Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/c58a5059-a306-36b1-a8f6-4a7c911810fe.roa
File:                     c58a5059-a306-36b1-a8f6-4a7c911810fe.roa (raw, json)
Hash identifier:          F5LErNq1XQGDHyiPCSoW2mREibJrE76KChdXjyb5Hc8=
Subject key identifier:   32:7F:48:75:32:1B:A4:DE:0B:51:88:3F:E4:18:B4:BC:32:BD:CB:9F
Certificate issuer:       /CN=e470eb4e-d214-41dc-8f0d-9a1936ecc778
Certificate serial:       010D0C9F432858454D9D7BB3FB2990D52B64F100
Authority key identifier: E4:B0:A1:F8:61:B4:92:CD:93:0E:AB:E2:65:AF:BE:A5:B5:67:B6:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/c58a5059-a306-36b1-a8f6-4a7c911810fe.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     20473
IP address blocks:        172.98.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7b:b3:fb:29:90:d5:2b:64:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e470eb4e-d214-41dc-8f0d-9a1936ecc778
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=b05d8463-789a-421d-b0ff-c2f00880c4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:47:6c:39:70:73:cb:44:a7:c9:73:65:ee:c6:
                    72:88:10:be:22:92:ed:1a:9c:0d:60:f0:a0:f0:04:
                    89:a5:de:6d:6b:c9:35:aa:7e:33:77:67:15:4c:92:
                    a6:12:be:c6:41:8f:d1:7c:60:a5:3c:55:cd:66:1b:
                    de:18:a6:e1:df:bf:c5:2b:ad:39:31:b6:98:38:5b:
                    13:c9:fc:fc:48:25:17:f9:cd:9f:38:82:cd:77:8e:
                    b7:f6:ea:03:19:9d:ba:3e:32:fb:3e:a2:37:b4:44:
                    b9:b4:a4:27:13:69:65:c5:2b:40:cd:ec:f7:f8:ca:
                    86:69:28:95:30:7d:bb:ac:5a:57:57:f5:90:60:f4:
                    af:e1:23:f6:9f:b0:fe:6c:8b:a7:b2:29:73:ce:c0:
                    86:6b:b2:4f:13:00:45:b7:7a:ab:f2:14:25:a3:f5:
                    f6:50:d6:f7:fd:cf:9e:5e:f4:94:6c:3f:60:d9:b1:
                    a9:d2:d9:7c:ed:67:15:02:74:21:b7:68:9e:9f:d0:
                    12:e2:42:a1:cc:2c:21:bb:7b:25:f1:50:1e:b7:b5:
                    90:df:ba:4e:77:ee:dc:87:66:4d:ad:15:a8:cb:1a:
                    22:aa:23:c8:81:5f:c8:b8:d6:c1:71:f5:eb:d7:69:
                    52:e6:17:de:47:be:92:ea:a8:a0:e8:ed:7f:ba:46:
                    cc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7F:48:75:32:1B:A4:DE:0B:51:88:3F:E4:18:B4:BC:32:BD:CB:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/c58a5059-a306-36b1-a8f6-4a7c911810fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B0:A1:F8:61:B4:92:CD:93:0E:AB:E2:65:AF:BE:A5:B5:67:B6:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:80:f5:22:9c:d8:63:ec:a8:d9:43:d6:3b:49:b7:03:85:c4:
