Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a535c59e-2c45-3850-a45d-c635cd99514e.roa
File:                     a535c59e-2c45-3850-a45d-c635cd99514e.roa (raw, json)
Hash identifier:          u01qSPQaXayx2QBBT8feDIJJZdaCDqDeOzRsOXaiN0o=
Subject key identifier:   3C:29:2C:F9:B6:A3:21:1C:E3:B4:4E:C9:47:9F:F9:79:FC:07:08:39
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B836F3152F54333395780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a535c59e-2c45-3850-a45d-c635cd99514e.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        71.162.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:83:6f:31:52:f5:43:33:39:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=7a960f6d-37db-4041-95e3-e47b2810a3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dc:33:32:73:3d:bb:09:16:76:b9:e9:d6:e4:
                    03:2b:3e:38:3c:08:c0:ee:da:34:67:5e:79:9a:88:
                    35:88:53:bb:0d:c0:90:d8:ec:d8:e9:74:6d:1f:a1:
                    20:e9:7e:06:6f:4f:c8:5e:6e:5d:96:54:ac:0b:e0:
                    b8:de:ab:54:f4:e3:5c:fe:b6:a0:9e:54:77:97:6d:
                    8d:af:f6:e1:7c:f5:36:9a:01:eb:28:92:a3:3c:70:
                    6e:e7:85:82:c3:1c:72:7e:4f:b2:80:78:8f:e7:32:
                    a3:62:5d:88:22:e4:3b:2c:b5:a7:5e:37:e4:ea:f0:
                    b8:3e:c2:ff:63:5f:9f:01:d3:23:0e:37:16:93:46:
                    dc:48:80:8c:53:b7:02:df:eb:58:ee:ac:89:cc:a6:
                    85:e1:7c:50:cb:a1:c0:e4:77:e6:ef:01:86:2b:74:
                    5a:48:cd:a8:d1:7d:35:10:22:f0:ac:83:cc:d9:75:
                    a9:11:7c:fe:a5:95:bf:1e:70:d3:17:60:8c:95:2e:
                    51:7a:d4:c6:b7:63:f6:4d:72:99:ee:e9:eb:58:88:
                    30:25:0c:15:f0:9c:80:6c:f3:75:85:ce:29:ee:48:
                    8a:a6:04:46:7c:ae:fe:20:48:22:75:de:08:e0:1f:
                    9a:70:63:9c:ce:01:cf:6d:48:d4:c0:db:f2:c7:3b:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:29:2C:F9:B6:A3:21:1C:E3:B4:4E:C9:47:9F:F9:79:FC:07:08:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a535c59e-2c45-3850-a45d-c635cd99514e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.162.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:57:3c:7f:5e:d6:74:0c:a1:14:01:da:d0:a9:ba:02:13:21:
         19:77:70:a3:3a:c3:d9:9d:71:bf:a9:c7:11:63:84:55:47:3d:
         cc:b6:9b:06:33:5a:6a:d6:3a:15:09:33:4d:bb:49:ac:08:fe:
         28:30:25:98:d5:99:54:41:3d:db:4f:38:7b:e9:15:3f:d4:95:
         13:95:8b:ae:87:2d:26:95:76:68:2d:a1:df:66:db:8d:35:c4:
         88:54:7d:82:60:e7:45:6c:2c:ce:79:3c:0d:dd:e1:e7:92:71:
         32:14:8d:98:e2:75:b4:d6:33:94:5c:5c:e2:ac:19:61:83:2b:
         14:e8:47:74:9a:eb:78:1c:d2:92:c0:81:c9:89:75:65:b0:52:
         1a:db:48:23:e2:34:fe:ea:87:ec:f9:b2:6d:98:28:68:c1:3e:
         51:62:c1:96:fa:01:49:bb:4b:ae:b8:b2:e6:5b:a5:6a:d4:7d:
         aa:18:85:71:71:a2:b5:0f:33:b9:a0:9f:06:36:b7:6c:10:e5:
         5e:f6:47:95:1f:14:96:d7:0f:00:27:06:5f:bc:d9:a5:b8:ec:
         63:9c:a8:80:98:d2:18:30:26:df:d9:67:3c:38:82:da:0d:dd:
         58:80:07:a6:2c:8a:81:48:64:fe:1c:9e:97:5a:d0:f4:1b:d7:
         84:c2:6b:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdTe4NvMVL1QzM5V4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk
N2E5NjBmNmQtMzdkYi00MDQxLTk1ZTMtZTQ3YjI4MTBhM2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNwzMnM9uwkWdrnp1uQDKz44PAjA7to0Z155
mog1iFO7DcCQ2OzY6XRtH6Eg6X4Gb0/IXm5dllSsC+C43qtU9ONc/ragnlR3l22N
r/bhfPU2mgHrKJKjPHBu54WCwxxyfk+ygHiP5zKjYl2IIuQ7LLWnXjfk6vC4PsL/
Y1+fAdMjDjcWk0bcSICMU7cC3+tY7qyJzKaF4XxQy6HA5Hfm7wGGK3RaSM2o0X01
ECLwrIPM2XWpEXz+pZW/HnDTF2CMlS5RetTGt2P2TXKZ7unrWIgwJQwV8JyAbPN1
hc4p7kiKpgRGfK7+IEgidd4I4B+acGOczgHPbUjUwNvyxzu3jwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDwpLPm2oyEc47ROyUef+Xn8Bwg5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTUzNWM1OWUtMmM0NS0z
ODUwLWE0NWQtYzYzNWNkOTk1MTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR6KAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANXPH9e1nQMoRQB2tCpugITIRl3cKM6w9mdcb+pxxFjhFVHPcy2mwYz
WmrWOhUJM027SawI/igwJZjVmVRBPdtPOHvpFT/UlROVi66HLSaVdmgtod9m2401
xIhUfYJg50VsLM55PA3d4eeScTIUjZjidbTWM5RcXOKsGWGDKxToR3Sa63gc0pLA
gcmJdWWwUhrbSCPiNP7qh+z5sm2YKGjBPlFiwZb6AUm7S664suZbpWrUfaoYhXFx
orUPM7mgnwY2t2wQ5V72R5UfFJbXDwAnBl+82aW47GOcqICY0hgwJt/ZZzw4gtoN
3ViAB6YsioFIZP4cnpda0PQb14TCa/8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:46 2024 by rpki-client on console-fra.rpki-client.org