Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29f2f972-8653-3688-9bc8-f78adbb0d8ef.roa
File:                     29f2f972-8653-3688-9bc8-f78adbb0d8ef.roa (raw, json)
Hash identifier:          0Hi3gpROhgjY2wc6TXjsgs7jCHoTLVNPFmoX5O+9h/k=
Subject key identifier:   62:D6:CE:66:48:63:1A:E0:99:C4:85:4E:78:39:19:ED:11:7E:F3:97
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474420BF81ECEBDDA65E616E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29f2f972-8653-3688-9bc8-f78adbb0d8ef.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     701
IP address blocks:        209.116.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:bf:81:ec:eb:dd:a6:5e:61:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=8479b45a-5675-45cd-99e9-0e795c75b135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:a7:e3:3f:cd:9e:05:99:6e:14:2e:7f:92:
                    01:a4:ed:a9:57:84:d1:49:ff:ea:86:37:eb:f4:bf:
                    43:56:24:28:21:f7:bb:d8:24:3a:d5:34:7c:5a:e3:
                    6f:d5:fb:8b:3a:34:fb:0d:71:15:fa:cf:f5:06:25:
                    84:1e:34:4d:f0:bc:67:c7:1f:10:a4:d7:a4:d8:fe:
                    26:cb:b9:cb:67:d6:26:f3:ad:fd:5a:78:41:c6:ce:
                    7e:9d:93:ac:bf:ab:f8:14:aa:0a:4e:b0:ab:02:fc:
                    8e:84:e2:4c:64:9d:5f:e6:16:c5:d2:8b:f1:1b:cd:
                    9a:52:0d:e5:ca:f8:d5:43:7b:7a:a0:c8:cf:75:be:
                    bb:a5:e6:a3:6d:fb:41:d3:5a:b4:6a:af:de:92:0e:
                    96:7e:9c:5a:e0:5c:9e:78:d4:b3:68:f2:3b:0d:e1:
                    9f:2f:fc:3f:5d:e3:f1:d2:16:33:84:d8:ec:ac:06:
                    26:f0:dd:f6:49:17:fb:0f:bb:a4:09:c7:3c:6b:bd:
                    2a:b6:12:4c:78:28:c1:22:29:a1:2f:1c:50:84:d4:
                    9d:17:68:9a:69:95:56:56:21:e7:c4:62:3e:14:70:
                    14:c7:cf:7f:05:86:1f:ca:25:05:f4:7c:af:08:81:
                    10:46:f6:2e:9f:79:64:ac:7c:52:ba:df:73:7d:41:
                    49:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D6:CE:66:48:63:1A:E0:99:C4:85:4E:78:39:19:ED:11:7E:F3:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29f2f972-8653-3688-9bc8-f78adbb0d8ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.116.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:4d:be:05:2b:1b:ae:8c:26:2b:2f:be:81:a6:66:d5:2b:f4:
         e7:65:0c:68:25:46:95:68:50:a5:e0:b2:5f:ca:ed:bd:01:70:
         6e:ef:2d:bc:21:fb:a7:2f:de:1d:b4:7e:30:cd:b8:04:96:bb:
         0f:c5:78:0d:1a:b6:25:9b:bb:a3:9e:ed:b6:de:28:1e:18:b4:
         58:26:13:50:d6:b9:7f:5e:73:aa:97:2d:85:d0:2a:ff:d1:40:
         95:6d:dd:b5:96:e2:91:6d:67:f8:1d:b4:0c:e9:12:d6:4b:ec:
         1a:b4:c3:19:b8:4d:a1:39:b6:9e:26:9a:13:7b:2e:cd:c2:09:
         c2:0a:7e:35:f2:09:b3:eb:89:b7:bb:5c:c3:48:05:f6:29:29:
         e7:5e:ab:9b:12:95:1b:75:66:32:00:8b:d1:7f:48:ff:bf:09:
         fe:8f:87:c9:b0:66:5e:43:b7:45:25:b6:69:28:8c:bd:34:a9:
         a4:33:02:e1:7a:2f:6d:02:0e:70:eb:b8:b2:ab:a0:d0:e1:59:
         24:6c:73:d7:b5:77:84:6e:40:3b:19:20:d6:a4:11:5e:18:3a:
         25:f4:f4:23:0c:71:d9:4d:ce:5e:57:b8:1d:9a:f6:b2:7a:01:
         7c:e4:a0:9f:8f:32:c5:3a:dc:a9:f0:17:f0:a3:f4:97:e1:14:
         24:d3:34:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdEIL+B7Ovdpl5hbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkxOTEzMDA0MloXDTI0MTIxODE0MDA0MlowLzEtMCsGA1UEAxMk
ODQ3OWI0NWEtNTY3NS00NWNkLTk5ZTktMGU3OTVjNzViMTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIen4z/NngWZbhQuf5IBpO2pV4TRSf/qhjfr
9L9DViQoIfe72CQ61TR8WuNv1fuLOjT7DXEV+s/1BiWEHjRN8Lxnxx8QpNek2P4m
y7nLZ9Ym8639WnhBxs5+nZOsv6v4FKoKTrCrAvyOhOJMZJ1f5hbF0ovxG82aUg3l
yvjVQ3t6oMjPdb67peajbftB01q0aq/ekg6Wfpxa4FyeeNSzaPI7DeGfL/w/XePx
0hYzhNjsrAYm8N32SRf7D7ukCcc8a70qthJMeCjBIimhLxxQhNSdF2iaaZVWViHn
xGI+FHAUx89/BYYfyiUF9HyvCIEQRvYun3lkrHxSut9zfUFJeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGLWzmZIYxrgmcSFTng5Ge0RfvOXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjlmMmY5NzItODY1My0z
Njg4LTliYzgtZjc4YWRiYjBkOGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XSYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJxNvgUrG66MJisvvoGmZtUr9OdlDGglRpVoUKXgsl/K7b0BcG7vLbwh
+6cv3h20fjDNuASWuw/FeA0atiWbu6Oe7bbeKB4YtFgmE1DWuX9ec6qXLYXQKv/R
QJVt3bWW4pFtZ/gdtAzpEtZL7Bq0wxm4TaE5tp4mmhN7Ls3CCcIKfjXyCbPribe7
XMNIBfYpKedeq5sSlRt1ZjIAi9F/SP+/Cf6Ph8mwZl5Dt0UltmkojL00qaQzAuF6
L20CDnDruLKroNDhWSRsc9e1d4RuQDsZINakEV4YOiX09CMMcdlNzl5XuB2a9rJ6
AXzkoJ+PMsU63KnwF/Cj9JfhFCTTNPI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:22 2024 by rpki-client on console-fra.rpki-client.org