Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/27c00e98-a122-30ab-aab2-3e653d16930e.roa
File:                     27c00e98-a122-30ab-aab2-3e653d16930e.roa (raw, json)
Hash identifier:          bO7gCQb8zi1nA5/uM33b/NSAPsHrPb0e0SQEG21JrdI=
Subject key identifier:   31:EF:4D:D9:57:FF:EB:B4:15:EF:F4:5E:77:49:94:51:9B:EF:45:B1
Certificate issuer:       /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial:       010D0C9F4328584596335327CADE22F57AF81C60
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/27c00e98-a122-30ab-aab2-3e653d16930e.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     27446
IP address blocks:        72.250.224.0/24 maxlen: 24
                          64.147.208.0/24 maxlen: 24
                          64.147.208.0/20 maxlen: 21
                          72.27.224.0/19 maxlen: 20
                          72.250.224.0/19 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:53:27:ca:de:22:f5:7a:f8:1c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=967032d5-f776-4d0d-b338-f71a65e11d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:01:71:59:4a:af:46:40:54:44:da:2f:70:
                    92:15:dc:22:f1:a7:92:59:96:c3:07:4c:f9:a4:08:
                    3a:1d:43:32:c4:a7:fe:8e:33:32:b3:dd:7c:27:93:
                    1f:bf:e4:99:ae:cd:65:f7:f9:8b:a7:53:39:01:19:
                    1c:66:58:2f:18:be:db:ab:5d:7d:02:a8:f7:60:b6:
                    68:c7:ae:01:64:d1:c6:f0:4f:70:a4:39:0f:5e:84:
                    e0:3b:57:76:fb:d9:c7:df:1f:b3:cf:cd:8d:2a:a9:
                    8d:b0:ef:0c:a3:ee:56:7b:b6:b3:d0:18:dc:fd:41:
                    b1:76:9d:d9:f3:c8:99:1c:67:01:a5:3c:d6:3b:e1:
                    69:5f:fb:3e:db:d8:60:9c:0d:af:94:04:99:f5:8f:
                    c5:4c:68:60:57:7f:9c:64:68:b3:ba:6e:dd:c5:ee:
                    0f:28:12:91:8f:74:31:ce:08:cf:15:1c:12:92:11:
                    98:e1:34:a8:12:df:6d:48:ae:da:d3:b1:89:56:95:
                    b0:16:f5:57:04:1e:cd:d5:7e:8b:31:23:98:7d:a8:
                    b4:56:1b:f2:a4:ab:9f:7a:dd:7f:6e:da:41:5b:f4:
                    9d:11:2c:e0:72:90:ba:73:99:0a:3d:7d:e1:55:e7:
                    c5:aa:13:ee:9a:ab:75:bb:6c:3c:76:99:eb:42:9a:
                    1e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EF:4D:D9:57:FF:EB:B4:15:EF:F4:5E:77:49:94:51:9B:EF:45:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/27c00e98-a122-30ab-aab2-3e653d16930e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl

            X509v3 Authority Key Identifier:
                keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.147.208.0/20
                  72.27.224.0/19
                  72.250.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:83:15:da:ee:6d:d5:86:a0:da:b6:fb:9e:de:51:3b:62:e0:
         4e:6b:36:09:50:f2:be:64:07:1b:9f:bd:da:65:e7:4d:4d:69:
         55:d0:88:5d:25:7e:f8:e6:39:5f:df:24:42:e4:8a:bc:35:74:
         02:d1:2b:ce:31:33:c7:8f:55:4e:78:f6:3f:d4:c8:91:c2:eb:
         fa:f6:4d:55:95:ff:34:14:24:aa:cd:b4:59:f7:29:6e:f8:7e:
         c2:04:4b:4d:e2:95:32:f5:6b:ba:15:24:63:dc:d5:0b:7b:dc:
         10:7a:b8:94:fa:89:10:12:f0:50:e2:2a:ae:8b:c3:83:e9:18:
         ac:d2:e1:eb:e1:15:d1:6e:61:37:43:4e:af:67:ae:83:81:d2:
         fd:85:15:d3:e9:83:e9:5d:0a:a6:7e:96:37:34:c2:b1:f6:73:
         c3:36:a0:3e:38:03:64:d6:fd:50:95:46:75:4c:de:84:cf:bb:
         6d:c9:93:ae:f8:6e:b5:a4:04:a9:0e:79:1c:60:6f:56:ac:80:
         83:1b:8c:4a:22:9a:51:73:bf:42:ea:b9:ef:82:22:53:52:d8:
         be:2a:34:19:a1:56:83:42:3d:43:2d:ce:61:16:8b:2a:fb:e6:
         09:14:fa:23:c9:f2:f0:7a:e3:f6:e1:e6:ad:51:30:53:fe:ef:
         12:0f:d3:75
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEWWM1Mnyt4i9Xr4HGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz
ODdkMB4XDTI0MDQxODEzMDAzM1oXDTI0MDcxNzEzMDAzM1owLzEtMCsGA1UEAxMk
OTY3MDMyZDUtZjc3Ni00ZDBkLWIzMzgtZjcxYTY1ZTExZDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/EBcVlKr0ZAVETaL3CSFdwi8aeSWZbDB0z5
pAg6HUMyxKf+jjMys918J5Mfv+SZrs1l9/mLp1M5ARkcZlgvGL7bq119Aqj3YLZo
x64BZNHG8E9wpDkPXoTgO1d2+9nH3x+zz82NKqmNsO8Mo+5We7az0Bjc/UGxdp3Z
88iZHGcBpTzWO+FpX/s+29hgnA2vlASZ9Y/FTGhgV3+cZGizum7dxe4PKBKRj3Qx
zgjPFRwSkhGY4TSoEt9tSK7a07GJVpWwFvVXBB7N1X6LMSOYfai0VhvypKufet1/
btpBW/SdESzgcpC6c5kKPX3hVefFqhPumqt1u2w8dpnrQpoe1QIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFDHvTdlX/+u0Fe/0XndJlFGb70WxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw
N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvMjdjMDBlOTgtYTEyMi0z
MGFiLWFhYjItM2U2NTNkMTY5MzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi
MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh
Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4
OWQ0YTM4N2QuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEQJPQAwQF
SBvgAwQFSPrgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBADyDFdrubdWGoNq2+57eUTti4E5rNglQ8r5kBxuf
vdpl501NaVXQiF0lfvjmOV/fJELkirw1dALRK84xM8ePVU549j/UyJHC6/r2TVWV
/zQUJKrNtFn3KW74fsIES03ilTL1a7oVJGPc1Qt73BB6uJT6iRAS8FDiKq6Lw4Pp
GKzS4evhFdFuYTdDTq9nroOB0v2FFdPpg+ldCqZ+ljc0wrH2c8M2oD44A2TW/VCV
RnVM3oTPu23Jk674brWkBKkOeRxgb1asgIMbjEoimlFzv0Lque+CIlNS2L4qNBmh
VoNCPUMtzmEWiyr75gkU+iPJ8vB64/bh5q1RMFP+7xIP03U=
-----END CERTIFICATE-----
Generated at Sat May 18 01:55:13 2024 by rpki-client on console-ams.rpki-client.org