Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a18232f-7a54-3650-a1b7-1a5797f80f63.roa
File:                     5a18232f-7a54-3650-a1b7-1a5797f80f63.roa (raw, json)
Hash identifier:          DHTpbzaqHs3/qO5ZCZeqslA7qj100/L1If4fV7/rFkQ=
Subject key identifier:   13:27:FB:82:5F:74:C2:17:CD:50:65:DD:B4:79:BA:E1:AF:78:93:80
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBD0146E6E4D3ECB2A4040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a18232f-7a54-3650-a1b7-1a5797f80f63.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        97.212.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:d0:14:6e:6e:4d:3e:cb:2a:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=d42887f8-12ca-4c04-beb7-151a58b658c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:24:4d:cf:d2:7d:2f:c0:6a:3c:57:f4:76:83:
                    d1:9c:99:1f:46:8b:ec:d6:eb:03:47:6e:6a:3f:2b:
                    06:3a:1e:ae:c6:ec:a3:e4:01:c9:7a:56:c4:37:53:
                    c2:22:2a:4a:5e:c3:3e:11:08:d8:33:16:f8:96:63:
                    4e:b9:ce:cd:f9:a8:57:13:63:39:f0:6b:0d:b6:b4:
                    0e:81:a4:82:24:62:92:b9:55:4c:72:a8:b6:e3:d7:
                    05:00:9a:f2:69:db:1c:06:b4:57:14:9d:96:f0:1b:
                    3a:50:2e:a9:68:9f:13:89:ca:52:f1:8a:69:a7:94:
                    85:4d:b7:80:3d:41:40:01:8d:ca:f4:5d:73:8e:5d:
                    5b:59:e5:2c:06:a1:6a:89:e0:ac:b1:f4:b8:6a:36:
                    d2:fd:04:91:eb:61:6b:46:db:5d:1c:17:6f:1f:57:
                    e6:3a:0e:64:92:58:b1:4b:26:07:a2:6e:82:24:ee:
                    46:d5:fe:70:bd:3a:0f:d8:ed:f7:9e:9b:fc:b5:ed:
                    b6:b8:ee:c9:90:a3:e0:16:f7:32:ab:f9:a5:e5:a7:
                    02:6f:a1:50:18:27:22:42:65:b3:fb:74:93:ee:ef:
                    96:24:47:51:5d:31:db:8d:5c:b5:7d:bb:7a:18:07:
                    27:8f:21:90:75:68:09:f7:9d:b2:ff:9d:b5:f3:05:
                    95:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:27:FB:82:5F:74:C2:17:CD:50:65:DD:B4:79:BA:E1:AF:78:93:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a18232f-7a54-3650-a1b7-1a5797f80f63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.212.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:69:82:f5:df:7a:a5:28:e4:cc:1b:b0:b5:66:89:09:be:75:
         93:f2:07:ce:23:04:a8:06:ed:a1:ee:1b:a7:d5:d3:f7:68:55:
         3f:45:74:83:1f:86:c2:47:39:b2:ac:87:c2:fd:dc:d7:87:22:
         72:2a:1d:ff:bb:bb:a6:7c:c4:c7:f0:ef:0c:48:08:79:bf:cc:
         9a:b8:c7:fc:a0:c7:1d:cf:ab:2d:9d:8f:2c:2a:6b:af:ae:58:
         3b:ca:0e:aa:48:18:62:a1:e4:ae:af:b9:39:0f:8e:e3:73:8f:
         0f:da:69:56:e6:3c:5c:25:b1:b1:37:93:e5:79:ce:af:f9:e4:
         5f:1d:fb:87:4d:0b:7c:36:67:cd:8d:bf:22:d7:1c:bc:5d:06:
         de:0b:b7:09:0b:28:a7:7a:a4:13:1b:9d:62:f7:32:6d:8b:77:
         4f:e8:c3:80:2a:68:45:6b:0c:d2:17:4e:06:5a:47:35:6c:26:
         5b:b7:8c:73:36:8a:98:9c:ea:96:5a:4c:88:c1:32:a8:b7:41:
         12:08:6f:4f:b0:c7:d1:6e:b4:ec:62:d5:df:73:cc:98:91:5f:
         62:a0:42:cc:3d:9e:50:25:4e:dc:2d:04:09:ef:f7:91:aa:7b:
         4a:13:19:9d:bc:54:d7:db:96:55:9b:fd:78:d1:b3:22:b9:40:
         a3:25:cb:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeJ69AUbm5NPssqQEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAxNDEzMDA0N1oXDTI1MDExMjE0MDA0N1owLzEtMCsGA1UEAxMk
ZDQyODg3ZjgtMTJjYS00YzA0LWJlYjctMTUxYTU4YjY1OGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SRNz9J9L8BqPFf0doPRnJkfRovs1usDR25q
PysGOh6uxuyj5AHJelbEN1PCIipKXsM+EQjYMxb4lmNOuc7N+ahXE2M58GsNtrQO
gaSCJGKSuVVMcqi249cFAJryadscBrRXFJ2W8Bs6UC6paJ8TicpS8Yppp5SFTbeA
PUFAAY3K9F1zjl1bWeUsBqFqieCssfS4ajbS/QSR62FrRttdHBdvH1fmOg5kklix
SyYHom6CJO5G1f5wvToP2O33npv8te22uO7JkKPgFvcyq/ml5acCb6FQGCciQmWz
+3ST7u+WJEdRXTHbjVy1fbt6GAcnjyGQdWgJ952y/5218wWVNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBMn+4JfdMIXzVBl3bR5uuGveJOAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWExODIzMmYtN2E1NC0z
NjUwLWExYjctMWE1Nzk3ZjgwZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYdRAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJpgvXfeqUo5MwbsLVmiQm+dZPyB84jBKgG7aHuG6fV0/doVT9FdIMf
hsJHObKsh8L93NeHInIqHf+7u6Z8xMfw7wxICHm/zJq4x/ygxx3Pqy2djywqa6+u
WDvKDqpIGGKh5K6vuTkPjuNzjw/aaVbmPFwlsbE3k+V5zq/55F8d+4dNC3w2Z82N
vyLXHLxdBt4LtwkLKKd6pBMbnWL3Mm2Ld0/ow4AqaEVrDNIXTgZaRzVsJlu3jHM2
ipic6pZaTIjBMqi3QRIIb0+wx9FutOxi1d9zzJiRX2KgQsw9nlAlTtwtBAnv95Gq
e0oTGZ28VNfbllWb/XjRsyK5QKMly7c=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:27 2024 by rpki-client on console-ams.rpki-client.org