Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/715c710e-d3e1-39bc-96b2-c030c9bb6f3b.roa
File:                     715c710e-d3e1-39bc-96b2-c030c9bb6f3b.roa (raw, json)
Hash identifier:          Lg7bEdVF1DE9rELGFfFBEQvxQzOaPIdEGZNKSjqA4rI=
Subject key identifier:   DD:1B:6D:A1:AA:10:37:41:B3:CC:72:EF:6B:C7:10:4F:A7:27:74:AA
Certificate issuer:       /CN=7fda64e4-af3e-498c-8889-c19ec3811b83
Certificate serial:       010D0C9F432858450C2021A1776A66982FE7F180
Authority key identifier: 37:C6:79:AD:91:57:DF:B6:DC:97:E4:5E:FD:E4:63:42:83:00:D8:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/715c710e-d3e1-39bc-96b2-c030c9bb6f3b.roa
Signing time:             Thu 29 Feb 2024 02:00:27 +0000
ROA not before:           Thu 29 Feb 2024 02:00:27 +0000
ROA not after:            Wed 29 May 2024 01:00:27 +0000
asID:                     6079
IP address blocks:        204.63.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/7fda64e4-af3e-498c-8889-c19ec3811b83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/7fda64e4-af3e-498c-8889-c19ec3811b83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0c:20:21:a1:77:6a:66:98:2f:e7:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fda64e4-af3e-498c-8889-c19ec3811b83
        Validity
            Not Before: Feb 29 02:00:27 2024 GMT
            Not After : May 29 01:00:27 2024 GMT
        Subject: CN=f95522de-33fe-4d76-b903-84223ff0e51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3b:7a:8b:08:59:24:01:44:e0:65:98:0a:f0:
                    50:a3:d4:a2:cb:ae:67:9d:59:43:1c:5e:e1:42:06:
                    d1:d2:6b:09:8b:d5:13:2a:49:fc:ac:96:a3:50:12:
                    97:50:1f:68:7d:3b:d6:23:16:36:cf:12:b0:96:88:
                    d7:38:ea:43:c4:57:69:b2:95:66:38:89:91:f2:d2:
                    8e:ed:29:40:cd:06:ad:f5:4a:44:07:35:ce:16:c1:
                    e6:84:fa:76:d1:02:c5:e0:02:e0:b6:6e:26:11:e4:
                    eb:b1:d0:6c:67:5e:ec:b3:e4:08:16:3c:c4:3c:fb:
                    25:38:cd:a2:3c:c2:c1:f5:65:8d:1b:39:4f:a4:97:
                    64:f3:e2:72:d5:61:f0:9e:c6:1b:2a:6e:1c:6f:d5:
                    03:6b:48:d9:57:0c:51:32:59:fb:e7:8a:80:a7:6c:
                    1f:b8:96:67:a5:3a:1b:c6:24:14:99:30:a5:00:08:
                    17:ec:9b:c7:bd:2e:01:bb:46:3e:14:d5:3b:b0:c1:
                    1c:dc:a4:2a:b6:12:3a:71:04:40:49:81:98:d2:4b:
                    44:13:9d:12:0f:93:f5:fe:6f:2e:a2:53:4b:38:d4:
                    0a:0a:7d:d2:7d:37:3d:6f:64:a1:32:74:04:f3:50:
                    e2:03:f7:26:7b:ba:a5:b1:aa:6e:53:7a:75:11:99:
                    28:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1B:6D:A1:AA:10:37:41:B3:CC:72:EF:6B:C7:10:4F:A7:27:74:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/715c710e-d3e1-39bc-96b2-c030c9bb6f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/7fda64e4-af3e-498c-8889-c19ec3811b83.crl

