Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa
File:                     9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa (raw, json)
Hash identifier:          UQMQ+1YzeYwu7nMcz172DxDdFlzgU2IM/B3nWgoKQ6o=
Subject key identifier:   76:C6:82:68:D9:A1:28:32:1E:37:03:0B:0E:CA:B0:61:05:57:AB:8B
Certificate issuer:       /CN=9b502c27-b722-427c-af11-f9048a06a1a5
Certificate serial:       010D0C9F432858455CF8297238063DCC6D48A840
Authority key identifier: 96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa
Signing time:             Fri 29 Mar 2024 01:00:26 +0000
ROA not before:           Fri 29 Mar 2024 01:00:26 +0000
ROA not after:            Thu 27 Jun 2024 01:00:26 +0000
asID:                     6939
IP address blocks:        72.21.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:f8:29:72:38:06:3d:cc:6d:48:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b502c27-b722-427c-af11-f9048a06a1a5
        Validity
            Not Before: Mar 29 01:00:26 2024 GMT
            Not After : Jun 27 01:00:26 2024 GMT
        Subject: CN=37086eae-4e4a-4c90-8178-756d1a169a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:9d:7f:24:f1:7c:88:0e:52:7f:ed:9a:94:
                    51:38:1b:0b:ba:26:ec:da:19:4e:cc:37:06:fe:c8:
                    85:94:a5:bc:f8:94:42:02:83:4f:1a:40:69:a9:01:
                    87:1c:f4:58:dd:14:1b:26:03:72:99:4f:67:52:b7:
                    94:7b:9c:32:e2:89:b8:bc:f9:84:54:52:2a:db:d4:
                    47:24:ab:0e:06:5a:2f:d1:3a:47:10:fa:3a:f3:25:
                    29:4f:e7:ef:67:97:89:1b:76:ff:48:1a:10:e4:19:
                    59:6c:52:de:d0:4c:06:0a:2d:fe:f6:88:64:cf:6b:
                    dd:80:ee:6d:8d:1b:44:2c:ce:8c:d3:a6:c2:63:ac:
                    5f:e5:54:2f:64:db:9a:ba:36:7b:46:8e:f7:ff:ff:
                    63:6f:68:e3:94:11:46:91:57:a9:13:99:d6:30:f3:
                    af:92:62:8e:69:d3:da:fa:68:b0:47:79:b1:b1:8d:
                    30:83:92:ef:10:1a:4a:ee:87:98:2a:a0:c2:a5:08:
                    d7:ce:d1:69:67:83:f3:49:94:72:52:07:e4:ea:55:
                    6b:0b:d4:a3:a4:4a:f3:88:17:4a:10:01:3d:c0:fa:
                    be:03:ef:a0:12:83:e9:2b:5e:9f:7e:fb:87:86:f4:
                    63:fe:2b:ac:bc:17:3e:58:ad:fb:f0:9b:70:8e:6e:
                    13:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C6:82:68:D9:A1:28:32:1E:37:03:0B:0E:CA:B0:61:05:57:AB:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.crl

            X509v3 Authority Key Identifier:
                keyid:96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:fc:3a:11:5a:bd:7e:d3:21:11:e3:a9:b1:d6:ea:39:7b:41:
