Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/329e9fdd-67bd-333f-ab94-30b69ab41416.roa
File:                     329e9fdd-67bd-333f-ab94-30b69ab41416.roa (raw, json)
Hash identifier:          5gu4aP6xl9MIY1eyPa/URtneFKXH3Voq5KZzuAKMUUE=
Subject key identifier:   FA:9F:F3:B7:24:52:D0:9F:3A:0F:D8:7B:6F:4E:12:F3:CD:2B:8A:CE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858459368A0D538D1A3F549E2B3C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/329e9fdd-67bd-333f-ab94-30b69ab41416.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        71.168.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:a0:d5:38:d1:a3:f5:49:e2:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=0fe764a2-c3e8-4d90-b48b-b8acc2b895ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:49:46:ad:f2:0e:32:a1:66:f9:0b:d5:cb:e0:
                    9f:6e:8e:25:db:a2:e6:7e:50:ea:9f:7e:b9:61:f1:
                    41:c4:bb:25:33:9e:a2:42:2d:3a:6b:d7:21:52:12:
                    8f:84:cb:37:07:0d:e2:ed:c5:e8:38:b4:a9:05:27:
                    7a:b9:88:ab:0f:b3:12:df:86:b5:55:8e:28:61:12:
                    e4:a5:75:05:81:43:20:2e:05:9d:6a:76:74:fe:61:
                    08:1a:66:80:b7:8a:26:37:11:ee:bf:61:f8:8a:27:
                    c6:d6:9a:49:ca:54:64:fb:13:a4:fc:79:91:61:d6:
                    bd:39:99:7a:1f:bd:c6:3e:77:88:d3:82:22:0f:3b:
                    ef:9c:40:7c:0d:f2:67:71:14:f6:f5:86:9d:9f:4e:
                    e1:e5:93:5d:47:4b:30:1b:9e:a4:22:a2:6f:ce:f6:
                    4a:a1:f1:e5:0e:1a:e1:88:06:80:d4:05:34:b8:58:
                    40:df:96:41:dc:ee:8f:9d:2f:09:ba:a3:42:29:a1:
                    52:52:09:62:54:ac:c4:cd:76:e0:68:5e:36:28:af:
                    99:51:ce:65:86:28:c1:e8:36:e8:e2:1f:7b:24:0f:
                    f5:2a:62:58:69:ba:b0:68:19:71:79:e1:dc:24:58:
                    9f:ce:68:ab:54:c4:cb:18:8d:76:92:db:40:36:6f:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9F:F3:B7:24:52:D0:9F:3A:0F:D8:7B:6F:4E:12:F3:CD:2B:8A:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/329e9fdd-67bd-333f-ab94-30b69ab41416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.168.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:5a:b8:48:71:bc:bd:dd:a1:eb:5f:fd:9a:04:85:ed:bd:6c:
         89:5e:20:f9:0f:3b:f4:0c:da:8d:19:30:bd:95:37:08:b2:15:
         6a:3b:b6:30:a9:db:57:76:2a:be:60:77:fb:45:34:5c:87:2c:
         f2:31:7b:ab:5c:80:eb:9f:c2:ef:eb:75:53:7c:08:78:8e:6d:
         b7:af:75:e2:e5:47:1a:be:8f:95:ce:5a:8c:44:c3:42:ff:ce:
         a8:87:bb:d7:d1:60:c7:71:fa:58:7b:5c:5a:91:4b:e2:a4:1f:
         6e:2e:bf:ab:88:94:35:d9:da:73:6f:63:79:1a:4e:45:4b:63:
         19:0e:ca:6b:eb:ff:fa:3a:55:a9:96:ce:7a:77:eb:22:0e:1e:
         7b:f0:57:5e:f8:d5:ec:cc:e4:24:b6:3f:43:63:2f:7c:68:56:
         72:24:31:1b:52:05:bb:9a:97:c3:01:30:f7:6c:e6:2a:97:d3:
         06:34:30:5d:c0:ef:7b:26:ec:72:96:0a:e6:06:89:9f:32:58:
         bf:86:93:13:a3:b3:49:99:e4:9d:71:3a:4e:4a:5a:0a:f5:ef:
         4d:00:76:51:af:0c:f9:fd:85:e5:bf:b3:12:8b:8b:a5:5f:f2:
         7b:74:cb:26:ee:42:b6:34:ab:05:ca:0c:e9:d6:45:8e:24:7b:
         37:2d:33:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaKDVONGj9Unis8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk
MGZlNzY0YTItYzNlOC00ZDkwLWI0OGItYjhhY2MyYjg5NWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApElGrfIOMqFm+QvVy+Cfbo4l26LmflDqn365
YfFBxLslM56iQi06a9chUhKPhMs3Bw3i7cXoOLSpBSd6uYirD7MS34a1VY4oYRLk
pXUFgUMgLgWdanZ0/mEIGmaAt4omNxHuv2H4iifG1ppJylRk+xOk/HmRYda9OZl6
H73GPneI04IiDzvvnEB8DfJncRT29Yadn07h5ZNdR0swG56kIqJvzvZKofHlDhrh
iAaA1AU0uFhA35ZB3O6PnS8JuqNCKaFSUgliVKzEzXbgaF42KK+ZUc5lhijB6Dbo
4h97JA/1KmJYabqwaBlxeeHcJFifzmirVMTLGI12kttANm+QPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPqf87ckUtCfOg/Ye29OEvPNK4rOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzI5ZTlmZGQtNjdiZC0z
MzNmLWFiOTQtMzBiNjlhYjQxNDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR6gAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE1auEhxvL3doetf/ZoEhe29bIleIPkPO/QM2o0ZML2VNwiyFWo7tjCp
21d2Kr5gd/tFNFyHLPIxe6tcgOufwu/rdVN8CHiObbevdeLlRxq+j5XOWoxEw0L/
zqiHu9fRYMdx+lh7XFqRS+KkH24uv6uIlDXZ2nNvY3kaTkVLYxkOymvr//o6VamW
znp36yIOHnvwV1741ezM5CS2P0NjL3xoVnIkMRtSBbual8MBMPds5iqX0wY0MF3A
73sm7HKWCuYGiZ8yWL+GkxOjs0mZ5J1xOk5KWgr1700AdlGvDPn9heW/sxKLi6Vf
8nt0yybuQrY0qwXKDOnWRY4kezctMwc=
-----END CERTIFICATE-----
Generated at Thu May 9 01:33:20 2024 by rpki-client on console-fra.rpki-client.org