Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/27593cf5-6bef-3c51-8bae-42463edbd0db.roa
File:                     27593cf5-6bef-3c51-8bae-42463edbd0db.roa (raw, json)
Hash identifier:          JHbi3CtmcfRVrPii3aNWfY26hBbW6kWjIYFDWzqj16I=
Subject key identifier:   A2:AB:90:50:61:3E:99:37:F0:39:AF:17:40:1E:F5:25:4D:27:5C:B8
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F432858451A158FCFDDB506DFE8211B38
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/27593cf5-6bef-3c51-8bae-42463edbd0db.roa
Signing time:             Tue 05 Mar 2024 02:00:26 +0000
ROA not before:           Tue 05 Mar 2024 02:00:26 +0000
ROA not after:            Mon 03 Jun 2024 01:00:26 +0000
asID:                     396982
IP address blocks:        162.210.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:15:8f:cf:dd:b5:06:df:e8:21:1b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Mar  5 02:00:26 2024 GMT
            Not After : Jun  3 01:00:26 2024 GMT
        Subject: CN=e1be1e29-176e-4c3c-b79a-bcca8c537179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:17:67:24:d9:1e:f2:f6:77:57:3f:9b:9c:76:
                    51:e6:b0:a3:8d:62:cb:63:89:23:85:1e:e9:64:99:
                    e5:13:49:e4:b9:d8:f4:5d:44:61:33:21:bb:5e:cb:
                    9c:7a:17:7d:7a:d4:1f:54:2e:6a:d1:27:96:6c:bf:
                    4e:50:82:6c:ea:11:5a:a0:c3:63:65:cb:23:21:a0:
                    e7:83:21:d8:e5:fe:32:6c:1d:59:f2:c9:17:be:79:
                    64:d1:72:f5:08:32:c5:a4:70:77:0f:4c:e5:e1:de:
                    a4:c7:94:19:2f:1a:9d:9a:f3:62:0e:10:79:77:ed:
                    6d:e0:3d:66:a4:71:a7:de:ec:9d:d5:00:ea:04:ed:
                    67:42:fb:84:85:ba:8d:a3:23:e4:c7:43:8f:a9:d8:
                    01:52:25:55:12:f0:09:bb:38:70:b9:9c:61:0e:97:
                    0a:d0:91:bc:eb:56:ce:1c:aa:04:56:b7:83:29:f6:
                    ad:48:69:79:aa:36:ef:fc:83:59:42:da:ac:23:dd:
                    c5:df:db:55:70:06:2d:b6:c1:c7:a3:b9:d4:15:b5:
                    d9:ab:bf:5c:04:ed:2b:3a:dd:bc:66:3f:c7:c5:10:
                    c1:f5:d5:b5:21:92:68:bb:e1:92:eb:19:7d:40:52:
                    c9:83:bb:ca:3f:96:39:47:8d:70:15:1f:50:51:42:
                    ca:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AB:90:50:61:3E:99:37:F0:39:AF:17:40:1E:F5:25:4D:27:5C:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/27593cf5-6bef-3c51-8bae-42463edbd0db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:cf:6a:3a:10:48:1c:dd:7b:05:db:73:12:21:2f:49:2d:59:
         e7:2b:b8:8c:aa:15:e8:fb:bd:b5:de:94:55:09:d2:07:69:24:
         b7:25:cd:38:d9:1b:b3:87:69:0c:cc:11:b4:43:b4:90:12:cb:
         af:b7:71:1b:26:ab:8b:35:df:33:2f:8a:e2:24:f3:e8:81:6f:
         23:9a:78:ea:22:9c:7d:b9:f1:a7:6a:f1:34:3c:f4:41:6a:14:
         4a:e8:f7:6f:6a:7c:02:7a:26:66:7d:f2:32:db:72:f8:ff:82:
         8e:9b:40:be:3d:b5:df:03:43:7f:03:56:36:79:da:44:0d:2a:
         0d:c2:60:db:bc:bd:9e:1a:92:ff:e0:7d:2a:79:ff:05:da:35:
         29:d1:31:cd:b4:c3:3d:79:f3:3f:96:7f:7e:a9:df:4e:1c:bc:
         4b:86:44:db:5a:e6:0c:d1:c9:16:1c:08:99:88:d2:e0:43:de:
         5c:17:6b:e9:e7:74:8f:fe:c1:c1:3d:d8:39:25:ed:87:4f:35:
         9f:a5:fc:88:72:aa:35:e6:0b:cc:86:8a:12:23:ad:2a:22:15:
         26:fb:91:10:f5:85:1d:62:51:4f:5f:40:18:64:b7:67:cf:d3:
         f1:2a:9d:1e:59:ed:14:36:59:0b:6e:00:78:e5:da:93:69:52:
         4f:52:8c:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUaFY/P3bUG3+ghGzgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw
NTM1MB4XDTI0MDMwNTAyMDAyNloXDTI0MDYwMzAxMDAyNlowLzEtMCsGA1UEAxMk
ZTFiZTFlMjktMTc2ZS00YzNjLWI3OWEtYmNjYThjNTM3MTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhdnJNke8vZ3Vz+bnHZR5rCjjWLLY4kjhR7p
ZJnlE0nkudj0XURhMyG7Xsucehd9etQfVC5q0SeWbL9OUIJs6hFaoMNjZcsjIaDn
gyHY5f4ybB1Z8skXvnlk0XL1CDLFpHB3D0zl4d6kx5QZLxqdmvNiDhB5d+1t4D1m
pHGn3uyd1QDqBO1nQvuEhbqNoyPkx0OPqdgBUiVVEvAJuzhwuZxhDpcK0JG861bO
HKoEVreDKfatSGl5qjbv/INZQtqsI93F39tVcAYttsHHo7nUFbXZq79cBO0rOt28
Zj/HxRDB9dW1IZJou+GS6xl9QFLJg7vKP5Y5R41wFR9QUULKWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKKrkFBhPpk38DmvF0Ae9SVNJ1y4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4
NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvMjc1OTNjZjUtNmJlZi0z
YzUxLThiYWUtNDI0NjNlZGJkMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj
MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1
MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw
YTY1NTA1MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotJHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIfPajoQSBzdewXbcxIhL0ktWecruIyqFej7vbXelFUJ0gdpJLclzTjZ
G7OHaQzMEbRDtJASy6+3cRsmq4s13zMviuIk8+iBbyOaeOoinH258adq8TQ89EFq
FEro929qfAJ6JmZ98jLbcvj/go6bQL49td8DQ38DVjZ52kQNKg3CYNu8vZ4akv/g
fSp5/wXaNSnRMc20wz158z+Wf36p304cvEuGRNta5gzRyRYcCJmI0uBD3lwXa+nn
dI/+wcE92Dkl7YdPNZ+l/IhyqjXmC8yGihIjrSoiFSb7kRD1hR1iUU9fQBhkt2fP
0/EqnR5Z7RQ2WQtuAHjl2pNpUk9SjL4=
-----END CERTIFICATE-----
Generated at Sun May 5 18:02:15 2024 by rpki-client on console-ams.rpki-client.org