Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e973c7f-f303-3473-b8b8-2c44d1f9413f.roa
File:                     9e973c7f-f303-3473-b8b8-2c44d1f9413f.roa (raw, json)
Hash identifier:          uyUJnBy1QBXsx/KedAOobZgmuZ242lmbPSinwc+asBc=
Subject key identifier:   4F:6F:2D:52:03:40:97:F0:10:95:4D:31:C3:1A:6C:3F:E2:95:4D:BD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584593689FF55C03634A1F071A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e973c7f-f303-3473-b8b8-2c44d1f9413f.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        71.251.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:9f:f5:5c:03:63:4a:1f:07:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=8474674d-3ea9-48c0-bd24-2eb10052815a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:46:5b:23:88:42:af:8f:9d:d1:fa:eb:e5:7b:
                    9c:8f:82:2d:73:52:70:8a:73:26:fe:bd:20:25:50:
                    5d:50:fa:b8:c3:2e:51:b8:96:5a:ea:a0:6b:36:ca:
                    30:58:10:21:9f:dc:53:9d:41:99:62:14:33:d2:3c:
                    1d:53:d1:f1:9d:b7:5f:4e:2a:b5:6e:97:a0:ef:8e:
                    02:d2:22:a9:2b:83:13:ef:95:b3:ae:e9:2c:33:af:
                    0b:c7:33:a0:de:bf:8c:d9:22:b6:4e:0b:76:b3:c3:
                    12:b9:86:d5:59:7c:a4:54:46:d0:15:af:da:8d:b2:
                    0b:4b:03:8a:d3:3e:ea:ba:85:aa:17:aa:90:25:8c:
                    14:1b:2b:09:12:d9:1e:e6:31:fe:75:4c:3a:b1:e6:
                    29:64:70:ba:be:6f:19:57:25:26:3f:61:51:ef:bc:
                    8c:3a:0c:f1:fc:ac:f3:20:55:37:72:ab:60:8d:50:
                    a8:48:81:f4:98:83:14:1e:1f:db:a8:cd:76:68:1c:
                    e5:c8:63:b5:1b:62:9d:59:27:2a:a8:ec:50:ed:b1:
                    e9:e7:52:3c:de:71:5c:53:ff:fe:f5:9d:82:8d:18:
                    73:24:40:06:67:c4:71:f1:dc:73:08:ae:5c:dd:c9:
                    66:7f:65:6a:4c:b5:94:6c:88:43:40:96:3d:3e:4d:
                    24:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6F:2D:52:03:40:97:F0:10:95:4D:31:C3:1A:6C:3F:E2:95:4D:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e973c7f-f303-3473-b8b8-2c44d1f9413f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.251.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9e:3e:40:09:70:9d:13:3f:69:11:8d:ec:94:ef:2f:08:bf:
         7e:b0:67:42:cf:27:ce:de:13:ae:26:df:e7:1f:58:6b:bc:0a:
         62:3f:7e:59:88:f7:91:ae:01:77:7e:bc:f2:0b:07:35:1f:fe:
         6b:e5:17:fc:be:76:9b:92:2d:40:26:c0:8c:86:39:8b:2b:10:
         5a:59:e2:b3:44:44:d2:18:2c:b4:43:65:28:88:50:52:b8:b3:
         ce:a2:59:01:b1:cb:d7:cb:e0:23:37:e3:44:fc:c9:de:5f:b9:
         c9:c3:5b:53:13:26:c5:61:20:a8:eb:33:e6:59:de:41:b1:97:
         ad:51:b0:ff:31:80:88:b5:7e:4e:70:03:50:0e:57:f8:cd:35:
         17:f5:b4:9b:66:be:9a:c1:72:53:81:bd:21:84:67:81:e4:5d:
         8d:2c:6e:db:e7:6a:18:13:a9:23:d1:90:22:8d:ec:e6:a4:3a:
         58:f5:ab:7b:bb:83:93:3b:c1:d6:73:f1:5c:68:aa:6b:c5:25:
         5d:4c:5a:05:15:5f:af:42:ec:b5:e6:32:82:f4:75:48:b1:58:
         8a:bd:5a:27:c4:63:26:13:a2:1c:22:cd:e6:15:af:4f:7d:d1:
         22:60:10:cc:0d:57:c9:3a:ef:c0:23:96:3b:6b:ec:e2:27:8b:
         79:ca:0f:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaJ/1XANjSh8HGoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk
ODQ3NDY3NGQtM2VhOS00OGMwLWJkMjQtMmViMTAwNTI4MTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkZbI4hCr4+d0frr5Xucj4Itc1JwinMm/r0g
JVBdUPq4wy5RuJZa6qBrNsowWBAhn9xTnUGZYhQz0jwdU9HxnbdfTiq1bpeg744C
0iKpK4MT75WzruksM68LxzOg3r+M2SK2Tgt2s8MSuYbVWXykVEbQFa/ajbILSwOK
0z7quoWqF6qQJYwUGysJEtke5jH+dUw6seYpZHC6vm8ZVyUmP2FR77yMOgzx/Kzz
IFU3cqtgjVCoSIH0mIMUHh/bqM12aBzlyGO1G2KdWScqqOxQ7bHp51I83nFcU//+
9Z2CjRhzJEAGZ8Rx8dxzCK5c3clmf2VqTLWUbIhDQJY9Pk0k2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE9vLVIDQJfwEJVNMcMabD/ilU29MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWU5NzNjN2YtZjMwMy0z
NDczLWI4YjgtMmM0NGQxZjk0MTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR/sAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOePkAJcJ0TP2kRjeyU7y8Iv36wZ0LPJ87eE64m3+cfWGu8CmI/flmI
95GuAXd+vPILBzUf/mvlF/y+dpuSLUAmwIyGOYsrEFpZ4rNERNIYLLRDZSiIUFK4
s86iWQGxy9fL4CM340T8yd5fucnDW1MTJsVhIKjrM+ZZ3kGxl61RsP8xgIi1fk5w
A1AOV/jNNRf1tJtmvprBclOBvSGEZ4HkXY0sbtvnahgTqSPRkCKN7OakOlj1q3u7
g5M7wdZz8VxoqmvFJV1MWgUVX69C7LXmMoL0dUixWIq9WifEYyYTohwizeYVr099
0SJgEMwNV8k678Ajljtr7OIni3nKDwA=
-----END CERTIFICATE-----
Generated at Thu May 9 01:33:27 2024 by rpki-client on console-fra.rpki-client.org