Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48aa88ec-419b-34e7-8609-9c3ffd7a3eee.roa
File:                     48aa88ec-419b-34e7-8609-9c3ffd7a3eee.roa (raw, json)
Hash identifier:          kXUw+jkp04qvlEFbgD4ALkQdFWbNwUp/un/8DSxNqx0=
Subject key identifier:   AC:F9:19:97:7E:B0:52:F5:3E:CB:1C:C3:91:E2:F5:3C:08:D2:36:9A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845DEC93D53D3E3746E8D7E4E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48aa88ec-419b-34e7-8609-9c3ffd7a3eee.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     701
IP address blocks:        141.151.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:3d:53:d3:e3:74:6e:8d:7e:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=307149b5-e0f0-43e2-9ee3-211f02256906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c0:c4:6b:28:47:b1:24:ba:6a:42:d1:fe:9c:
                    a3:28:fd:80:4c:26:59:14:f8:df:e3:ba:ec:85:5d:
                    d4:66:58:cc:a4:7c:f2:90:b9:44:f9:be:97:6f:b2:
                    b1:cc:99:cf:4f:9f:73:3b:dd:d9:1b:88:cd:05:74:
                    9f:56:27:36:ec:6d:cd:09:c3:8c:b0:10:8c:0d:65:
                    2e:4e:3d:31:99:6d:62:f4:96:90:d7:ff:9d:37:af:
                    0a:1e:30:b0:82:57:93:ec:26:ea:9e:8b:ff:0d:c3:
                    71:32:c7:0f:93:9e:86:21:28:87:6b:6b:32:43:c8:
                    43:b3:2c:3a:f4:f7:1d:a2:57:35:9f:3d:35:cf:5a:
                    50:f7:2f:f8:de:44:4c:7e:69:3b:81:03:5d:99:33:
                    79:04:de:e9:9c:c8:00:64:a3:e9:3d:f3:65:e1:cc:
                    18:5f:e4:f0:74:6a:6b:7d:67:85:f5:ca:eb:7e:b2:
                    f0:76:25:9f:d5:c2:88:bc:32:17:7a:06:7f:0b:67:
                    d0:74:59:d5:5d:da:0f:27:f4:71:bb:f2:06:cd:4e:
                    8b:b7:07:73:19:5a:be:fd:12:82:fa:7a:ad:42:b4:
                    8b:a7:60:ef:05:a8:a7:dd:f5:83:8e:8d:78:fe:26:
                    dd:91:78:ca:db:dd:cc:84:9b:3b:55:e6:15:71:54:
                    25:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F9:19:97:7E:B0:52:F5:3E:CB:1C:C3:91:E2:F5:3C:08:D2:36:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48aa88ec-419b-34e7-8609-9c3ffd7a3eee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.151.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:77:a0:e0:e6:72:df:0e:ef:62:ad:9a:15:7f:93:dc:47:30:
         40:c2:32:42:88:1b:a6:09:77:34:42:f3:6d:47:39:1e:2f:21:
         e4:b3:51:b2:c3:93:88:63:1c:d8:c7:2b:26:36:a8:98:0c:88:
         61:84:b5:79:97:f5:5e:e2:6a:20:87:9f:93:ee:03:08:32:86:
         28:d8:40:cf:b7:a6:27:b4:82:c3:61:dd:66:b5:61:ab:2c:39:
         f0:fb:a4:bf:06:82:f7:8f:93:af:fc:8c:12:f5:fb:bb:b7:bc:
         a0:05:41:c2:10:63:9d:18:3e:8c:66:13:ed:c9:d9:2a:7c:8d:
         a9:c7:1e:a2:5b:e9:bc:96:c2:c5:ca:6f:ee:82:40:16:2c:41:
         1b:f1:7e:e2:da:81:e3:34:2e:58:03:9b:24:02:45:ea:fb:c9:
         49:3b:d4:26:e3:6c:e8:d1:ef:9a:9e:62:9c:cc:5d:2f:21:35:
         67:0f:d1:0e:20:96:30:79:f4:df:9f:8f:0c:73:d2:52:7d:51:
         67:cd:45:86:99:f2:8d:0a:83:55:62:ae:ae:71:78:57:e4:1f:
         78:62:26:82:b0:10:f4:56:36:ce:50:8d:a1:bb:df:ca:b5:33:
         28:aa:e6:c9:bb:da:58:3b:93:41:2c:3e:f4:22:94:86:ba:41:
         c0:fc:fb:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXeyT1T0+N0bo1+TgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDUxNDEzMDAzNFoXDTI0MDgxMjEzMDAzNFowLzEtMCsGA1UEAxMk
MzA3MTQ5YjUtZTBmMC00M2UyLTllZTMtMjExZjAyMjU2OTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8DEayhHsSS6akLR/pyjKP2ATCZZFPjf47rs
hV3UZljMpHzykLlE+b6Xb7KxzJnPT59zO93ZG4jNBXSfVic27G3NCcOMsBCMDWUu
Tj0xmW1i9JaQ1/+dN68KHjCwgleT7Cbqnov/DcNxMscPk56GISiHa2syQ8hDsyw6
9Pcdolc1nz01z1pQ9y/43kRMfmk7gQNdmTN5BN7pnMgAZKPpPfNl4cwYX+TwdGpr
fWeF9crrfrLwdiWf1cKIvDIXegZ/C2fQdFnVXdoPJ/Rxu/IGzU6LtwdzGVq+/RKC
+nqtQrSLp2DvBain3fWDjo14/ibdkXjK293MhJs7VeYVcVQlfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKz5GZd+sFL1Psscw5Hi9TwI0jaaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDhhYTg4ZWMtNDE5Yi0z
NGU3LTg2MDktOWMzZmZkN2EzZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjZfgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGp3oODmct8O72KtmhV/k9xHMEDCMkKIG6YJdzRC821HOR4vIeSzUbLD
k4hjHNjHKyY2qJgMiGGEtXmX9V7iaiCHn5PuAwgyhijYQM+3pie0gsNh3Wa1Yass
OfD7pL8GgvePk6/8jBL1+7u3vKAFQcIQY50YPoxmE+3J2Sp8janHHqJb6byWwsXK
b+6CQBYsQRvxfuLageM0LlgDmyQCRer7yUk71CbjbOjR75qeYpzMXS8hNWcP0Q4g
ljB59N+fjwxz0lJ9UWfNRYaZ8o0Kg1Virq5xeFfkH3hiJoKwEPRWNs5QjaG738q1
Myiq5sm72lg7k0EsPvQilIa6QcD8+3I=
-----END CERTIFICATE-----
Generated at Sat Jun 15 21:33:54 2024 by rpki-client on console-fra.rpki-client.org