Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/61f8de0d-b36f-3476-83bb-0a0222b16117.roa
File:                     61f8de0d-b36f-3476-83bb-0a0222b16117.roa (raw, json)
Hash identifier:          PYHNScAvFU0qjeWKtBQZ+2DNf2wclZBN7YMiNv8ckzY=
Subject key identifier:   C1:86:51:BD:BB:DA:78:D0:7F:7E:88:36:F5:B7:87:BF:AE:3C:07:5A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA07F146C032FE964FA6C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/61f8de0d-b36f-3476-83bb-0a0222b16117.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.218.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:07:f1:46:c0:32:fe:96:4f:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=7ea588cb-42be-4965-a8ef-39544be50142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:41:eb:2e:7e:e1:b3:e0:a0:47:59:df:5a:
                    53:3f:20:29:ff:3f:cb:b0:ca:e0:05:d6:15:5c:cc:
                    b3:60:4f:c1:63:e6:c2:8d:3b:57:8c:da:56:45:55:
                    12:ed:54:8c:77:5e:4b:09:ca:46:24:6e:bf:f0:0e:
                    91:78:ab:59:55:29:15:8f:93:ed:26:12:96:77:63:
                    a2:74:b5:17:9c:9c:77:cf:d8:27:9b:05:dd:74:91:
                    57:87:11:5c:95:04:60:8f:2b:52:91:57:95:a8:a5:
                    08:b3:88:b0:ef:c4:e5:e0:7b:ee:b3:6d:d4:fe:33:
                    28:bb:80:80:c0:3f:56:1a:af:ac:af:75:2a:bf:63:
                    7b:b1:98:e4:7e:75:5f:37:e7:49:a0:07:31:ac:bf:
                    29:7a:10:46:71:5f:81:ad:77:80:4c:07:38:4c:f3:
                    b6:f9:30:da:9b:d1:c0:1b:5d:d5:52:a8:9a:48:32:
                    6c:eb:de:57:32:ea:d3:46:1b:12:4d:0b:39:85:d3:
                    47:a2:90:16:0d:ac:17:b0:7a:b6:74:a1:72:9b:ab:
                    47:3c:17:b9:88:02:d0:fe:09:32:21:fa:63:e7:4d:
                    aa:d1:b0:a7:4b:e7:a8:f8:74:73:8c:32:99:4b:9e:
                    66:19:c2:98:ff:69:3c:ba:27:ee:3b:44:bf:0a:37:
                    44:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:86:51:BD:BB:DA:78:D0:7F:7E:88:36:F5:B7:87:BF:AE:3C:07:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/61f8de0d-b36f-3476-83bb-0a0222b16117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.218.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:12:8f:b6:71:c3:50:78:25:3d:11:02:b4:a6:9e:6e:f5:3b:
         cb:75:0c:c1:a0:87:3a:2d:9d:87:93:22:b7:92:7c:7e:a2:29:
         ac:de:64:64:7e:1e:87:7a:48:75:6c:91:f2:88:65:50:4e:98:
         46:66:4a:d0:df:88:29:eb:5c:ca:26:0c:25:e4:d0:8c:f7:0b:
         95:12:ee:ec:75:be:68:2a:5f:7c:bd:b1:f1:a5:72:ad:e2:0f:
         8b:9a:6b:65:66:59:50:3d:5b:bf:c0:b2:36:0f:19:be:8f:e9:
         c9:48:a8:64:ee:6f:49:d0:07:96:aa:1d:f7:2e:fd:b2:b9:30:
         c4:ba:0f:04:35:e2:34:10:ea:2d:75:94:95:56:f1:5c:db:05:
         28:aa:35:fd:c1:75:1c:c6:1d:23:e5:24:b6:82:8c:db:16:9e:
         ca:2e:1c:46:a2:0b:1e:b7:8e:b9:6e:d5:b5:d0:3d:62:f0:ba:
         b3:fc:ed:40:e1:44:b2:61:a6:9e:d1:65:1c:88:bd:7e:56:37:
         cf:d7:54:83:5f:28:c7:eb:c2:83:1b:62:18:c2:31:49:44:80:
         b4:8b:d9:d9:7d:f6:d4:a6:25:b8:e4:eb:c1:c8:10:e5:d7:82:
         23:36:83:ee:2f:76:65:92:3a:9f:72:f7:fc:56:a3:33:81:23:
         31:23:05:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh+gfxRsAy/pZPpsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTExNTAyMDAyOFoXDTI1MDIxMzAyMDAyOFowLzEtMCsGA1UEAxMk
N2VhNTg4Y2ItNDJiZS00OTY1LWE4ZWYtMzk1NDRiZTUwMTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAlB6y5+4bPgoEdZ31pTPyAp/z/LsMrgBdYV
XMyzYE/BY+bCjTtXjNpWRVUS7VSMd15LCcpGJG6/8A6ReKtZVSkVj5PtJhKWd2Oi
dLUXnJx3z9gnmwXddJFXhxFclQRgjytSkVeVqKUIs4iw78Tl4Hvus23U/jMou4CA
wD9WGq+sr3Uqv2N7sZjkfnVfN+dJoAcxrL8pehBGcV+BrXeATAc4TPO2+TDam9HA
G13VUqiaSDJs695XMurTRhsSTQs5hdNHopAWDawXsHq2dKFym6tHPBe5iALQ/gky
Ifpj502q0bCnS+eo+HRzjDKZS55mGcKY/2k8uifuO0S/CjdEiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMGGUb272njQf36INvW3h7+uPAdaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjFmOGRlMGQtYjM2Zi0z
NDc2LTgzYmItMGEwMjIyYjE2MTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtowMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEoSj7Zxw1B4JT0RArSmnm71O8t1DMGghzotnYeTIreSfH6iKazeZGR+
Hod6SHVskfKIZVBOmEZmStDfiCnrXMomDCXk0Iz3C5US7ux1vmgqX3y9sfGlcq3i
D4uaa2VmWVA9W7/AsjYPGb6P6clIqGTub0nQB5aqHfcu/bK5MMS6DwQ14jQQ6i11
lJVW8VzbBSiqNf3BdRzGHSPlJLaCjNsWnsouHEaiCx63jrlu1bXQPWLwurP87UDh
RLJhpp7RZRyIvX5WN8/XVINfKMfrwoMbYhjCMUlEgLSL2dl99tSmJbjk68HIEOXX
giM2g+4vdmWSOp9y9/xWozOBIzEjBfE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:33 2024 by rpki-client on console-fra.rpki-client.org