Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38ed2aae-5279-3381-8ecf-7da53e955949.roa
File:                     38ed2aae-5279-3381-8ecf-7da53e955949.roa (raw, json)
Hash identifier:          FMMOpMhaQR9hBfA3RTnKeqZIxDYB8HjXQOjbkUO1SAE=
Subject key identifier:   AF:C0:6A:F1:08:28:37:85:DC:DB:34:D8:88:76:CB:94:CF:18:33:17
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B8830355676AB47315380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38ed2aae-5279-3381-8ecf-7da53e955949.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        108.55.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:88:30:35:56:76:ab:47:31:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=6468f92a-6986-4947-817a-67b049f327ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b2:35:06:68:3f:38:a1:e1:48:d9:20:56:a1:
                    24:7c:d9:5c:01:71:08:2f:70:f8:3d:ae:b4:ff:39:
                    e1:c1:a6:8b:28:d3:ef:da:d5:c2:7e:68:04:fd:79:
                    90:94:a0:0a:5b:c3:6e:bf:b9:56:5c:b6:5e:1e:4d:
                    9f:78:1b:a8:55:b7:70:de:ab:34:25:ea:c1:47:53:
                    a3:3a:b5:36:b1:57:dc:95:1e:87:f5:04:4f:93:9d:
                    29:c5:7f:89:b9:b9:54:65:81:6e:97:88:87:f4:55:
                    c0:62:d8:b7:d4:c2:9a:83:20:b2:b6:66:33:c1:58:
                    a4:d0:54:6f:fd:aa:0e:94:ce:59:23:ae:dd:da:25:
                    cc:9e:99:b3:45:84:48:61:b3:39:e1:36:f9:fb:76:
                    ad:3b:32:73:5a:6e:f1:96:18:54:c1:75:33:83:69:
                    24:cb:1a:1d:3b:bd:1f:52:bc:4b:5b:8a:f6:a0:77:
                    f3:a0:a1:b9:ce:4a:65:e4:86:91:c4:ea:6a:0d:e3:
                    50:93:46:0a:b3:24:0f:c8:13:15:27:82:1b:ad:14:
                    da:5d:a4:96:4b:8d:0f:99:e5:3c:c5:a3:f1:c2:68:
                    5c:0f:3e:b6:e3:91:fa:3b:8c:2f:08:97:d6:4d:d9:
                    bd:0e:57:72:fc:45:8e:3b:28:68:e8:f0:8b:62:0e:
                    f7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C0:6A:F1:08:28:37:85:DC:DB:34:D8:88:76:CB:94:CF:18:33:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38ed2aae-5279-3381-8ecf-7da53e955949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.55.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:16:3a:d8:b9:3b:43:35:1d:b7:5b:0d:cf:ea:61:ea:b2:fa:
         32:c5:11:81:32:c7:0f:97:9d:78:97:09:87:87:dc:41:8c:f9:
         5a:2b:24:13:70:67:b2:e9:1c:91:94:47:39:c3:47:b4:c6:83:
         0e:7e:e5:3f:18:3a:80:42:38:a4:9e:30:f9:57:9d:00:10:21:
         a0:63:de:05:f4:a7:07:67:bc:ae:68:dc:2b:c2:78:27:98:9b:
         ec:f5:fd:da:cf:d9:6b:33:56:5e:f2:9f:98:02:50:f9:84:54:
         3b:1c:87:d3:06:2b:bc:56:d7:87:12:a0:0e:9b:93:c7:23:d3:
         97:e7:b5:c6:ab:dd:ed:a8:b6:1e:7d:c3:f1:0c:92:27:6d:27:
         c2:0c:3b:74:19:d5:ca:4d:7f:30:27:23:68:6b:ce:9b:3c:af:
         f7:73:a3:5b:34:f4:13:b5:84:07:02:81:a7:3c:ad:03:e4:81:
         9d:fe:e8:0f:d3:f4:10:f5:5d:39:f7:3b:e4:a8:e3:3d:c6:57:
         7c:d7:3c:8c:e6:7b:f1:4c:7e:18:a6:a8:d3:f7:6a:d4:e3:f0:
         ae:52:c9:fc:a9:c0:71:d1:5b:f2:f3:ed:fe:83:c4:e0:5f:05:
         65:a1:f2:8b:4a:05:78:fc:d2:9b:18:29:38:2e:6e:f4:db:90:
         12:fc:95:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdTe4gwNVZ2q0cxU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk
NjQ2OGY5MmEtNjk4Ni00OTQ3LTgxN2EtNjdiMDQ5ZjMyN2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rI1Bmg/OKHhSNkgVqEkfNlcAXEIL3D4Pa60
/znhwaaLKNPv2tXCfmgE/XmQlKAKW8Nuv7lWXLZeHk2feBuoVbdw3qs0JerBR1Oj
OrU2sVfclR6H9QRPk50pxX+JublUZYFul4iH9FXAYti31MKagyCytmYzwVik0FRv
/aoOlM5ZI67d2iXMnpmzRYRIYbM54Tb5+3atOzJzWm7xlhhUwXUzg2kkyxodO70f
UrxLW4r2oHfzoKG5zkpl5IaRxOpqDeNQk0YKsyQPyBMVJ4IbrRTaXaSWS40PmeU8
xaPxwmhcDz6245H6O4wvCJfWTdm9Dldy/EWOOyho6PCLYg73owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK/AavEIKDeF3Ns02Ih2y5TPGDMXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzhlZDJhYWUtNTI3OS0z
MzgxLThlY2YtN2RhNTNlOTU1OTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbDdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAWOti5O0M1HbdbDc/qYeqy+jLFEYEyxw+XnXiXCYeH3EGM+VorJBNw
Z7LpHJGURznDR7TGgw5+5T8YOoBCOKSeMPlXnQAQIaBj3gX0pwdnvK5o3CvCeCeY
m+z1/drP2WszVl7yn5gCUPmEVDsch9MGK7xW14cSoA6bk8cj05fntcar3e2oth59
w/EMkidtJ8IMO3QZ1cpNfzAnI2hrzps8r/dzo1s09BO1hAcCgac8rQPkgZ3+6A/T
9BD1XTn3O+So4z3GV3zXPIzme/FMfhimqNP3atTj8K5SyfypwHHRW/Lz7f6DxOBf
BWWh8otKBXj80psYKTgubvTbkBL8lek=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:21 2024 by rpki-client on console-ams.rpki-client.org