Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/e8fcd098-42de-324e-b4d3-16fc0cc7672d.roa
File:                     e8fcd098-42de-324e-b4d3-16fc0cc7672d.roa (raw, json)
Hash identifier:          3oAO0zoe07x3Ndhi8dr5VmzRlnO4w6FjcrDp+4/FDik=
Subject key identifier:   35:4F:6A:F4:58:42:F6:F4:83:BA:78:5E:51:0A:1F:DE:DA:14:73:57
Certificate issuer:       /CN=b794e507-3ed1-4151-855d-6305696fcb0c
Certificate serial:       010D0C9F43285845068AC71481518C96051A7080
Authority key identifier: D1:67:3E:09:96:F9:3A:0A:2D:95:28:BE:75:72:9D:15:38:1C:F0:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/e8fcd098-42de-324e-b4d3-16fc0cc7672d.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     26464
IP address blocks:        72.2.112.0/21 maxlen: 21
                          72.2.112.0/20 maxlen: 20
                          72.2.120.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:c7:14:81:51:8c:96:05:1a:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b794e507-3ed1-4151-855d-6305696fcb0c
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=3452638a-794a-4e8d-8aa9-6597389eedee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:fa:75:a9:e5:fa:0c:f1:f8:dc:56:43:cb:
                    76:bd:04:dd:a4:62:9d:66:5b:98:61:6c:b2:b7:cf:
                    03:f2:61:61:7c:ea:80:ae:26:03:81:7f:7e:29:67:
                    15:d6:1f:cf:a7:35:1f:8c:b1:53:e2:f9:f6:eb:b2:
                    0d:4e:e8:af:02:62:89:bb:16:ef:f3:44:85:46:76:
                    fb:36:a6:12:82:ac:3a:57:0e:2d:4e:ad:cc:79:1f:
                    18:32:5e:a5:cb:d7:03:b8:e0:3b:e9:47:ce:c8:c2:
                    c9:05:d3:89:89:f2:b4:ca:d7:a7:16:8b:80:e9:14:
                    5d:69:fa:56:93:54:b9:b0:32:bc:dc:6a:23:62:85:
                    15:f3:e3:c5:bd:04:72:e3:bc:a5:fd:90:6c:d3:bd:
                    4e:d6:91:a6:8f:60:58:6a:c7:2b:3d:95:1c:c7:93:
                    83:09:53:8f:c4:6f:23:8a:40:eb:70:d8:f8:19:72:
                    cf:fa:fa:4c:99:bc:30:81:be:a3:92:fa:cc:78:aa:
                    93:bd:88:e6:b0:4d:cf:b4:f3:71:6c:2c:3f:ef:be:
                    16:bd:b9:a7:5d:6e:5f:60:19:ea:c2:a9:60:b7:cd:
                    21:cb:b7:0f:fd:c3:c4:a0:6d:69:6a:ca:b3:f7:d8:
                    1e:fc:58:ed:2a:ff:23:20:3a:9c:c2:31:d1:bf:ad:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4F:6A:F4:58:42:F6:F4:83:BA:78:5E:51:0A:1F:DE:DA:14:73:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/e8fcd098-42de-324e-b4d3-16fc0cc7672d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.crl

            X509v3 Authority Key Identifier:
                keyid:D1:67:3E:09:96:F9:3A:0A:2D:95:28:BE:75:72:9D:15:38:1C:F0:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.2.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d5:94:d4:c3:88:e1:8d:92:82:37:47:a8:e8:9d:b6:a9:f7:
