Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e4ed62ec-e8c7-3e5b-8bf9-caf74567b1a3.roa
File:                     e4ed62ec-e8c7-3e5b-8bf9-caf74567b1a3.roa (raw, json)
Hash identifier:          W3I2nRjqvZwSurZ9WojHNHypzAAx3NQdrFtcJRr5d3k=
Subject key identifier:   31:FE:12:47:D9:60:73:5A:C0:A5:2B:79:F3:47:EF:28:3F:04:F6:0A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B875F7D75BB92C03DE9C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e4ed62ec-e8c7-3e5b-8bf9-caf74567b1a3.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        151.204.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:87:5f:7d:75:bb:92:c0:3d:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=9fc93473-205e-4784-8e2a-62f519ad4432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f4:c9:0e:04:52:5a:b9:6b:79:59:2e:ec:54:
                    14:b2:9e:a2:63:70:80:a6:27:28:e4:76:78:93:48:
                    97:9e:45:b3:9a:8f:30:1b:a7:63:c1:8c:c9:73:d4:
                    e3:92:c7:f4:d3:e5:20:8a:4e:96:b6:13:1d:4b:43:
                    b0:8a:78:6f:f3:02:d2:ec:18:80:af:ec:f4:86:74:
                    2c:f0:c7:03:b9:1f:26:de:1d:4f:34:a5:45:cd:32:
                    37:6c:03:6d:a9:b9:64:fa:7c:37:74:a5:53:ab:06:
                    11:cc:05:7e:fd:2f:cc:28:05:e3:57:dc:6c:93:a8:
                    3b:fb:d3:6f:63:c6:6b:e3:ec:5a:e2:85:2c:c8:e2:
                    f1:f8:ae:a5:e1:c1:02:d8:a7:b9:6e:97:79:a2:40:
                    e6:4c:ef:90:84:83:07:72:64:0a:84:ff:cc:36:6a:
                    da:ba:cd:cb:b1:be:2f:93:34:68:50:5f:24:da:90:
                    53:01:56:c2:e5:9e:4b:b7:d7:da:79:e4:02:f8:b1:
                    0a:11:79:58:4b:61:0c:c6:fe:38:76:e9:3c:72:14:
                    9b:3d:3d:c6:f0:4d:77:29:58:72:2f:f0:06:70:80:
                    82:0a:18:c4:5a:ca:ef:f7:d2:c5:d4:6c:61:06:c4:
                    f2:11:e2:ad:41:d6:ad:92:a2:47:65:bb:a4:41:c6:
                    fb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FE:12:47:D9:60:73:5A:C0:A5:2B:79:F3:47:EF:28:3F:04:F6:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e4ed62ec-e8c7-3e5b-8bf9-caf74567b1a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.204.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:19:c5:c1:da:e4:d7:ab:18:10:74:be:88:00:44:f7:ad:6e:
         c5:6a:4f:6b:43:15:e8:77:82:16:21:90:ed:ad:2f:fd:04:8a:
         4c:64:fb:bb:9b:42:94:12:8a:3b:4d:d6:90:b7:a1:50:2d:61:
         5c:82:0e:84:8d:f7:6a:06:6b:4f:db:8b:bc:81:9d:b4:bc:1f:
         5b:64:aa:65:fb:07:1e:17:9a:9d:12:14:c6:4a:fd:0f:ba:d9:
         16:d6:f8:4a:c4:8d:e9:78:7c:04:c6:f0:21:7c:21:b4:3d:04:
         9e:52:d6:f1:f1:c0:d8:d9:0d:42:c9:09:a9:55:82:00:2e:5a:
         36:a8:05:f9:b5:8d:ee:bf:be:8c:dd:65:ad:5b:a2:5d:63:ec:
         ed:8e:0b:c3:2d:ff:81:c1:76:6d:20:f7:67:74:bb:10:83:af:
         b6:dc:6c:80:64:7b:33:81:af:c7:fa:c9:50:8e:7f:2a:8b:92:
         96:f7:46:fc:b7:89:85:e4:87:16:5b:a4:cf:39:8f:b9:d8:26:
         29:86:ab:b3:54:cb:dd:7f:83:ff:8d:d4:12:87:68:3e:62:06:
         cd:44:88:c0:29:15:b9:74:3e:65:99:4c:b9:83:86:05:b2:57:
         35:c3:6f:86:9b:36:54:25:0d:64:e6:71:56:09:97:6f:0f:be:
         e5:45:cf:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdTe4dffXW7ksA96cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk
OWZjOTM0NzMtMjA1ZS00Nzg0LThlMmEtNjJmNTE5YWQ0NDMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvTJDgRSWrlreVku7FQUsp6iY3CApico5HZ4
k0iXnkWzmo8wG6djwYzJc9Tjksf00+Ugik6WthMdS0Owinhv8wLS7BiAr+z0hnQs
8McDuR8m3h1PNKVFzTI3bANtqblk+nw3dKVTqwYRzAV+/S/MKAXjV9xsk6g7+9Nv
Y8Zr4+xa4oUsyOLx+K6l4cEC2Ke5bpd5okDmTO+QhIMHcmQKhP/MNmraus3Lsb4v
kzRoUF8k2pBTAVbC5Z5Lt9faeeQC+LEKEXlYS2EMxv44duk8chSbPT3G8E13KVhy
L/AGcICCChjEWsrv99LF1GxhBsTyEeKtQdatkqJHZbukQcb74wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDH+EkfZYHNawKUrefNH7yg/BPYKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTRlZDYyZWMtZThjNy0z
ZTViLThiZjktY2FmNzQ1NjdiMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFl8yAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACYZxcHa5NerGBB0vogARPetbsVqT2tDFeh3ghYhkO2tL/0Eikxk+7ub
QpQSijtN1pC3oVAtYVyCDoSN92oGa0/bi7yBnbS8H1tkqmX7Bx4Xmp0SFMZK/Q+6
2RbW+ErEjel4fATG8CF8IbQ9BJ5S1vHxwNjZDULJCalVggAuWjaoBfm1je6/vozd
Za1bol1j7O2OC8Mt/4HBdm0g92d0uxCDr7bcbIBkezOBr8f6yVCOfyqLkpb3Rvy3
iYXkhxZbpM85j7nYJimGq7NUy91/g/+N1BKHaD5iBs1EiMApFbl0PmWZTLmDhgWy
VzXDb4abNlQlDWTmcVYJl28PvuVFz3s=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:59 2024 by rpki-client on console-fra.rpki-client.org