         db:54:8c:26:12:49:f4:e4:e9:56:ec:35:de:65:16:28:ca:b9:
         48:d5:4a:1f:8a:a3:b2:f6:74:b7:24:69:3b:85:93:ae:d3:28:
         1c:fb:a2:e3:44:9b:a2:b7:72:cf:0b:13:6d:e0:05:86:5a:af:
         e0:58:19:ef:00:56:05:23:3d:b5:42:94:85:8c:fe:ab:71:32:
         e4:a8:73:7e:2a:c3:05:33:72:83:3b:bd:18:9e:6d:a5:34:75:
         2c:5b:0e:28:7f:4b:66:10:a8:1e:00:0c:e2:13:5d:92:d6:2b:
         22:a3:ff:4d:47:d0:17:6a:58:63:91:54:cb:bf:1f:9e:a6:f6:
         af:99:6a:5c:c5:55:f3:9a:2d:f3:14:d6:c7:fe:f1:f5:02:9b:
         1b:99:d1:20:2b:1f:15:81:e9:b9:7a:d2:ab:a4:a0:e5:17:5c:
         03:6a:de:7f:9b:e6:17:35:be:e0:b5:a1:c7:84:fb:d8:c8:a0:
         c4:9d:ff:25:2a:40:8c:41:d6:45:c2:69:dd:dc:24:b8:2f:89:
         60:c3:cf:26:42:e8:8d:11:42:a4:e9:6b:91:92:42:f3:12:69:
         84:3d:18:6a:04:6d:6b:9e:c6:aa:09:4f:98:b5:ca:be:a7:39:
         bd:89:51:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVc+ClyOAY9zG1IqEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWI1MDJjMjctYjcyMi00MjdjLWFmMTEtZjkwNDhhMDZh
MWE1MB4XDTI0MDMyOTAxMDAyNloXDTI0MDYyNzAxMDAyNlowLzEtMCsGA1UEAxMk
MzcwODZlYWUtNGU0YS00YzkwLTgxNzgtNzU2ZDFhMTY5YTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe6dfyTxfIgOUn/tmpRROBsLuibs2hlOzDcG
/siFlKW8+JRCAoNPGkBpqQGHHPRY3RQbJgNymU9nUreUe5wy4om4vPmEVFIq29RH
JKsOBlov0TpHEPo68yUpT+fvZ5eJG3b/SBoQ5BlZbFLe0EwGCi3+9ohkz2vdgO5t
jRtELM6M06bCY6xf5VQvZNuaujZ7Ro73//9jb2jjlBFGkVepE5nWMPOvkmKOadPa
+miwR3mxsY0wg5LvEBpK7oeYKqDCpQjXztFpZ4PzSZRyUgfk6lVrC9SjpErziBdK
EAE9wPq+A++gEoPpK16ffvuHhvRj/iusvBc+WK378Jtwjm4TbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHbGgmjZoSgyHjcDCw7KsGEFV6uLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YjUw
MmMyNy1iNzIyLTQyN2MtYWYxMS1mOTA0OGEwNmExYTUvOWQ2NDI4Y2EtNDU4Yy0z
NWIxLWIwNGEtZjRjMzdlMzU0YTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWI1MDJjMjctYjcyMi00MjdjLWFm
MTEtZjkwNDhhMDZhMWE1LzliNTAyYzI3LWI3MjItNDI3Yy1hZjExLWY5MDQ4YTA2
YTFhNS5jcmwwHwYDVR0jBBgwFoAUlgiCIXligKyAApvkhvaryWQa8lIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85YjUwMmMyNy1iNzIyLTQyN2MtYWYxMS1mOTA0
OGEwNmExYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEz8OhFavX7TIRHjqbHW6jl7QdtUjCYSSfTk6VbsNd5lFijKuUjVSh+K
o7L2dLckaTuFk67TKBz7ouNEm6K3cs8LE23gBYZar+BYGe8AVgUjPbVClIWM/qtx
MuSoc34qwwUzcoM7vRiebaU0dSxbDih/S2YQqB4ADOITXZLWKyKj/01H0BdqWGOR
VMu/H56m9q+ZalzFVfOaLfMU1sf+8fUCmxuZ0SArHxWB6bl60qukoOUXXANq3n+b
5hc1vuC1oceE+9jIoMSd/yUqQIxB1kXCad3cJLgviWDDzyZC6I0RQqTpa5GSQvMS
aYQ9GGoEbWuexqoJT5i1yr6nOb2JUes=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:42:20 2024 by rpki-client on console-ams.rpki-client.org