Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a233d918-3ab6-3819-82aa-baa5dd33fee5.roa
File:                     a233d918-3ab6-3819-82aa-baa5dd33fee5.roa (raw, json)
Hash identifier:          rv1YnTfaqN5teg/eGqyOvzN86Xy4QwPo+tMqGw9iBro=
Subject key identifier:   06:AE:EF:F0:76:E6:0F:41:00:3D:2A:63:7D:BC:95:88:34:9E:E1:B6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845BEB373F5A1F487D4BDAEDB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a233d918-3ab6-3819-82aa-baa5dd33fee5.roa
Signing time:             Fri 03 May 2024 01:11:14 +0000
ROA not before:           Fri 03 May 2024 01:11:14 +0000
ROA not after:            Thu 01 Aug 2024 01:11:14 +0000
asID:                     6167
IP address blocks:        72.106.248.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:b3:73:f5:a1:f4:87:d4:bd:ae:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:11:14 2024 GMT
            Not After : Aug  1 01:11:14 2024 GMT
        Subject: CN=db46f27f-6c8b-4243-a05a-1e05c8f01d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:be:67:91:23:50:37:a8:2b:3b:36:1e:2e:
                    22:bb:9a:3f:9f:d2:f6:6f:3b:01:40:2e:96:fb:da:
                    67:0b:1c:e1:e2:61:c3:68:e3:b4:10:17:8b:9a:c6:
                    0e:5b:ea:4c:a8:47:be:31:c2:e4:80:e3:a3:5f:c8:
                    90:d8:24:93:92:3d:2b:6c:75:4a:3e:bd:45:3d:55:
                    12:10:37:f2:f8:a1:a6:48:36:f0:86:dd:1f:7b:a5:
                    99:8d:30:5d:43:dd:87:e6:92:ad:00:4e:6a:93:5c:
                    55:7c:db:ee:18:28:75:b4:d5:0e:ad:14:00:74:c4:
                    bd:87:54:68:d1:4c:41:88:cc:d8:cd:cf:98:78:0a:
                    0e:25:7b:b8:cc:ed:a6:45:85:16:09:d3:16:5f:e3:
                    2d:0a:a1:ce:9f:8a:5e:64:ba:94:4e:ef:9b:96:bf:
                    34:1b:24:67:00:c3:54:29:73:53:10:86:ef:f8:fd:
                    26:76:a0:a4:10:69:04:f7:c3:05:84:51:ed:31:9e:
                    d2:c9:f5:db:ab:30:6a:f9:a9:51:83:13:c2:59:fa:
                    d2:06:15:3b:c3:21:60:94:d7:fc:98:aa:d8:ea:80:
                    f0:5f:a4:38:28:86:50:89:7e:5e:a4:f0:dc:32:99:
                    2e:52:9b:ff:c5:e5:5a:fd:74:3b:74:79:4b:00:77:
                    f0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AE:EF:F0:76:E6:0F:41:00:3D:2A:63:7D:BC:95:88:34:9E:E1:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a233d918-3ab6-3819-82aa-baa5dd33fee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d8:02:54:97:10:0a:11:a0:e2:85:75:fc:69:ee:bb:14:34:
         f5:9c:aa:1c:bc:df:3f:32:63:80:d4:76:5f:8a:b2:1c:7b:8a:
         72:aa:0c:77:99:6c:ff:eb:7b:4c:f7:9d:9d:a4:0c:44:45:43:
         8a:67:3a:90:33:61:42:df:61:12:f0:63:ca:ab:4f:bb:37:03:
         3d:c3:8f:54:87:8b:6f:d7:37:73:a8:e1:8f:03:75:22:73:84:
         53:f7:32:d2:d9:5b:cf:7a:e4:a5:55:9e:06:ae:7c:db:62:95:
         d0:ea:f9:54:33:a6:9d:e8:56:88:72:05:33:2f:84:f4:21:bb:
         a5:a1:fc:b5:74:3d:d3:60:39:2a:ef:0e:de:f5:1e:11:a0:55:
         0c:1f:bc:a2:3b:8e:c3:f5:1d:0f:ce:f0:96:25:b4:a1:11:32:
         a4:c2:b7:44:8e:8a:47:6a:be:96:23:6d:b6:db:9d:b0:a7:92:
         a6:4e:7c:0e:aa:1e:b8:dc:a8:dd:56:79:02:ab:2b:43:e2:48:
         3d:e3:d8:15:57:e8:87:65:1e:98:76:e6:3e:4b:4f:fb:38:22:
         67:5c:ee:f6:20:2d:59:44:e3:71:f2:be:af:59:78:e0:70:35:
         4a:99:d8:96:54:2f:37:1a:69:59:08:96:af:0f:22:d3:9c:5e:
         39:81:31:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW+s3P1ofSH1L2u2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDUwMzAxMTExNFoXDTI0MDgwMTAxMTExNFowLzEtMCsGA1UEAxMk
ZGI0NmYyN2YtNmM4Yi00MjQzLWEwNWEtMWUwNWM4ZjAxZDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0q+Z5EjUDeoKzs2Hi4iu5o/n9L2bzsBQC6W
+9pnCxzh4mHDaOO0EBeLmsYOW+pMqEe+McLkgOOjX8iQ2CSTkj0rbHVKPr1FPVUS
EDfy+KGmSDbwht0fe6WZjTBdQ92H5pKtAE5qk1xVfNvuGCh1tNUOrRQAdMS9h1Ro
0UxBiMzYzc+YeAoOJXu4zO2mRYUWCdMWX+MtCqHOn4peZLqUTu+blr80GyRnAMNU
KXNTEIbv+P0mdqCkEGkE98MFhFHtMZ7SyfXbqzBq+alRgxPCWfrSBhU7wyFglNf8
mKrY6oDwX6Q4KIZQiX5epPDcMpkuUpv/xeVa/XQ7dHlLAHfw5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAau7/B25g9BAD0qY328lYg0nuG2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTIzM2Q5MTgtM2FiNi0z
ODE5LTgyYWEtYmFhNWRkMzNmZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGr4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvYAlSXEAoRoOKFdfxp7rsUNPWcqhy83z8yY4DUdl+Kshx7inKqDHeZ
bP/re0z3nZ2kDERFQ4pnOpAzYULfYRLwY8qrT7s3Az3Dj1SHi2/XN3Oo4Y8DdSJz
hFP3MtLZW8965KVVngaufNtildDq+VQzpp3oVohyBTMvhPQhu6Wh/LV0PdNgOSrv
Dt71HhGgVQwfvKI7jsP1HQ/O8JYltKERMqTCt0SOikdqvpYjbbbbnbCnkqZOfA6q
HrjcqN1WeQKrK0PiSD3j2BVX6IdlHph25j5LT/s4Imdc7vYgLVlE43Hyvq9ZeOBw
NUqZ2JZULzcaaVkIlq8PItOcXjmBMS0=
-----END CERTIFICATE-----
Generated at Wed May 29 03:16:06 2024 by rpki-client on console-fra.rpki-client.org