Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffc0ae07-4104-3491-8822-2c7c4108e828.roa
File:                     ffc0ae07-4104-3491-8822-2c7c4108e828.roa (raw, json)
Hash identifier:          XcywoF/hMJC1vAuESvJgGdy080Wq5DtMflPvIfcQSZg=
Subject key identifier:   69:3B:71:D8:D2:1A:CF:92:BF:98:35:4E:AE:12:C9:A9:B0:18:1F:AA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858458C6DE0B0443FEC2E55D2AA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffc0ae07-4104-3491-8822-2c7c4108e828.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        72.79.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:e0:b0:44:3f:ec:2e:55:d2:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=476a5b9f-67b8-4270-8a75-6809d7357334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:aa:00:05:e0:e5:30:b3:29:b5:72:50:eb:95:
                    81:25:c3:52:f3:ab:1c:b7:29:f3:58:ec:6f:24:f6:
                    4b:66:1c:fc:be:32:ef:f9:70:7a:49:e6:d1:f4:c4:
                    41:ae:59:d5:14:9f:5a:3a:9b:b6:97:c4:5a:75:4e:
                    fc:ec:25:98:41:a2:21:86:92:eb:8a:25:f4:d2:4a:
                    72:6a:c2:c8:ae:04:ab:90:4e:6b:d0:3a:36:6c:ff:
                    aa:bc:cb:f9:ea:b8:7d:44:c1:99:66:55:85:62:13:
                    75:95:78:70:47:97:58:3d:9a:56:87:97:65:e0:73:
                    ff:c9:54:96:e4:c8:59:f7:b7:c5:0a:36:0f:4d:8b:
                    b1:a2:0f:42:39:04:0f:5f:6c:b8:db:31:f3:1a:fa:
                    e2:40:88:74:80:f0:6d:cc:37:9d:ba:d2:87:aa:41:
                    79:18:9e:8a:4d:e2:7b:05:ef:9b:12:c5:44:89:3c:
                    f1:7c:e0:b5:ed:45:87:87:55:1c:d4:db:ee:9b:5d:
                    5b:f6:12:8b:41:95:dc:50:10:94:22:68:2b:32:41:
                    af:8c:ee:9d:85:d5:cb:f5:68:17:7d:93:1e:07:ef:
                    55:be:73:1a:d1:ee:f5:6a:50:f0:a2:b8:92:6f:db:
                    13:41:20:f4:10:7d:18:5b:26:7b:82:91:61:c3:d0:
                    f4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3B:71:D8:D2:1A:CF:92:BF:98:35:4E:AE:12:C9:A9:B0:18:1F:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffc0ae07-4104-3491-8822-2c7c4108e828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.79.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:a1:17:86:71:b3:ed:03:3f:ad:84:3a:c5:e1:a2:f1:c2:40:
         c8:56:9a:ff:63:3a:b8:ee:8b:06:62:a0:58:3f:2e:0b:55:15:
         f2:81:ad:c3:69:23:58:a1:f7:33:88:77:87:04:98:ba:c2:e6:
         1d:19:f8:ff:0c:ba:af:77:5a:84:59:97:a5:5e:a4:58:cb:6a:
         e7:e9:c4:56:93:bc:ae:12:8c:9f:d6:45:7c:4b:a5:ed:e7:48:
         d1:46:be:59:1b:36:74:8a:67:d5:69:79:34:ce:17:bc:88:90:
         6f:da:06:5b:97:0d:c0:c3:e5:a2:23:0d:32:d0:17:2b:75:dc:
         91:71:db:44:14:26:37:fc:20:fa:5f:9f:e2:81:d5:e1:a1:b1:
         55:3c:e8:f1:00:1d:d0:80:7d:1e:f4:02:e1:a3:de:39:57:2b:
         80:df:05:c3:52:a8:28:e2:67:37:a9:5e:90:74:c3:bc:dc:31:
         6d:29:47:75:3e:c6:30:92:35:cc:7c:40:fa:b2:27:7a:a0:d1:
         4e:1d:25:98:a8:32:4e:88:fb:f6:71:33:c3:58:b8:60:1e:e7:
         42:b6:54:aa:cb:be:dc:60:2e:51:0a:e6:90:7e:c5:e2:ce:19:
         11:26:f9:a2:85:2a:a4:1d:da:22:ce:9f:5f:78:ef:64:88:1d:
         94:8b:e0:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWMbeCwRD/sLlXSqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDQxNTAxMDAyNloXDTI0MDcxNDAxMDAyNlowLzEtMCsGA1UEAxMk
NDc2YTViOWYtNjdiOC00MjcwLThhNzUtNjgwOWQ3MzU3MzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKoABeDlMLMptXJQ65WBJcNS86sctynzWOxv
JPZLZhz8vjLv+XB6SebR9MRBrlnVFJ9aOpu2l8RadU787CWYQaIhhpLriiX00kpy
asLIrgSrkE5r0Do2bP+qvMv56rh9RMGZZlWFYhN1lXhwR5dYPZpWh5dl4HP/yVSW
5MhZ97fFCjYPTYuxog9COQQPX2y42zHzGvriQIh0gPBtzDedutKHqkF5GJ6KTeJ7
Be+bEsVEiTzxfOC17UWHh1Uc1Nvum11b9hKLQZXcUBCUImgrMkGvjO6dhdXL9WgX
fZMeB+9VvnMa0e71alDworiSb9sTQSD0EH0YWyZ7gpFhw9D0RQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGk7cdjSGs+Sv5g1Tq4SyamwGB+qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmZjMGFlMDctNDEwNC0z
NDkxLTg4MjItMmM3YzQxMDhlODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSE/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuhF4Zxs+0DP62EOsXhovHCQMhWmv9jOrjuiwZioFg/LgtVFfKBrcNp
I1ih9zOId4cEmLrC5h0Z+P8Muq93WoRZl6VepFjLaufpxFaTvK4SjJ/WRXxLpe3n
SNFGvlkbNnSKZ9VpeTTOF7yIkG/aBluXDcDD5aIjDTLQFyt13JFx20QUJjf8IPpf
n+KB1eGhsVU86PEAHdCAfR70AuGj3jlXK4DfBcNSqCjiZzepXpB0w7zcMW0pR3U+
xjCSNcx8QPqyJ3qg0U4dJZioMk6I+/ZxM8NYuGAe50K2VKrLvtxgLlEK5pB+xeLO
GREm+aKFKqQd2iLOn19472SIHZSL4PI=
-----END CERTIFICATE-----
Generated at Thu May 9 01:32:35 2024 by rpki-client on console-ams.rpki-client.org