Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00ff158a-23da-3a76-be11-4ea9a9e181d5.roa
File:                     00ff158a-23da-3a76-be11-4ea9a9e181d5.roa (raw, json)
Hash identifier:          KCZ3R0Y4jCsfeEWu1b+cTsNNzxiev1nXOghnm1eaUmE=
Subject key identifier:   EF:19:6C:3A:7C:18:94:37:A5:85:DF:80:5F:D8:01:95:FB:DF:BA:19
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583D632D4634519B20E883D3FBC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00ff158a-23da-3a76-be11-4ea9a9e181d5.roa
Signing time:             Mon 28 Mar 2022 04:00:00 +0000
ROA not before:           Mon 28 Mar 2022 04:00:00 +0000
ROA not after:            Thu 25 May 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        172.71.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:63:2d:46:34:51:9b:20:e8:83:d3:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar 28 04:00:00 2022 GMT
            Not After : May 25 04:00:00 2028 GMT
        Subject: CN=d163308f-0f55-407f-a250-4e589ec6e4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f0:62:8d:7f:a2:d1:eb:15:73:88:3c:de:16:
                    49:8e:63:f5:94:cb:aa:2e:47:0a:db:c6:c7:df:a3:
                    2d:58:5e:55:f5:17:b7:42:ef:d7:f8:e0:fe:aa:72:
                    ce:6c:12:ae:09:59:f6:bf:6a:d8:80:63:07:4f:11:
                    f3:44:43:ce:ed:c0:c1:75:4c:f7:0c:0e:6c:59:27:
                    b3:43:3d:48:2c:b0:8e:1c:ed:91:b2:b4:20:3f:e5:
                    6c:92:5b:b1:69:85:2a:07:5f:a6:56:cd:f7:71:27:
                    98:72:3e:79:87:1c:a7:4a:06:2b:87:fa:90:e5:ec:
                    6b:8f:d2:cc:96:ee:b6:84:9b:1c:8e:7d:e8:d5:12:
                    99:ce:70:6a:37:12:be:8e:12:8a:82:0a:8b:d7:af:
                    89:9c:11:2f:8a:4e:c2:86:de:58:de:7c:9a:ed:07:
                    66:9f:02:54:74:70:71:c6:15:41:0b:68:d1:d8:cf:
                    72:26:75:9b:e0:d5:f1:92:a1:bc:da:db:97:96:93:
                    e1:a0:ca:43:e4:47:6e:7b:1b:e2:38:da:d7:fb:ea:
                    da:eb:94:40:8c:a5:b7:b0:cc:61:69:28:2b:c4:b5:
                    82:7d:83:f7:12:ee:6e:19:d6:b8:ed:2e:ae:6a:3c:
                    58:ee:7b:21:a8:a3:6d:e2:f7:80:ab:e9:93:fc:44:
                    73:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:19:6C:3A:7C:18:94:37:A5:85:DF:80:5F:D8:01:95:FB:DF:BA:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00ff158a-23da-3a76-be11-4ea9a9e181d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:3d:a0:38:77:59:32:3e:cc:45:75:df:e3:a7:5f:7a:55:70:
         7b:fe:24:90:ae:54:d0:f6:db:91:88:65:21:6b:36:fa:ac:b1:
         8f:d3:24:26:10:a5:08:30:82:05:b9:b9:c6:9f:39:6b:8a:2b:
         09:e2:ed:16:58:c5:a3:6a:2e:05:f8:ca:d6:12:ec:c9:33:ff:
         11:63:39:8c:15:d7:92:a4:ee:e5:2b:4f:0c:66:db:87:e3:37:
         61:85:b3:01:a4:c5:d1:e3:d0:d6:cb:e3:b3:fe:7d:e8:bc:7f:
         37:1b:d9:16:1b:a0:64:49:63:d5:60:3b:ff:68:d4:3b:07:44:
         06:3a:27:4d:88:c9:a4:0d:b9:59:31:b0:28:50:4c:dd:04:a9:
         ce:6e:ce:66:3e:d7:2b:1e:c4:6b:c6:77:b8:48:27:fb:c4:e6:
         20:39:81:5f:5d:3f:78:90:be:88:03:66:56:2c:55:40:8d:15:
         13:a9:7e:30:b0:3d:b0:16:51:29:93:fb:18:a2:fa:71:6a:2f:
         86:1f:88:2d:0a:a0:65:e5:f9:04:e5:16:17:77:ca:9d:11:68:
         99:24:4f:27:33:89:10:05:91:d1:c7:ad:2e:28:66:df:dd:2a:
         cd:34:bb:f0:07:99:1e:1f:60:ce:b0:3f:ef:78:5d:3e:f6:c2:
         d0:80:c2:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1jLUY0UZsg6IPT+8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTIyMDMyODA0MDAwMFoXDTI4MDUyNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDE2MzMwOGYtMGY1NS00MDdmLWEyNTAtNGU1ODllYzZlNGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPBijX+i0esVc4g83hZJjmP1lMuqLkcK28bH
36MtWF5V9Re3Qu/X+OD+qnLObBKuCVn2v2rYgGMHTxHzREPO7cDBdUz3DA5sWSez
Qz1ILLCOHO2RsrQgP+VskluxaYUqB1+mVs33cSeYcj55hxynSgYrh/qQ5exrj9LM
lu62hJscjn3o1RKZznBqNxK+jhKKggqL16+JnBEvik7Cht5Y3nya7QdmnwJUdHBx
xhVBC2jR2M9yJnWb4NXxkqG82tuXlpPhoMpD5EduexviONrX++ra65RAjKW3sMxh
aSgrxLWCfYP3Eu5uGda47S6uajxY7nshqKNt4veAq+mT/ERzMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO8ZbDp8GJQ3pYXfgF/YAZX737oZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDBmZjE1OGEtMjNkYS0z
YTc2LWJlMTEtNGVhOWE5ZTE4MWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAU9oDh3WTI+zEV13+OnX3pVcHv+JJCuVND225GIZSFrNvqssY/TJCYQ
pQgwggW5ucafOWuKKwni7RZYxaNqLgX4ytYS7Mkz/xFjOYwV15Kk7uUrTwxm24fj
N2GFswGkxdHj0NbL47P+fei8fzcb2RYboGRJY9VgO/9o1DsHRAY6J02IyaQNuVkx
sChQTN0Eqc5uzmY+1ysexGvGd7hIJ/vE5iA5gV9dP3iQvogDZlYsVUCNFROpfjCw
PbAWUSmT+xii+nFqL4YfiC0KoGXl+QTlFhd3yp0RaJkkTycziRAFkdHHrS4oZt/d
Ks00u/AHmR4fYM6wP+94XT72wtCAwu0=
-----END CERTIFICATE-----
Generated at Sun May 12 02:11:07 2024 by rpki-client on console-ams.rpki-client.org