Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9e2d9d2-614f-3c2e-afe1-812335cb7a4a.roa
File:                     f9e2d9d2-614f-3c2e-afe1-812335cb7a4a.roa (raw, json)
Hash identifier:          lJvEwTUtll/o30DFIMxGTYgr2Nn2D7sM+C+dBjnkZq0=
Subject key identifier:   E6:31:EA:B3:23:86:EA:43:73:B0:55:42:60:DE:C5:42:43:EC:26:C7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858459368B8EFF538D914A6DE6C40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9e2d9d2-614f-3c2e-afe1-812335cb7a4a.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        108.20.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:b8:ef:f5:38:d9:14:a6:de:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=faf13474-4266-4283-8064-2980d0b68025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:44:c2:f9:c8:7f:08:4a:bd:00:0b:22:8b:
                    9e:7f:8e:a0:76:9a:a1:2d:c6:22:93:fd:17:85:60:
                    85:77:f8:65:c2:6d:96:fa:ca:31:4e:c9:cd:2d:7e:
                    41:f1:a8:2e:97:00:28:b9:03:bc:08:9f:49:55:de:
                    f3:1a:c8:99:dc:d1:b9:40:b8:95:14:dd:41:d2:dd:
                    90:0b:f3:b4:1a:45:6c:b5:fd:16:85:bd:cf:33:7a:
                    5b:06:4d:3b:60:93:e9:b8:91:60:da:ab:42:bd:c1:
                    3b:65:55:13:42:55:e2:15:94:78:4b:2b:79:fb:ac:
                    89:f4:40:b8:dc:76:21:8d:75:9a:8f:28:34:ff:1a:
                    91:f4:19:ad:52:36:e6:f6:d1:3a:8c:d7:95:30:2b:
                    5c:bf:dc:52:c5:32:09:2d:20:7c:b7:b4:e3:7f:4b:
                    13:9d:85:77:09:32:f7:ad:f3:6a:d9:c1:b0:02:68:
                    52:55:d1:36:29:da:72:f2:a2:77:07:f7:f9:32:94:
                    3f:2d:b0:d9:e5:82:ff:4d:56:e8:95:31:48:cd:fe:
                    5e:52:d2:63:79:bd:85:6f:18:d1:7a:e9:a2:e3:fd:
                    aa:27:8d:0c:96:da:39:fb:c6:36:c7:ad:6f:64:e6:
                    73:7b:66:cb:89:d9:44:d3:0a:02:38:ab:f0:69:a4:
                    63:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:31:EA:B3:23:86:EA:43:73:B0:55:42:60:DE:C5:42:43:EC:26:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9e2d9d2-614f-3c2e-afe1-812335cb7a4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.20.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b0:89:69:4e:d8:b8:5d:8d:41:cb:06:71:9e:f2:74:6a:52:
         b8:14:9f:0a:11:fc:ee:66:ef:f3:15:64:5e:2c:8f:d7:21:2d:
         87:c6:26:cd:11:1e:61:14:8b:f8:3b:93:ea:9e:59:99:49:7d:
         c0:51:99:be:e9:88:d0:05:39:9e:3f:83:54:29:02:30:ed:1e:
         e3:ba:41:b7:e5:d7:61:f0:c5:4d:6c:b0:44:c7:a6:e5:41:5e:
         1c:7c:f9:f7:6d:34:8a:b5:fb:6c:5f:35:45:93:9a:db:07:b3:
         86:e6:db:3e:df:b0:e3:48:d2:1f:c3:88:3c:57:61:5e:6e:f9:
         e3:bd:4b:41:26:d4:0b:1d:03:e7:54:b3:c9:aa:19:44:74:57:
         7c:ae:14:bd:2f:84:e3:4b:1a:d7:59:da:46:66:62:7b:dc:75:
         42:d2:62:15:bf:81:60:0b:99:d7:e5:d2:1a:64:12:3f:96:f6:
         d6:14:00:f6:a3:86:e5:18:64:de:83:e3:98:d8:a3:ae:06:15:
         83:98:6d:f9:d4:82:30:16:73:67:4c:17:7f:56:38:6a:29:a6:
         4c:d2:5b:2b:2b:1e:5f:cc:b3:af:62:9d:8c:ce:b1:8c:29:0b:
         31:0c:f1:91:79:12:42:28:6c:aa:49:5e:08:40:bd:ac:3c:0c:
         95:42:93:04
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEWTaLjv9TjZFKbebEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk
ZmFmMTM0NzQtNDI2Ni00MjgzLTgwNjQtMjk4MGQwYjY4MDI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+ZEwvnIfwhKvQALIouef46gdpqhLcYik/0X
hWCFd/hlwm2W+soxTsnNLX5B8agulwAouQO8CJ9JVd7zGsiZ3NG5QLiVFN1B0t2Q
C/O0GkVstf0Whb3PM3pbBk07YJPpuJFg2qtCvcE7ZVUTQlXiFZR4Syt5+6yJ9EC4
3HYhjXWajyg0/xqR9BmtUjbm9tE6jNeVMCtcv9xSxTIJLSB8t7Tjf0sTnYV3CTL3
rfNq2cGwAmhSVdE2Kdpy8qJ3B/f5MpQ/LbDZ5YL/TVbolTFIzf5eUtJjeb2FbxjR
eumi4/2qJ40Mlto5+8Y2x61vZOZze2bLidlE0woCOKvwaaRjnQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOYx6rMjhupDc7BVQmDexUJD7CbHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjllMmQ5ZDItNjE0Zi0z
YzJlLWFmZTEtODEyMzM1Y2I3YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbBQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAn7CJaU7YuF2NQcsGcZ7ydGpSuBSfChH87mbv8xVkXiyP1yEth8YmzREe
YRSL+DuT6p5ZmUl9wFGZvumI0AU5nj+DVCkCMO0e47pBt+XXYfDFTWywRMem5UFe
HHz59200irX7bF81RZOa2wezhubbPt+w40jSH8OIPFdhXm75471LQSbUCx0D51Sz
yaoZRHRXfK4UvS+E40sa11naRmZie9x1QtJiFb+BYAuZ1+XSGmQSP5b21hQA9qOG
5Rhk3oPjmNijrgYVg5ht+dSCMBZzZ0wXf1Y4aimmTNJbKyseX8yzr2KdjM6xjCkL
MQzxkXkSQihsqkleCEC9rDwMlUKTBA==
-----END CERTIFICATE-----
Generated at Thu May 9 01:32:35 2024 by rpki-client on console-ams.rpki-client.org