         6b:7c:b2:3c:cf:65:d9:13:ee:1c:b3:76:f5:05:9c:73:88:c4:
         1c:ec:6f:19:a2:25:86:06:ef:52:28:64:fb:7a:90:28:27:46:
         4b:b6:d6:ff:19:32:93:e7:cf:82:3f:16:70:09:5b:c3:10:9e:
         ce:f0:b7:46:39:f5:5a:88:c6:7b:0c:60:db:c7:ea:08:6c:a3:
         4f:cd:b5:a0:ed:ac:08:37:b8:79:3c:15:a7:9c:18:c9:29:84:
         40:e9:5e:f0:fc:61:99:40:a6:29:83:ae:53:2b:d3:08:f9:bf:
         b6:95:2c:45:fb:d7:46:df:7e:57:ab:a0:72:ca:93:cb:9a:a6:
         20:0f:e2:43:40:32:42:ff:9b:0d:6e:41:bd:17:e1:6f:58:1f:
         a8:8c:b1:aa:1d:cb:8a:f5:bd:7b:b9:e5:78:45:87:c6:a7:80:
         19:82:80:42:40:17:60:d0:c2:76:2b:9c:ff:16:dc:cd:b9:e3:
         b9:76:94:3c:7f:71:5e:14:9f:e0:1c:82:3b:ea:e1:fe:82:e0:
         5e:9d:fc:a3:e8:a4:24:3b:f0:3c:23:3a:ff:f0:75:51:85:49:
         70:a7:eb:15:16:d1:89:e2:db:a1:93:c3:7c:f3:af:e6:c0:db:
         36:55:35:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUGiscUgVGMlgUacIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc5NGU1MDctM2VkMS00MTUxLTg1NWQtNjMwNTY5NmZj
YjBjMB4XDTI0MDIyNzAyMDAyNloXDTI0MDUyNzAxMDAyNlowLzEtMCsGA1UEAxMk
MzQ1MjYzOGEtNzk0YS00ZThkLThhYTktNjU5NzM4OWVlZGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAz6danl+gzx+NxWQ8t2vQTdpGKdZluYYWyy
t88D8mFhfOqAriYDgX9+KWcV1h/PpzUfjLFT4vn267INTuivAmKJuxbv80SFRnb7
NqYSgqw6Vw4tTq3MeR8YMl6ly9cDuOA76UfOyMLJBdOJifK0ytenFouA6RRdafpW
k1S5sDK83GojYoUV8+PFvQRy47yl/ZBs071O1pGmj2BYascrPZUcx5ODCVOPxG8j
ikDrcNj4GXLP+vpMmbwwgb6jkvrMeKqTvYjmsE3PtPNxbCw/774WvbmnXW5fYBnq
wqlgt80hy7cP/cPEoG1pasqz99ge/FjtKv8jIDqcwjHRv62U5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVPavRYQvb0g7p4XlEKH97aFHNXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzk0
ZTUwNy0zZWQxLTQxNTEtODU1ZC02MzA1Njk2ZmNiMGMvZThmY2QwOTgtNDJkZS0z
MjRlLWI0ZDMtMTZmYzBjYzc2NzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjc5NGU1MDctM2VkMS00MTUxLTg1
NWQtNjMwNTY5NmZjYjBjL2I3OTRlNTA3LTNlZDEtNDE1MS04NTVkLTYzMDU2OTZm
Y2IwYy5jcmwwHwYDVR0jBBgwFoAU0Wc+CZb5OgotlSi+dXKdFTgc8JAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzk0ZTUwNy0zZWQxLTQxNTEtODU1ZC02MzA1
Njk2ZmNiMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAJwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFTVlNTDiOGNkoI3R6jonbap92t8sjzPZdkT7hyzdvUFnHOIxBzsbxmi
JYYG71IoZPt6kCgnRku21v8ZMpPnz4I/FnAJW8MQns7wt0Y59VqIxnsMYNvH6ghs
o0/NtaDtrAg3uHk8FaecGMkphEDpXvD8YZlApimDrlMr0wj5v7aVLEX710bffler
oHLKk8uapiAP4kNAMkL/mw1uQb0X4W9YH6iMsaody4r1vXu55XhFh8angBmCgEJA
F2DQwnYrnP8W3M2547l2lDx/cV4Un+Acgjvq4f6C4F6d/KPopCQ78DwjOv/wdVGF
SXCn6xUW0Yni26GTw3zzr+bA2zZVNX4=
-----END CERTIFICATE-----
Generated at Fri May 3 01:53:48 2024 by rpki-client on console-fra.rpki-client.org