Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b86f6b0a-4fac-3480-824b-96bda1749efc.roa
File:                     b86f6b0a-4fac-3480-824b-96bda1749efc.roa (raw, json)
Hash identifier:          IwW8vfnNIZ4OF2LSW67TxQp3NMZwrS4tOcHbfXWe3wo=
Subject key identifier:   4E:5F:09:96:16:FE:46:BF:0A:61:A0:33:76:CD:A2:94:76:AB:50:C2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845DEC93CD01D509FB046D66D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b86f6b0a-4fac-3480-824b-96bda1749efc.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     701
IP address blocks:        141.152.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:3c:d0:1d:50:9f:b0:46:d6:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=acfa99e4-910b-42c2-9250-8194216031f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:de:47:5a:23:18:d4:d4:33:52:39:06:b0:8f:
                    1b:50:c9:68:b4:93:82:65:0e:1b:26:da:ea:81:0d:
                    ab:4a:64:ac:8e:96:c4:01:8c:2a:1f:c5:a1:49:a8:
                    16:e4:b7:41:e9:6a:e2:0a:e4:99:a7:fe:06:89:f6:
                    0e:39:89:8c:91:03:d1:aa:58:1f:e7:4b:f6:6f:14:
                    e2:57:8c:72:17:27:15:11:3f:f6:7a:6d:48:0d:cc:
                    0c:71:d1:0f:27:96:34:6c:4f:93:88:61:a4:7d:87:
                    6c:9a:bf:6c:ff:a2:ec:72:c2:2a:86:4c:4d:e9:84:
                    d8:36:a6:30:fa:f5:d4:03:fd:48:ba:40:c1:05:a8:
                    44:d9:54:31:98:a4:b6:ba:04:ae:a1:89:b5:84:cc:
                    8e:9d:65:f5:f8:71:df:92:b6:c6:11:76:28:03:d9:
                    5a:b1:48:6e:20:5e:19:ee:89:09:c1:0c:a1:6f:8c:
                    41:fb:b6:3b:0b:07:02:18:59:ec:36:6d:e0:11:89:
                    ea:b2:e9:f2:e4:c6:6b:3b:32:20:f1:55:23:06:83:
                    a5:64:2e:a5:3c:21:e9:ad:08:28:67:7e:7c:f0:36:
                    74:81:3d:3e:18:dc:64:6c:b8:c0:83:55:ae:ee:5b:
                    50:6f:2b:aa:7e:92:54:07:23:b1:49:98:de:65:fe:
                    35:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5F:09:96:16:FE:46:BF:0A:61:A0:33:76:CD:A2:94:76:AB:50:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b86f6b0a-4fac-3480-824b-96bda1749efc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.152.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:43:d6:9b:7c:fe:01:1b:a3:64:20:54:c5:61:76:0b:f6:92:
         56:7c:b8:75:6e:ab:6a:3d:5b:92:8e:c7:7f:ad:7b:3d:31:a4:
         a3:93:9c:1f:45:98:dd:b0:99:a3:81:fb:9b:fe:cf:f9:7d:29:
         60:c2:0f:97:34:27:92:d7:a2:e9:fa:77:4c:11:42:9f:df:f0:
         8a:36:bc:ca:4c:84:73:8c:da:41:e7:5a:d3:3b:68:ad:21:8b:
         96:db:22:e8:73:5e:89:2a:88:a9:d1:b5:bf:82:8e:b2:85:a5:
         7f:69:af:dd:96:d0:e6:34:ca:de:0f:31:32:40:0e:5e:2f:71:
         1c:d6:91:76:f6:14:14:39:ed:9d:63:8b:e6:cb:40:d0:a4:e3:
         bb:b2:4e:d3:ab:24:5a:16:6c:22:e3:3e:31:26:18:3c:da:84:
         d3:75:ac:16:e9:5a:04:cc:40:35:92:e7:71:9c:fd:a3:01:e3:
         bd:dd:94:63:da:49:90:a3:79:fc:39:06:78:40:bd:d7:24:c3:
         0c:32:ac:f6:67:e6:eb:50:3c:8d:4a:47:5a:9a:7a:13:8f:85:
         05:19:a9:12:12:61:0a:8b:57:e7:36:a8:7a:55:5e:28:af:18:
         ae:3d:92:2e:c0:ac:38:8e:f9:eb:e8:f0:56:05:4c:8b:7d:b2:
         0b:4a:0b:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXeyTzQHVCfsEbWbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDUxNDEzMDAzNFoXDTI0MDgxMjEzMDAzNFowLzEtMCsGA1UEAxMk
YWNmYTk5ZTQtOTEwYi00MmMyLTkyNTAtODE5NDIxNjAzMWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu95HWiMY1NQzUjkGsI8bUMlotJOCZQ4bJtrq
gQ2rSmSsjpbEAYwqH8WhSagW5LdB6WriCuSZp/4GifYOOYmMkQPRqlgf50v2bxTi
V4xyFycVET/2em1IDcwMcdEPJ5Y0bE+TiGGkfYdsmr9s/6LscsIqhkxN6YTYNqYw
+vXUA/1IukDBBahE2VQxmKS2ugSuoYm1hMyOnWX1+HHfkrbGEXYoA9lasUhuIF4Z
7okJwQyhb4xB+7Y7CwcCGFnsNm3gEYnqsuny5MZrOzIg8VUjBoOlZC6lPCHprQgo
Z3588DZ0gT0+GNxkbLjAg1Wu7ltQbyuqfpJUByOxSZjeZf41BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE5fCZYW/ka/CmGgM3bNopR2q1DCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjg2ZjZiMGEtNGZhYy0z
NDgwLTgyNGItOTZiZGExNzQ5ZWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjZh8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAND1pt8/gEbo2QgVMVhdgv2klZ8uHVuq2o9W5KOx3+tez0xpKOTnB9F
mN2wmaOB+5v+z/l9KWDCD5c0J5LXoun6d0wRQp/f8Io2vMpMhHOM2kHnWtM7aK0h
i5bbIuhzXokqiKnRtb+CjrKFpX9pr92W0OY0yt4PMTJADl4vcRzWkXb2FBQ57Z1j
i+bLQNCk47uyTtOrJFoWbCLjPjEmGDzahNN1rBbpWgTMQDWS53Gc/aMB473dlGPa
SZCjefw5BnhAvdckwwwyrPZn5utQPI1KR1qaehOPhQUZqRISYQqLV+c2qHpVXiiv
GK49ki7ArDiO+evo8FYFTIt9sgtKC/Q=
-----END CERTIFICATE-----
Generated at Sat Jun 15 17:19:50 2024 by rpki-client on console-ams.rpki-client.org