Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/b7b642f2-58fa-3df0-9886-32be875da209.roa
File:                     b7b642f2-58fa-3df0-9886-32be875da209.roa (raw, json)
Hash identifier:          tGe8y+JqlaQLanW0FGId9p71qNa6gzgpGU6Yksv2qCU=
Subject key identifier:   84:14:AA:93:20:E3:6E:93:DF:34:77:48:A8:5A:82:3A:DF:89:9E:01
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F43285845F51E7F96275C31F724E1D280
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/b7b642f2-58fa-3df0-9886-32be875da209.roa
Signing time:             Wed 22 May 2024 13:00:33 +0000
ROA not before:           Wed 22 May 2024 13:00:33 +0000
ROA not after:            Tue 20 Aug 2024 13:00:33 +0000
asID:                     6621
IP address blocks:        97.73.84.0/22 maxlen: 22
                          97.73.64.0/20 maxlen: 20
                          97.73.92.0/22 maxlen: 22
                          97.73.94.0/23 maxlen: 23
                          97.73.100.0/22 maxlen: 22
                          97.73.31.0/24 maxlen: 24
                          97.73.19.0/24 maxlen: 24
                          97.73.48.0/21 maxlen: 21
                          97.73.104.0/22 maxlen: 22
                          97.73.0.0/20 maxlen: 20
                          97.73.108.0/22 maxlen: 22
                          97.73.16.0/20 maxlen: 20
                          97.73.160.0/19 maxlen: 19
                          97.73.240.0/22 maxlen: 22
                          97.73.244.0/22 maxlen: 22
                          97.73.80.0/22 maxlen: 22
                          97.73.248.0/22 maxlen: 22
                          97.73.88.0/22 maxlen: 22
                          97.73.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f5:1e:7f:96:27:5c:31:f7:24:e1:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: May 22 13:00:33 2024 GMT
            Not After : Aug 20 13:00:33 2024 GMT
        Subject: CN=3aeb85f2-c480-4a96-8d35-b8728e07bde7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b0:c3:e6:b5:0f:0b:1c:bb:7d:d0:d7:4b:59:
                    15:4f:c5:b4:67:f5:f2:83:07:e9:c8:9a:de:82:3e:
                    c2:70:72:d2:98:d0:28:18:a4:f8:0e:ad:ae:03:74:
                    e4:fa:f0:03:2f:fc:e3:37:24:31:77:51:4c:f3:29:
                    6b:c1:67:6e:c8:86:ba:1b:29:cc:cf:75:3f:fb:ef:
                    fa:ca:d8:7a:96:e8:74:dd:8d:32:26:e4:d8:10:3a:
                    a3:dc:d5:f6:c5:e1:46:dc:27:c9:6b:e4:9b:73:0d:
                    c5:0d:e9:3f:7c:72:4f:31:b7:75:b3:a6:dc:09:47:
                    eb:f2:d4:24:a1:cb:2f:5b:c2:ec:29:91:97:e5:9f:
                    5b:b4:d7:b2:13:80:76:21:c9:2c:29:89:fb:f4:5e:
                    f7:1d:62:41:96:48:4a:86:97:c3:38:7e:a5:df:2e:
                    2e:d9:53:3c:ff:5c:74:4d:1f:2e:cf:fb:59:27:90:
                    39:69:60:6d:d1:17:56:18:a5:f0:05:00:c0:88:c2:
                    d4:6b:34:da:84:2a:a0:c4:5c:93:6a:53:77:e0:71:
                    be:c9:48:b2:9c:23:5b:29:44:ad:d4:d7:e4:51:7d:
                    ac:d3:a1:78:57:49:20:b0:1c:58:5b:b4:7a:04:5f:
                    48:7c:7c:7f:9b:59:6a:b6:af:cf:bf:89:bd:c4:c7:
