Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0207d928-48bf-3f2c-ac73-b6f82d23e91e.roa
File:                     0207d928-48bf-3f2c-ac73-b6f82d23e91e.roa (raw, json)
Hash identifier:          X3zHhT5B/viU2m9vI2tnuvKcRjiVMa6PMHnI0McI9W0=
Subject key identifier:   16:A7:57:10:0E:26:FE:C7:FD:84:39:8C:CA:58:D2:AD:A2:9D:00:85
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845708B33B26F2172D6230F6A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0207d928-48bf-3f2c-ac73-b6f82d23e91e.roa
Signing time:             Fri 05 Apr 2024 01:17:05 +0000
ROA not before:           Fri 05 Apr 2024 01:17:05 +0000
ROA not after:            Thu 04 Jul 2024 01:17:05 +0000
asID:                     6167
IP address blocks:        174.42.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:8b:33:b2:6f:21:72:d6:23:0f:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  5 01:17:05 2024 GMT
            Not After : Jul  4 01:17:05 2024 GMT
        Subject: CN=22567b14-1fa5-4370-bdd5-0e6bbeed642b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:49:4d:2a:2a:68:1b:4c:91:ab:8a:d4:63:ca:
                    70:3e:e1:bf:6e:77:f8:83:3f:a3:0e:6b:11:85:b3:
                    e0:3d:d6:ae:1f:e7:a6:d0:f7:c8:af:e2:78:cb:e2:
                    11:30:c5:cd:9a:b2:98:2f:37:b5:dd:99:92:30:37:
                    d0:ae:18:3b:e0:e5:8e:91:db:49:7e:46:bb:9f:61:
                    e4:57:d9:07:85:ad:28:16:46:3b:3a:65:de:a0:2c:
                    5e:35:84:3c:7a:bc:00:a4:37:48:31:42:d5:d8:19:
                    7d:85:ff:97:42:35:64:89:f9:f9:5b:14:d4:37:54:
                    f7:c0:7c:ce:70:0e:fe:7e:2c:e2:59:fe:9e:1e:13:
                    aa:46:d0:b1:b4:87:0f:93:1a:2c:d1:4f:e6:46:15:
                    64:0f:23:6e:90:a1:16:a4:9c:ac:eb:1e:65:0c:0a:
                    22:d7:fa:0b:e8:d0:da:14:db:81:02:bd:b0:89:2d:
                    1d:75:5e:ce:19:0c:ab:f7:90:d5:e2:ca:f2:9a:2e:
                    b7:42:93:13:6f:75:0d:66:c9:c1:d7:66:0d:fa:24:
                    53:2f:83:8e:51:cb:a5:81:f5:17:06:31:90:ce:e0:
                    2e:b8:61:77:9b:af:0b:15:fb:5f:25:37:b8:c7:3c:
                    f1:6f:3f:4d:0d:67:0c:84:6b:d3:c4:76:ed:5b:dd:
                    e7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A7:57:10:0E:26:FE:C7:FD:84:39:8C:CA:58:D2:AD:A2:9D:00:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0207d928-48bf-3f2c-ac73-b6f82d23e91e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:1d:11:9d:93:17:c5:21:12:98:2c:d1:13:a0:51:12:77:3c:
         66:0b:26:19:91:46:05:7d:57:35:f5:23:07:8e:19:9d:ba:4c:
         7a:e2:f6:f4:09:a9:fb:39:1a:fb:e3:54:16:05:b8:7d:98:45:
         c9:1c:6c:3d:3d:db:25:a5:9d:4d:a8:d8:c1:56:9b:96:43:c4:
         ef:25:cc:91:5e:f4:5b:71:cd:4d:dd:c0:39:bf:83:89:d6:20:
         d9:a9:57:81:1e:d1:5d:6c:4f:01:24:c9:60:96:3c:e8:12:89:
         d5:45:d4:47:04:19:49:65:e3:bc:3b:ac:79:6e:b8:23:34:41:
         f6:d1:92:b0:fc:7b:81:89:f1:fb:96:dc:3f:84:2f:15:11:aa:
         3e:10:55:9f:89:fb:66:fd:76:33:5a:85:09:0f:e0:76:9f:56:
         ff:e3:57:2b:3c:e7:43:f7:f7:8d:15:a0:2a:45:8c:8a:b7:8f:
         66:e6:08:03:9e:29:5c:df:15:26:ba:69:61:0e:3c:0c:bb:1b:
         c1:f3:25:a3:c9:2f:66:81:fb:19:c8:b6:02:e5:6d:d4:be:e9:
         e9:7e:b4:74:e5:3d:9d:7b:1d:f6:ae:50:9b:e0:b8:36:ef:6a:
         60:1a:6f:0d:6a:8b:63:e4:15:5f:9f:c6:5e:a9:26:8d:26:1e:
         70:50:3c:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVwizOybyFy1iMPagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDQwNTAxMTcwNVoXDTI0MDcwNDAxMTcwNVowLzEtMCsGA1UEAxMk
MjI1NjdiMTQtMWZhNS00MzcwLWJkZDUtMGU2YmJlZWQ2NDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUlNKipoG0yRq4rUY8pwPuG/bnf4gz+jDmsR
hbPgPdauH+em0PfIr+J4y+IRMMXNmrKYLze13ZmSMDfQrhg74OWOkdtJfka7n2Hk
V9kHha0oFkY7OmXeoCxeNYQ8erwApDdIMULV2Bl9hf+XQjVkifn5WxTUN1T3wHzO
cA7+fiziWf6eHhOqRtCxtIcPkxos0U/mRhVkDyNukKEWpJys6x5lDAoi1/oL6NDa
FNuBAr2wiS0ddV7OGQyr95DV4srymi63QpMTb3UNZsnB12YN+iRTL4OOUculgfUX
BjGQzuAuuGF3m68LFftfJTe4xzzxbz9NDWcMhGvTxHbtW93ncQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBanVxAOJv7H/YQ5jMpY0q2inQCFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDIwN2Q5MjgtNDhiZi0z
ZjJjLWFjNzMtYjZmODJkMjNlOTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErirgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIodEZ2TF8UhEpgs0ROgURJ3PGYLJhmRRgV9VzX1IweOGZ26THri9vQJ
qfs5GvvjVBYFuH2YRckcbD092yWlnU2o2MFWm5ZDxO8lzJFe9FtxzU3dwDm/g4nW
INmpV4Ee0V1sTwEkyWCWPOgSidVF1EcEGUll47w7rHluuCM0QfbRkrD8e4GJ8fuW
3D+ELxURqj4QVZ+J+2b9djNahQkP4HafVv/jVys850P3940VoCpFjIq3j2bmCAOe
KVzfFSa6aWEOPAy7G8HzJaPJL2aB+xnItgLlbdS+6el+tHTlPZ17HfauUJvguDbv
amAabw1qi2PkFV+fxl6pJo0mHnBQPNQ=
-----END CERTIFICATE-----
Generated at Sat May 11 02:53:26 2024 by rpki-client on console-ams.rpki-client.org