Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/d651495b-6e08-3d81-a928-b517cd0cd4f0.roa
File:                     d651495b-6e08-3d81-a928-b517cd0cd4f0.roa (raw, json)
Hash identifier:          9/SGecdPNaHBqOAORAwuX/4XwJ9hbRUc9ewgNLaw8As=
Subject key identifier:   09:FF:3C:C0:1F:0B:BD:10:44:B6:1E:AD:EB:49:CD:93:19:9E:47:09
Certificate issuer:       /CN=29c10060-705c-45ae-937b-544864b670d7
Certificate serial:       010D0C9F4328584566BDACB63D51F009EC086560
Authority key identifier: 7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/d651495b-6e08-3d81-a928-b517cd0cd4f0.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     27229
IP address blocks:        64.71.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:ac:b6:3d:51:f0:09:ec:08:65:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c10060-705c-45ae-937b-544864b670d7
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=71c3231e-58f7-4757-87ea-fbb3b97235fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:45:bb:45:5d:9a:99:c1:fd:cc:bc:ec:c7:24:
                    6a:14:ee:cb:68:67:5a:36:96:83:0b:a3:01:bb:20:
                    28:88:86:c6:c5:c4:f8:5e:d7:ea:ca:a0:36:ac:2b:
                    4b:66:ee:b6:c3:0b:29:84:d8:d3:12:cd:4b:06:76:
                    4d:76:7f:12:cb:04:2f:8f:08:a1:a5:5f:c5:d0:bf:
                    81:cf:2b:66:ec:cc:46:0f:64:d4:b2:34:ed:96:ef:
                    0a:86:54:d3:7d:8f:f4:78:47:f8:fe:e3:e0:fb:5d:
                    45:0b:86:b2:16:b5:e7:be:32:83:a0:93:88:ba:3c:
                    16:8a:25:91:fd:b7:bb:58:6f:5e:1c:25:f1:6b:9a:
                    44:6b:58:ed:6e:57:f2:68:e7:26:23:ba:af:c3:1c:
                    ad:f8:9b:fd:2c:88:8b:45:d4:f9:79:59:ba:f6:ec:
                    e2:3d:dc:56:eb:74:38:bc:0d:12:18:f5:94:41:c6:
                    3c:cf:90:a8:d6:d0:fb:9a:9e:ec:0a:61:9c:90:b8:
                    fc:32:81:41:d5:27:83:2e:a0:4b:c6:ab:c2:8b:46:
                    47:96:e0:e4:b7:80:03:aa:0a:0d:70:39:c3:c9:e6:
                    03:ff:ad:87:74:f6:96:b9:62:25:2f:66:4c:44:0f:
                    2f:b2:47:7e:56:8a:9d:71:7d:47:ef:38:23:cf:c1:
                    2c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FF:3C:C0:1F:0B:BD:10:44:B6:1E:AD:EB:49:CD:93:19:9E:47:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/d651495b-6e08-3d81-a928-b517cd0cd4f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:02:4f:5c:f1:8b:39:57:71:46:9f:40:1c:b9:44:cd:50:61:
         36:b7:6b:fa:ae:9d:b0:53:f4:4a:40:6f:93:d3:a0:25:51:19:
         81:4b:64:46:c2:54:8f:51:58:cd:34:56:ca:63:2a:8d:87:2c:
         ed:17:70:9d:b5:05:a9:24:c3:4c:65:37:92:2b:82:4b:8d:0a:
         69:00:ee:79:2a:04:d6:d6:2d:3e:9b:ab:1a:d8:a0:cc:a4:83:
         00:14:3d:69:f4:d0:c6:78:9d:38:cf:3f:da:bb:eb:67:58:b7:
         98:54:3c:10:49:35:28:0f:96:02:c1:2f:b2:b8:91:8f:9a:59:
         c4:ee:5d:ca:75:5c:d4:d8:c1:bf:38:ab:e0:1c:12:fc:03:45:
         c6:68:68:cd:11:fd:13:85:50:fe:cd:e9:34:71:0b:a1:c0:63:
         6e:02:40:6e:79:5b:ea:1f:8b:f0:5c:32:78:44:e9:cc:43:e9:
         d0:ec:68:30:35:48:18:30:ae:09:59:f6:4c:48:f7:3c:b2:9b:
         69:73:17:91:1f:f7:a0:b9:1b:b6:f4:65:d8:51:aa:de:5e:20:
         86:bf:9f:f2:20:eb:74:3d:ac:3e:74:cc:d0:53:5e:7c:c6:da:
         98:fb:cc:f9:06:c6:36:a5:2a:50:f0:e7:2c:cd:54:d8:2a:ee:
         c1:92:dd:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVmvay2PVHwCewIZWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjljMTAwNjAtNzA1Yy00NWFlLTkzN2ItNTQ0ODY0YjY3
MGQ3MB4XDTI0MDQwMTEzMDAzNloXDTI0MDYzMDEzMDAzNlowLzEtMCsGA1UEAxMk
NzFjMzIzMWUtNThmNy00NzU3LTg3ZWEtZmJiM2I5NzIzNWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkW7RV2amcH9zLzsxyRqFO7LaGdaNpaDC6MB
uyAoiIbGxcT4XtfqyqA2rCtLZu62wwsphNjTEs1LBnZNdn8SywQvjwihpV/F0L+B
zytm7MxGD2TUsjTtlu8KhlTTfY/0eEf4/uPg+11FC4ayFrXnvjKDoJOIujwWiiWR
/be7WG9eHCXxa5pEa1jtblfyaOcmI7qvwxyt+Jv9LIiLRdT5eVm69uziPdxW63Q4
vA0SGPWUQcY8z5Co1tD7mp7sCmGckLj8MoFB1SeDLqBLxqvCi0ZHluDkt4ADqgoN
cDnDyeYD/62HdPaWuWIlL2ZMRA8vskd+VoqdcX1H7zgjz8EsXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAn/PMAfC70QRLYeretJzZMZnkcJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWMx
MDA2MC03MDVjLTQ1YWUtOTM3Yi01NDQ4NjRiNjcwZDcvZDY1MTQ5NWItNmUwOC0z
ZDgxLWE5MjgtYjUxN2NkMGNkNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjljMTAwNjAtNzA1Yy00NWFlLTkz
N2ItNTQ0ODY0YjY3MGQ3LzI5YzEwMDYwLTcwNWMtNDVhZS05MzdiLTU0NDg2NGI2
NzBkNy5jcmwwHwYDVR0jBBgwFoAUerujR0uJvb0x9xey3AKylKEuC8MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWMxMDA2MC03MDVjLTQ1YWUtOTM3Yi01NDQ4
NjRiNjcwZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEfuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8CT1zxizlXcUafQBy5RM1QYTa3a/qunbBT9EpAb5PToCVRGYFLZEbC
VI9RWM00VspjKo2HLO0XcJ21Bakkw0xlN5IrgkuNCmkA7nkqBNbWLT6bqxrYoMyk
gwAUPWn00MZ4nTjPP9q762dYt5hUPBBJNSgPlgLBL7K4kY+aWcTuXcp1XNTYwb84
q+AcEvwDRcZoaM0R/ROFUP7N6TRxC6HAY24CQG55W+ofi/BcMnhE6cxD6dDsaDA1
SBgwrglZ9kxI9zyym2lzF5Ef96C5G7b0ZdhRqt5eIIa/n/Ig63Q9rD50zNBTXnzG
2pj7zPkGxjalKlDw5yzNVNgq7sGS3UA=
-----END CERTIFICATE-----
Generated at Mon May 13 02:02:42 2024 by rpki-client on console-fra.rpki-client.org