Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a401becd-3ae1-3b96-8178-8f59dad578c9.roa
File:                     a401becd-3ae1-3b96-8178-8f59dad578c9.roa (raw, json)
Hash identifier:          qqEkvG+m/9+x0heSq0hgJng4JpkEemJd3i1VTd5WyOA=
Subject key identifier:   38:03:91:27:D2:47:45:34:41:C6:23:1E:88:0C:A2:49:79:24:2B:BF
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F43285845C873A5F08B23C748384D3F80
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a401becd-3ae1-3b96-8178-8f59dad578c9.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     803
IP address blocks:        216.197.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:a5:f0:8b:23:c7:48:38:4d:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=0b115417-d504-408f-a9cc-17556679100a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c8:82:bb:8f:19:15:0d:24:eb:d6:6f:ce:93:
                    42:3b:8c:79:25:31:a9:97:9a:d4:84:95:6a:26:ba:
                    6d:b2:3c:71:20:97:42:cd:49:b0:64:76:7e:28:b7:
                    72:c8:8f:fa:80:dc:c9:aa:62:e8:29:71:f8:c4:73:
                    00:a6:8f:cb:3b:06:44:37:78:38:de:2d:0b:c9:6d:
                    65:16:6f:71:52:be:4d:f4:89:61:23:31:c9:07:cb:
                    0c:a6:2f:45:38:d5:06:e6:11:40:45:e2:e4:5d:89:
                    7b:68:c2:d0:d6:30:34:84:47:b2:cb:99:be:2e:4d:
                    5b:54:d5:0c:29:f0:cf:df:d6:44:b4:e5:73:dc:18:
                    4b:8c:53:f2:ae:cf:30:01:63:24:6a:33:06:30:ea:
                    7a:0e:cf:4f:b0:15:d0:3b:9d:85:00:33:8a:5e:81:
                    a7:5c:06:d1:03:31:68:19:20:33:00:6e:66:cc:40:
                    80:fc:4c:6a:4e:65:d1:af:28:57:f9:7c:d3:71:95:
                    6c:74:4a:f5:2f:66:2a:1b:0b:ef:9e:e9:6f:59:07:
                    5c:81:02:bd:62:bf:be:cd:4e:3a:04:05:1b:c3:ba:
                    2c:82:eb:32:f5:d9:09:81:99:d9:4a:48:ca:ae:79:
                    a1:43:70:ff:fc:5d:cf:9a:c4:2d:c3:be:e5:1d:f2:
                    31:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:03:91:27:D2:47:45:34:41:C6:23:1E:88:0C:A2:49:79:24:2B:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a401becd-3ae1-3b96-8178-8f59dad578c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.197.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:f1:f1:08:01:ad:ad:7b:5a:4a:8b:a4:c2:b4:55:6c:39:5f:
         1d:67:ff:e5:fe:b5:58:f2:7f:1d:d1:ee:5e:b2:84:3d:88:3d:
         08:88:75:84:ed:e3:8e:06:d7:fe:ab:51:0a:cd:d9:ac:3c:4f:
         90:0b:cd:36:21:7d:d0:83:a2:93:a6:95:aa:97:12:67:36:88:
         66:a5:70:9d:80:16:82:cd:7f:3a:74:be:36:1d:c7:11:01:9c:
         87:81:b1:58:e4:b3:2e:41:31:7e:fb:7b:b9:59:c7:78:74:a5:
         f2:8d:2e:b1:47:bb:99:54:31:2f:29:d6:59:3f:52:f3:b2:07:
         64:0f:fd:d7:80:bb:5d:16:2d:59:f0:4b:01:f7:7a:96:6f:19:
         ae:1b:8a:47:2f:b5:1d:24:2f:42:c6:fb:1b:cc:4e:1d:fd:52:
         91:69:b0:ae:68:9e:7d:d9:7c:c3:37:50:9e:7c:db:76:66:da:
         c0:4f:bf:f1:66:2c:48:72:81:ea:19:a3:b8:f5:f5:77:c7:75:
         1e:75:6d:56:2b:c7:90:1a:c4:21:a3:2d:c0:bd:f4:b4:9a:5e:
         e7:49:66:23:4c:45:c8:51:d2:aa:42:4d:fc:5e:c1:e7:f7:30:
         75:eb:6f:0c:c4:b8:42:80:0d:f3:30:60:eb:af:53:ff:39:7d:
         ba:84:bb:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXIc6XwiyPHSDhNP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5
NGExMB4XDTI0MDUwNjEzMDAzNFoXDTI0MDgwNDEzMDAzNFowLzEtMCsGA1UEAxMk
MGIxMTU0MTctZDUwNC00MDhmLWE5Y2MtMTc1NTY2NzkxMDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkciCu48ZFQ0k69ZvzpNCO4x5JTGpl5rUhJVq
JrptsjxxIJdCzUmwZHZ+KLdyyI/6gNzJqmLoKXH4xHMApo/LOwZEN3g43i0LyW1l
Fm9xUr5N9IlhIzHJB8sMpi9FONUG5hFAReLkXYl7aMLQ1jA0hEeyy5m+Lk1bVNUM
KfDP39ZEtOVz3BhLjFPyrs8wAWMkajMGMOp6Ds9PsBXQO52FADOKXoGnXAbRAzFo
GSAzAG5mzECA/ExqTmXRryhX+XzTcZVsdEr1L2YqGwvvnulvWQdcgQK9Yr++zU46
BAUbw7osgusy9dkJgZnZSkjKrnmhQ3D//F3PmsQtw77lHfIxzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDgDkSfSR0U0QcYjHogMokl5JCu/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYy
YTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvYTQwMWJlY2QtM2FlMS0z
Yjk2LTgxNzgtOGY1OWRhZDU3OGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTA2MmEyMTktOWVlOC00OGEzLTg5
N2EtODQxMGI2ZGE5NGExL2EwNjJhMjE5LTllZTgtNDhhMy04OTdhLTg0MTBiNmRh
OTRhMS5jcmwwHwYDVR0jBBgwFoAUFCgnZgWdJKC08ogP76ns4OluhhgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEw
YjZkYTk0YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2MWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACnx8QgBra17WkqLpMK0VWw5Xx1n/+X+tVjyfx3R7l6yhD2IPQiIdYTt
444G1/6rUQrN2aw8T5ALzTYhfdCDopOmlaqXEmc2iGalcJ2AFoLNfzp0vjYdxxEB
nIeBsVjksy5BMX77e7lZx3h0pfKNLrFHu5lUMS8p1lk/UvOyB2QP/deAu10WLVnw
SwH3epZvGa4bikcvtR0kL0LG+xvMTh39UpFpsK5onn3ZfMM3UJ5823Zm2sBPv/Fm
LEhygeoZo7j19XfHdR51bVYrx5AaxCGjLcC99LSaXudJZiNMRchR0qpCTfxewef3
MHXrbwzEuEKADfMwYOuvU/85fbqEu0s=
-----END CERTIFICATE-----
Generated at Fri May 17 02:16:54 2024 by rpki-client on console-ams.rpki-client.org