Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60e3eed3-1d1c-39e6-883f-cd7c8ecd01e4.roa
File:                     60e3eed3-1d1c-39e6-883f-cd7c8ecd01e4.roa (raw, json)
Hash identifier:          x+pOetEFk2QkFA5Orl7Kg9e3031j8YB2UuSVApk9pvg=
Subject key identifier:   45:F8:92:62:E2:1C:ED:7C:C3:64:B2:35:8B:25:1C:6B:23:36:CD:66
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1F9FBACE925B2F13880DE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60e3eed3-1d1c-39e6-883f-cd7c8ecd01e4.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.199.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:f9:fb:ac:e9:25:b2:f1:38:80:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=c3b70cd0-a9ae-45b9-8701-9eef4b0a50b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3f:73:9e:db:b2:7e:cc:46:e4:27:ac:d0:fc:
                    7d:d7:77:c9:f3:06:87:24:c0:eb:92:3b:77:c3:f0:
                    03:19:f5:83:bd:ab:4a:b1:47:79:09:e9:f3:89:bd:
                    6b:a6:76:3b:9f:69:45:55:e1:5b:c1:22:fb:97:f0:
                    b0:5e:dd:8e:8a:08:ff:70:1e:cc:2d:d1:20:74:20:
                    61:c0:ba:53:60:14:60:20:8c:28:78:32:c1:94:bf:
                    56:3b:7a:83:eb:3a:20:76:a9:df:6e:c8:dd:6b:c7:
                    b2:61:95:cb:ae:8a:6d:35:a2:dc:b6:02:59:63:cd:
                    22:69:79:ef:f4:11:07:6a:53:d3:ee:12:f0:d3:53:
                    1f:93:48:46:f2:93:2f:e0:00:3b:77:f3:e3:55:47:
                    41:18:98:0a:a9:fd:70:39:7b:1d:24:1a:ad:0f:d0:
                    a0:58:ad:c6:19:4c:2b:ed:0c:65:c0:92:6d:ec:52:
                    4e:cd:0e:f5:57:89:a8:dc:83:a2:b4:ed:0a:33:d2:
                    c7:ee:7a:e1:c4:c2:d9:95:1b:77:c7:cb:55:8f:2f:
                    4c:23:c8:7d:df:cb:a9:e4:cc:8e:c9:cb:8b:87:74:
                    bb:56:f5:08:f0:f1:44:c4:d0:f6:97:ba:86:2d:28:
                    d1:bb:f9:26:ee:f2:00:26:b3:5b:ad:38:f6:6a:99:
                    2e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F8:92:62:E2:1C:ED:7C:C3:64:B2:35:8B:25:1C:6B:23:36:CD:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60e3eed3-1d1c-39e6-883f-cd7c8ecd01e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.199.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:c4:c9:43:48:17:ad:65:a0:64:0c:60:3a:26:0f:d9:33:09:
         0c:43:c9:e1:01:dc:61:8b:7c:aa:e5:db:f7:a6:dd:19:33:67:
         33:ae:fd:18:f2:79:7f:9e:b7:c8:10:85:57:ed:b0:80:45:e8:
         6f:18:fa:70:7f:57:37:f2:6b:73:ed:8d:35:6b:4d:dc:28:45:
         a9:bf:85:e2:ab:1f:14:1c:29:22:78:a3:2d:84:e7:0e:d5:31:
         31:52:57:67:03:95:cd:b0:0f:7f:9d:a0:ad:5d:3e:7f:c1:bd:
         40:b7:7a:1c:18:60:0f:e3:f0:25:5f:c5:43:c1:df:9f:3b:02:
         b8:43:8e:76:07:1e:18:4f:cb:56:d4:3e:a7:a4:af:25:ef:68:
         9e:69:1a:e0:09:24:31:0b:46:59:1e:1d:81:f9:4e:59:09:ca:
         e2:cd:a5:ed:13:eb:44:0e:1b:c7:9e:79:be:29:59:74:6e:65:
         b2:ee:e3:91:f3:6d:c6:18:dc:e4:89:bd:f5:84:35:4e:6e:28:
         3d:19:f4:c2:f2:fc:7b:9d:05:90:7c:f7:c1:0f:36:42:77:97:
         2a:ce:91:9f:3b:9f:0e:ec:d6:32:6e:a9:25:88:4f:e1:b3:ee:
         30:5f:79:69:ef:43:92:15:b0:43:a0:10:e2:8d:d0:01:54:a2:
         37:6d:a4:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh+fus6SWy8TiA3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTExNTAyMDAyOFoXDTI1MDIxMzAyMDAyOFowLzEtMCsGA1UEAxMk
YzNiNzBjZDAtYTlhZS00NWI5LTg3MDEtOWVlZjRiMGE1MGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD9zntuyfsxG5Ces0Px913fJ8waHJMDrkjt3
w/ADGfWDvatKsUd5Cenzib1rpnY7n2lFVeFbwSL7l/CwXt2Oigj/cB7MLdEgdCBh
wLpTYBRgIIwoeDLBlL9WO3qD6zogdqnfbsjda8eyYZXLroptNaLctgJZY80iaXnv
9BEHalPT7hLw01Mfk0hG8pMv4AA7d/PjVUdBGJgKqf1wOXsdJBqtD9CgWK3GGUwr
7QxlwJJt7FJOzQ71V4mo3IOitO0KM9LH7nrhxMLZlRt3x8tVjy9MI8h938up5MyO
ycuLh3S7VvUI8PFExND2l7qGLSjRu/km7vIAJrNbrTj2apkupwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEX4kmLiHO18w2SyNYslHGsjNs1mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjBlM2VlZDMtMWQxYy0z
OWU2LTg4M2YtY2Q3YzhlY2QwMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrsfgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIfEyUNIF61loGQMYDomD9kzCQxDyeEB3GGLfKrl2/em3RkzZzOu/Rjy
eX+et8gQhVftsIBF6G8Y+nB/Vzfya3PtjTVrTdwoRam/heKrHxQcKSJ4oy2E5w7V
MTFSV2cDlc2wD3+doK1dPn/BvUC3ehwYYA/j8CVfxUPB3587ArhDjnYHHhhPy1bU
PqekryXvaJ5pGuAJJDELRlkeHYH5TlkJyuLNpe0T60QOG8eeeb4pWXRuZbLu45Hz
bcYY3OSJvfWENU5uKD0Z9MLy/HudBZB898EPNkJ3lyrOkZ87nw7s1jJuqSWIT+Gz
7jBfeWnvQ5IVsEOgEOKN0AFUojdtpFU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:29 2024 by rpki-client on console-ams.rpki-client.org