Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b63a081-9d93-3de1-8d23-f282154d9442.roa
File:                     4b63a081-9d93-3de1-8d23-f282154d9442.roa (raw, json)
Hash identifier:          Nw06y8+6wrrlMKyxrZNCdJI9GGuVNOrZRI3pqXEcCzg=
Subject key identifier:   6A:0A:AB:C6:0D:0A:18:64:97:FD:32:B3:42:65:0E:86:70:EF:F7:6C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80D1AD4135411F60DE9910
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b63a081-9d93-3de1-8d23-f282154d9442.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        68.163.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:d1:ad:41:35:41:1f:60:de:99:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=608ee9d8-30e6-4a80-b456-600c35e1374a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:b8:8c:99:b9:f9:c1:ed:20:80:27:13:24:
                    7b:ea:d6:95:51:50:39:69:99:7b:eb:06:52:55:97:
                    90:1c:15:9c:ad:0a:d5:fd:c1:73:6d:48:33:45:16:
                    93:d1:12:d5:ea:58:e3:b5:3d:a2:cf:58:33:30:05:
                    1e:1a:9b:55:a6:eb:f7:bc:7b:cf:5f:1a:33:2d:d7:
                    33:0b:37:04:f2:59:82:7a:d4:db:e9:85:9a:e7:6e:
                    a6:ac:3c:89:0a:ad:6e:f6:42:f2:a8:03:ba:c7:2d:
                    4e:d3:3f:d7:80:19:c2:9f:33:23:71:95:24:66:51:
                    c6:9c:63:bc:e0:66:63:10:8a:b8:11:d7:ba:df:f4:
                    76:e2:2e:68:bf:fa:e8:10:c4:a1:bc:f5:2f:9a:72:
                    cb:1d:69:60:f5:bf:5e:65:76:1f:21:d1:2a:fa:4f:
                    97:91:66:f1:aa:9f:08:7d:97:e5:ec:ae:5d:af:56:
                    07:20:14:fc:9a:1d:35:6b:fb:dd:0b:9f:15:f6:94:
                    b6:fd:da:f3:7e:3d:ba:82:9c:69:e5:cb:cd:f7:df:
                    5c:aa:db:9f:2c:e5:24:ad:7a:ed:f0:af:90:ea:7f:
                    a2:af:1a:bd:45:b0:c5:e1:c8:88:07:0d:ca:39:1a:
                    a4:1d:9a:40:37:c9:84:5c:61:3f:cd:cf:ed:23:2d:
                    70:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0A:AB:C6:0D:0A:18:64:97:FD:32:B3:42:65:0E:86:70:EF:F7:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b63a081-9d93-3de1-8d23-f282154d9442.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.163.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:fb:4b:f7:16:f3:1e:6a:ca:3a:0f:97:eb:0b:d5:a9:4f:cc:
         7a:ce:d1:d1:30:7c:cc:d4:14:ab:a3:b5:57:69:b5:03:ab:89:
         8c:a9:55:01:ee:c5:c3:91:95:76:76:d2:69:ff:4a:34:9f:c6:
         be:3c:a4:a7:ad:d1:8c:74:52:68:34:fa:b1:3c:0e:ff:50:e6:
         e6:1b:5a:39:99:c8:f3:b9:11:fa:09:7e:1c:c5:53:c8:94:56:
         34:ea:a0:d0:e0:a7:e0:c5:57:a9:66:84:00:d4:bd:a5:e3:73:
         a3:f8:ad:cf:0f:32:78:a4:5f:9c:54:75:9e:6e:fc:26:49:d2:
         b4:0f:d4:ea:70:ce:74:cf:43:ef:61:dd:d9:6a:22:9c:c3:57:
         f3:51:44:5d:c5:c4:dc:36:e3:ea:9b:fa:4d:47:b3:93:9a:dd:
         17:80:96:87:44:56:61:10:69:21:9b:cb:09:2c:88:40:13:b3:
         bd:bb:17:97:0c:63:45:28:46:02:82:28:71:1b:ba:42:07:73:
         57:b1:2b:ec:76:6d:14:56:18:5d:73:22:93:16:d9:9d:e5:80:
         d5:60:df:05:bc:a7:4a:8d:c8:3c:53:1f:f4:1e:bf:d5:5a:b3:
         e1:08:ad:98:22:3e:c1:b5:1d:31:2e:51:3f:46:35:72:35:e7:
         9f:bb:83:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdMgNGtQTVBH2DemRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkyMjEzMDA0MFoXDTI0MTIyMTE0MDA0MFowLzEtMCsGA1UEAxMk
NjA4ZWU5ZDgtMzBlNi00YTgwLWI0NTYtNjAwYzM1ZTEzNzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue64jJm5+cHtIIAnEyR76taVUVA5aZl76wZS
VZeQHBWcrQrV/cFzbUgzRRaT0RLV6ljjtT2iz1gzMAUeGptVpuv3vHvPXxozLdcz
CzcE8lmCetTb6YWa526mrDyJCq1u9kLyqAO6xy1O0z/XgBnCnzMjcZUkZlHGnGO8
4GZjEIq4Ede63/R24i5ov/roEMShvPUvmnLLHWlg9b9eZXYfIdEq+k+XkWbxqp8I
fZfl7K5dr1YHIBT8mh01a/vdC58V9pS2/drzfj26gpxp5cvN999cqtufLOUkrXrt
8K+Q6n+irxq9RbDF4ciIBw3KORqkHZpAN8mEXGE/zc/tIy1wkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGoKq8YNChhkl/0ys0JlDoZw7/dsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGI2M2EwODEtOWQ5My0z
ZGUxLThkMjMtZjI4MjE1NGQ5NDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKN5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACP7S/cW8x5qyjoPl+sL1alPzHrO0dEwfMzUFKujtVdptQOriYypVQHu
xcORlXZ20mn/SjSfxr48pKet0Yx0Umg0+rE8Dv9Q5uYbWjmZyPO5EfoJfhzFU8iU
VjTqoNDgp+DFV6lmhADUvaXjc6P4rc8PMnikX5xUdZ5u/CZJ0rQP1OpwznTPQ+9h
3dlqIpzDV/NRRF3FxNw24+qb+k1Hs5Oa3ReAlodEVmEQaSGbywksiEATs727F5cM
Y0UoRgKCKHEbukIHc1exK+x2bRRWGF1zIpMW2Z3lgNVg3wW8p0qNyDxTH/Qev9Va
s+EIrZgiPsG1HTEuUT9GNXI155+7gzo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:29 2024 by rpki-client on console-fra.rpki-client.org