Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f32d63a6-5ffd-3347-bbdf-fe18348de49d.roa
File:                     f32d63a6-5ffd-3347-bbdf-fe18348de49d.roa (raw, json)
Hash identifier:          xIj1nCokXlLpHYGe3aWNo71c0knJsxTLu38EfRD7ryc=
Subject key identifier:   0F:01:D1:70:C6:45:75:21:FC:24:B5:80:0A:57:40:9D:17:41:F1:C4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76CBB881CC7145A3DFBE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f32d63a6-5ffd-3347-bbdf-fe18348de49d.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        141.151.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:cb:b8:81:cc:71:45:a3:df:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=e6d4c491-029e-4731-81ca-fe4b0cc0bcc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:07:77:3f:c2:76:4c:d2:bf:71:dc:fb:b6:30:
                    e2:05:de:0b:92:b3:cc:0f:d7:46:a7:e8:10:b2:f1:
                    a6:2a:c0:b2:47:83:be:84:a0:48:5c:4d:7b:52:5f:
                    01:d2:af:e9:c0:5f:47:a9:f2:d3:5f:b7:99:ea:85:
                    9e:9b:99:41:80:72:e9:26:27:76:1b:06:1f:5d:0c:
                    84:d4:23:12:a8:ee:a6:38:e0:24:db:99:23:4d:b6:
                    d4:5e:1f:6d:ea:c6:9c:fb:1e:9e:0b:20:5b:46:fb:
                    28:64:a0:8f:57:68:7f:34:09:9a:e9:c3:95:19:ec:
                    cb:94:67:3b:d0:b5:3f:e8:6c:85:10:31:7e:bd:50:
                    90:2b:ac:4b:07:98:61:e0:a7:da:9d:af:89:17:98:
                    3e:f7:fc:5f:a2:10:6e:43:3c:a1:7e:47:c0:e9:bf:
                    04:49:ac:82:98:4a:a2:73:b3:ca:72:69:ff:b7:8d:
                    10:e8:f2:4d:f3:bc:63:0a:b0:09:34:87:92:2f:b9:
                    d8:08:84:e7:73:f7:25:84:a5:b7:2c:06:b5:10:bd:
                    dc:81:cf:83:c1:72:f8:34:dd:d1:23:4a:69:1d:a3:
                    04:7b:b1:dd:40:c1:45:d8:d6:dc:d3:01:22:ee:1a:
                    b8:52:6e:e9:ed:fc:eb:b0:0c:7a:cf:57:60:5f:2d:
                    a3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:01:D1:70:C6:45:75:21:FC:24:B5:80:0A:57:40:9D:17:41:F1:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f32d63a6-5ffd-3347-bbdf-fe18348de49d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.151.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:d6:f2:73:15:40:fd:0a:0e:ac:59:e3:c9:e8:88:0d:0d:88:
         28:5d:c4:ce:30:c4:ae:d0:73:c6:bb:62:ee:26:62:1b:5d:95:
         df:00:ce:b0:a5:49:8a:e3:31:0c:08:38:88:1e:cc:af:74:50:
         78:d5:cc:d7:d5:cd:be:6b:93:6e:dc:46:da:3e:50:a9:59:89:
         bb:1b:87:6e:75:12:29:ed:a7:a9:30:af:86:76:47:2d:57:67:
         af:89:bd:ce:25:1e:4a:41:5b:c5:e3:63:27:6d:69:f5:39:36:
         09:48:97:a1:5f:7d:f4:c6:87:cf:13:99:ad:27:3f:09:1a:c6:
         4d:83:b9:94:39:0d:9e:cf:fe:80:d8:a6:64:6b:f3:f5:63:4e:
         06:23:25:b7:6a:8e:4e:23:38:f2:fc:48:b0:36:69:b7:8f:fa:
         b1:bf:65:8d:be:78:f1:f2:04:e5:a7:87:8e:c3:07:25:d2:dd:
         6c:6f:95:92:d5:ea:d9:b5:bc:09:7c:1d:2e:06:94:91:b2:11:
         92:a5:64:41:25:a2:8a:d5:76:6d:d2:b6:74:9c:d0:d6:c5:6d:
         3e:e2:0c:6b:23:ef:29:47:69:54:29:e5:92:48:8f:82:ae:b3:
         60:0e:d8:3b:59:31:38:15:16:89:62:bc:80:16:35:24:b6:53:
         74:90:56:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddsu4gcxxRaPfvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
ZTZkNGM0OTEtMDI5ZS00NzMxLTgxY2EtZmU0YjBjYzBiY2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwd3P8J2TNK/cdz7tjDiBd4LkrPMD9dGp+gQ
svGmKsCyR4O+hKBIXE17Ul8B0q/pwF9HqfLTX7eZ6oWem5lBgHLpJid2GwYfXQyE
1CMSqO6mOOAk25kjTbbUXh9t6sac+x6eCyBbRvsoZKCPV2h/NAma6cOVGezLlGc7
0LU/6GyFEDF+vVCQK6xLB5hh4Kfana+JF5g+9/xfohBuQzyhfkfA6b8ESayCmEqi
c7PKcmn/t40Q6PJN87xjCrAJNIeSL7nYCITnc/clhKW3LAa1EL3cgc+DwXL4NN3R
I0ppHaMEe7HdQMFF2Nbc0wEi7hq4Um7p7fzrsAx6z1dgXy2jSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA8B0XDGRXUh/CS1gApXQJ0XQfHEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjMyZDYzYTYtNWZmZC0z
MzQ3LWJiZGYtZmUxODM0OGRlNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjZdgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKHW8nMVQP0KDqxZ48noiA0NiChdxM4wxK7Qc8a7Yu4mYhtdld8AzrCl
SYrjMQwIOIgezK90UHjVzNfVzb5rk27cRto+UKlZibsbh251Eintp6kwr4Z2Ry1X
Z6+Jvc4lHkpBW8XjYydtafU5NglIl6FfffTGh88Tma0nPwkaxk2DuZQ5DZ7P/oDY
pmRr8/VjTgYjJbdqjk4jOPL8SLA2abeP+rG/ZY2+ePHyBOWnh47DByXS3WxvlZLV
6tm1vAl8HS4GlJGyEZKlZEEloorVdm3StnSc0NbFbT7iDGsj7ylHaVQp5ZJIj4Ku
s2AO2DtZMTgVFolivIAWNSS2U3SQVjI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:58 2024 by rpki-client on console-ams.rpki-client.org