Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ea132b1-b2c5-3125-b4eb-003d9c3861d4.roa
File:                     6ea132b1-b2c5-3125-b4eb-003d9c3861d4.roa (raw, json)
Hash identifier:          kTM7l+18fys6B+BTdD6Vh+XPM1T/+f3xt88SWLOmAMA=
Subject key identifier:   C6:31:9C:38:F4:F4:05:61:83:9D:DF:AA:9E:3F:1F:03:A5:07:90:61
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847A5D6BDF2D560D3376814BC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ea132b1-b2c5-3125-b4eb-003d9c3861d4.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        75.200.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:bd:f2:d5:60:d3:37:68:14:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=928b3c8a-5024-4b04-bedd-6ed0f7d3c969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:02:36:8f:69:61:76:09:10:68:03:8a:ec:85:
                    f6:90:35:41:88:68:d6:23:92:8e:5b:2b:8d:7c:49:
                    06:84:b5:74:7b:9b:ff:f2:c6:9c:c1:d0:7a:33:75:
                    08:3f:a0:cb:b2:61:53:8a:41:6a:94:b5:a8:15:b0:
                    6f:34:92:20:f8:16:59:19:d6:30:32:1f:08:e1:3c:
                    79:c4:9e:d3:cc:da:02:9a:e5:81:74:0e:48:ac:13:
                    eb:40:ea:da:82:70:b0:7f:36:9f:9d:10:26:ef:c9:
                    9d:19:fe:1d:06:a0:85:be:42:f6:32:6c:98:ce:d0:
                    8c:64:ae:eb:e5:ea:61:ae:ee:57:6c:c2:8e:8d:3f:
                    ec:17:b4:31:74:b1:9e:28:a3:03:a7:e0:34:31:f9:
                    f9:87:9c:29:a6:fd:9e:08:3d:e9:77:bc:31:ca:96:
                    02:be:3c:58:10:65:e1:97:0c:d0:da:09:d5:6c:44:
                    b6:69:5c:c6:24:bd:dd:f8:d9:ed:5a:a5:7f:59:47:
                    58:42:c0:08:1a:f5:6e:bb:45:fd:9e:7e:0c:c8:92:
                    f9:45:cf:c6:d5:be:95:ed:cf:7b:a2:5e:41:1d:5d:
                    7a:b8:59:b2:21:5c:9f:dc:9f:d8:df:1b:7f:8c:78:
                    bc:da:4a:da:2d:0d:2c:51:60:c4:18:8f:07:25:ad:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:31:9C:38:F4:F4:05:61:83:9D:DF:AA:9E:3F:1F:03:A5:07:90:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ea132b1-b2c5-3125-b4eb-003d9c3861d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.200.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:53:db:ac:87:2f:d8:be:f2:24:0d:f6:9e:5e:aa:8d:19:ba:
         2b:b9:43:49:63:43:69:64:7d:b2:7f:65:a0:76:b8:0d:bb:f9:
         b2:53:f7:b5:ab:6d:5a:db:3d:e1:b9:4a:be:f3:47:80:af:1d:
         69:43:f5:9c:52:9a:44:8a:85:9b:a1:70:7d:0c:2d:01:86:b9:
         e6:a9:60:c5:07:97:a5:24:38:c8:a1:4c:d8:3e:c8:56:5a:38:
         69:15:88:71:3e:8d:45:22:86:7b:dd:e1:26:f8:03:36:3b:be:
         a2:5a:ef:ba:bc:ec:62:5d:f3:89:ff:0b:63:99:7f:1e:a5:9f:
         ad:1d:83:74:71:3a:91:3f:f7:0e:c6:63:27:6e:0a:3d:e7:ab:
         66:aa:c1:e7:08:3a:22:01:9a:40:cc:32:35:c4:46:f2:49:6e:
         7c:62:2c:2d:34:d6:86:42:e9:ac:fb:2b:df:a2:4c:84:13:0b:
         31:b7:a5:f1:3b:bc:04:5d:17:fc:e3:55:ab:f2:b0:02:5f:91:
         7b:5c:3d:0c:80:12:5f:91:8e:d5:fd:e7:e6:9a:05:15:b8:06:
         cd:28:80:1b:93:1c:34:e4:f9:dc:31:1d:c7:73:f7:4a:0d:78:
         31:a2:ff:da:bd:4b:2f:b0:b3:fc:52:32:b3:e7:19:ba:f4:94:
         6e:de:76:cf
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEel1r3y1WDTN2gUvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk
OTI4YjNjOGEtNTAyNC00YjA0LWJlZGQtNmVkMGY3ZDNjOTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wI2j2lhdgkQaAOK7IX2kDVBiGjWI5KOWyuN
fEkGhLV0e5v/8sacwdB6M3UIP6DLsmFTikFqlLWoFbBvNJIg+BZZGdYwMh8I4Tx5
xJ7TzNoCmuWBdA5IrBPrQOragnCwfzafnRAm78mdGf4dBqCFvkL2MmyYztCMZK7r
5ephru5XbMKOjT/sF7QxdLGeKKMDp+A0Mfn5h5wppv2eCD3pd7wxypYCvjxYEGXh
lwzQ2gnVbES2aVzGJL3d+NntWqV/WUdYQsAIGvVuu0X9nn4MyJL5Rc/G1b6V7c97
ol5BHV16uFmyIVyf3J/Y3xt/jHi82kraLQ0sUWDEGI8HJa1TVwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMYxnDj09AVhg53fqp4/HwOlB5BhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmVhMTMyYjEtYjJjNS0z
MTI1LWI0ZWItMDAzZDljMzg2MWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAS8gwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQ1PbrIcv2L7yJA32nl6qjRm6K7lDSWNDaWR9sn9loHa4Dbv5slP3tatt
Wts94blKvvNHgK8daUP1nFKaRIqFm6FwfQwtAYa55qlgxQeXpSQ4yKFM2D7IVlo4
aRWIcT6NRSKGe93hJvgDNju+olrvurzsYl3zif8LY5l/HqWfrR2DdHE6kT/3DsZj
J24KPeerZqrB5wg6IgGaQMwyNcRG8klufGIsLTTWhkLprPsr36JMhBMLMbel8Tu8
BF0X/ONVq/KwAl+Re1w9DIASX5GO1f3n5poFFbgGzSiAG5McNOT53DEdx3P3Sg14
MaL/2r1LL7Cz/FIys+cZuvSUbt52zw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:36 2024 by rpki-client on console-fra.rpki-client.org