Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/101f4a8e-e83d-3aef-b8ea-df823c8624f2.roa
File:                     101f4a8e-e83d-3aef-b8ea-df823c8624f2.roa (raw, json)
Hash identifier:          BD4jJ22SaYIrZ0qYOr11Ila3WwlODMFdCRPU0L7KZcU=
Subject key identifier:   02:FE:04:F1:33:B4:C4:46:E8:9D:EC:F1:82:DD:9C:9C:B5:91:CC:0C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858458C6DE18AB512EC4B4C810E70
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/101f4a8e-e83d-3aef-b8ea-df823c8624f2.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        72.88.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:e1:8a:b5:12:ec:4b:4c:81:0e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=2c1922e4-2939-4f30-b7f2-b21f074855bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:be:46:b1:1f:ba:59:ab:14:01:f7:c0:36:99:
                    c7:8a:0b:ee:2a:9e:e9:5a:47:4f:8f:44:07:53:de:
                    44:c1:9f:44:e9:49:8d:6b:8e:9a:34:a0:35:ed:f0:
                    9e:5b:6d:3e:3b:38:9e:3b:72:62:86:f3:43:90:9c:
                    90:bd:2f:81:39:2d:2f:2e:4f:27:d9:a9:69:3f:90:
                    d6:1d:53:f5:53:7e:2d:14:0f:e5:45:8e:be:49:3d:
                    30:a6:3c:b5:85:5e:c7:08:c8:9f:26:cb:e4:93:d5:
                    3c:2f:92:aa:eb:d9:09:0a:75:6c:dc:34:d9:f3:2d:
                    e5:fb:71:4d:07:f2:b1:0b:f1:7d:32:71:d7:06:d4:
                    db:e5:e5:8a:4d:6f:79:3b:dd:36:58:5f:93:2e:50:
                    af:0f:11:f7:5c:95:52:3b:e1:56:15:f4:8c:9e:8c:
                    4d:e7:c8:3f:6b:54:a7:47:00:3f:f4:cd:70:15:23:
                    be:41:c7:46:6f:a0:be:06:f5:a4:74:c6:18:12:2a:
                    a0:31:c4:90:ac:fa:38:40:84:1b:be:2b:a8:c1:db:
                    61:e7:3b:7a:f1:5c:b7:e8:a4:f3:bd:73:72:65:36:
                    8f:65:0d:57:01:d5:99:27:f6:63:1b:96:c2:91:ec:
                    e3:fe:1a:b4:37:67:ba:4f:59:38:f2:08:37:17:61:
                    4b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FE:04:F1:33:B4:C4:46:E8:9D:EC:F1:82:DD:9C:9C:B5:91:CC:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/101f4a8e-e83d-3aef-b8ea-df823c8624f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.88.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d7:ab:9f:5d:f9:55:b2:d2:bb:42:84:5a:f9:44:45:9f:f8:
         e0:98:31:62:70:ab:6a:32:20:de:c0:d8:14:68:89:62:cc:74:
         75:26:7c:54:76:f8:a8:86:88:dd:45:d2:71:1d:d2:20:e0:0b:
         cc:7d:ba:3b:37:5b:36:ed:65:1b:fa:f5:e6:40:4e:06:9f:ec:
         29:6a:b3:08:d2:62:41:52:e3:cd:85:cc:89:bc:b0:6c:36:86:
         8e:6d:88:c3:ba:8b:48:62:69:5c:79:92:fa:e9:d3:b0:d2:d1:
         93:f0:70:e2:fa:15:7e:ef:9d:72:7b:6f:38:f6:e0:e4:60:53:
         73:f9:3f:f4:63:6e:37:5b:1c:0a:29:da:90:75:66:9c:a4:7f:
         7e:6d:89:a9:f9:31:6f:9f:9b:18:e8:08:28:9d:4b:84:9c:67:
         c3:d2:81:fe:7c:13:a2:f4:47:b9:6b:c6:58:ba:2a:94:3e:e5:
         3c:3d:29:b3:2e:b9:ce:cc:47:55:4a:46:7a:5a:db:b4:ed:e6:
         d2:d7:a5:82:04:46:5d:fe:41:89:db:bc:a3:39:a3:af:f7:7a:
         a3:26:19:36:b7:c5:01:3d:fe:bb:12:43:14:8e:9e:48:a0:a7:
         61:45:c2:7b:3c:dc:95:80:4e:05:14:cd:54:8e:a7:c7:bf:e8:
         4e:ca:0d:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWMbeGKtRLsS0yBDnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDQxNTAxMDAyNloXDTI0MDcxNDAxMDAyNlowLzEtMCsGA1UEAxMk
MmMxOTIyZTQtMjkzOS00ZjMwLWI3ZjItYjIxZjA3NDg1NWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh75GsR+6WasUAffANpnHigvuKp7pWkdPj0QH
U95EwZ9E6UmNa46aNKA17fCeW20+OzieO3JihvNDkJyQvS+BOS0vLk8n2alpP5DW
HVP1U34tFA/lRY6+ST0wpjy1hV7HCMifJsvkk9U8L5Kq69kJCnVs3DTZ8y3l+3FN
B/KxC/F9MnHXBtTb5eWKTW95O902WF+TLlCvDxH3XJVSO+FWFfSMnoxN58g/a1Sn
RwA/9M1wFSO+QcdGb6C+BvWkdMYYEiqgMcSQrPo4QIQbviuowdth5zt68Vy36KTz
vXNyZTaPZQ1XAdWZJ/ZjG5bCkezj/hq0N2e6T1k48gg3F2FLTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAL+BPEztMRG6J3s8YLdnJy1kcwMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTAxZjRhOGUtZTgzZC0z
YWVmLWI4ZWEtZGY4MjNjODYyNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSFiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3Xq59d+VWy0rtChFr5REWf+OCYMWJwq2oyIN7A2BRoiWLMdHUmfFR2
+KiGiN1F0nEd0iDgC8x9ujs3WzbtZRv69eZATgaf7ClqswjSYkFS482FzIm8sGw2
ho5tiMO6i0hiaVx5kvrp07DS0ZPwcOL6FX7vnXJ7bzj24ORgU3P5P/RjbjdbHAop
2pB1Zpykf35tian5MW+fmxjoCCidS4ScZ8PSgf58E6L0R7lrxli6KpQ+5Tw9KbMu
uc7MR1VKRnpa27Tt5tLXpYIERl3+QYnbvKM5o6/3eqMmGTa3xQE9/rsSQxSOnkig
p2FFwns83JWATgUUzVSOp8e/6E7KDfk=
-----END CERTIFICATE-----
Generated at Thu May 9 15:35:49 2024 by rpki-client on console-fra.rpki-client.org