Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa
File:                     8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa (raw, json)
Hash identifier:          jZnpvVLkB2owZlZ+Srzv1m2ZV1G8ir74hiC7OoEJHTg=
Subject key identifier:   D6:A4:58:B3:F3:68:EE:CA:49:36:3B:8D:FE:CF:61:4D:38:9C:35:9F
Certificate issuer:       /CN=d1f3fb34-9d61-4476-8110-8ca2876e7928
Certificate serial:       010D0C9F43285845734DB572A8AF9EDCA0BA3D00
Authority key identifier: 1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        68.70.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b5:72:a8:af:9e:dc:a0:ba:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f3fb34-9d61-4476-8110-8ca2876e7928
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=afea5a05-7086-49d2-89ce-5577b82fea57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c2:5f:a5:f2:4f:87:e3:10:e3:e5:5d:a8:64:
                    d0:06:ca:3f:a5:1d:2c:50:95:9f:dd:92:a9:37:cf:
                    69:15:5d:14:4d:77:dc:8a:46:be:18:c7:a8:3e:3d:
                    15:b1:de:dd:e1:25:fb:f3:96:c4:a5:c1:5f:bb:37:
                    6b:1a:8b:d3:5a:1e:04:50:3e:37:47:8f:03:3f:86:
                    75:79:fe:65:9a:e0:9f:7e:70:17:3e:16:da:25:3e:
                    4d:e6:bf:c4:2c:c5:2f:4f:9c:72:11:9e:c0:05:bb:
                    30:84:71:4c:f9:90:b6:c4:52:b3:da:e9:b9:0f:0e:
                    fb:40:da:f5:ac:9d:7e:36:b6:49:de:75:f6:08:b7:
                    f8:21:54:f0:df:ec:64:e4:3a:7f:33:93:bf:89:2c:
                    1f:67:be:0c:48:95:65:70:3d:48:33:45:dd:31:69:
                    04:a2:dc:86:40:eb:ae:2c:50:fd:27:cf:9f:a4:9b:
                    53:0b:ed:84:02:f9:7f:17:18:2c:c8:c4:56:f1:21:
                    7d:5f:55:f8:d8:a5:b1:b9:11:83:88:ae:21:5a:a4:
                    56:63:fd:85:0a:64:72:cf:6c:e6:65:9d:2e:82:38:
                    fe:e4:27:52:c7:d4:0d:ad:2a:f8:ea:0e:02:86:b5:
                    dd:e1:82:9b:34:f9:07:0a:17:c8:5a:c9:4a:c9:d6:
                    cc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A4:58:B3:F3:68:EE:CA:49:36:3B:8D:FE:CF:61:4D:38:9C:35:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl

            X509v3 Authority Key Identifier:
                keyid:1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.70.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:19:5a:f5:44:7d:a2:49:62:26:d1:72:86:18:be:e4:ab:7c:
         21:ca:d0:cb:c6:16:8f:48:3f:da:75:72:b1:41:98:a3:e7:eb:
         b3:60:48:cb:e7:33:d1:b4:cb:5c:56:85:3c:06:ff:c7:e3:a7:
         ee:76:f7:74:b3:b4:e9:d0:11:c9:76:b5:50:e5:50:9a:17:70:
         58:43:f2:9a:b9:f3:24:cd:78:87:76:94:b4:4c:a5:a9:2f:68:
         82:4a:0a:8c:b4:75:8b:fe:0e:3e:77:8f:a0:93:06:52:4e:cb:
         89:c7:73:cd:5a:27:e0:47:56:20:56:e6:cf:d4:8c:be:ae:d2:
         04:0b:22:c3:99:0b:82:15:99:44:cb:6c:a1:7f:40:02:21:68:
         9e:b7:3e:e8:cd:4f:45:d0:74:fc:a3:71:85:d8:75:26:81:fe:
         0f:2f:0e:bd:92:ce:a9:84:18:7b:3f:1b:e9:8f:80:f5:db:41:
         ca:57:bf:8c:11:eb:04:d4:4f:fe:7e:0d:3d:fc:fe:18:12:ae:
         f5:d3:3e:26:55:22:89:04:4c:c7:21:8a:51:af:e9:46:ec:96:
         70:68:5e:c6:0e:67:84:d8:ff:f6:49:00:88:fa:06:89:f6:c8:
         7e:0f:7d:73:fe:f5:0f:ab:d2:7e:b0:64:c3:56:29:f3:39:4a:
         21:d0:99:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVzTbVyqK+e3KC6PQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmM2ZiMzQtOWQ2MS00NDc2LTgxMTAtOGNhMjg3NmU3
OTI4MB4XDTI0MDQwNjAxMDAyNloXDTI0MDcwNTAxMDAyNlowLzEtMCsGA1UEAxMk
YWZlYTVhMDUtNzA4Ni00OWQyLTg5Y2UtNTU3N2I4MmZlYTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMJfpfJPh+MQ4+VdqGTQBso/pR0sUJWf3ZKp
N89pFV0UTXfcika+GMeoPj0Vsd7d4SX785bEpcFfuzdrGovTWh4EUD43R48DP4Z1
ef5lmuCffnAXPhbaJT5N5r/ELMUvT5xyEZ7ABbswhHFM+ZC2xFKz2um5Dw77QNr1
rJ1+NrZJ3nX2CLf4IVTw3+xk5Dp/M5O/iSwfZ74MSJVlcD1IM0XdMWkEotyGQOuu
LFD9J8+fpJtTC+2EAvl/FxgsyMRW8SF9X1X42KWxuRGDiK4hWqRWY/2FCmRyz2zm
ZZ0ugjj+5CdSx9QNrSr46g4ChrXd4YKbNPkHChfIWslKydbM8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNakWLPzaO7KSTY7jf7PYU04nDWfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMWYz
ZmIzNC05ZDYxLTQ0NzYtODExMC04Y2EyODc2ZTc5MjgvOGFiOTg3NjMtNTdkOC0z
NDA2LWE2ZWEtZjc4ZmFlNGVkNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDFmM2ZiMzQtOWQ2MS00NDc2LTgx
MTAtOGNhMjg3NmU3OTI4L2QxZjNmYjM0LTlkNjEtNDQ3Ni04MTEwLThjYTI4NzZl
NzkyOC5jcmwwHwYDVR0jBBgwFoAUHVxtl3sO0IsXB0lOny3PFM65iiYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kMWYzZmIzNC05ZDYxLTQ0NzYtODExMC04Y2Ey
ODc2ZTc5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREZ/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0ZWvVEfaJJYibRcoYYvuSrfCHK0MvGFo9IP9p1crFBmKPn67NgSMvn
M9G0y1xWhTwG/8fjp+5293SztOnQEcl2tVDlUJoXcFhD8pq58yTNeId2lLRMpakv
aIJKCoy0dYv+Dj53j6CTBlJOy4nHc81aJ+BHViBW5s/UjL6u0gQLIsOZC4IVmUTL
bKF/QAIhaJ63PujNT0XQdPyjcYXYdSaB/g8vDr2SzqmEGHs/G+mPgPXbQcpXv4wR
6wTUT/5+DT38/hgSrvXTPiZVIokETMchilGv6UbslnBoXsYOZ4TY//ZJAIj6Bon2
yH4PfXP+9Q+r0n6wZMNWKfM5SiHQmUU=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:46:58 2024 by rpki-client on console-fra.rpki-client.org