Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fffb3a75-4857-35c7-8f76-62ff04d1e698.roa
File:                     fffb3a75-4857-35c7-8f76-62ff04d1e698.roa (raw, json)
Hash identifier:          UaxbzXd/1R+oM8o/LDU71r037x8Hcb1xHpeDoLUI1O4=
Subject key identifier:   13:67:15:02:F3:9E:99:AA:CE:6F:5A:CA:29:50:0C:E3:09:4B:35:A0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584754E0F0C8E765AFDBAD281800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fffb3a75-4857-35c7-8f76-62ff04d1e698.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     7342
IP address blocks:        199.7.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:f0:c8:e7:65:af:db:ad:28:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=ae2d17e4-e73c-494a-b113-a269e7167e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fc:91:67:9d:20:6e:6b:0d:98:48:84:ad:bc:
                    cb:4b:c6:75:10:ea:32:d3:9d:5f:18:fe:26:d1:2e:
                    7b:7e:01:8c:23:43:58:ec:a9:41:d1:1d:b3:42:71:
                    62:29:b3:10:d9:bd:a8:48:d0:8f:13:8f:64:eb:4c:
                    2a:87:a7:a1:96:c8:72:ac:6a:54:7d:26:99:4c:80:
                    36:d8:57:30:04:3b:dc:96:66:8f:e9:07:d9:bf:5b:
                    1d:23:28:15:e5:f0:2d:29:89:22:66:f5:ab:2a:fd:
                    a0:35:58:6f:a5:ae:31:6b:08:db:39:b8:2d:87:47:
                    cb:32:f6:e2:d3:87:ce:20:ee:85:c4:f8:5e:57:62:
                    25:1f:34:2f:0b:50:73:f0:46:8d:6b:6b:71:5c:a3:
                    a9:af:49:44:6a:4b:66:ef:c5:eb:d4:4e:13:f1:da:
                    be:f7:89:71:6a:b2:a1:75:63:cb:17:60:96:66:8c:
                    b7:83:29:b1:37:2d:73:ba:e9:67:39:f2:aa:53:41:
                    2b:b3:b9:1d:02:44:52:8d:92:88:90:36:95:ea:54:
                    f4:73:c4:86:b4:a4:84:fd:2a:a5:f7:ab:85:97:e7:
                    cd:21:a4:c0:9f:1d:7a:2a:a4:53:e9:48:19:8f:d6:
                    3d:f2:c1:ac:7c:ae:8a:46:5d:1e:80:30:7e:a2:98:
                    a2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:67:15:02:F3:9E:99:AA:CE:6F:5A:CA:29:50:0C:E3:09:4B:35:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fffb3a75-4857-35c7-8f76-62ff04d1e698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:0c:35:31:39:33:9f:89:86:4f:28:b8:1e:56:25:54:f8:ac:
         91:d3:4b:14:3e:1a:19:95:96:97:53:fb:f4:d4:c6:f8:93:49:
         da:02:b4:46:9e:e2:a3:66:a7:e1:12:f2:30:a8:3b:30:9e:f0:
         80:ee:31:fb:f6:ce:64:a6:b1:55:d7:0d:2b:0d:87:8a:a3:93:
         78:65:6c:37:48:bc:57:18:85:d1:d9:96:08:1c:69:37:8d:79:
         9a:0c:a7:96:25:6d:7f:ac:9d:77:17:0f:83:3c:6a:cb:13:b6:
         c5:ef:e1:0b:d1:f9:d8:4b:9d:8c:2f:ca:ae:dd:15:05:83:17:
         89:0f:8f:2d:3e:c6:e9:ec:d4:52:91:3c:1a:59:d0:3d:ae:72:
         f1:06:3a:ac:d3:38:33:f0:97:23:fc:d3:2f:40:5c:cd:b7:fd:
         40:ac:d4:76:8b:5c:87:a4:42:68:7e:1c:f0:55:32:d2:fe:87:
         17:29:34:2b:7d:d9:00:aa:c1:ff:e4:a9:29:c1:3a:7d:1e:c2:
         b6:99:e8:1b:be:f1:0e:35:0c:52:e8:f5:6a:28:b4:c5:3d:f5:
         cc:b1:09:15:57:4e:8b:bf:2f:53:76:f3:b3:a5:f3:4e:ad:2d:
         6e:e1:02:49:7f:56:ab:16:8b:eb:b8:75:79:dc:20:eb:88:fb:
         9f:0a:a4:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdU4PDI52Wv260oGAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk
YWUyZDE3ZTQtZTczYy00OTRhLWIxMTMtYTI2OWU3MTY3ZTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPyRZ50gbmsNmEiErbzLS8Z1EOoy051fGP4m
0S57fgGMI0NY7KlB0R2zQnFiKbMQ2b2oSNCPE49k60wqh6ehlshyrGpUfSaZTIA2
2FcwBDvclmaP6QfZv1sdIygV5fAtKYkiZvWrKv2gNVhvpa4xawjbObgth0fLMvbi
04fOIO6FxPheV2IlHzQvC1Bz8EaNa2txXKOpr0lEaktm78Xr1E4T8dq+94lxarKh
dWPLF2CWZoy3gymxNy1zuulnOfKqU0Ers7kdAkRSjZKIkDaV6lT0c8SGtKSE/Sql
96uFl+fNIaTAnx16KqRT6UgZj9Y98sGsfK6KRl0egDB+opii7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBNnFQLznpmqzm9ayilQDOMJSzWgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmZmYjNhNzUtNDg1Ny0z
NWM3LThmNzYtNjJmZjA0ZDFlNjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGcMNTE5M5+Jhk8ouB5WJVT4rJHTSxQ+GhmVlpdT+/TUxviTSdoCtEae
4qNmp+ES8jCoOzCe8IDuMfv2zmSmsVXXDSsNh4qjk3hlbDdIvFcYhdHZlggcaTeN
eZoMp5YlbX+snXcXD4M8assTtsXv4QvR+dhLnYwvyq7dFQWDF4kPjy0+xuns1FKR
PBpZ0D2ucvEGOqzTODPwlyP80y9AXM23/UCs1HaLXIekQmh+HPBVMtL+hxcpNCt9
2QCqwf/kqSnBOn0ewraZ6Bu+8Q41DFLo9WootMU99cyxCRVXTou/L1N287Ol806t
LW7hAkl/VqsWi+u4dXncIOuI+58KpMQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:54 2024 by rpki-client on console-fra.rpki-client.org