Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2aacea34-269b-3e95-a3b1-ce065f46f42d.roa
File:                     2aacea34-269b-3e95-a3b1-ce065f46f42d.roa (raw, json)
Hash identifier:          YVjffQvH1vNJX3j1UoiwCWR0oXQ6gEYZ6CD+y0P3EZ8=
Subject key identifier:   73:C5:8B:D8:A7:E6:78:81:BE:FB:11:92:21:8E:0A:AB:93:A6:25:4C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845DEC9226F240161065C94AB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2aacea34-269b-3e95-a3b1-ce065f46f42d.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     701
IP address blocks:        199.202.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:22:6f:24:01:61:06:5c:94:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=127568ef-0c2c-4dce-9fd7-c5f9a1578478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:66:d3:15:3c:d5:43:ec:17:e4:16:e8:2a:70:
                    6a:39:43:e3:50:f3:b9:2d:89:36:49:7d:cc:7d:16:
                    98:74:bb:7e:e8:98:01:1d:71:9e:cf:7b:cb:a1:e9:
                    3f:e0:b7:cc:f1:35:c8:e6:c1:b5:f5:1b:8d:7e:d7:
                    72:2f:3d:a3:17:7c:f6:69:e1:cd:92:0d:5d:bd:33:
                    40:a2:73:a0:08:50:3d:e1:4b:8f:0e:ad:e4:4e:df:
                    c5:1b:87:8e:10:02:06:c5:61:71:53:c8:8f:fb:71:
                    6f:72:01:e8:18:34:4b:67:94:66:f4:83:b5:3e:b9:
                    e7:05:c6:e7:43:13:8c:5a:53:41:cd:b5:8e:be:c0:
                    84:3e:13:64:d0:66:69:b0:36:e9:2a:ce:b0:92:2f:
                    40:4c:39:ea:41:06:21:58:63:d6:d6:b9:b8:89:67:
                    5f:99:25:97:c8:e9:6f:57:84:ef:24:1d:48:17:9c:
                    2e:64:9c:d3:23:89:8d:18:c7:a0:5a:68:26:20:36:
                    51:65:96:66:81:1f:32:39:05:ed:f3:f0:6a:c8:d7:
                    a2:33:6e:75:7a:52:be:fc:d2:dc:49:1e:b7:b7:22:
                    a8:e1:ef:ad:1a:7e:44:30:78:4e:82:c9:ce:52:b9:
                    21:53:ac:b3:3a:d4:15:ce:dc:f1:b7:26:c0:44:3c:
                    74:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C5:8B:D8:A7:E6:78:81:BE:FB:11:92:21:8E:0A:AB:93:A6:25:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2aacea34-269b-3e95-a3b1-ce065f46f42d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.202.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:7a:e9:9e:da:0b:54:9a:94:31:bb:99:71:ae:9f:c0:71:f5:
         4d:a7:c8:12:f4:b0:5a:97:e5:a4:d2:51:c0:d0:a8:c9:f3:de:
         3c:f3:0f:c0:42:35:f3:c3:93:e2:6f:c4:1d:dd:df:80:89:f6:
         15:f9:1e:d1:98:8a:31:57:0a:4a:7d:07:4c:21:01:bb:d6:7b:
         a4:db:ee:e6:38:23:79:7a:c2:75:64:ef:ad:78:3d:e0:99:3a:
         06:28:ed:85:3d:7f:0e:24:08:9f:36:03:27:7f:7b:95:df:36:
         d7:a5:db:e7:81:5f:9b:b3:b2:d9:8e:59:8e:11:01:e3:39:21:
         1e:b7:74:5c:94:d6:6a:55:62:1f:b0:a2:15:ba:88:dd:ed:20:
         35:25:ea:70:75:85:b9:d4:21:1d:09:2d:6d:86:26:84:fc:71:
         28:cb:02:fd:41:56:26:da:88:fc:da:2f:49:07:ad:ac:08:e1:
         6c:00:be:ab:aa:42:ae:36:42:09:4b:a5:17:96:1c:e9:fd:fb:
         b2:a0:9c:dd:53:a6:8c:83:01:ae:84:f5:11:84:15:d6:2f:7e:
         15:3c:92:dc:22:98:0d:b7:c2:8e:e3:ad:d2:44:7b:7a:d0:f1:
         89:77:c9:c6:a4:73:f9:a5:3d:6b:6f:be:f4:bb:ec:24:21:6e:
         8e:0e:fa:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXeySJvJAFhBlyUq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDUxNDEzMDAzNFoXDTI0MDgxMjEzMDAzNFowLzEtMCsGA1UEAxMk
MTI3NTY4ZWYtMGMyYy00ZGNlLTlmZDctYzVmOWExNTc4NDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGbTFTzVQ+wX5BboKnBqOUPjUPO5LYk2SX3M
fRaYdLt+6JgBHXGez3vLoek/4LfM8TXI5sG19RuNftdyLz2jF3z2aeHNkg1dvTNA
onOgCFA94UuPDq3kTt/FG4eOEAIGxWFxU8iP+3FvcgHoGDRLZ5Rm9IO1PrnnBcbn
QxOMWlNBzbWOvsCEPhNk0GZpsDbpKs6wki9ATDnqQQYhWGPW1rm4iWdfmSWXyOlv
V4TvJB1IF5wuZJzTI4mNGMegWmgmIDZRZZZmgR8yOQXt8/BqyNeiM251elK+/NLc
SR63tyKo4e+tGn5EMHhOgsnOUrkhU6yzOtQVztzxtybARDx0qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHPFi9in5niBvvsRkiGOCquTpiVMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmFhY2VhMzQtMjY5Yi0z
ZTk1LWEzYjEtY2UwNjVmNDZmNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8p0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF566Z7aC1SalDG7mXGun8Bx9U2nyBL0sFqX5aTSUcDQqMnz3jzzD8BC
NfPDk+JvxB3d34CJ9hX5HtGYijFXCkp9B0whAbvWe6Tb7uY4I3l6wnVk7614PeCZ
OgYo7YU9fw4kCJ82Ayd/e5XfNtel2+eBX5uzstmOWY4RAeM5IR63dFyU1mpVYh+w
ohW6iN3tIDUl6nB1hbnUIR0JLW2GJoT8cSjLAv1BVibaiPzaL0kHrawI4WwAvquq
Qq42QglLpReWHOn9+7KgnN1TpoyDAa6E9RGEFdYvfhU8ktwimA23wo7jrdJEe3rQ
8Yl3ycakc/mlPWtvvvS77CQhbo4O+ro=
-----END CERTIFICATE-----
Generated at Sat Jun 15 15:34:00 2024 by rpki-client on console-fra.rpki-client.org