Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bc23a41-668d-30ba-bb01-6fdd76b672e6.roa
File:                     2bc23a41-668d-30ba-bb01-6fdd76b672e6.roa (raw, json)
Hash identifier:          5UHwOGKU+nBJDiM6rXlWPYU3j5nJecrQa75LS3DEsus=
Subject key identifier:   C3:5F:8F:56:62:F7:F0:73:61:3E:BC:97:FF:2C:EB:9A:9B:C9:52:B1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845BEB3979BE10D91113B782BA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bc23a41-668d-30ba-bb01-6fdd76b672e6.roa
Signing time:             Fri 03 May 2024 01:11:31 +0000
ROA not before:           Fri 03 May 2024 01:11:31 +0000
ROA not after:            Thu 01 Aug 2024 01:11:31 +0000
asID:                     6167
IP address blocks:        72.108.56.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:b3:97:9b:e1:0d:91:11:3b:78:2b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:11:31 2024 GMT
            Not After : Aug  1 01:11:31 2024 GMT
        Subject: CN=fa1ab3da-fbca-4b65-8f3d-0c0e673b7cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:97:5a:8f:94:48:58:e1:b6:f7:b1:53:0b:
                    c3:79:41:66:7d:ea:a7:f4:b5:1e:ba:de:62:3a:cd:
                    4d:8b:66:67:9f:4f:d4:21:bf:ba:3e:69:ab:3b:f7:
                    39:6e:06:aa:1d:9e:65:99:5c:dc:2a:26:69:cb:26:
                    55:ed:a2:ae:7a:0b:b9:5a:f8:2d:d4:38:7c:c6:fa:
                    06:9b:1a:0c:59:55:27:0e:42:f7:bd:6c:3c:b5:09:
                    70:48:61:87:73:ae:58:1a:a1:08:c1:98:9c:33:10:
                    c4:9d:0b:79:fc:0b:0c:80:a8:12:0a:71:81:cf:a6:
                    2e:d4:9e:41:65:eb:69:35:5b:5e:af:2c:8f:60:c6:
                    f5:44:77:8d:91:8c:41:be:de:bc:1c:52:90:ce:ff:
                    dc:b4:fe:73:e1:d0:3b:be:4a:d1:79:24:6d:4b:27:
                    29:01:c4:49:79:01:25:1b:85:a7:14:70:37:61:8c:
                    15:8a:95:95:e5:6b:05:4b:19:84:f6:03:33:cb:47:
                    c6:09:79:dd:e6:94:ac:77:f0:b7:36:25:a3:81:8c:
                    d8:2d:20:7a:ed:e0:fb:36:a7:b8:98:4f:d1:bc:70:
                    4b:ff:a6:1b:95:18:7e:1b:37:b5:d8:8c:68:2e:9e:
                    23:f8:8d:54:2b:d9:1f:4f:74:ce:24:64:a2:76:bd:
                    07:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5F:8F:56:62:F7:F0:73:61:3E:BC:97:FF:2C:EB:9A:9B:C9:52:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bc23a41-668d-30ba-bb01-6fdd76b672e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:50:30:0b:50:2a:a0:85:79:a6:b2:7e:a5:79:70:6a:23:9a:
         63:43:5c:a0:63:ae:29:48:80:99:35:12:4d:da:c3:ea:d2:ac:
         72:a1:02:e8:09:15:84:a5:f9:f2:1a:bb:ce:98:91:ae:9c:f5:
         c8:44:15:f6:11:bf:14:d8:7c:6f:ec:4d:f9:1e:d8:a1:21:f9:
         f9:af:e4:08:19:e2:d8:56:46:f4:1f:40:87:90:34:51:62:33:
         d7:f5:c9:cf:ee:03:cc:d7:9c:90:94:53:22:43:f3:d9:42:75:
         75:72:38:ec:3f:70:1a:8a:60:e2:13:6c:1f:46:02:0a:f9:c0:
         ba:43:23:4f:81:dc:64:47:57:a9:8f:a7:44:81:05:75:ea:90:
         f2:94:ec:c2:ac:4c:46:26:10:f1:7c:58:d3:85:16:16:d7:97:
         a7:d9:ed:6c:0e:98:79:bc:e0:f7:14:3d:7c:25:62:72:f8:4c:
         0d:b1:d2:43:ea:83:1d:6b:79:f2:97:1f:40:86:c5:c7:a7:55:
         04:08:e3:cf:59:1e:13:43:06:fa:86:77:ca:15:93:32:ce:92:
         e8:fa:9a:1e:8a:3a:4f:d2:81:38:dc:69:05:29:7f:9d:73:c5:
         8c:10:b2:bf:a5:b5:0f:39:50:1e:9c:2e:f8:c7:6b:89:d9:e9:
         d8:fc:ae:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW+s5eb4Q2RETt4K6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDUwMzAxMTEzMVoXDTI0MDgwMTAxMTEzMVowLzEtMCsGA1UEAxMk
ZmExYWIzZGEtZmJjYS00YjY1LThmM2QtMGMwZTY3M2I3Y2M1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucOXWo+USFjhtvexUwvDeUFmfeqn9LUeut5i
Os1Ni2Znn0/UIb+6PmmrO/c5bgaqHZ5lmVzcKiZpyyZV7aKuegu5Wvgt1Dh8xvoG
mxoMWVUnDkL3vWw8tQlwSGGHc65YGqEIwZicMxDEnQt5/AsMgKgSCnGBz6Yu1J5B
ZetpNVteryyPYMb1RHeNkYxBvt68HFKQzv/ctP5z4dA7vkrReSRtSycpAcRJeQEl
G4WnFHA3YYwVipWV5WsFSxmE9gMzy0fGCXnd5pSsd/C3NiWjgYzYLSB67eD7Nqe4
mE/RvHBL/6YblRh+Gze12IxoLp4j+I1UK9kfT3TOJGSidr0HnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMNfj1Zi9/BzYT68l/8s65qbyVKxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmJjMjNhNDEtNjY4ZC0z
MGJhLWJiMDEtNmZkZDc2YjY3MmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGw4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG5QMAtQKqCFeaayfqV5cGojmmNDXKBjrilIgJk1Ek3aw+rSrHKhAugJ
FYSl+fIau86Yka6c9chEFfYRvxTYfG/sTfke2KEh+fmv5AgZ4thWRvQfQIeQNFFi
M9f1yc/uA8zXnJCUUyJD89lCdXVyOOw/cBqKYOITbB9GAgr5wLpDI0+B3GRHV6mP
p0SBBXXqkPKU7MKsTEYmEPF8WNOFFhbXl6fZ7WwOmHm84PcUPXwlYnL4TA2x0kPq
gx1refKXH0CGxcenVQQI489ZHhNDBvqGd8oVkzLOkuj6mh6KOk/SgTjcaQUpf51z
xYwQsr+ltQ85UB6cLvjHa4nZ6dj8rqo=
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:29:27 2024 by rpki-client on console-ams.rpki-client.org