Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d197b3d6-542b-36cb-baa2-2b0446a590d4.roa
File:                     d197b3d6-542b-36cb-baa2-2b0446a590d4.roa (raw, json)
Hash identifier:          R0mVNHjrT26K+wWBkkscoyaLulG6YaOMQYfW2hazstA=
Subject key identifier:   6E:7F:57:C9:E5:6D:3A:84:4F:59:DB:54:90:8E:48:E8:D7:A2:23:22
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AD0E492AA4D7B9149D220
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d197b3d6-542b-36cb-baa2-2b0446a590d4.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        72.173.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:d0:e4:92:aa:4d:7b:91:49:d2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=fffccbf4-2a6f-444c-af38-ba0d9c4ef832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:01:8b:7f:e2:38:70:73:09:e6:e5:ad:d7:45:
                    0d:f5:9c:8b:0c:7d:e9:54:58:28:8e:bd:db:8c:5d:
                    8a:9d:de:b7:2e:a1:76:c7:38:90:e2:8d:71:29:d7:
                    7d:1b:0b:38:82:25:43:31:1e:d8:b3:9e:84:20:d5:
                    7e:18:38:79:e3:93:f3:c2:70:ca:2d:b7:52:60:4d:
                    7d:d0:f8:36:d2:72:35:4c:39:c1:bb:b4:2e:34:b3:
                    aa:58:2f:55:27:c5:63:03:a3:71:89:2c:7f:da:c1:
                    e4:c3:5d:36:99:aa:33:74:b6:5c:bc:00:38:4d:5f:
                    f7:40:f6:f6:85:85:49:06:2a:72:f4:9b:ab:32:02:
                    57:de:92:a9:f1:5d:7b:58:1f:3d:40:16:53:60:12:
                    de:79:3f:61:b8:bf:ee:0a:a7:b4:6b:3e:5b:cc:e3:
                    19:39:b8:33:87:98:c6:f6:02:1a:2f:c6:96:35:4b:
                    09:5d:3d:3d:88:d7:ad:34:d4:e3:3c:01:86:c6:40:
                    12:6b:4d:ef:e0:02:04:80:fb:13:fe:b7:71:59:6f:
                    c1:ed:0e:b4:ac:95:c6:d4:3f:e4:a3:f2:e4:00:a6:
                    7a:1a:fc:52:88:82:c2:d7:b8:c7:64:df:50:09:1f:
                    29:e0:ec:5c:23:17:47:7e:b0:74:43:ea:92:48:c4:
                    3e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7F:57:C9:E5:6D:3A:84:4F:59:DB:54:90:8E:48:E8:D7:A2:23:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d197b3d6-542b-36cb-baa2-2b0446a590d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:28:7c:d0:a0:fa:60:a7:6d:30:8c:68:c6:95:7b:24:20:c7:
         2a:7a:29:f6:a5:7f:d2:e4:33:8d:f4:4d:16:67:50:d7:91:de:
         1f:d9:2d:e0:5c:48:db:e5:91:ac:2b:ef:b6:f9:99:88:a1:36:
         11:ea:26:c0:6f:f9:97:5e:a2:0f:0e:08:c1:b8:6a:2d:d9:e6:
         9d:42:af:7c:f7:8f:e1:0e:57:e8:db:54:d1:c0:a4:af:d6:9a:
         94:41:be:35:b9:90:d8:80:e8:8e:81:7f:a9:55:10:03:d5:fe:
         53:44:5b:50:8e:f2:6d:5b:fc:7b:b9:0c:57:7e:56:9a:13:fc:
         17:d0:8a:45:94:1f:9f:73:dd:5e:13:7f:eb:6a:3d:e0:81:2c:
         c7:fb:7b:f6:66:49:0b:cc:69:55:09:7d:31:05:45:1c:c6:d3:
         3d:e9:8e:ed:0e:9b:e7:5a:7f:58:25:3d:07:94:32:95:1b:b4:
         e3:9d:df:5f:1e:1b:d8:f7:59:a0:a0:b4:71:20:4b:21:f4:d4:
         f2:d9:22:08:2f:dd:be:13:e8:d3:21:f6:4a:4d:94:70:8a:86:
         fe:4f:bb:23:1c:48:5c:39:7a:51:ff:df:bd:13:20:cc:0e:3b:
         cf:44:ff:93:fc:69:19:c7:ae:00:b4:05:35:a2:1a:1a:82:a9:
         63:81:78:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKtDkkqpNe5FJ0iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZmZmY2NiZjQtMmE2Zi00NDRjLWFmMzgtYmEwZDljNGVmODMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwGLf+I4cHMJ5uWt10UN9ZyLDH3pVFgojr3b
jF2Knd63LqF2xziQ4o1xKdd9Gws4giVDMR7Ys56EINV+GDh545PzwnDKLbdSYE19
0Pg20nI1TDnBu7QuNLOqWC9VJ8VjA6NxiSx/2sHkw102maozdLZcvAA4TV/3QPb2
hYVJBipy9JurMgJX3pKp8V17WB89QBZTYBLeeT9huL/uCqe0az5bzOMZObgzh5jG
9gIaL8aWNUsJXT09iNetNNTjPAGGxkASa03v4AIEgPsT/rdxWW/B7Q60rJXG1D/k
o/LkAKZ6GvxSiILC17jHZN9QCR8p4OxcIxdHfrB0Q+qSSMQ+QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG5/V8nlbTqET1nbVJCOSOjXoiMiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDE5N2IzZDYtNTQyYi0z
NmNiLWJhYTItMmIwNDQ2YTU5MGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgofNCg+mCnbTCMaMaVeyQgxyp6Kfalf9LkM430TRZnUNeR3h/ZLeBc
SNvlkawr77b5mYihNhHqJsBv+Zdeog8OCMG4ai3Z5p1Cr3z3j+EOV+jbVNHApK/W
mpRBvjW5kNiA6I6Bf6lVEAPV/lNEW1CO8m1b/Hu5DFd+VpoT/BfQikWUH59z3V4T
f+tqPeCBLMf7e/ZmSQvMaVUJfTEFRRzG0z3pju0Om+daf1glPQeUMpUbtOOd318e
G9j3WaCgtHEgSyH01PLZIggv3b4T6NMh9kpNlHCKhv5PuyMcSFw5elH/370TIMwO
O89E/5P8aRnHrgC0BTWiGhqCqWOBeMs=
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:38:58 2024 by rpki-client on console-fra.rpki-client.org