         b8:89:be:91:e6:8e:3e:70:cf:fd:53:bb:68:70:8d:68:cc:44:
         e2:ae:31:65:a7:1d:19:bb:ea:77:04:b0:28:34:34:3f:c0:f4:
         cb:e1:6e:ce:6f:0f:79:ba:bb:54:5a:5f:36:59:90:be:73:19:
         db:7f:1e:14:d1:2e:bf:67:66:4f:2b:40:5e:df:42:48:97:83:
         0e:b1:77:d8:da:16:b4:d8:de:61:95:7f:5b:43:30:db:52:0a:
         8e:07:9e:b8:e1:ca:f5:4b:74:3d:30:b9:5c:2d:43:8f:d6:0d:
         a9:d2:01:c6:c6:36:22:4e:3d:41:9d:8d:81:3e:46:6f:e2:3f:
         39:34:46:a0:d6:d3:30:d5:f4:bb:49:db:1f:1e:22:b4:c0:74:
         50:70:89:b7:20:11:1c:2c:fa:b2:df:e7:be:43:99:ee:06:4c:
         9a:59:e4:10:c1:88:ce:c0:58:f1:99:79:4f:de:f6:dc:7c:85:
         98:16:48:a6:92:7c:ec:95:1d:4f:50:64:d6:2e:2a:52:ac:c1:
         1f:57:dc:51:f4:9a:0d:fd:96:ef:1f:cd:e7:54:31:ad:18:7c:
         3f:52:fb:35:a9:38:cd:d9:60:32:20:d3:2f:9c:58:04:18:a5:
         28:d9:3c:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVNnXuz+ymQ1Stk8QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ3MGViNGUtZDIxNC00MWRjLThmMGQtOWExOTM2ZWNj
Nzc4MB4XDTI0MDMyMzEzMDAzMloXDTI0MDYyMTEzMDAzMlowLzEtMCsGA1UEAxMk
YjA1ZDg0NjMtNzg5YS00MjFkLWIwZmYtYzJmMDA4ODBjNGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUdsOXBzy0SnyXNl7sZyiBC+IpLtGpwNYPCg
8ASJpd5ta8k1qn4zd2cVTJKmEr7GQY/RfGClPFXNZhveGKbh37/FK605MbaYOFsT
yfz8SCUX+c2fOILNd4639uoDGZ26PjL7PqI3tES5tKQnE2llxStAzez3+MqGaSiV
MH27rFpXV/WQYPSv4SP2n7D+bIunsilzzsCGa7JPEwBFt3qr8hQlo/X2UNb3/c+e
XvSUbD9g2bGp0tl87WcVAnQht2ien9AS4kKhzCwhu3sl8VAet7WQ37pOd+7ch2ZN
rRWoyxoiqiPIgV/IuNbBcfXr12lS5hfeR76S6qig6O1/ukbMXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJ/SHUyG6TeC1GIP+QYtLwyvcufMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNDcw
ZWI0ZS1kMjE0LTQxZGMtOGYwZC05YTE5MzZlY2M3NzgvYzU4YTUwNTktYTMwNi0z
NmIxLWE4ZjYtNGE3YzkxMTgxMGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTQ3MGViNGUtZDIxNC00MWRjLThm
MGQtOWExOTM2ZWNjNzc4L2U0NzBlYjRlLWQyMTQtNDFkYy04ZjBkLTlhMTkzNmVj
Yzc3OC5jcmwwHwYDVR0jBBgwFoAU5LCh+GG0ks2TDqviZa++pbVntvEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNDcwZWI0ZS1kMjE0LTQxZGMtOGYwZC05YTE5
MzZlY2M3NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEeA9SKc2GPsqNlD1jtJtwOFxLiJvpHmjj5wz/1Tu2hwjWjMROKuMWWn
HRm76ncEsCg0ND/A9Mvhbs5vD3m6u1RaXzZZkL5zGdt/HhTRLr9nZk8rQF7fQkiX
gw6xd9jaFrTY3mGVf1tDMNtSCo4HnrjhyvVLdD0wuVwtQ4/WDanSAcbGNiJOPUGd
jYE+Rm/iPzk0RqDW0zDV9LtJ2x8eIrTAdFBwibcgERws+rLf575Dme4GTJpZ5BDB
iM7AWPGZeU/e9tx8hZgWSKaSfOyVHU9QZNYuKlKswR9X3FH0mg39lu8fzedUMa0Y
fD9S+zWpOM3ZYDIg0y+cWAQYpSjZPIA=
-----END CERTIFICATE-----
Generated at Thu Apr 25 16:28:56 2024 by rpki-client on console-fra.rpki-client.org