            X509v3 Authority Key Identifier:
                keyid:37:C6:79:AD:91:57:DF:B6:DC:97:E4:5E:FD:E4:63:42:83:00:D8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.63.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b9:47:0f:29:38:17:b6:e8:ad:c3:d9:f8:8f:d4:08:a8:1c:
         8b:3a:30:f4:32:a6:8a:05:e1:ce:d4:a7:bb:d2:26:69:96:b2:
         e1:02:fd:02:2b:59:f3:3d:dc:ba:a5:1a:b5:0c:3d:0f:54:47:
         87:45:fd:e4:e5:f8:76:54:8f:57:ca:f9:81:30:cb:7a:cd:41:
         51:16:11:22:e3:e7:ca:77:8e:02:d7:34:aa:eb:d7:8a:c0:1f:
         f2:a7:59:f0:1b:9f:94:70:6a:37:0b:61:ca:db:7b:7e:48:98:
         fa:75:60:75:58:13:36:08:96:52:b9:b8:7b:95:7a:8d:70:e3:
         11:51:d1:20:5f:67:22:45:c5:b3:c5:be:43:d4:6f:d7:5b:71:
         6a:9e:92:11:53:cd:b5:19:98:d0:6f:a2:d8:ec:76:be:67:49:
         4d:12:cf:ad:62:6c:d6:61:f3:af:81:79:09:18:0d:34:25:0c:
         22:54:f3:ea:12:6a:35:3f:fc:8f:f7:ab:74:2d:11:f0:bc:02:
         13:26:74:83:f2:85:c1:07:51:cd:8f:e3:bc:ad:34:78:e5:d2:
         ee:35:96:4a:3e:ce:34:5a:83:14:8b:82:7e:37:35:8b:0f:7d:
         b6:b7:2a:4f:09:43:15:34:e1:d6:17:b0:e8:a8:de:8b:0e:3d:
         fe:22:75:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUMICGhd2pmmC/n8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ZkYTY0ZTQtYWYzZS00OThjLTg4ODktYzE5ZWMzODEx
YjgzMB4XDTI0MDIyOTAyMDAyN1oXDTI0MDUyOTAxMDAyN1owLzEtMCsGA1UEAxMk
Zjk1NTIyZGUtMzNmZS00ZDc2LWI5MDMtODQyMjNmZjBlNTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDt6iwhZJAFE4GWYCvBQo9Siy65nnVlDHF7h
QgbR0msJi9UTKkn8rJajUBKXUB9ofTvWIxY2zxKwlojXOOpDxFdpspVmOImR8tKO
7SlAzQat9UpEBzXOFsHmhPp20QLF4ALgtm4mEeTrsdBsZ17ss+QIFjzEPPslOM2i
PMLB9WWNGzlPpJdk8+Jy1WHwnsYbKm4cb9UDa0jZVwxRMln754qAp2wfuJZnpTob
xiQUmTClAAgX7JvHvS4Bu0Y+FNU7sMEc3KQqthI6cQRASYGY0ktEE50SD5P1/m8u
olNLONQKCn3SfTc9b2ShMnQE81DiA/cme7qlsapuU3p1EZkopQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN0bbaGqEDdBs8xy72vHEE+nJ3SqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZmRh
NjRlNC1hZjNlLTQ5OGMtODg4OS1jMTllYzM4MTFiODMvNzE1YzcxMGUtZDNlMS0z
OWJjLTk2YjItYzAzMGM5YmI2ZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2ZkYTY0ZTQtYWYzZS00OThjLTg4
ODktYzE5ZWMzODExYjgzLzdmZGE2NGU0LWFmM2UtNDk4Yy04ODg5LWMxOWVjMzgx
MWI4My5jcmwwHwYDVR0jBBgwFoAUN8Z5rZFX37bcl+Re/eRjQoMA2OgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZmRhNjRlNC1hZjNlLTQ5OGMtODg4OS1jMTll
YzM4MTFiODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzD+QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHO5Rw8pOBe26K3D2fiP1AioHIs6MPQypooF4c7Up7vSJmmWsuEC/QIr
WfM93LqlGrUMPQ9UR4dF/eTl+HZUj1fK+YEwy3rNQVEWESLj58p3jgLXNKrr14rA
H/KnWfAbn5RwajcLYcrbe35ImPp1YHVYEzYIllK5uHuVeo1w4xFR0SBfZyJFxbPF
vkPUb9dbcWqekhFTzbUZmNBvotjsdr5nSU0Sz61ibNZh86+BeQkYDTQlDCJU8+oS
ajU//I/3q3QtEfC8AhMmdIPyhcEHUc2P47ytNHjl0u41lko+zjRagxSLgn43NYsP
fba3Kk8JQxU04dYXsOio3osOPf4ida4=
-----END CERTIFICATE-----
Generated at Fri May 10 00:44:08 2024 by rpki-client on console-fra.rpki-client.org