Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/795ce4c6-b691-36f0-b765-af210b29f4da.roa
File:                     795ce4c6-b691-36f0-b765-af210b29f4da.roa (raw, json)
Hash identifier:          UPqRgXzzKsyQpi26QqSiOmHDBISSZmzRdHhA2/E6Ohk=
Subject key identifier:   17:43:71:F0:3C:C9:0E:A9:30:BA:42:7E:88:5D:3E:9B:71:A1:64:5F
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F432858472C65DD3B0EDB81F4ADFF1080
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/795ce4c6-b691-36f0-b765-af210b29f4da.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        208.73.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:dd:3b:0e:db:81:f4:ad:ff:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=05731c30-333a-4a21-a264-793322e626e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:aa:89:5a:aa:39:9b:c8:4b:cf:fe:d2:72:54:
                    42:15:80:2b:f7:ac:8d:18:3a:0b:04:bc:6e:98:6f:
                    99:7f:48:19:20:c6:3d:bc:95:6a:af:b8:3a:1d:7c:
                    ac:17:e1:cf:5b:fd:e7:d7:b5:00:0e:60:ac:13:b9:
                    db:fb:c4:fa:ee:04:d6:05:b8:13:8f:53:33:d3:d2:
                    29:40:47:60:9c:8c:29:ec:02:36:76:4e:82:07:b2:
                    25:ae:57:14:d6:8e:df:23:33:ef:92:c8:cc:a6:71:
                    84:64:bd:10:47:62:47:95:2a:bc:ed:51:7d:79:e0:
                    ce:28:ad:39:3a:37:99:23:17:ad:3c:f1:16:15:4f:
                    11:e7:f4:b0:ba:b9:aa:48:2d:73:e0:c5:8a:1e:30:
                    bb:57:c4:37:26:f6:51:be:ae:96:b6:22:41:fd:1e:
                    b1:d8:dd:01:2a:3b:3d:7f:3b:0f:06:2c:42:24:23:
                    65:a1:a9:8b:6f:26:95:11:c6:a1:6a:ac:73:b4:48:
                    22:21:14:b6:15:9f:77:44:b2:a0:3a:7d:d4:40:14:
                    59:a3:19:8d:02:57:79:b8:8a:56:8b:ca:aa:3e:fd:
                    f1:1c:71:57:48:43:5b:5a:92:f2:0f:b1:dd:54:3e:
                    34:fb:2a:1e:bc:7b:6b:34:1d:47:84:ed:00:a5:87:
                    d4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:43:71:F0:3C:C9:0E:A9:30:BA:42:7E:88:5D:3E:9B:71:A1:64:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/795ce4c6-b691-36f0-b765-af210b29f4da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:1f:bc:e2:13:eb:15:c2:d9:b1:7d:6c:ed:eb:87:c1:05:8d:
         d4:f6:39:2c:55:fb:05:dd:79:28:62:59:0b:33:7d:ee:e5:fd:
         3c:b7:44:37:d0:fe:ce:1c:d1:33:8f:29:52:fa:4f:5e:c0:a8:
         23:a1:d4:0a:8b:36:2f:bb:43:29:eb:67:bf:27:34:db:ff:2a:
         8d:07:b8:0e:ea:0b:0a:63:6a:e1:95:dc:f4:dc:16:e8:af:c3:
         42:6b:4c:3a:71:94:0a:b8:7e:cd:e5:9d:17:69:b2:68:27:0f:
         8b:b3:26:f5:dc:c4:24:b6:a4:52:7e:7c:56:7d:e3:38:20:8c:
         b6:94:90:53:69:67:8e:97:a6:76:0a:f8:05:e1:a0:56:fa:22:
         23:a8:e5:81:f5:1a:28:41:db:97:69:02:39:37:df:68:e1:0d:
         f9:18:30:ec:f1:f0:37:a8:34:4b:03:00:c5:9a:07:47:a3:2c:
         05:dc:9c:48:69:83:c3:0e:52:6d:b5:86:25:f2:21:77:23:b2:
         a1:fa:12:a8:9c:72:6c:1b:78:0a:c4:ac:4d:f2:6a:b2:bb:3d:
         49:2e:ea:24:f2:2a:d5:e7:ce:57:42:d6:fb:f5:cd:41:54:ad:
         c7:c0:da:7f:d2:f3:ad:31:3f:62:4f:f3:1c:73:88:23:84:fe:
         a7:85:66:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcsZd07DtuB9K3/EIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4
MWQwMB4XDTI0MDkxMTAxMDAzMVoXDTI0MTIxMDAyMDAzMVowLzEtMCsGA1UEAxMk
MDU3MzFjMzAtMzMzYS00YTIxLWEyNjQtNzkzMzIyZTYyNmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKqJWqo5m8hLz/7SclRCFYAr96yNGDoLBLxu
mG+Zf0gZIMY9vJVqr7g6HXysF+HPW/3n17UADmCsE7nb+8T67gTWBbgTj1Mz09Ip
QEdgnIwp7AI2dk6CB7IlrlcU1o7fIzPvksjMpnGEZL0QR2JHlSq87VF9eeDOKK05
OjeZIxetPPEWFU8R5/SwurmqSC1z4MWKHjC7V8Q3JvZRvq6WtiJB/R6x2N0BKjs9
fzsPBixCJCNloamLbyaVEcahaqxztEgiIRS2FZ93RLKgOn3UQBRZoxmNAld5uIpW
i8qqPv3xHHFXSENbWpLyD7HdVD40+yoevHtrNB1HhO0ApYfUuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBdDcfA8yQ6pMLpCfohdPptxoWRfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk
YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNzk1Y2U0YzYtYjY5MS0z
NmYwLWI3NjUtYWYyMTBiMjlmNGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh
NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk
ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4
MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EkHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJEfvOIT6xXC2bF9bO3rh8EFjdT2OSxV+wXdeShiWQszfe7l/Ty3RDfQ
/s4c0TOPKVL6T17AqCOh1AqLNi+7QynrZ78nNNv/Ko0HuA7qCwpjauGV3PTcFuiv
w0JrTDpxlAq4fs3lnRdpsmgnD4uzJvXcxCS2pFJ+fFZ94zggjLaUkFNpZ46XpnYK
+AXhoFb6IiOo5YH1GihB25dpAjk332jhDfkYMOzx8DeoNEsDAMWaB0ejLAXcnEhp
g8MOUm21hiXyIXcjsqH6EqiccmwbeArErE3yarK7PUku6iTyKtXnzldC1vv1zUFU
rcfA2n/S860xP2JP8xxziCOE/qeFZjc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:52 2024 by rpki-client on console-fra.rpki-client.org