Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4807d3b7-495c-344a-912d-d10e988997ea.roa
File:                     4807d3b7-495c-344a-912d-d10e988997ea.roa (raw, json)
Hash identifier:          rgNPSqKg6ctJc/WBT16GqyZMa3HTakVNxEN+93Kv2zY=
Subject key identifier:   17:4D:82:31:99:63:86:25:67:B7:5F:4E:F4:85:47:30:D4:D7:47:C2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80D851DA6330F63B775900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4807d3b7-495c-344a-912d-d10e988997ea.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        71.105.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:d8:51:da:63:30:f6:3b:77:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=c1f54b6f-2337-4b5a-a259-5c3614593a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bf:32:81:a7:32:0b:da:db:3f:f5:a2:67:b4:
                    2e:2b:62:6e:72:63:79:a5:87:d3:fe:64:da:30:ac:
                    65:ba:33:7e:ca:ac:ca:34:44:63:97:ac:e5:1e:9f:
                    2b:35:03:96:da:64:01:9a:22:f9:f5:72:18:2b:c0:
                    1f:55:fc:56:72:a4:94:45:31:8b:8e:47:05:8a:29:
                    54:34:7e:9e:74:74:59:85:a8:ff:36:b5:b0:3b:b7:
                    ab:92:c0:38:e6:20:ac:0f:c3:54:b6:85:dc:27:ab:
                    08:70:f6:9b:01:fc:4e:33:9a:b6:99:f2:be:31:7b:
                    e1:1d:c5:81:57:14:aa:59:b9:d7:95:c4:70:4b:69:
                    6b:08:44:12:a6:41:74:86:72:06:cc:7b:e9:0c:d9:
                    8f:cf:b0:4d:18:f9:c7:fa:ac:88:b2:e2:c9:4d:6b:
                    b1:cd:ca:58:d9:f7:4e:c7:d0:0c:67:b1:60:8b:27:
                    c4:8e:85:65:ac:21:e6:be:8f:67:d1:6f:02:45:86:
                    02:45:51:d5:41:ee:e5:c8:1f:79:23:ce:fd:32:6a:
                    65:19:4e:cc:35:19:82:18:a4:48:8d:15:89:08:d6:
                    d4:73:e1:9b:f5:eb:06:79:6c:fd:57:6a:83:dc:aa:
                    8b:7a:05:81:78:0d:4a:1d:2b:99:24:55:8f:20:cd:
                    1c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4D:82:31:99:63:86:25:67:B7:5F:4E:F4:85:47:30:D4:D7:47:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4807d3b7-495c-344a-912d-d10e988997ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.105.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:52:26:48:40:61:32:c9:95:28:fc:96:b0:7d:6b:57:81:68:
         9a:1b:ab:cc:f2:3a:6f:bb:02:a4:e0:65:cf:73:e6:be:0e:68:
         62:b2:0f:1d:b0:5f:44:e6:2b:d9:de:ce:65:0a:bc:ad:17:49:
         b9:49:6b:b5:d2:6d:52:8e:8d:72:b0:4f:d3:dc:72:2d:57:19:
         e1:51:87:6b:dc:57:e7:67:85:68:38:d2:48:78:24:14:3f:b2:
         2a:56:e2:04:1a:26:a2:0f:f5:9b:9a:9b:cd:0f:b7:2e:fc:58:
         34:12:27:0b:7f:13:e3:8e:13:bb:b3:9f:c8:8f:c9:cf:bb:d5:
         25:18:b7:69:e8:87:e2:60:5e:6a:48:3c:84:27:a5:0f:11:75:
         74:bf:d3:11:45:3f:bb:fc:bb:d9:56:38:af:89:99:4a:bb:07:
         df:52:5e:ea:1d:9d:94:d8:5d:33:76:af:46:72:71:58:9e:52:
         ae:f2:8b:89:dd:e4:2d:39:6a:bd:9d:1f:2f:7a:76:8b:7a:6f:
         f7:38:f3:92:a0:69:14:b8:de:15:f5:c3:e7:3b:30:e9:f2:39:
         e2:29:6c:88:fc:16:0e:e0:e0:93:b8:31:63:9c:33:a3:ed:52:
         8b:b1:44:51:d0:f9:bf:e7:aa:98:e6:bb:47:d3:be:78:ac:eb:
         89:ec:f5:b5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEdMgNhR2mMw9jt3WQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkyMjEzMDA0MFoXDTI0MTIyMTE0MDA0MFowLzEtMCsGA1UEAxMk
YzFmNTRiNmYtMjMzNy00YjVhLWEyNTktNWMzNjE0NTkzYThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb8ygacyC9rbP/WiZ7QuK2JucmN5pYfT/mTa
MKxlujN+yqzKNERjl6zlHp8rNQOW2mQBmiL59XIYK8AfVfxWcqSURTGLjkcFiilU
NH6edHRZhaj/NrWwO7erksA45iCsD8NUtoXcJ6sIcPabAfxOM5q2mfK+MXvhHcWB
VxSqWbnXlcRwS2lrCEQSpkF0hnIGzHvpDNmPz7BNGPnH+qyIsuLJTWuxzcpY2fdO
x9AMZ7FgiyfEjoVlrCHmvo9n0W8CRYYCRVHVQe7lyB95I879MmplGU7MNRmCGKRI
jRWJCNbUc+Gb9esGeWz9V2qD3KqLegWBeA1KHSuZJFWPIM0ckQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBdNgjGZY4YlZ7dfTvSFRzDU10fCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDgwN2QzYjctNDk1Yy0z
NDRhLTkxMmQtZDEwZTk4ODk5N2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAR2kwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPVImSEBhMsmVKPyWsH1rV4FomhurzPI6b7sCpOBlz3Pmvg5oYrIPHbBf
ROYr2d7OZQq8rRdJuUlrtdJtUo6NcrBP09xyLVcZ4VGHa9xX52eFaDjSSHgkFD+y
KlbiBBomog/1m5qbzQ+3LvxYNBInC38T444Tu7OfyI/Jz7vVJRi3aeiH4mBeakg8
hCelDxF1dL/TEUU/u/y72VY4r4mZSrsH31Je6h2dlNhdM3avRnJxWJ5SrvKLid3k
LTlqvZ0fL3p2i3pv9zjzkqBpFLjeFfXD5zsw6fI54ilsiPwWDuDgk7gxY5wzo+1S
i7FEUdD5v+eqmOa7R9O+eKzriez1tQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:28 2024 by rpki-client on console-fra.rpki-client.org