Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8df9ab0-039c-3e2b-8343-f971f889fedd.roa
File:                     d8df9ab0-039c-3e2b-8343-f971f889fedd.roa (raw, json)
Hash identifier:          mpbFKnKQ2pscPLKPD71Jw2g3IrgWz8Fo4d+UgbtG8pM=
Subject key identifier:   3D:07:21:8C:84:E7:DF:6F:B3:F0:A4:70:2A:F1:E6:26:D1:48:27:E9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844F511F008CE8B3C608E874B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8df9ab0-039c-3e2b-8343-f971f889fedd.roa
Signing time:             Tue 20 Feb 2024 19:48:19 +0000
ROA not before:           Tue 20 Feb 2024 19:48:19 +0000
ROA not after:            Mon 20 May 2024 18:48:19 +0000
asID:                     8987
IP address blocks:        208.241.200.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:11:f0:08:ce:8b:3c:60:8e:87:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 20 19:48:19 2024 GMT
            Not After : May 20 18:48:19 2024 GMT
        Subject: CN=d2c0db1d-5cfb-4172-adc2-4190a544df74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6e:03:bf:c3:b7:0d:84:0b:cd:66:45:67:f2:
                    0c:33:9a:8f:59:8d:06:e0:00:d1:04:eb:4b:14:cb:
                    71:2e:99:18:97:11:c4:47:7e:47:5c:91:69:67:34:
                    78:f5:dc:da:95:a5:ca:99:38:f6:58:fe:9e:6a:f3:
                    6c:b1:10:ab:2c:00:0d:c9:65:47:28:25:20:90:a4:
                    47:fc:65:b8:5a:6c:85:1a:a2:64:7c:d2:3a:bd:88:
                    30:9a:6f:62:70:d1:99:bc:cf:10:53:59:85:f9:45:
                    a4:10:ea:7f:49:b3:49:30:64:92:12:40:ca:36:03:
                    f9:90:52:13:b1:37:8f:fe:2d:67:29:57:71:bc:f0:
                    69:56:76:81:0d:87:21:8e:3c:3e:0a:64:be:d0:d1:
                    e1:67:da:76:90:5d:5b:33:95:41:c3:0a:26:31:69:
                    11:08:7f:e1:d1:3c:70:a9:0a:1f:11:e2:62:4b:86:
                    b0:0a:09:82:6c:66:33:65:0b:4d:19:bb:54:3a:b4:
                    34:d6:89:94:45:e5:3f:4c:28:44:05:1b:dc:fa:97:
                    5d:9e:38:e9:f6:57:75:f9:4e:e0:e1:89:35:c3:87:
                    05:7b:ca:35:eb:c4:21:8a:88:08:2b:9a:3e:5b:df:
                    cc:37:12:f6:60:4f:bd:6a:90:72:57:df:eb:fc:ae:
                    eb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:07:21:8C:84:E7:DF:6F:B3:F0:A4:70:2A:F1:E6:26:D1:48:27:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8df9ab0-039c-3e2b-8343-f971f889fedd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.241.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:04:39:26:9c:bd:6e:a8:59:54:7e:f7:ad:5a:d3:98:51:c0:
         08:ab:3c:be:b2:8b:9c:e9:0c:b8:6e:4f:55:a9:da:be:d5:56:
         39:04:42:5f:0e:4f:f5:f1:78:a1:ab:fa:b6:32:f0:c7:65:9a:
         c9:aa:cb:c1:11:f1:b6:61:58:ed:63:e3:40:aa:0e:8a:28:2d:
         b7:21:b4:f3:03:51:17:fe:5a:66:00:99:0f:78:50:65:32:08:
         b1:bb:fb:58:5d:e3:7c:c5:8e:a3:2b:8f:73:26:4f:b7:cc:0d:
         81:1f:28:40:f2:e2:ca:6e:11:c3:e6:cc:59:74:00:0b:64:39:
         19:fe:fb:62:f8:dd:95:56:d1:54:68:cc:29:5d:d6:28:58:63:
         c9:43:a4:1d:6f:17:6e:86:bf:d4:53:7b:0e:f9:0d:6f:8b:dc:
         d5:72:e7:94:78:e9:93:b3:79:bf:f6:0c:b2:d1:c0:7a:70:92:
         70:78:28:b6:21:fc:e8:60:f9:5d:9b:59:b8:d2:87:c0:d3:16:
         06:61:79:28:0e:0d:01:7e:f0:94:95:b2:51:4c:49:1d:eb:35:
         ce:92:2f:be:2b:6c:7b:36:21:e9:0f:45:ab:0b:ef:0a:d9:4c:
         4e:4e:39:64:f4:7d:17:18:8b:86:9b:89:cf:b9:bc:bf:14:b6:
         79:9f:ce:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET1EfAIzos8YI6HS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDIyMDE5NDgxOVoXDTI0MDUyMDE4NDgxOVowLzEtMCsGA1UEAxMk
ZDJjMGRiMWQtNWNmYi00MTcyLWFkYzItNDE5MGE1NDRkZjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm4Dv8O3DYQLzWZFZ/IMM5qPWY0G4ADRBOtL
FMtxLpkYlxHER35HXJFpZzR49dzalaXKmTj2WP6eavNssRCrLAANyWVHKCUgkKRH
/GW4WmyFGqJkfNI6vYgwmm9icNGZvM8QU1mF+UWkEOp/SbNJMGSSEkDKNgP5kFIT
sTeP/i1nKVdxvPBpVnaBDYchjjw+CmS+0NHhZ9p2kF1bM5VBwwomMWkRCH/h0Txw
qQofEeJiS4awCgmCbGYzZQtNGbtUOrQ01omUReU/TChEBRvc+pddnjjp9ld1+U7g
4Yk1w4cFe8o168QhiogIK5o+W9/MNxL2YE+9apByV9/r/K7rSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD0HIYyE599vs/CkcCrx5ibRSCfpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDhkZjlhYjAtMDM5Yy0z
ZTJiLTgzNDMtZjk3MWY4ODlmZWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0PHIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACoEOSacvW6oWVR+961a05hRwAirPL6yi5zpDLhuT1Wp2r7VVjkEQl8O
T/XxeKGr+rYy8Mdlmsmqy8ER8bZhWO1j40CqDoooLbchtPMDURf+WmYAmQ94UGUy
CLG7+1hd43zFjqMrj3MmT7fMDYEfKEDy4spuEcPmzFl0AAtkORn++2L43ZVW0VRo
zCld1ihYY8lDpB1vF26Gv9RTew75DW+L3NVy55R46ZOzeb/2DLLRwHpwknB4KLYh
/Ohg+V2bWbjSh8DTFgZheSgODQF+8JSVslFMSR3rNc6SL74rbHs2IekPRasL7wrZ
TE5OOWT0fRcYi4abic+5vL8UtnmfzrY=
-----END CERTIFICATE-----
Generated at Thu May 9 01:32:34 2024 by rpki-client on console-ams.rpki-client.org