Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e597ed8-1133-30fc-9c90-45370bf74602.roa
File:                     1e597ed8-1133-30fc-9c90-45370bf74602.roa (raw, json)
Hash identifier:          n4e6LwnlBhi//19JlL7ikLoNLATMeVL6K6EH11KX0Yo=
Subject key identifier:   78:52:FD:34:AC:7E:EC:9C:A1:B9:02:86:32:25:0B:8D:41:47:E1:BB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76E99BB78949BDE34AB580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e597ed8-1133-30fc-9c90-45370bf74602.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        151.201.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:e9:9b:b7:89:49:bd:e3:4a:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=835559c3-2e6e-4a9a-a016-2e8c6f9f2ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:97:74:40:4e:b2:1d:d5:80:81:da:9e:51:
                    ca:08:1a:e0:b4:bf:08:72:62:8e:3e:af:51:0f:de:
                    5d:ec:7a:bc:5b:f9:39:e8:39:ef:f7:9c:f9:81:98:
                    a0:9e:da:f3:43:8d:d1:0a:ad:00:6a:a6:fd:00:29:
                    dc:79:5f:70:25:a4:7e:8f:7c:04:b2:98:7f:77:9d:
                    58:85:42:22:f9:f2:7e:67:8b:15:7c:75:c5:7f:b7:
                    78:85:d5:76:89:ab:2e:44:46:bc:bc:4f:07:86:0a:
                    66:50:8b:0f:2c:e0:3a:32:63:32:a7:99:da:23:1c:
                    f1:68:d2:dd:4a:c4:fa:00:e9:68:4f:ac:0f:9b:83:
                    b5:1d:de:13:a4:ed:e8:c7:30:ec:79:ec:93:c7:c4:
                    af:75:46:b5:22:a1:0e:26:f8:ae:b0:00:30:79:fa:
                    9c:dd:f8:02:aa:00:2b:37:f6:f4:76:d8:65:0a:24:
                    9e:d9:88:51:85:ac:b1:04:01:7a:37:bb:8c:b0:32:
                    5a:4a:f8:0c:98:db:2f:00:a9:f5:e3:82:91:66:fa:
                    d1:95:82:b8:2f:b3:10:92:5c:f9:b6:9c:0f:a4:34:
                    de:46:2a:66:d2:45:eb:a2:f0:9c:92:75:06:9b:20:
                    93:e3:13:9e:e7:e0:aa:94:c4:77:29:06:cc:80:d3:
                    ff:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:52:FD:34:AC:7E:EC:9C:A1:B9:02:86:32:25:0B:8D:41:47:E1:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e597ed8-1133-30fc-9c90-45370bf74602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.201.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:7b:e0:93:f0:ab:64:05:83:24:f7:50:aa:e1:6b:57:99:a3:
         34:1b:26:7b:9d:73:3a:01:40:28:63:15:4d:99:5d:0e:d1:d7:
         44:be:c1:e9:ad:d5:55:86:a6:19:d6:26:06:a5:fc:aa:fd:fc:
         7e:03:05:8b:f2:e1:0c:84:8d:ec:2d:0b:36:61:77:b8:c6:19:
         a1:25:f2:11:aa:79:3b:0f:89:75:11:c4:8b:7e:b2:fe:2c:31:
         c7:c1:00:03:49:9f:d0:de:92:b6:04:a2:cf:7a:bc:47:10:87:
         ec:42:ae:71:34:e3:92:c5:c4:2a:36:6a:54:11:32:a8:1d:0a:
         49:87:fa:05:62:05:15:f1:ef:0b:ab:cd:8c:31:14:b6:50:92:
         ae:ff:fe:8d:a6:cc:94:64:fa:cc:8f:38:dc:f8:6e:4c:d0:a1:
         ca:40:21:07:dc:f4:60:0f:9a:e6:c0:0a:9b:38:8f:a4:e3:ca:
         d0:db:4a:52:01:6f:09:72:86:16:99:b7:89:6c:c9:84:38:ec:
         6f:01:f2:1b:0f:88:9d:f0:53:fb:15:72:de:87:45:03:fd:40:
         a9:0e:66:54:d8:bb:b9:1e:3f:2a:b8:cb:c4:73:66:f0:4f:72:
         57:f4:41:05:49:b2:fc:17:b6:50:59:73:45:5f:ca:5c:de:4a:
         80:89:3b:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddumbt4lJveNKtYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
ODM1NTU5YzMtMmU2ZS00YTlhLWEwMTYtMmU4YzZmOWYyZWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpKXdEBOsh3VgIHanlHKCBrgtL8IcmKOPq9R
D95d7Hq8W/k56Dnv95z5gZigntrzQ43RCq0Aaqb9ACnceV9wJaR+j3wEsph/d51Y
hUIi+fJ+Z4sVfHXFf7d4hdV2iasuREa8vE8HhgpmUIsPLOA6MmMyp5naIxzxaNLd
SsT6AOloT6wPm4O1Hd4TpO3oxzDseeyTx8SvdUa1IqEOJviusAAwefqc3fgCqgAr
N/b0dthlCiSe2YhRhayxBAF6N7uMsDJaSvgMmNsvAKn144KRZvrRlYK4L7MQklz5
tpwPpDTeRipm0kXrovCcknUGmyCT4xOe5+CqlMR3KQbMgNP/2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHhS/TSsfuycobkChjIlC41BR+G7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWU1OTdlZDgtMTEzMy0z
MGZjLTljOTAtNDUzNzBiZjc0NjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl8mAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFR74JPwq2QFgyT3UKrha1eZozQbJnudczoBQChjFU2ZXQ7R10S+wemt
1VWGphnWJgal/Kr9/H4DBYvy4QyEjewtCzZhd7jGGaEl8hGqeTsPiXURxIt+sv4s
McfBAANJn9DekrYEos96vEcQh+xCrnE045LFxCo2alQRMqgdCkmH+gViBRXx7wur
zYwxFLZQkq7//o2mzJRk+syPONz4bkzQocpAIQfc9GAPmubACps4j6TjytDbSlIB
bwlyhhaZt4lsyYQ47G8B8hsPiJ3wU/sVct6HRQP9QKkOZlTYu7kePyq4y8RzZvBP
clf0QQVJsvwXtlBZc0VfylzeSoCJO9M=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:19 2024 by rpki-client on console-fra.rpki-client.org