Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d513e38d-4854-37b5-9fa6-99777594a21a.roa
File:                     d513e38d-4854-37b5-9fa6-99777594a21a.roa (raw, json)
Hash identifier:          maKn4Jx+U11liJZXsPNjQ+9iDXZQsk61YKoStbdz/pg=
Subject key identifier:   4C:A0:2F:68:39:E1:4D:C9:F6:21:29:4D:44:38:AC:1C:7E:07:5E:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845BEB32603F3C05DC5220A5340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d513e38d-4854-37b5-9fa6-99777594a21a.roa
Signing time:             Fri 03 May 2024 01:10:37 +0000
ROA not before:           Fri 03 May 2024 01:10:37 +0000
ROA not after:            Thu 01 Aug 2024 01:10:37 +0000
asID:                     6167
IP address blocks:        72.97.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:b3:26:03:f3:c0:5d:c5:22:0a:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:10:37 2024 GMT
            Not After : Aug  1 01:10:37 2024 GMT
        Subject: CN=517c9d1d-bcb0-4a71-b8f1-38c56658b1b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:73:06:a0:00:d7:4c:73:d7:a6:58:d4:13:e0:
                    58:c5:dc:38:1b:16:79:72:0e:c4:e3:9c:fe:26:a0:
                    02:7c:4b:29:bb:4c:c1:42:f3:f9:c7:e6:78:1a:b7:
                    df:eb:5d:c9:dc:55:87:ff:1b:62:a3:6b:97:07:cc:
                    2c:2a:83:cf:50:2d:ec:6b:d4:5a:e2:86:01:b8:64:
                    56:b3:6a:b5:e2:c2:d0:3c:d4:ed:97:dc:ef:21:07:
                    86:8c:9a:87:2b:cc:52:98:fe:a2:e0:57:94:f7:9b:
                    08:65:00:1f:a5:7e:cb:0a:9b:8e:0d:9e:d4:20:7e:
                    f0:c8:76:c5:47:b3:49:d8:ef:3b:27:a9:d0:50:18:
                    20:b8:5f:f4:20:55:ca:0d:eb:76:1c:9f:d4:60:74:
                    7a:d0:27:5c:87:fc:88:64:00:68:8e:fa:21:c6:10:
                    55:62:8b:f5:45:c8:0d:0d:83:8d:e7:af:e0:12:e4:
                    02:77:05:2d:ae:03:3d:07:ab:ac:90:bc:f7:23:95:
                    fb:e8:23:55:92:ca:9a:24:e6:ba:b0:0d:ee:06:f1:
                    44:a4:13:69:7a:78:bf:b7:8b:8c:3d:10:16:c1:99:
                    d3:a4:e7:3c:6f:64:dc:6b:d5:d2:a4:17:8c:f5:aa:
                    d0:2c:4e:6e:e0:0c:3e:6d:66:c9:8e:84:57:9d:6a:
                    ce:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A0:2F:68:39:E1:4D:C9:F6:21:29:4D:44:38:AC:1C:7E:07:5E:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d513e38d-4854-37b5-9fa6-99777594a21a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:53:60:c6:0f:1d:bb:5b:66:f0:4b:0b:07:af:67:40:ec:ef:
         85:ac:81:85:c3:7f:9c:c9:db:f4:f6:06:4f:27:b4:24:6a:f5:
         04:b4:c0:4c:7e:e3:16:47:29:a9:50:37:7b:24:62:af:f6:f1:
         91:3c:df:47:2c:6e:f6:32:3a:43:74:dd:ac:96:be:f6:8b:37:
         fb:1c:70:2c:4c:ff:33:30:14:5e:db:6f:c9:16:74:e7:1a:1f:
         28:c4:24:cd:74:e2:f9:c1:47:ee:a4:26:17:35:3f:b4:6f:47:
         3a:d2:50:cb:c3:3a:1b:65:b8:d9:7f:ea:8b:28:be:10:b1:68:
         35:b6:1b:b0:9d:94:5a:58:32:66:97:4c:e8:6f:d1:2c:ad:e3:
         e4:cf:c1:40:ea:2e:ce:88:b4:48:de:d5:31:da:c8:4e:37:63:
         0f:34:c1:21:fa:86:8f:a9:b5:b3:24:d3:38:a0:3f:5f:0c:5c:
         db:9e:4b:45:18:41:ca:cb:5e:1e:2a:71:b2:e9:bb:7a:93:85:
         a2:1d:b9:50:92:67:8c:5a:33:a8:41:8a:24:47:b1:2f:00:c2:
         be:d5:a0:37:89:3c:ad:1c:51:d8:8a:46:1d:d0:6f:e3:ea:4f:
         6b:ee:16:21:4d:c3:0f:49:01:e2:70:3c:c4:78:cd:97:fe:cf:
         1f:a7:47:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW+syYD88BdxSIKU0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDUwMzAxMTAzN1oXDTI0MDgwMTAxMTAzN1owLzEtMCsGA1UEAxMk
NTE3YzlkMWQtYmNiMC00YTcxLWI4ZjEtMzhjNTY2NThiMWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3MGoADXTHPXpljUE+BYxdw4GxZ5cg7E45z+
JqACfEspu0zBQvP5x+Z4Grff613J3FWH/xtio2uXB8wsKoPPUC3sa9Ra4oYBuGRW
s2q14sLQPNTtl9zvIQeGjJqHK8xSmP6i4FeU95sIZQAfpX7LCpuODZ7UIH7wyHbF
R7NJ2O87J6nQUBgguF/0IFXKDet2HJ/UYHR60Cdch/yIZABojvohxhBVYov1RcgN
DYON56/gEuQCdwUtrgM9B6uskLz3I5X76CNVksqaJOa6sA3uBvFEpBNpeni/t4uM
PRAWwZnTpOc8b2Tca9XSpBeM9arQLE5u4Aw+bWbJjoRXnWrObQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEygL2g54U3J9iEpTUQ4rBx+B14nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDUxM2UzOGQtNDg1NC0z
N2I1LTlmYTYtOTk3Nzc1OTRhMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGHMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALVTYMYPHbtbZvBLCwevZ0Ds74WsgYXDf5zJ2/T2Bk8ntCRq9QS0wEx+
4xZHKalQN3skYq/28ZE830csbvYyOkN03ayWvvaLN/sccCxM/zMwFF7bb8kWdOca
HyjEJM104vnBR+6kJhc1P7RvRzrSUMvDOhtluNl/6osovhCxaDW2G7CdlFpYMmaX
TOhv0Syt4+TPwUDqLs6ItEje1THayE43Yw80wSH6ho+ptbMk0zigP18MXNueS0UY
QcrLXh4qcbLpu3qThaIduVCSZ4xaM6hBiiRHsS8Awr7VoDeJPK0cUdiKRh3Qb+Pq
T2vuFiFNww9JAeJwPMR4zZf+zx+nR/M=
-----END CERTIFICATE-----
Generated at Sun May 19 15:57:42 2024 by rpki-client on console-fra.rpki-client.org