Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27d1fec6-ea7f-3753-8a56-1c5343a3cd60.roa
File:                     27d1fec6-ea7f-3753-8a56-1c5343a3cd60.roa (raw, json)
Hash identifier:          WsIJchpemJ4Px2bMlrQTnt5kYn4xvqTM8mEzLN4OZic=
Subject key identifier:   7B:4E:97:2E:92:88:5C:9F:CD:D8:71:30:DC:E4:95:E9:6C:4B:D7:D9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2AD231CDC03CDBE15CC590
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27d1fec6-ea7f-3753-8a56-1c5343a3cd60.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     701
IP address blocks:        209.212.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:d2:31:cd:c0:3c:db:e1:5c:c5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=a8125aa3-55e0-4691-b2cd-f8c222833950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bc:5e:73:c7:da:f0:70:5d:85:3f:f7:e2:a6:
                    ab:7b:16:4e:7a:ce:0c:28:e3:8d:79:b2:92:af:26:
                    d5:5c:1f:cd:4b:99:15:ce:f3:00:31:6a:5d:80:11:
                    a0:32:74:5c:7e:96:5c:62:20:15:75:ac:ef:a5:a8:
                    3e:48:80:4a:70:c4:23:3a:66:1b:cc:9d:3b:60:8e:
                    de:e4:14:33:78:93:af:8b:e3:b3:bb:bd:6e:a6:98:
                    9d:19:8d:0c:57:7c:16:ba:b8:ee:4a:16:c5:c8:a0:
                    55:e7:9a:64:69:5c:ab:fd:92:d0:81:4b:05:71:0e:
                    5d:b3:e0:17:05:2d:8f:f5:bb:43:da:24:5d:ab:7b:
                    0c:bc:14:44:f9:6a:f1:07:98:ff:94:be:5c:b6:e4:
                    c8:ec:a9:51:63:3c:c9:34:d5:ab:de:3e:77:a3:22:
                    b7:9e:73:bd:1a:c2:70:ea:66:02:e8:41:2e:45:21:
                    6f:96:4c:fa:d5:6b:59:5a:f4:60:d4:b2:f0:ef:6d:
                    af:c8:14:84:d3:05:2f:c0:4a:74:1d:83:f3:2d:e7:
                    f0:5d:10:07:aa:3a:7d:96:54:22:57:2c:fa:e6:2e:
                    45:4e:ef:0b:18:17:5b:88:70:a7:57:b9:3f:3f:7b:
                    a8:8f:1d:ef:82:20:be:e2:17:cc:89:81:b6:69:ef:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4E:97:2E:92:88:5C:9F:CD:D8:71:30:DC:E4:95:E9:6C:4B:D7:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27d1fec6-ea7f-3753-8a56-1c5343a3cd60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.212.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d7:a0:3d:6b:ee:98:78:83:f0:6b:03:6a:c6:87:a3:89:0c:
         c4:71:6c:fc:de:7c:92:1e:56:ce:18:c3:2c:4d:32:ff:b5:53:
         ea:91:73:90:84:1b:dd:0e:16:4d:53:87:02:32:6f:da:16:d0:
         8a:93:18:db:a2:cc:9b:03:36:fa:42:b0:1e:8b:03:fc:f3:29:
         5e:92:44:93:1f:1b:29:03:1a:90:81:82:9a:c9:37:8a:21:37:
         4e:2a:6d:ce:a8:44:37:d3:6f:dd:5f:a6:90:aa:14:de:71:56:
         96:7f:9c:e7:be:40:8e:2f:a8:b3:6e:5a:e0:cf:5b:36:fc:27:
         26:25:89:ef:42:3f:4e:ae:9b:49:30:a1:9b:ce:b6:5a:64:8c:
         3e:71:0e:ff:07:1d:79:af:67:70:d9:5d:7b:02:77:35:30:8f:
         f8:6b:b4:ff:ff:cc:1d:ac:87:10:f0:4d:56:d9:73:77:67:4e:
         d1:9e:ad:99:60:da:c5:34:2c:8b:ae:8a:0b:69:3f:e3:0b:19:
         7b:a0:2e:b0:e2:b4:70:19:ce:9c:b5:d9:d3:b1:25:aa:25:98:
         25:e6:30:72:ae:02:47:a2:3c:f6:29:e5:36:3f:07:a9:64:c5:
         2f:ed:05:03:5d:23:64:7c:bf:6f:ce:e9:ff:a1:0e:9f:82:bc:
         c4:0a:ec:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET+KtIxzcA82+FcxZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDIyNDAyMDAyNloXDTI0MDUyNDAxMDAyNlowLzEtMCsGA1UEAxMk
YTgxMjVhYTMtNTVlMC00NjkxLWIyY2QtZjhjMjIyODMzOTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7xec8fa8HBdhT/34qarexZOes4MKOONebKS
rybVXB/NS5kVzvMAMWpdgBGgMnRcfpZcYiAVdazvpag+SIBKcMQjOmYbzJ07YI7e
5BQzeJOvi+Ozu71uppidGY0MV3wWurjuShbFyKBV55pkaVyr/ZLQgUsFcQ5ds+AX
BS2P9btD2iRdq3sMvBRE+WrxB5j/lL5ctuTI7KlRYzzJNNWr3j53oyK3nnO9GsJw
6mYC6EEuRSFvlkz61WtZWvRg1LLw722vyBSE0wUvwEp0HYPzLefwXRAHqjp9llQi
Vyz65i5FTu8LGBdbiHCnV7k/P3uojx3vgiC+4hfMiYG2ae+pOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHtOly6SiFyfzdhxMNzklelsS9fZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjdkMWZlYzYtZWE3Zi0z
NzUzLThhNTYtMWM1MzQzYTNjZDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0dSgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/XoD1r7ph4g/BrA2rGh6OJDMRxbPzefJIeVs4YwyxNMv+1U+qRc5CE
G90OFk1ThwIyb9oW0IqTGNuizJsDNvpCsB6LA/zzKV6SRJMfGykDGpCBgprJN4oh
N04qbc6oRDfTb91fppCqFN5xVpZ/nOe+QI4vqLNuWuDPWzb8JyYlie9CP06um0kw
oZvOtlpkjD5xDv8HHXmvZ3DZXXsCdzUwj/hrtP//zB2shxDwTVbZc3dnTtGerZlg
2sU0LIuuigtpP+MLGXugLrDitHAZzpy12dOxJaolmCXmMHKuAkeiPPYp5TY/B6lk
xS/tBQNdI2R8v2/O6f+hDp+CvMQK7HQ=
-----END CERTIFICATE-----
Generated at Thu May 9 13:11:30 2024 by rpki-client on console-fra.rpki-client.org