                    4e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:14:AA:93:20:E3:6E:93:DF:34:77:48:A8:5A:82:3A:DF:89:9E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/b7b642f2-58fa-3df0-9886-32be875da209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.73.0.0/19
                  97.73.48.0/21
                  97.73.64.0/19
                  97.73.100.0-97.73.111.255
                  97.73.160.0/19
                  97.73.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:97:1b:be:e3:c7:cf:d3:5a:c6:c5:a3:33:a8:34:09:2c:41:
         98:12:b7:35:48:59:b6:dd:eb:55:7b:1e:26:4b:46:d6:52:0a:
         5d:00:73:5b:c5:35:bf:d8:b1:69:c2:e0:92:37:00:94:8a:2f:
         ae:7d:1e:52:c4:40:42:d4:ee:a1:60:8f:9d:32:4e:7d:d2:f4:
         46:03:56:02:1b:ec:d2:73:1e:1a:16:4e:3c:a1:83:e8:05:65:
         ea:c4:14:a7:6e:df:f1:54:ba:fe:f4:91:e2:6e:56:29:2a:d9:
         79:8f:9e:7a:76:c2:60:44:88:4a:4c:ad:7d:1e:69:7b:dc:5f:
         c5:a7:f5:1a:e4:6d:52:6a:e8:4a:22:0a:03:4e:40:6b:41:06:
         d8:6e:55:59:f9:a7:0a:cd:dc:a5:19:27:b5:23:90:ea:b9:a4:
         71:01:04:ff:b8:35:ff:8d:94:d1:15:48:f8:6b:ca:47:84:2c:
         86:eb:c4:e9:80:f8:60:11:38:39:ff:bd:09:5e:5a:66:c1:2b:
         a2:aa:da:5d:bd:c8:1b:ae:54:d4:52:a6:b2:c2:e3:67:0e:94:
         5d:c4:5b:dd:d2:53:45:22:05:44:08:36:e2:b8:92:df:1c:25:
         9b:79:d7:2d:03:d5:7c:b9:b9:ba:0a:ef:ea:39:4e:bc:51:43:
         d3:46:5f:fb
-----BEGIN CERTIFICATE-----
MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWEX1Hn+WJ1wx9yTh0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0
NDYwMB4XDTI0MDUyMjEzMDAzM1oXDTI0MDgyMDEzMDAzM1owLzEtMCsGA1UEAxMk
M2FlYjg1ZjItYzQ4MC00YTk2LThkMzUtYjg3MjhlMDdiZGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7DD5rUPCxy7fdDXS1kVT8W0Z/XygwfpyJre
gj7CcHLSmNAoGKT4Dq2uA3Tk+vADL/zjNyQxd1FM8ylrwWduyIa6GynMz3U/++/6
yth6luh03Y0yJuTYEDqj3NX2xeFG3CfJa+Sbcw3FDek/fHJPMbd1s6bcCUfr8tQk
ocsvW8LsKZGX5Z9btNeyE4B2IcksKYn79F73HWJBlkhKhpfDOH6l3y4u2VM8/1x0
TR8uz/tZJ5A5aWBt0RdWGKXwBQDAiMLUazTahCqgxFyTalN34HG+yUiynCNbKUSt
1NfkUX2s06F4V0kgsBxYW7R6BF9IfHx/m1lqtq/Pv4m9xMdOowIDAQABo4IDezCC
A3cwHQYDVR0OBBYEFIQUqpMg426T3zR3SKhagjrfiZ4BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4
ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvYjdiNjQyZjItNThmYS0z
ZGYwLTk4ODYtMzJiZTg3NWRhMjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk
MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy
NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5
ZTIzMjQ0NjAuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQFYUkAAwQD
YUkwAwQFYUlAMAwDBAJhSWQDBARhSWADBAVhSaADBARhSfAwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXpcb
vuPHz9NaxsWjM6g0CSxBmBK3NUhZtt3rVXseJktG1lIKXQBzW8U1v9ixacLgkjcA
lIovrn0eUsRAQtTuoWCPnTJOfdL0RgNWAhvs0nMeGhZOPKGD6AVl6sQUp27f8VS6
/vSR4m5WKSrZeY+eenbCYESISkytfR5pe9xfxaf1GuRtUmroSiIKA05Aa0EG2G5V
WfmnCs3cpRkntSOQ6rmkcQEE/7g1/42U0RVI+GvKR4QshuvE6YD4YBE4Of+9CV5a
ZsEroqraXb3IG65U1FKmssLjZw6UXcRb3dJTRSIFRAg24riS3xwlm3nXLQPVfLm5
ugrv6jlOvFFD00Zf+w==
-----END CERTIFICATE-----
Generated at Sun May 26 16:41:24 2024 by rpki-client on console-fra.rpki-client.org