Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f553ccc9-6544-39e7-a283-4bd7ad216985.roa
File:                     f553ccc9-6544-39e7-a283-4bd7ad216985.roa (raw, json)
Hash identifier:          izfCoy5+Zt025372MwbJOwjvTLPqpCZmBZaAttHM2Ls=
Subject key identifier:   95:D2:FA:1C:BA:F4:E7:DC:16:F7:3F:AF:13:29:D6:1A:40:00:92:CE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76EB509D5BC8DDA5B08184
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f553ccc9-6544-39e7-a283-4bd7ad216985.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        209.158.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:eb:50:9d:5b:c8:dd:a5:b0:81:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=8312d976-2c23-4aae-aebd-d3d04683533b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:16:14:65:b4:39:1f:87:09:eb:95:2a:b8:5a:
                    eb:4d:3c:45:f0:1d:d5:c2:b4:ac:e9:60:12:39:fa:
                    32:da:01:04:44:df:ab:b5:83:4e:a1:c3:86:9d:b1:
                    f8:b9:af:6e:75:53:1d:71:67:27:17:18:72:56:80:
                    1c:33:25:4e:59:e5:ca:82:b2:b6:46:66:3f:06:23:
                    6d:f9:4a:51:29:dc:5f:24:55:40:5e:ee:19:03:70:
                    a9:f7:1c:ee:63:04:09:91:74:4c:6c:74:6f:9b:c2:
                    95:0b:9f:2e:56:84:ba:52:7a:bf:25:44:b1:1d:24:
                    98:1e:ef:b1:87:33:f5:9c:43:b8:8b:ac:fa:7d:c3:
                    5a:43:3b:a7:7f:16:10:5c:f5:e0:20:63:f1:70:b7:
                    2e:4d:a8:4e:62:97:22:86:58:8b:d1:8d:9e:7b:6b:
                    82:c5:93:61:e3:81:49:29:12:1d:15:b1:b0:a0:5a:
                    49:04:86:84:f3:de:6c:2e:60:50:cb:d1:6f:6e:c6:
                    a9:d8:b9:fd:a5:9d:de:19:9c:32:bf:02:2b:cb:ae:
                    3a:fe:fb:62:ad:77:70:ce:9f:b0:d1:41:00:3e:ec:
                    36:2a:43:e0:a2:1a:13:46:a5:47:d4:5d:29:ee:ea:
                    9c:da:c4:98:56:60:57:29:d2:23:c2:14:b0:7b:59:
                    0e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D2:FA:1C:BA:F4:E7:DC:16:F7:3F:AF:13:29:D6:1A:40:00:92:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f553ccc9-6544-39e7-a283-4bd7ad216985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.158.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f5:45:5f:3d:73:73:d4:9e:a0:6d:fb:80:75:f9:c9:0e:e6:
         3d:ce:10:14:d5:9d:ba:1a:b7:25:e1:42:f2:e9:cd:59:30:23:
         db:86:a6:5f:53:ac:14:50:dd:9c:1a:33:40:a9:50:bb:ae:8e:
         dc:39:17:38:9b:f3:20:8f:ba:a0:4b:31:24:cd:3a:e5:64:61:
         a3:00:5a:d0:bd:18:dd:07:9e:ad:6c:78:7e:64:54:e3:4b:3e:
         73:bf:8c:5d:eb:eb:20:dd:c1:80:89:da:07:a3:38:26:c5:aa:
         c1:4a:8a:20:d2:61:99:64:01:e6:ac:e6:7e:48:7e:07:1e:7f:
         0d:11:34:3e:7d:e1:26:4d:fa:a3:2c:0f:7a:98:e1:f5:ee:06:
         b2:61:43:54:46:0b:48:99:2e:b6:7a:85:c2:5d:3e:96:0a:d8:
         ce:9f:19:08:f9:bd:e2:da:0c:21:3b:63:f9:aa:01:8c:ab:42:
         fc:b5:3c:d9:f3:51:c3:5e:ba:4e:4a:9b:87:b3:33:3b:22:c7:
         de:4b:1f:3b:75:2e:aa:58:c2:3e:17:46:ac:af:79:79:58:22:
         b2:03:d8:8f:41:6a:c9:3b:fa:d2:6f:da:be:76:76:87:54:48:
         26:bf:69:86:cd:fb:98:30:37:2f:66:b0:9d:fc:e2:05:50:ad:
         ed:42:aa:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddutQnVvI3aWwgYQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
ODMxMmQ5NzYtMmMyMy00YWFlLWFlYmQtZDNkMDQ2ODM1MzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRYUZbQ5H4cJ65UquFrrTTxF8B3VwrSs6WAS
Ofoy2gEERN+rtYNOocOGnbH4ua9udVMdcWcnFxhyVoAcMyVOWeXKgrK2RmY/BiNt
+UpRKdxfJFVAXu4ZA3Cp9xzuYwQJkXRMbHRvm8KVC58uVoS6Unq/JUSxHSSYHu+x
hzP1nEO4i6z6fcNaQzunfxYQXPXgIGPxcLcuTahOYpcihliL0Y2ee2uCxZNh44FJ
KRIdFbGwoFpJBIaE895sLmBQy9Fvbsap2Ln9pZ3eGZwyvwIry646/vtirXdwzp+w
0UEAPuw2KkPgohoTRqVH1F0p7uqc2sSYVmBXKdIjwhSwe1kOHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJXS+hy69OfcFvc/rxMp1hpAAJLOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjU1M2NjYzktNjU0NC0z
OWU3LWEyODMtNGJkN2FkMjE2OTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0Z7AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFr1RV89c3PUnqBt+4B1+ckO5j3OEBTVnboatyXhQvLpzVkwI9uGpl9T
rBRQ3ZwaM0CpULuujtw5Fzib8yCPuqBLMSTNOuVkYaMAWtC9GN0Hnq1seH5kVONL
PnO/jF3r6yDdwYCJ2gejOCbFqsFKiiDSYZlkAeas5n5Ifgcefw0RND594SZN+qMs
D3qY4fXuBrJhQ1RGC0iZLrZ6hcJdPpYK2M6fGQj5veLaDCE7Y/mqAYyrQvy1PNnz
UcNeuk5Km4ezMzsix95LHzt1LqpYwj4XRqyveXlYIrID2I9Bask7+tJv2r52dodU
SCa/aYbN+5gwNy9msJ384gVQre1CqlE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:02 2024 by rpki-client on console-fra.rpki-client.org