Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7dcb48c2-dc77-3e95-98d0-11a563872dee.roa
File:                     7dcb48c2-dc77-3e95-98d0-11a563872dee.roa (raw, json)
Hash identifier:          FCtSlxSDKCQlW1lfWWM16EqDbPzpsXucaf/QrCfkyS4=
Subject key identifier:   AB:E7:5E:A2:D3:B2:71:85:DA:6E:9B:D1:97:B8:BD:74:C0:EA:4B:EA
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584731FB9A6756248186399C9C00
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7dcb48c2-dc77-3e95-98d0-11a563872dee.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     2734
IP address blocks:        208.77.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:9a:67:56:24:81:86:39:9c:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=54cc4bea-286d-4ebf-af30-a96c37c35c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fb:2c:a1:22:77:f5:4f:70:43:b0:b2:2e:b8:
                    ad:7b:fa:2d:df:a8:51:46:95:31:d2:f6:a0:5a:bd:
                    7d:48:7b:77:b3:00:cd:d4:7f:f5:ed:f2:84:8f:7b:
                    91:bf:15:f1:ef:07:e4:ea:9b:28:48:63:dc:f6:c1:
                    38:5b:c3:47:7e:ee:7d:eb:14:16:44:d4:60:f8:7b:
                    50:7a:36:99:77:b4:f8:96:e8:ed:7c:0b:8c:c2:58:
                    84:27:8d:31:87:2f:1d:d3:4d:81:1d:19:58:99:5e:
                    48:39:1b:99:be:ef:69:c9:f7:df:52:f9:b6:28:b9:
                    fc:7f:42:9c:36:14:52:1a:22:d1:df:b0:55:f9:a4:
                    c4:54:4a:5a:0a:60:51:b1:37:18:4e:32:7c:66:60:
                    bd:b5:ec:e7:8d:9e:1c:f5:c8:a1:fc:5c:a9:3e:cd:
                    f0:56:13:5b:fb:ff:85:9f:b3:31:f1:ec:7b:48:07:
                    ad:19:fc:52:67:fd:69:df:ee:da:ca:f7:1b:1d:cd:
                    bb:4c:6d:c0:76:c9:72:91:f3:2e:99:fa:c0:c1:dd:
                    4f:ed:c9:98:19:f9:85:94:3f:af:ac:f6:db:a9:9d:
                    46:50:2e:a4:ac:71:3d:b0:a1:4d:01:dc:89:cc:47:
                    8d:58:73:d6:ac:1d:f1:07:be:2e:03:20:bb:95:ca:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E7:5E:A2:D3:B2:71:85:DA:6E:9B:D1:97:B8:BD:74:C0:EA:4B:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7dcb48c2-dc77-3e95-98d0-11a563872dee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.77.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:be:22:fb:d8:dc:05:cd:e6:4c:66:b8:09:9e:55:cb:f5:a5:
         73:36:7e:25:a2:ad:2c:f4:84:e2:5e:22:b7:c7:59:ea:5c:5c:
         60:ee:f2:6a:fe:2a:50:e4:c2:68:2c:86:18:42:6b:96:52:14:
         68:89:9d:bc:d1:87:b3:f3:fc:8d:3c:b7:40:e4:fe:20:5a:7d:
         5b:f2:96:0b:fb:05:dd:ba:33:a4:3b:90:41:37:f4:ef:9f:b7:
         49:ac:f1:30:17:8b:59:5f:4e:ca:99:70:cd:0a:fb:03:cb:62:
         81:db:25:c4:be:45:70:ef:f4:fe:a6:98:df:02:4f:72:fa:c5:
         61:9b:69:ca:f4:80:01:f4:03:38:9c:e6:e7:1f:50:43:61:f7:
         5a:6a:8a:72:21:28:1a:7c:be:e4:95:f1:3f:a0:b3:49:1e:bd:
         5c:b0:fb:47:3b:5e:45:ee:12:c3:4e:4a:ad:6e:64:0f:24:eb:
         b7:9a:71:9a:12:09:d5:a0:94:44:54:74:a8:d8:cc:3e:30:5f:
         8e:7b:3c:8a:bd:00:08:a4:6f:ac:79:08:ce:7e:63:5f:dc:44:
         e4:3e:f6:aa:1f:7b:e7:01:96:30:62:68:0c:8e:99:b3:ca:7a:
         3b:f6:36:da:1e:73:16:ff:6e:fc:76:44:84:bd:33:c3:af:12:
         59:91:80:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcx+5pnViSBhjmcnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI0MDkxMzAxMDAzMloXDTI0MTIxMjAyMDAzMlowLzEtMCsGA1UEAxMk
NTRjYzRiZWEtMjg2ZC00ZWJmLWFmMzAtYTk2YzM3YzM1Yzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPssoSJ39U9wQ7CyLrite/ot36hRRpUx0vag
Wr19SHt3swDN1H/17fKEj3uRvxXx7wfk6psoSGPc9sE4W8NHfu596xQWRNRg+HtQ
ejaZd7T4lujtfAuMwliEJ40xhy8d002BHRlYmV5IORuZvu9pyfffUvm2KLn8f0Kc
NhRSGiLR37BV+aTEVEpaCmBRsTcYTjJ8ZmC9teznjZ4c9cih/FypPs3wVhNb+/+F
n7Mx8ex7SAetGfxSZ/1p3+7ayvcbHc27TG3AdslykfMumfrAwd1P7cmYGfmFlD+v
rPbbqZ1GUC6krHE9sKFNAdyJzEeNWHPWrB3xB74uAyC7lcp6SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKvnXqLTsnGF2m6b0Ze4vXTA6kvqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvN2RjYjQ4YzItZGM3Ny0z
ZTk1LTk4ZDAtMTFhNTYzODcyZGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0E1gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFq+IvvY3AXN5kxmuAmeVcv1pXM2fiWirSz0hOJeIrfHWepcXGDu8mr+
KlDkwmgshhhCa5ZSFGiJnbzRh7Pz/I08t0Dk/iBafVvylgv7Bd26M6Q7kEE39O+f
t0ms8TAXi1lfTsqZcM0K+wPLYoHbJcS+RXDv9P6mmN8CT3L6xWGbacr0gAH0Azic
5ucfUENh91pqinIhKBp8vuSV8T+gs0kevVyw+0c7XkXuEsNOSq1uZA8k67eacZoS
CdWglERUdKjYzD4wX457PIq9AAikb6x5CM5+Y1/cROQ+9qofe+cBljBiaAyOmbPK
ejv2Ntoecxb/bvx2RIS9M8OvElmRgKM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:46:10 2024 by rpki-client on console-ams.rpki-client.org