Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38ac120b-fbf2-3ba7-abe7-c996389186e5.roa
File:                     38ac120b-fbf2-3ba7-abe7-c996389186e5.roa (raw, json)
Hash identifier:          AtWG1gwyHKA7rvbMUKEuvJCq9NXECdITj3CdSvZtlWE=
Subject key identifier:   8C:6C:49:98:74:36:50:4D:9F:89:66:31:33:52:BA:BC:E8:EE:E9:D6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858477EC124FCF87F98DF8AD64700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38ac120b-fbf2-3ba7-abe7-c996389186e5.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.103.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:24:fc:f8:7f:98:df:8a:d6:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=192ac132-8583-43c8-a038-70ef0a2c259b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:b7:98:14:f7:e8:9f:ed:90:ff:79:59:80:
                    a7:dd:5a:ac:f5:95:ca:fe:64:4b:c5:76:ba:8a:1c:
                    4a:af:cd:9b:2e:06:f7:2d:36:d0:b0:1a:dc:47:aa:
                    0a:3e:60:54:55:05:2f:65:53:20:16:08:ff:14:2a:
                    c5:e5:b9:b7:84:5f:e2:a8:99:48:74:66:d0:c6:c2:
                    5d:02:9a:2a:72:70:37:6d:99:b1:b9:7f:4d:b2:c3:
                    79:3f:77:8d:76:b9:ca:6f:13:fc:eb:c4:fa:7d:81:
                    f5:8f:5b:fb:96:a2:0f:d3:ca:0d:c5:0a:40:db:76:
                    c6:45:dd:d6:fd:f3:4c:91:78:df:68:ae:f6:b1:4e:
                    41:17:b2:12:28:65:75:9f:ac:db:6f:96:25:ec:49:
                    ee:75:46:6e:00:8b:c4:c5:86:36:76:03:f5:33:40:
                    71:02:ee:d4:83:2d:80:ee:18:28:50:67:81:f5:21:
                    c5:de:34:63:c1:0a:c9:10:2f:5b:11:19:1c:fe:60:
                    9f:e3:2d:81:d5:1e:0d:f0:25:8f:8f:7e:22:65:82:
                    b7:78:d7:7b:5e:91:5a:71:b1:01:9d:e9:e6:5a:86:
                    86:bd:a1:f8:df:02:fc:07:76:23:75:0c:a8:00:7c:
                    66:40:77:e5:46:93:d9:f2:35:fa:66:65:ad:44:0b:
                    cb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6C:49:98:74:36:50:4D:9F:89:66:31:33:52:BA:BC:E8:EE:E9:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38ac120b-fbf2-3ba7-abe7-c996389186e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:df:69:91:45:92:2f:d5:95:97:ca:23:5e:43:c6:94:a1:6a:
         89:dc:8b:a8:60:f4:e4:bf:24:57:86:9c:93:1b:2c:67:c9:57:
         2e:07:a7:f3:6b:75:0d:7c:89:84:82:b4:62:68:ce:be:f8:b2:
         1f:90:92:25:00:b9:39:78:f7:b2:79:a2:b2:63:44:7d:84:09:
         82:e4:07:a7:2f:e3:e2:7a:5e:b3:17:b6:60:0d:38:a6:ee:74:
         34:a4:c1:2f:a7:e6:c6:4c:58:b1:ae:ae:46:75:d2:66:22:9a:
         2b:39:ed:8b:a0:87:0e:7d:2c:c7:07:f3:63:35:8c:49:77:d6:
         57:d2:5f:76:e8:eb:f2:7d:e5:f9:7a:ee:de:ce:c5:32:a0:e7:
         1c:23:10:9f:81:f7:ab:3b:51:a5:db:0d:b8:d4:f9:92:3f:56:
         62:b7:c9:40:d7:6f:97:b9:64:56:3b:4b:20:3c:ad:83:d2:e3:
         38:29:e4:e2:10:2d:c3:ed:71:04:fe:9f:0c:9c:82:29:cc:29:
         b2:60:45:64:69:35:33:8c:88:22:38:47:e4:f1:ac:07:ab:4e:
         75:b6:bb:f8:d6:51:25:34:f5:d7:da:5e:ce:ac:fb:03:22:f8:
         ab:27:d1:b6:31:c5:31:0e:2f:16:63:ea:60:36:52:75:b7:dc:
         97:e7:23:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd+wST8+H+Y34rWRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk
MTkyYWMxMzItODU4My00M2M4LWEwMzgtNzBlZjBhMmMyNTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyG3mBT36J/tkP95WYCn3Vqs9ZXK/mRLxXa6
ihxKr82bLgb3LTbQsBrcR6oKPmBUVQUvZVMgFgj/FCrF5bm3hF/iqJlIdGbQxsJd
ApoqcnA3bZmxuX9NssN5P3eNdrnKbxP868T6fYH1j1v7lqIP08oNxQpA23bGRd3W
/fNMkXjfaK72sU5BF7ISKGV1n6zbb5Yl7EnudUZuAIvExYY2dgP1M0BxAu7Ugy2A
7hgoUGeB9SHF3jRjwQrJEC9bERkc/mCf4y2B1R4N8CWPj34iZYK3eNd7XpFacbEB
nenmWoaGvaH43wL8B3YjdQyoAHxmQHflRpPZ8jX6ZmWtRAvL4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIxsSZh0NlBNn4lmMTNSurzo7unWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzhhYzEyMGItZmJmMi0z
YmE3LWFiZTctYzk5NjM4OTE4NmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGdcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI3faZFFki/VlZfKI15DxpShaonci6hg9OS/JFeGnJMbLGfJVy4Hp/Nr
dQ18iYSCtGJozr74sh+QkiUAuTl497J5orJjRH2ECYLkB6cv4+J6XrMXtmANOKbu
dDSkwS+n5sZMWLGurkZ10mYimis57Yughw59LMcH82M1jEl31lfSX3bo6/J95fl6
7t7OxTKg5xwjEJ+B96s7UaXbDbjU+ZI/VmK3yUDXb5e5ZFY7SyA8rYPS4zgp5OIQ
LcPtcQT+nwycginMKbJgRWRpNTOMiCI4R+TxrAerTnW2u/jWUSU09dfaXs6s+wMi
+Ksn0bYxxTEOLxZj6mA2UnW33JfnI6U=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:25 2024 by rpki-client on console-fra.rpki-client.org