Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41947ac2-0ed3-382f-91c9-d472369014d3.roa
File:                     41947ac2-0ed3-382f-91c9-d472369014d3.roa (raw, json)
Hash identifier:          c1x6FZ5u6tyDVCADq9ZXo31Cbs3eaO4FKMZ+BmO+294=
Subject key identifier:   9A:80:ED:0B:B3:21:05:0B:D3:99:75:77:7A:A8:B4:F4:EC:61:11:C5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847EF40A357179C51F2CE57D8A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41947ac2-0ed3-382f-91c9-d472369014d3.roa
Signing time:             Tue 19 Nov 2024 20:08:23 +0000
ROA not before:           Tue 19 Nov 2024 20:08:23 +0000
ROA not after:            Mon 17 Feb 2025 20:08:23 +0000
asID:                     6167
IP address blocks:        97.213.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:40:a3:57:17:9c:51:f2:ce:57:d8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 19 20:08:23 2024 GMT
            Not After : Feb 17 20:08:23 2025 GMT
        Subject: CN=b229d0e6-0f7a-4140-94cc-cd088758897f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:12:5d:b7:26:71:fe:a5:5b:81:7a:53:07:cf:
                    f3:a8:31:2c:0f:78:df:98:f3:72:89:1e:54:0f:9b:
                    dd:05:4d:cd:1a:ab:74:7c:d6:10:a9:1d:91:f6:4c:
                    ea:9a:29:cd:2f:3b:60:f3:e3:6d:d2:89:bb:94:05:
                    16:53:15:d3:c0:a8:89:fb:65:fd:25:9f:27:c1:16:
                    f4:a9:a6:e2:95:8c:e4:f7:97:5b:dc:f1:8b:34:f4:
                    96:1d:e5:e6:10:db:c0:71:10:0c:68:71:c5:7f:e7:
                    2d:1b:f2:16:81:f1:e0:05:e1:ca:32:91:e0:bb:cf:
                    cb:cd:5b:2d:7b:a9:97:8a:ac:d7:f1:b4:66:85:f6:
                    bf:48:cd:4a:8b:2b:27:27:2b:36:ad:fd:65:ae:c2:
                    a6:fd:fc:e6:4e:69:8a:2e:7a:35:34:02:66:fb:39:
                    82:64:31:25:9b:73:9f:11:3d:fc:62:b3:16:c8:bb:
                    e0:f7:f1:0d:0e:19:dc:6c:3b:74:bb:ff:ae:5e:98:
                    ac:56:17:44:2c:30:17:4b:d3:2f:b8:36:83:6f:7d:
                    07:b6:aa:3f:a0:18:ca:a9:0a:10:a1:59:e4:4e:6c:
                    74:d5:f7:65:bf:76:80:0c:06:cd:fe:d7:be:a9:c8:
                    ee:e6:bb:61:96:ab:2d:83:ef:5d:a9:b4:3f:9b:6e:
                    13:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:80:ED:0B:B3:21:05:0B:D3:99:75:77:7A:A8:B4:F4:EC:61:11:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41947ac2-0ed3-382f-91c9-d472369014d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.213.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:63:2f:b4:72:d6:12:49:47:4b:85:b9:70:99:80:12:69:8a:
         06:e2:8a:af:a0:f5:92:6f:ad:4a:0d:7d:c5:e7:6b:7a:d4:f2:
         42:bb:10:12:1f:d7:d1:52:2e:0d:72:41:c4:61:38:92:30:ed:
         29:37:1f:4f:a6:04:0f:aa:74:ef:de:30:47:f9:9c:92:8c:0d:
         86:c9:16:d3:53:34:f5:24:14:83:dc:b6:c9:a6:0c:c1:97:a5:
         cc:56:ed:6e:c2:1a:95:3f:19:43:c4:d7:dc:d5:ac:fe:77:a7:
         e3:0b:e2:13:fa:94:37:d5:1e:5a:13:50:0b:ec:d4:29:24:47:
         bc:55:2a:94:37:8a:2f:9c:f1:53:fe:fb:ef:bf:a8:50:a3:09:
         b4:77:51:83:87:f4:90:04:8a:83:0c:b2:b6:bd:6b:66:c2:64:
         fd:b7:52:62:6a:75:95:3f:85:7d:bf:d2:78:e8:63:b7:c6:42:
         14:a2:cd:5a:e7:94:ac:e4:01:bd:a8:76:ae:3e:09:32:b3:4a:
         3c:a9:91:4b:e3:e8:50:9f:e8:6b:a7:52:21:f6:f2:01:fd:d3:
         dd:ac:00:c6:95:d5:9e:58:60:0f:aa:69:9b:71:d5:e3:5d:ac:
         ce:e3:6e:9c:1a:0d:0b:de:1e:f0:53:12:b8:89:c4:9d:ba:6a:
         be:e0:ce:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfvQKNXF5xR8s5X2KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTExOTIwMDgyM1oXDTI1MDIxNzIwMDgyM1owLzEtMCsGA1UEAxMk
YjIyOWQwZTYtMGY3YS00MTQwLTk0Y2MtY2QwODg3NTg4OTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRJdtyZx/qVbgXpTB8/zqDEsD3jfmPNyiR5U
D5vdBU3NGqt0fNYQqR2R9kzqminNLztg8+Nt0om7lAUWUxXTwKiJ+2X9JZ8nwRb0
qabilYzk95db3PGLNPSWHeXmENvAcRAMaHHFf+ctG/IWgfHgBeHKMpHgu8/LzVst
e6mXiqzX8bRmhfa/SM1KiysnJys2rf1lrsKm/fzmTmmKLno1NAJm+zmCZDElm3Of
ET38YrMWyLvg9/ENDhncbDt0u/+uXpisVhdELDAXS9MvuDaDb30Htqo/oBjKqQoQ
oVnkTmx01fdlv3aADAbN/te+qcju5rthlqstg+9dqbQ/m24THQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJqA7QuzIQUL05l1d3qotPTsYRHFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDE5NDdhYzItMGVkMy0z
ODJmLTkxYzktZDQ3MjM2OTAxNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYdX4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRjL7Ry1hJJR0uFuXCZgBJpigbiiq+g9ZJvrUoNfcXna3rU8kK7EBIf
19FSLg1yQcRhOJIw7Sk3H0+mBA+qdO/eMEf5nJKMDYbJFtNTNPUkFIPctsmmDMGX
pcxW7W7CGpU/GUPE19zVrP53p+ML4hP6lDfVHloTUAvs1CkkR7xVKpQ3ii+c8VP+
+++/qFCjCbR3UYOH9JAEioMMsra9a2bCZP23UmJqdZU/hX2/0njoY7fGQhSizVrn
lKzkAb2odq4+CTKzSjypkUvj6FCf6GunUiH28gH9092sAMaV1Z5YYA+qaZtx1eNd
rM7jbpwaDQveHvBTEriJxJ26ar7gzjc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:23 2024 by rpki-client on console-ams.rpki-client.org