Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f758f379-aa12-36c3-b9d8-abae85c18a71.roa
File:                     f758f379-aa12-36c3-b9d8-abae85c18a71.roa (raw, json)
Hash identifier:          UQP16HdXEFS7IqiVudU47N/lwLdSPSArJp77ekVPgFY=
Subject key identifier:   AC:C7:D4:D7:5C:51:0F:FB:6B:1D:2B:45:63:3F:3C:42:97:13:C2:F0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858457083079B2BD4BA246DC08C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f758f379-aa12-36c3-b9d8-abae85c18a71.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     20447
IP address blocks:        199.170.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:83:07:9b:2b:d4:ba:24:6d:c0:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=d9b8a6fc-ae40-46c0-bbe9-9eea06c6364d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:9f:03:56:14:0c:ee:3b:1f:cb:2c:2a:70:
                    99:d6:81:d1:3b:35:f9:a0:b3:3b:09:78:f9:c6:2c:
                    df:c7:b1:2f:1a:e8:a7:20:49:d0:40:93:42:4c:7a:
                    27:ec:83:e7:b1:38:ba:71:2b:02:03:74:61:89:08:
                    e6:81:44:3b:f4:d3:37:66:07:bc:ca:03:b9:aa:08:
                    87:f3:ec:72:21:79:5a:cc:25:92:4f:fd:d5:15:41:
                    8b:95:a0:53:b8:54:4a:85:3f:e1:d8:61:fe:a3:cd:
                    3e:82:69:23:3b:32:48:99:32:94:16:f0:6e:82:a4:
                    bd:2b:8b:b3:68:d1:21:c0:54:dc:c6:6c:06:6e:af:
                    17:91:7a:c8:d1:fb:d3:ca:3f:ba:55:2e:f5:5d:67:
                    fe:d0:4e:93:93:93:59:14:cd:17:dc:b9:0c:ee:63:
                    89:2e:2a:12:33:83:e5:4d:e7:e6:ad:f6:6b:81:36:
                    b5:cc:c3:e4:99:d8:6d:08:87:06:a7:4c:2f:b7:e4:
                    c4:62:e5:ba:b7:8d:03:ed:15:c8:72:5a:04:16:ca:
                    d1:76:8b:c7:6b:54:98:28:f4:0b:10:99:83:5b:51:
                    7e:70:88:d2:89:78:a0:b2:99:cf:3e:82:54:32:fe:
                    68:9b:84:af:f0:fa:d3:0d:ea:4d:6f:63:2a:42:1e:
                    f3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C7:D4:D7:5C:51:0F:FB:6B:1D:2B:45:63:3F:3C:42:97:13:C2:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f758f379-aa12-36c3-b9d8-abae85c18a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.170.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:fe:e2:6b:8a:a8:61:b6:88:85:97:17:d3:3f:d3:0b:87:96:
         db:74:be:ab:0f:5c:73:0a:12:7a:fe:6a:a1:c1:88:86:4c:65:
         7b:7f:7f:6e:3c:0f:5b:99:64:5d:3a:e7:f7:0d:14:3a:bd:29:
         dd:a6:a4:97:77:aa:7c:d5:5e:c5:8a:f9:8a:e5:e8:fb:a3:c7:
         9c:64:1c:27:0f:11:cc:21:03:12:69:a3:16:e7:bc:7b:67:34:
         24:32:50:be:b9:9b:5d:09:8f:17:cd:e2:95:4b:80:b5:77:99:
         f1:e6:2e:86:db:84:c6:28:6b:25:d5:32:d4:dc:37:92:95:61:
         c2:bf:5d:aa:ce:24:49:03:1b:27:e4:76:92:cd:e2:23:f5:50:
         9f:29:c9:66:5d:24:7b:9d:77:77:d5:41:36:28:ec:9b:23:ba:
         10:8d:b2:37:ba:44:00:10:c3:9f:9b:75:29:9d:2a:44:54:f9:
         93:0f:2e:04:03:d3:18:cf:41:be:e8:ac:e6:3a:16:5a:b4:24:
         41:11:fe:b7:c3:71:d2:e6:2b:ec:40:ee:db:8a:a8:80:94:9d:
         b3:0a:42:99:59:36:a5:5d:21:21:8d:56:02:cd:5e:10:48:41:
         e5:c9:71:87:ee:42:c5:54:e2:5f:eb:8c:2b:a7:64:7a:b4:5b:
         19:d6:4a:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVwgwebK9S6JG3AjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDQwNTAxMDAyOFoXDTI0MDcwNDAxMDAyOFowLzEtMCsGA1UEAxMk
ZDliOGE2ZmMtYWU0MC00NmMwLWJiZTktOWVlYTA2YzYzNjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouifA1YUDO47H8ssKnCZ1oHROzX5oLM7CXj5
xizfx7EvGuinIEnQQJNCTHon7IPnsTi6cSsCA3RhiQjmgUQ79NM3Zge8ygO5qgiH
8+xyIXlazCWST/3VFUGLlaBTuFRKhT/h2GH+o80+gmkjOzJImTKUFvBugqS9K4uz
aNEhwFTcxmwGbq8XkXrI0fvTyj+6VS71XWf+0E6Tk5NZFM0X3LkM7mOJLioSM4Pl
TefmrfZrgTa1zMPkmdhtCIcGp0wvt+TEYuW6t40D7RXIcloEFsrRdovHa1SYKPQL
EJmDW1F+cIjSiXigspnPPoJUMv5om4Sv8PrTDepNb2MqQh7z5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKzH1NdcUQ/7ax0rRWM/PEKXE8LwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjc1OGYzNzktYWExMi0z
NmMzLWI5ZDgtYWJhZTg1YzE4YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6obMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGn+4muKqGG2iIWXF9M/0wuHltt0vqsPXHMKEnr+aqHBiIZMZXt/f248
D1uZZF065/cNFDq9Kd2mpJd3qnzVXsWK+Yrl6Pujx5xkHCcPEcwhAxJpoxbnvHtn
NCQyUL65m10JjxfN4pVLgLV3mfHmLobbhMYoayXVMtTcN5KVYcK/XarOJEkDGyfk
dpLN4iP1UJ8pyWZdJHudd3fVQTYo7JsjuhCNsje6RAAQw5+bdSmdKkRU+ZMPLgQD
0xjPQb7orOY6Flq0JEER/rfDcdLmK+xA7tuKqICUnbMKQplZNqVdISGNVgLNXhBI
QeXJcYfuQsVU4l/rjCunZHq0WxnWSk0=
-----END CERTIFICATE-----
Generated at Sun May 19 15:57:44 2024 by rpki-client on console-fra.rpki-client.org