08:04:94:46:10:50:4d:40:19:a6:2a:f6:76:49:6f:
         97:b6:92:64:93:ed:5b:c3:31:02:2b:ed:5e:00:32:9f:5f:c0:
         3f:cb:54:ab:29:2b:2a:55:3d:d8:6a:c8:ef:15:85:0a:20:9c:
         be:3d:e6:b1:f6:8c:6f:07:c1:b7:ac:b1:86:aa:6a:85:62:28:
         ab:f2:59:7b:9a:aa:a3:3c:a0:63:85:dd:d1:17:3e:0d:3f:a2:
         63:aa:39:07:d0:a6:33:78:87:30:35:05:64:29:57:47:96:b5:
         37:03:6f:76:91:a1:f5:41:b6:a1:53:c7:3d:72:b7:ac:19:7a:
         d0:6b:00:07:65:81:cd:a2:e9:12:84:ea:14:04:d6:ba:c5:3f:
         c3:08:9d:e5:0a:6c:ff:79:8c:c4:41:3c:f4:54:9d:ac:f9:73:
         10:79:aa:d4:a8:c7:97:fd:d3:b0:f0:d6:52:14:7e:54:db:5d:
         56:a4:b3:42:f7:0d:b1:66:45:9d:47:a7:a9:5a:73:53:d8:1f:
         00:0b:db:c9:eb:cd:a4:1a:74:f3:6f:83:4e:cd:2c:f7:c0:fc:
         14:0a:b7:98:d7:de:01:10:6e:65:5c:96:73:9d:3b:c8:53:3e:
         3d:58:0a:0c:e2:0f:f8:2f:3f:f8:29:af:6e:96:9e:0b:bc:db:
         61:ea:98:77
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEeOG7fHVScUNZKKYWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI4NjAyNTItNzhlMi00N2FjLWE2ZjEtZjFkYzVhOTAw
Nzc2MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk
ZGZmMTViYzktNjRmMi00OGY5LTljYTUtODUwODNkZGNhMWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5yEp1+XvKfY7pRFb9oiTwtQOV2u0sxcVf//
r2Gq+r8RTELjxBkmvGeYxCpBriTbOgqemJVgm22kPf7Lvu4YDjejSuLaczuoGpL+
uexxd6Xx9c1Dl7TyjHdUZFk6o6qBfG4eXOnWKQrDayII7GyA5GxaR9/NoC/OQQug
XmXPVTJ1ReBBQ9sqBQiy2tp1k3LptZ0+C3usf3tC/S+8qzBo3YJKDuGPUz+ldRc0
Z/KearVuCnGNkF26GUqt2gcYpO8lIBux8PKktPUwiGMv3t1wNc1k0zdJFtl4tYlM
I/imHj+8KiucO/K1mBGe9/OwNvE3gpav5p0W295Uodqzvy6lIQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFP1KZpycqAMJ7aXGkPEZKZ2sU65rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84Yjg2
MDI1Mi03OGUyLTQ3YWMtYTZmMS1mMWRjNWE5MDA3NzYvYmZmNzJhMmUtMTNhOS0z
MWFiLWJiNDctMTI0ZTg5YjU2YWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGI4NjAyNTItNzhlMi00N2FjLWE2
ZjEtZjFkYzVhOTAwNzc2LzhiODYwMjUyLTc4ZTItNDdhYy1hNmYxLWYxZGM1YTkw
MDc3Ni5jcmwwHwYDVR0jBBgwFoAUf4HSkCoiQT23Z2JK4kdRO9cPe3cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84Yjg2MDI1Mi03OGUyLTQ3YWMtYTZmMS1mMWRj
NWE5MDA3NzYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwCxGMA8E
AgACMAkDBwAmIACJwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEArNULCASURhBQTUAZpir2dklvl7aSZJPt
W8MxAivtXgAyn1/AP8tUqykrKlU92GrI7xWFCiCcvj3msfaMbwfBt6yxhqpqhWIo
q/JZe5qqozygY4Xd0Rc+DT+iY6o5B9CmM3iHMDUFZClXR5a1NwNvdpGh9UG2oVPH
PXK3rBl60GsAB2WBzaLpEoTqFATWusU/wwid5Qps/3mMxEE89FSdrPlzEHmq1KjH
l/3TsPDWUhR+VNtdVqSzQvcNsWZFnUenqVpzU9gfAAvbyevNpBp082+DTs0s98D8
FAq3mNfeARBuZVyWc507yFM+PVgKDOIP+C8/+CmvbpaeC7zbYeqYdw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:34 2024 by rpki-client on console-fra.rpki-client.org