Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b04685c-198f-3930-8130-bd1a003c13da.roa
File:                     9b04685c-198f-3930-8130-bd1a003c13da.roa (raw, json)
Hash identifier:          AR+AyZLa0NjwxoJEjKZFx1y5/cRl8Ws6jTHUq1INFRs=
Subject key identifier:   96:C1:19:10:15:54:B0:30:5F:53:66:0D:31:71:0C:F0:53:82:C5:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B84DC927F2FF46C7B8E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b04685c-198f-3930-8130-bd1a003c13da.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        108.11.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:84:dc:92:7f:2f:f4:6c:7b:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=6db05b08-a579-47f9-a382-47bf43a2c150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:16:73:24:45:3e:24:ca:86:ee:a4:13:e7:1a:
                    23:40:d0:07:fc:2b:ab:fb:0d:a0:b5:c6:ec:a8:db:
                    19:7d:54:7a:a3:bd:e9:1e:d6:56:f4:30:6e:e6:55:
                    eb:48:6d:03:47:15:f3:ce:d0:cd:65:d5:77:9c:32:
                    11:51:86:9d:7a:98:0b:11:0e:71:86:21:e3:14:48:
                    10:6b:d5:45:46:6a:28:67:c5:ce:c8:67:77:be:f0:
                    27:fc:85:5f:25:dc:7a:05:1d:4b:23:5f:ae:07:e2:
                    7c:37:05:ab:67:f5:fd:fe:b1:47:6b:83:28:ad:09:
                    ce:bf:41:9d:a2:d5:07:ef:0f:8d:69:9d:f6:6b:94:
                    61:93:65:d8:6f:bc:e8:d5:6d:0d:46:7f:df:9c:0e:
                    11:b5:f4:84:f1:52:bb:f1:71:ea:e0:8d:c6:8d:88:
                    80:47:aa:ac:d5:53:f0:a1:98:5d:64:e8:71:16:b9:
                    36:ec:10:ac:58:d5:42:6f:27:b5:8b:81:6f:42:a0:
                    c1:cd:bd:c1:2e:16:d2:96:0e:db:ed:85:2d:ff:cc:
                    a3:b5:b4:1d:c6:d8:0b:fa:3c:92:64:b4:00:ea:65:
                    99:2b:6f:51:31:ac:f4:c3:0f:22:27:9b:a5:81:70:
                    4f:84:88:81:9c:fd:0b:21:20:a1:70:9c:cb:5d:3f:
                    58:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C1:19:10:15:54:B0:30:5F:53:66:0D:31:71:0C:F0:53:82:C5:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b04685c-198f-3930-8130-bd1a003c13da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.11.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:dc:f4:8b:06:ec:c8:dd:96:f2:df:13:ab:0c:d7:3b:6d:d9:
         47:95:67:c7:40:db:4e:50:97:6a:6c:d9:15:73:13:99:4f:9f:
         c9:a8:2a:4f:6d:df:bc:1b:54:46:c3:cb:6e:37:b5:9b:23:5e:
         9e:c0:14:2a:1f:c5:b9:3f:34:71:87:09:7b:5c:bb:8e:7d:13:
         f9:17:54:df:df:45:aa:c0:ab:80:5f:b5:dc:a9:5f:a5:f3:9a:
         82:e0:b3:a1:a1:49:56:3d:ff:61:d0:41:04:ee:31:ff:e8:bf:
         e3:69:0d:25:30:28:33:e0:fd:99:3f:cf:38:24:1b:04:35:22:
         be:61:c4:48:70:3a:3a:6a:93:98:30:a5:f3:6e:06:4a:a3:66:
         d6:47:75:42:58:49:8f:df:0c:e3:78:91:70:19:13:4e:22:41:
         f2:a8:03:71:00:1a:8c:65:8c:09:14:f8:92:d7:bc:ef:0b:67:
         27:d8:3e:a7:e5:57:9a:1c:f6:8d:e8:7b:50:85:ed:eb:db:de:
         a4:f1:66:33:4a:3b:c8:03:c6:b9:22:a1:ca:16:2b:ba:e8:62:
         a6:5c:d6:c8:d3:be:b5:e9:3a:08:67:29:ab:90:00:e5:a9:43:
         b1:eb:d9:2a:c4:28:77:08:dd:e3:c5:27:84:17:29:e5:74:dd:
         f8:ce:7e:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdTe4Tckn8v9Gx7joAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk
NmRiMDViMDgtYTU3OS00N2Y5LWEzODItNDdiZjQzYTJjMTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxZzJEU+JMqG7qQT5xojQNAH/Cur+w2gtcbs
qNsZfVR6o73pHtZW9DBu5lXrSG0DRxXzztDNZdV3nDIRUYadepgLEQ5xhiHjFEgQ
a9VFRmooZ8XOyGd3vvAn/IVfJdx6BR1LI1+uB+J8NwWrZ/X9/rFHa4MorQnOv0Gd
otUH7w+NaZ32a5Rhk2XYb7zo1W0NRn/fnA4RtfSE8VK78XHq4I3GjYiAR6qs1VPw
oZhdZOhxFrk27BCsWNVCbye1i4FvQqDBzb3BLhbSlg7b7YUt/8yjtbQdxtgL+jyS
ZLQA6mWZK29RMaz0ww8iJ5ulgXBPhIiBnP0LISChcJzLXT9YiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJbBGRAVVLAwX1NmDTFxDPBTgsUAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWIwNDY4NWMtMTk4Zi0z
OTMwLTgxMzAtYmQxYTAwM2MxM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbAuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALLc9IsG7MjdlvLfE6sM1ztt2UeVZ8dA205Ql2ps2RVzE5lPn8moKk9t
37wbVEbDy243tZsjXp7AFCofxbk/NHGHCXtcu459E/kXVN/fRarAq4BftdypX6Xz
moLgs6GhSVY9/2HQQQTuMf/ov+NpDSUwKDPg/Zk/zzgkGwQ1Ir5hxEhwOjpqk5gw
pfNuBkqjZtZHdUJYSY/fDON4kXAZE04iQfKoA3EAGoxljAkU+JLXvO8LZyfYPqfl
V5oc9o3oe1CF7evb3qTxZjNKO8gDxrkiocoWK7roYqZc1sjTvrXpOghnKauQAOWp
Q7Hr2SrEKHcI3ePFJ4QXKeV03fjOfi8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:44 2024 by rpki-client on console-fra.rpki-client.org