Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7df58a2-bb5e-3662-83dc-24269066f27d.roa
File:                     c7df58a2-bb5e-3662-83dc-24269066f27d.roa (raw, json)
Hash identifier:          0/j3TX535/9RPfc/mVBKLg03bDy5G9yNXO8LfN7OdX0=
Subject key identifier:   6A:D3:E4:E0:83:F3:5A:30:29:9F:9A:61:CA:FB:A1:4C:A2:A3:6D:5B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80D1CEE216196F3B185C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7df58a2-bb5e-3662-83dc-24269066f27d.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        71.255.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:d1:ce:e2:16:19:6f:3b:18:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=95be93c5-20bc-48bd-adfa-6c373370093e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c8:38:af:55:cb:ca:01:4a:db:dd:8b:96:42:
                    74:c1:2f:46:ea:dd:29:75:c4:9f:cd:45:cc:fa:04:
                    c5:77:d2:ea:1c:58:31:81:0f:de:c6:0b:f0:4f:ef:
                    5e:bc:e2:95:41:0c:3c:65:4d:e3:49:4e:17:e4:b9:
                    c8:01:2d:4e:2a:38:1b:9c:9c:f9:e0:f4:9a:77:00:
                    e3:c9:68:22:d3:c7:d6:b2:dc:45:c2:4a:3a:5c:b1:
                    39:a8:5b:b4:f5:82:fd:e7:51:fd:9d:19:6e:ec:d4:
                    da:73:df:fb:df:28:3e:be:e5:47:55:87:5e:7c:f7:
                    bf:39:e3:48:bf:6e:d8:a6:5b:9b:38:e4:01:a5:d6:
                    06:cd:32:8e:74:25:28:02:a3:d4:e6:fb:8e:18:45:
                    14:d3:26:82:a1:e1:f9:22:0c:90:5a:49:8a:de:f6:
                    46:64:99:ce:e7:69:3e:94:2d:fe:87:32:63:d1:ad:
                    72:0f:30:c7:51:6a:69:1f:ab:ce:9b:5e:fe:46:35:
                    5c:f1:74:a9:7b:d0:35:71:e7:3a:d9:f3:93:e4:a5:
                    7c:1f:dc:56:10:47:2a:bc:98:bd:be:d9:b3:e5:6e:
                    d7:80:a2:20:46:29:a1:7c:6d:39:a0:c1:0c:f4:f3:
                    c5:8d:18:88:fc:14:fd:5b:06:71:4f:12:27:54:02:
                    93:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D3:E4:E0:83:F3:5A:30:29:9F:9A:61:CA:FB:A1:4C:A2:A3:6D:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7df58a2-bb5e-3662-83dc-24269066f27d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.255.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:af:0c:29:80:ef:21:a0:2f:9f:b5:3c:1c:4a:2a:15:b5:5d:
         fd:8f:8f:75:aa:e0:bb:90:3d:a4:64:db:bc:d9:a4:c8:f4:18:
         f2:55:b1:7e:d4:fb:83:6f:ba:ab:e3:1d:e2:62:18:fd:0e:a9:
         a3:55:57:91:32:6e:31:08:98:f9:22:ca:54:d6:b6:8e:89:22:
         4a:ad:6d:b7:fa:9d:84:2c:3b:eb:93:fa:92:5a:ff:37:55:96:
         1d:8b:5c:89:e5:2f:49:ce:05:a5:6c:71:dd:e5:e3:19:78:01:
         a5:37:47:b3:fd:98:c6:47:b5:4f:e1:3a:75:fb:ac:46:fe:2e:
         5c:28:25:e0:d0:15:0f:85:f8:70:58:78:8d:fb:b5:af:d1:9f:
         02:6d:39:75:d2:b0:61:1a:c5:6b:62:de:44:e1:5b:07:85:1d:
         a1:3f:33:71:67:fd:bb:3d:75:22:a1:45:41:49:80:9b:e9:0d:
         d0:de:77:b2:3c:c5:44:89:8a:e8:2f:04:ad:b1:21:2c:36:66:
         46:a9:7d:c0:b6:d2:84:ac:2f:06:88:8e:41:0c:0d:50:50:be:
         53:ef:c5:eb:f7:4a:d7:db:65:4f:55:1b:4d:37:45:a5:cc:42:
         8f:5f:83:f0:7a:37:c4:69:89:c8:ab:ae:80:f3:c9:5d:d1:49:
         d0:b7:b4:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdMgNHO4hYZbzsYXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkyMjEzMDA0MFoXDTI0MTIyMTE0MDA0MFowLzEtMCsGA1UEAxMk
OTViZTkzYzUtMjBiYy00OGJkLWFkZmEtNmMzNzMzNzAwOTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Mg4r1XLygFK292LlkJ0wS9G6t0pdcSfzUXM
+gTFd9LqHFgxgQ/exgvwT+9evOKVQQw8ZU3jSU4X5LnIAS1OKjgbnJz54PSadwDj
yWgi08fWstxFwko6XLE5qFu09YL951H9nRlu7NTac9/73yg+vuVHVYdefPe/OeNI
v27YplubOOQBpdYGzTKOdCUoAqPU5vuOGEUU0yaCoeH5IgyQWkmK3vZGZJnO52k+
lC3+hzJj0a1yDzDHUWppH6vOm17+RjVc8XSpe9A1cec62fOT5KV8H9xWEEcqvJi9
vtmz5W7XgKIgRimhfG05oMEM9PPFjRiI/BT9WwZxTxInVAKTlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGrT5OCD81owKZ+aYcr7oUyio21bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzdkZjU4YTItYmI1ZS0z
NjYyLTgzZGMtMjQyNjkwNjZmMjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/+gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACevDCmA7yGgL5+1PBxKKhW1Xf2Pj3Wq4LuQPaRk27zZpMj0GPJVsX7U
+4NvuqvjHeJiGP0OqaNVV5EybjEImPkiylTWto6JIkqtbbf6nYQsO+uT+pJa/zdV
lh2LXInlL0nOBaVscd3l4xl4AaU3R7P9mMZHtU/hOnX7rEb+LlwoJeDQFQ+F+HBY
eI37ta/RnwJtOXXSsGEaxWti3kThWweFHaE/M3Fn/bs9dSKhRUFJgJvpDdDed7I8
xUSJiugvBK2xISw2ZkapfcC20oSsLwaIjkEMDVBQvlPvxev3StfbZU9VG003RaXM
Qo9fg/B6N8RpicirroDzyV3RSdC3tFs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:49 2024 by rpki-client on console-ams.rpki-client.org