Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/268ea0de-6048-3916-af1e-d45f0d2aad37.roa
File:                     268ea0de-6048-3916-af1e-d45f0d2aad37.roa (raw, json)
Hash identifier:          kLu8lgwstERqMOaAfC5qZT3sO6tTOFSYFez1PSsK2ok=
Subject key identifier:   65:ED:31:F8:F5:89:62:29:C8:E7:9B:AF:B9:88:4C:F6:42:2A:46:1B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835F697354298482F5D3F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/268ea0de-6048-3916-af1e-d45f0d2aad37.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.254.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:f6:97:35:42:98:48:2f:5d:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=fa3f9a14-891c-46d1-aec3-235eb11d4c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0e:c9:18:26:59:cf:ca:f5:b8:09:b3:be:e4:
                    a6:33:52:61:4a:c2:dc:a7:47:53:6d:cb:5d:4e:31:
                    f2:76:9d:43:ab:01:0a:37:d8:55:ad:09:44:88:6f:
                    97:ee:e4:e1:94:1c:b5:e5:a7:98:db:31:a0:9b:a4:
                    ee:5a:b3:9a:16:1b:00:d2:7c:35:ac:28:fd:fe:5d:
                    13:70:d8:a7:ec:2f:8b:23:a7:88:d3:cb:dc:4a:a5:
                    e6:dd:f4:8e:0c:ad:86:57:5d:3c:24:b4:a7:b8:02:
                    2d:92:13:3e:0b:e5:6b:c6:c7:78:37:c6:e9:29:ac:
                    77:ad:51:e7:00:fd:f5:ef:34:48:9f:97:11:f7:53:
                    96:71:f2:33:f1:6c:88:16:d6:f8:42:07:06:97:10:
                    77:61:47:4c:eb:3e:da:9b:2e:fa:dd:0c:cc:07:ab:
                    6c:71:66:b3:23:91:e2:23:d1:fc:58:ef:4a:67:88:
                    31:ec:7b:f1:4b:f4:17:83:22:b3:1b:80:78:68:00:
                    a1:81:95:12:d1:a1:59:c6:52:5a:89:41:69:d5:ba:
                    18:b8:75:d2:c9:0f:60:b7:e2:10:ce:75:84:d3:ef:
                    db:1f:ab:78:0e:3d:ac:0c:73:4d:ee:2f:32:88:4f:
                    dc:8b:87:23:ef:d0:42:03:ed:cd:13:4d:e4:a5:2b:
                    dc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:ED:31:F8:F5:89:62:29:C8:E7:9B:AF:B9:88:4C:F6:42:2A:46:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/268ea0de-6048-3916-af1e-d45f0d2aad37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.254.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:54:29:f5:f8:75:b9:22:ee:5e:21:de:a1:5a:4b:13:a8:e5:
         e1:df:ca:2f:e5:dd:7f:4b:da:16:3e:e2:e0:f9:33:dd:d9:47:
         cb:9d:7b:74:9f:fc:e5:ce:c2:f9:f7:a7:6c:83:a7:d4:a7:b8:
         52:ba:54:93:bf:56:ff:66:bd:84:29:c4:08:ad:d8:0f:5d:60:
         4e:00:ac:80:2c:c2:85:9c:79:ff:4c:18:85:0b:cc:94:82:1a:
         70:91:0d:6d:01:64:9a:7e:70:70:5b:77:2b:fb:51:ea:8f:2f:
         55:b2:fd:58:62:ae:5e:64:ad:a4:97:78:5c:59:a2:45:06:ad:
         08:1a:c7:ec:dc:f0:63:3c:0e:d9:a5:0d:a9:99:67:5f:29:dc:
         bc:ee:3a:84:d0:c2:08:7f:4b:40:40:7b:24:3d:20:1f:4c:bf:
         fb:47:7e:b2:ac:6c:c0:ff:12:b0:5a:f4:de:7f:2f:cf:9c:6a:
         ac:f2:e6:3c:f3:ca:eb:60:f2:a2:f7:3d:ba:3c:50:e1:b0:25:
         6f:09:1c:97:0d:f9:e4:4f:3f:fc:41:27:6a:fd:20:07:c4:3a:
         55:e7:fe:e9:c4:eb:77:3e:c8:1d:32:27:df:63:b7:5b:03:1e:
         9b:b3:0f:b7:84:26:11:cb:c7:ea:5a:e8:8f:a7:c2:f0:51:99:
         12:b2:15:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcoNfaXNUKYSC9dP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkwOTEzMDA0MVoXDTI0MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk
ZmEzZjlhMTQtODkxYy00NmQxLWFlYzMtMjM1ZWIxMWQ0Yzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg7JGCZZz8r1uAmzvuSmM1JhSsLcp0dTbctd
TjHydp1DqwEKN9hVrQlEiG+X7uThlBy15aeY2zGgm6TuWrOaFhsA0nw1rCj9/l0T
cNin7C+LI6eI08vcSqXm3fSODK2GV108JLSnuAItkhM+C+Vrxsd4N8bpKax3rVHn
AP317zRIn5cR91OWcfIz8WyIFtb4QgcGlxB3YUdM6z7amy763QzMB6tscWazI5Hi
I9H8WO9KZ4gx7HvxS/QXgyKzG4B4aAChgZUS0aFZxlJaiUFp1boYuHXSyQ9gt+IQ
znWE0+/bH6t4Dj2sDHNN7i8yiE/ci4cj79BCA+3NE03kpSvcgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGXtMfj1iWIpyOebr7mITPZCKkYbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjY4ZWEwZGUtNjA0OC0z
OTE2LWFmMWUtZDQ1ZjBkMmFhZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErv4gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG5UKfX4dbki7l4h3qFaSxOo5eHfyi/l3X9L2hY+4uD5M93ZR8ude3Sf
/OXOwvn3p2yDp9SnuFK6VJO/Vv9mvYQpxAit2A9dYE4ArIAswoWcef9MGIULzJSC
GnCRDW0BZJp+cHBbdyv7UeqPL1Wy/Vhirl5kraSXeFxZokUGrQgax+zc8GM8Dtml
DamZZ18p3LzuOoTQwgh/S0BAeyQ9IB9Mv/tHfrKsbMD/ErBa9N5/L8+caqzy5jzz
yutg8qL3Pbo8UOGwJW8JHJcN+eRPP/xBJ2r9IAfEOlXn/unE63c+yB0yJ99jt1sD
HpuzD7eEJhHLx+pa6I+nwvBRmRKyFS8=
-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:11 2024 by rpki-client on console-ams.rpki-client.org