Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/0692100a-b01e-3e7b-9349-55e1a31d48a9.roa
File:                     0692100a-b01e-3e7b-9349-55e1a31d48a9.roa (raw, json)
Hash identifier:          4WcCqvvN7GGkWrzftbqTBEuWkqOtItDZfWUzYoL0vIQ=
Subject key identifier:   7F:47:DF:84:F3:95:A8:32:78:7A:66:DE:11:CF:0D:44:B4:CF:77:07
Certificate issuer:       /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
Certificate serial:       010D0C9F4328576D51CC73C042CFC1734E2FAA29
Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/0692100a-b01e-3e7b-9349-55e1a31d48a9.roa
Signing time:             Tue 14 Jul 2020 16:36:53 +0000
ROA not before:           Tue 14 Jul 2020 04:00:00 +0000
ROA not after:            Mon 03 Jun 2030 04:00:00 +0000
asID:                     8070
IP address blocks:        131.253.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:4e:2f:aa:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
        Validity
            Not Before: Jul 14 04:00:00 2020 GMT
            Not After : Jun  3 04:00:00 2030 GMT
        Subject: CN=53d9e49b-d1bd-4cbd-aadc-4c08cd634b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:b1:ac:5d:80:68:b9:0b:43:74:2a:e7:db:
                    0f:be:a2:f0:78:e9:22:b1:7f:53:6f:2b:f6:df:e0:
                    9b:a5:9b:03:17:78:07:e4:92:07:57:cc:b6:40:37:
                    9c:ed:64:03:2b:59:60:b8:7e:06:48:51:22:52:a9:
                    cf:bf:0a:ec:f4:a9:ec:21:c7:cb:c6:cf:74:b7:8a:
                    60:19:c8:99:ba:a4:58:33:3e:5b:80:a6:ac:aa:d6:
                    f1:f1:ba:5c:37:c6:78:26:39:56:dd:0a:8b:55:c8:
                    e2:01:ed:ad:43:a8:31:65:5b:15:43:d8:3b:62:9e:
                    70:3e:9e:dc:5c:fe:75:3e:a4:69:ab:a9:1e:cc:82:
                    0f:28:36:6b:69:42:67:1a:d0:a9:d1:68:ec:50:5e:
                    d8:ce:6a:6c:04:d8:b5:c8:83:34:c4:99:07:b1:39:
                    03:da:23:7c:18:86:17:7f:7a:98:e0:14:b5:c9:1f:
                    2d:3e:7e:80:4c:29:c1:a2:83:54:48:1d:98:02:77:
                    fe:82:a2:5c:d7:4f:e2:a5:05:1b:7f:6d:74:45:67:
                    c2:7d:2a:db:17:01:24:4b:fb:d1:b0:22:71:4a:e1:
                    62:3d:12:34:3b:60:d9:d1:74:62:67:2e:bc:68:6c:
                    21:ea:c4:97:8d:3c:2e:4b:dc:96:2d:93:62:e6:ab:
                    e0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:47:DF:84:F3:95:A8:32:78:7A:66:DE:11:CF:0D:44:B4:CF:77:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/0692100a-b01e-3e7b-9349-55e1a31d48a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.253.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:97:43:c0:7e:51:4e:ff:a9:29:d4:90:cd:28:03:e4:ec:59:
         2c:46:8d:bb:26:49:c9:f4:0a:9f:b5:ee:1b:e4:2b:c7:9d:62:
         00:a7:aa:43:c2:71:44:17:6e:62:d5:53:7c:66:52:e1:36:a9:
         ba:21:dc:d8:b7:2d:d3:31:75:14:63:74:4a:92:d3:13:0d:14:
         bd:34:9f:04:68:ed:1e:7f:7d:f7:92:ac:d7:9e:56:f9:d9:d9:
         ad:70:af:2e:d2:d6:f1:d1:82:ca:4d:a3:36:50:88:07:fa:32:
         a0:78:f6:9a:6e:59:bd:0a:0d:be:2e:c6:e3:0b:c3:31:bc:bf:
         74:03:9f:f0:2c:dc:39:73:42:41:6c:bd:5d:a8:9c:5b:69:b3:
         7e:b6:b6:82:30:69:4a:11:06:74:67:94:07:a5:94:cc:2f:1c:
         e5:ee:10:82:13:08:f5:97:a5:a5:55:c0:d3:a5:98:2f:86:e3:
         cd:ee:9d:e4:61:6a:63:79:2e:89:e3:3c:fa:12:71:e8:d7:ae:
         66:71:fc:69:62:71:fd:98:97:d8:c7:84:d2:67:ea:ea:fa:bf:
         a6:66:3d:07:4a:6f:82:38:2c:c0:6b:2b:fb:9a:b9:05:ca:20:
         94:75:73:e9:06:5b:05:65:e6:c7:21:06:b6:8e:4d:67:10:d8:
         40:56:26:0e
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc04vqikwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4LTFiNjQxY2FiNzQz
ZDAeFw0yMDA3MTQwNDAwMDBaFw0zMDA2MDMwNDAwMDBaMC8xLTArBgNVBAMTJDUz
ZDllNDliLWQxYmQtNGNiZC1hYWRjLTRjMDhjZDYzNGI1ZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALFWsaxdgGi5C0N0KufbD76i8HjpIrF/U28r9t/g
m6WbAxd4B+SSB1fMtkA3nO1kAytZYLh+BkhRIlKpz78K7PSp7CHHy8bPdLeKYBnI
mbqkWDM+W4CmrKrW8fG6XDfGeCY5Vt0Ki1XI4gHtrUOoMWVbFUPYO2KecD6e3Fz+
dT6kaaupHsyCDyg2a2lCZxrQqdFo7FBe2M5qbATYtciDNMSZB7E5A9ojfBiGF396
mOAUtckfLT5+gEwpwaKDVEgdmAJ3/oKiXNdP4qUFG39tdEVnwn0q2xcBJEv70bAi
cUrhYj0SNDtg2dF0YmcuvGhsIerEl408Lkvcli2TYuar4M0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBR/R9+E85WoMnh6Zt4Rzw1EtM93BzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUz
ZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFjYWI3NDNkLzA2OTIxMDBhLWIwMWUtM2U3
Yi05MzQ5LTU1ZTFhMzFkNDhhOS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2ZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4
LTFiNjQxY2FiNzQzZC9mZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNhYjc0
M2QuY3JsMB8GA1UdIwQYMBaAFLmj0JFWAovB8vJ3QS2CG87Sv9tDMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUzZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFj
YWI3NDNkLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoP9SDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAqJdDwH5RTv+pKdSQzSgD5OxZLEaNuyZJyfQKn7XuG+Qrx51iAKeqQ8JxRBdu
YtVTfGZS4TapuiHc2Lct0zF1FGN0SpLTEw0UvTSfBGjtHn9995Ks155W+dnZrXCv
LtLW8dGCyk2jNlCIB/oyoHj2mm5ZvQoNvi7G4wvDMby/dAOf8CzcOXNCQWy9Xaic
W2mzfra2gjBpShEGdGeUB6WUzC8c5e4QghMI9ZelpVXA06WYL4bjze6d5GFqY3ku
ieM8+hJx6NeuZnH8aWJx/ZiX2MeE0mfq6vq/pmY9B0pvgjgswGsr+5q5BcoglHVz
6QZbBWXmxyEGto5NZxDYQFYmDg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:57 2024 by rpki-client on console-ams.rpki-client.org