Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/217c3780-79fc-3d72-b808-8b5261b4d13a.roa
File:                     217c3780-79fc-3d72-b808-8b5261b4d13a.roa (raw, json)
Hash identifier:          m1JSwt49xEclXk51B2mRXDgm8qsLtS9irPp/BI5Rmig=
Subject key identifier:   EC:3C:C0:4E:7E:1A:B5:62:69:06:22:53:46:E4:CB:C1:42:34:F9:28
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA144B635CD379554F2980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/217c3780-79fc-3d72-b808-8b5261b4d13a.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.213.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:14:4b:63:5c:d3:79:55:4f:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=7c64afec-8ca5-4573-b4ff-4491d62d4e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:56:25:f7:de:14:cc:f7:5e:24:f6:1d:c0:61:
                    f5:40:55:ad:d2:04:e7:aa:84:c5:9d:57:52:0d:5c:
                    41:98:69:55:a8:b0:ab:6c:ee:16:5e:5e:41:48:32:
                    b3:f8:40:59:94:1c:ee:c2:71:68:e2:50:55:77:e2:
                    e4:64:da:0a:bd:05:1c:8d:1d:cb:e6:bf:81:01:f1:
                    22:0c:bf:6b:e1:5a:8e:00:27:5f:26:72:6d:cb:bd:
                    36:59:6c:98:7d:a6:f9:f8:00:de:d1:7b:48:50:13:
                    46:d1:96:47:32:cc:71:1b:f6:bd:a7:64:3c:be:9d:
                    b4:66:cf:4b:b3:33:12:0f:1c:df:f0:c0:36:59:ca:
                    fb:55:ad:3e:33:2e:f2:d4:d5:0d:20:0d:86:79:0b:
                    1d:17:d6:b9:a0:f4:65:ab:f9:85:74:54:57:1e:67:
                    7d:a3:5c:b5:77:f8:5c:30:2e:a0:5c:ea:d5:9a:cb:
                    d7:d3:ce:77:5a:e2:6d:f1:10:9d:29:ee:fc:9d:46:
                    63:b9:13:41:fd:f9:a4:5b:2f:96:a2:24:f4:2f:db:
                    0c:7b:c6:ab:d8:7c:4a:ab:77:1f:b6:d5:a6:de:cc:
                    33:ce:d1:7a:41:5a:86:c6:b4:c7:ea:2a:cb:83:cb:
                    ad:26:a2:ca:a6:22:e3:7c:3a:69:fc:4d:fb:ef:6c:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3C:C0:4E:7E:1A:B5:62:69:06:22:53:46:E4:CB:C1:42:34:F9:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/217c3780-79fc-3d72-b808-8b5261b4d13a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f5:03:64:b3:47:b8:2c:4f:b6:c8:58:20:46:97:d8:ca:ea:
         e3:a2:40:4c:08:b4:10:e6:e6:3e:1e:32:ac:75:93:3f:57:e9:
         2f:45:80:3d:53:22:05:d2:92:5f:98:3a:a7:b5:e4:52:ad:fe:
         e3:9e:f3:a1:c4:0e:1d:71:42:81:af:70:14:ef:88:8e:15:ed:
         47:9a:8b:00:d9:dd:aa:f5:5c:fc:9c:de:e9:d4:01:30:d6:6a:
         66:74:af:99:7e:72:69:16:47:ab:10:39:1b:91:84:91:2e:98:
         e8:63:4f:ed:58:d6:52:20:f7:83:bf:31:33:cb:50:3a:57:f7:
         fb:ba:9e:a5:60:b8:4c:d9:cf:bd:fc:85:66:b8:0d:58:0f:25:
         86:e8:3c:76:95:d9:55:65:25:a0:96:ed:58:a8:bb:2b:7f:1a:
         28:14:48:24:1a:27:ed:9e:73:1b:03:ce:7a:c4:12:97:f6:39:
         53:d7:71:3f:d3:5e:09:11:d8:46:3a:0e:e3:ae:2a:11:4e:3f:
         fe:a4:36:e5:bd:65:78:e6:eb:f2:5a:b0:94:ee:3e:4c:53:df:
         8b:96:10:b0:34:ea:73:82:28:9e:0c:0a:2e:c2:71:1d:ed:65:
         45:d0:9f:da:99:a7:f4:e1:8a:b2:99:6f:4e:02:44:4e:6e:8a:
         47:96:6d:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh+hRLY1zTeVVPKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTExNTAyMDAyOFoXDTI1MDIxMzAyMDAyOFowLzEtMCsGA1UEAxMk
N2M2NGFmZWMtOGNhNS00NTczLWI0ZmYtNDQ5MWQ2MmQ0ZTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VYl994UzPdeJPYdwGH1QFWt0gTnqoTFnVdS
DVxBmGlVqLCrbO4WXl5BSDKz+EBZlBzuwnFo4lBVd+LkZNoKvQUcjR3L5r+BAfEi
DL9r4VqOACdfJnJty702WWyYfab5+ADe0XtIUBNG0ZZHMsxxG/a9p2Q8vp20Zs9L
szMSDxzf8MA2Wcr7Va0+My7y1NUNIA2GeQsdF9a5oPRlq/mFdFRXHmd9o1y1d/hc
MC6gXOrVmsvX0853WuJt8RCdKe78nUZjuRNB/fmkWy+WoiT0L9sMe8ar2HxKq3cf
ttWm3swzztF6QVqGxrTH6irLg8utJqLKpiLjfDpp/E3772wIswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOw8wE5+GrViaQYiU0bky8FCNPkoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjE3YzM3ODAtNzlmYy0z
ZDcyLWI4MDgtOGI1MjYxYjRkMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrtVEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABT1A2SzR7gsT7bIWCBGl9jK6uOiQEwItBDm5j4eMqx1kz9X6S9FgD1T
IgXSkl+YOqe15FKt/uOe86HEDh1xQoGvcBTviI4V7UeaiwDZ3ar1XPyc3unUATDW
amZ0r5l+cmkWR6sQORuRhJEumOhjT+1Y1lIg94O/MTPLUDpX9/u6nqVguEzZz738
hWa4DVgPJYboPHaV2VVlJaCW7Viouyt/GigUSCQaJ+2ecxsDznrEEpf2OVPXcT/T
XgkR2EY6DuOuKhFOP/6kNuW9ZXjm6/JasJTuPkxT34uWELA06nOCKJ4MCi7CcR3t
ZUXQn9qZp/ThirKZb04CRE5uikeWbVE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:16 2024 by rpki-client on console-ams.rpki-client.org