Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fa4fd6c0-de61-3cb2-849c-dc438dda3144.roa
File:                     fa4fd6c0-de61-3cb2-849c-dc438dda3144.roa (raw, json)
Hash identifier:          DTzSr6Xkrf0JgEJ2wjwoUxtl1qgnWwCSRr0gi7Z+d+c=
Subject key identifier:   F0:A3:CE:14:30:F0:E6:8F:13:2C:D3:B9:AD:05:56:CC:57:78:0A:E3
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847ED24C48D0905A8815968DC00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fa4fd6c0-de61-3cb2-849c-dc438dda3144.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     64267
IP address blocks:        173.214.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c4:8d:09:05:a8:81:59:68:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=c00d9ce3-894e-4943-92d9-22b696a989de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8b:be:60:69:4b:4a:11:6e:19:f5:21:90:06:
                    40:1e:78:c1:59:ab:d4:be:d3:c5:ec:87:22:b3:b0:
                    37:fe:8c:0f:59:1b:21:b0:4d:40:de:bc:af:0d:0e:
                    96:bb:09:e8:f6:39:bd:a7:07:c8:98:43:3e:66:de:
                    47:a0:61:d2:ac:63:22:71:ce:c7:79:99:fc:cf:a2:
                    f8:c9:5a:d7:4b:5c:cd:72:b5:9b:4a:22:e5:15:02:
                    6d:f1:89:37:35:d2:3a:5d:65:0b:d6:2b:8b:66:91:
                    05:c9:0a:37:c7:fc:f0:ce:94:a6:0f:f5:33:43:6e:
                    79:45:8f:d3:1a:3d:8d:08:2d:4f:19:4d:1b:4c:f5:
                    54:e3:67:93:5a:2e:f1:0e:90:a8:64:f0:ee:a8:52:
                    af:a0:4f:22:ff:35:57:5b:ec:d1:99:de:91:cb:e5:
                    2a:89:fb:b5:85:94:0c:4c:f2:6e:e3:70:ea:d3:2b:
                    af:a5:e7:d2:cc:7c:9d:33:21:e9:45:35:9d:bf:4e:
                    72:71:ee:7f:7e:0a:8c:7c:28:1c:f3:61:29:d3:38:
                    40:09:07:b8:ae:75:8b:0c:dd:d0:b6:27:1c:c2:b6:
                    3a:a4:94:31:71:22:eb:89:11:8e:e8:8d:86:3a:7b:
                    ce:3b:36:52:09:9f:a3:7b:21:a3:98:17:e4:7b:d5:
                    52:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A3:CE:14:30:F0:E6:8F:13:2C:D3:B9:AD:05:56:CC:57:78:0A:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fa4fd6c0-de61-3cb2-849c-dc438dda3144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:18:9a:20:16:46:82:28:d1:73:e0:f6:9f:df:ae:33:88:7d:
         ba:9f:85:cc:85:e3:a5:32:4d:2b:e0:6b:dc:05:04:fb:b4:56:
         4d:1f:c7:a5:fb:1f:74:1b:d3:0c:2b:a5:31:ed:da:42:0e:fe:
         8f:af:28:cf:eb:ff:33:26:43:23:4f:2e:d0:6a:a7:80:6e:54:
         31:cc:9f:2c:ef:54:b0:ec:e3:6a:08:4d:53:11:c3:97:11:59:
         7d:3d:bb:67:89:a7:dd:41:ce:9a:5b:fe:1a:67:54:8e:eb:4f:
         3d:3b:ad:1e:a8:01:b7:04:56:73:2f:ff:97:b8:29:65:a0:c8:
         66:2b:b3:32:16:28:ec:31:3c:b6:24:3c:b1:14:d2:f3:d6:ab:
         17:b1:42:23:3e:f4:6b:4f:09:48:b9:77:8c:15:e6:08:21:4f:
         c5:1b:df:7d:93:8c:24:54:43:7a:3b:1e:60:40:19:fe:28:92:
         c6:13:ce:31:0c:b2:0f:c2:bf:c2:ae:61:77:29:66:07:64:9e:
         98:08:c0:b2:51:2e:2d:f4:ff:0c:77:7b:51:71:f5:f9:7d:1a:
         fc:07:fe:05:03:1f:95:de:1d:eb:64:21:9e:b4:01:ab:71:19:
         88:8c:0e:3e:53:c9:fe:c3:3e:3c:76:1b:41:c6:0f:ad:9a:de:
         64:fc:95:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJMSNCQWogVlo3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk
YzAwZDljZTMtODk0ZS00OTQzLTkyZDktMjJiNjk2YTk4OWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIu+YGlLShFuGfUhkAZAHnjBWavUvtPF7Ici
s7A3/owPWRshsE1A3ryvDQ6Wuwno9jm9pwfImEM+Zt5HoGHSrGMicc7HeZn8z6L4
yVrXS1zNcrWbSiLlFQJt8Yk3NdI6XWUL1iuLZpEFyQo3x/zwzpSmD/UzQ255RY/T
Gj2NCC1PGU0bTPVU42eTWi7xDpCoZPDuqFKvoE8i/zVXW+zRmd6Ry+Uqifu1hZQM
TPJu43Dq0yuvpefSzHydMyHpRTWdv05yce5/fgqMfCgc82Ep0zhACQe4rnWLDN3Q
ticcwrY6pJQxcSLriRGO6I2GOnvOOzZSCZ+jeyGjmBfke9VS9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPCjzhQw8OaPEyzTua0FVsxXeArjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZmE0ZmQ2YzAtZGU2MS0z
Y2IyLTg0OWMtZGM0MzhkZGEzMTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdbCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADwYmiAWRoIo0XPg9p/frjOIfbqfhcyF46UyTSvga9wFBPu0Vk0fx6X7
H3Qb0wwrpTHt2kIO/o+vKM/r/zMmQyNPLtBqp4BuVDHMnyzvVLDs42oITVMRw5cR
WX09u2eJp91Bzppb/hpnVI7rTz07rR6oAbcEVnMv/5e4KWWgyGYrszIWKOwxPLYk
PLEU0vPWqxexQiM+9GtPCUi5d4wV5gghT8Ub332TjCRUQ3o7HmBAGf4oksYTzjEM
sg/Cv8KuYXcpZgdknpgIwLJRLi30/wx3e1Fx9fl9GvwH/gUDH5XeHetkIZ60Aatx
GYiMDj5Tyf7DPjx2G0HGD62a3mT8lW4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:01 2024 by rpki-client on console-ams.rpki-client.org