Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97cce5b3-0067-37c9-bd4a-0ac84ed22a29.roa
File:                     97cce5b3-0067-37c9-bd4a-0ac84ed22a29.roa (raw, json)
Hash identifier:          Qqu8x7FNr2ACKfD167To3FFSNwpO7BoLWKZfgt71lPc=
Subject key identifier:   62:87:9B:AF:20:2A:5A:3E:19:FF:3E:83:9A:EA:94:42:5C:6C:09:15
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845BEB300CD1070D88784FE73C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97cce5b3-0067-37c9-bd4a-0ac84ed22a29.roa
Signing time:             Fri 03 May 2024 01:10:20 +0000
ROA not before:           Fri 03 May 2024 01:10:20 +0000
ROA not after:            Thu 01 Aug 2024 01:10:20 +0000
asID:                     6167
IP address blocks:        72.111.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:b3:00:cd:10:70:d8:87:84:fe:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:10:20 2024 GMT
            Not After : Aug  1 01:10:20 2024 GMT
        Subject: CN=b47b4715-be87-4706-8f2d-cb28439eb8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:02:c5:91:27:52:df:35:84:84:98:84:22:42:
                    70:0a:6d:25:12:3b:28:bb:a2:4c:b7:fa:f6:ca:e0:
                    44:b9:1e:3b:84:c0:44:22:f0:ac:9f:b8:52:b4:a2:
                    71:96:0b:47:b0:dc:17:7c:9f:8c:c0:1e:68:dd:10:
                    cd:eb:dd:d5:3e:d4:82:65:1d:78:33:1b:38:73:92:
                    e5:5b:2d:b9:9e:63:ac:c7:1b:d3:80:e8:b8:38:9a:
                    51:c9:2b:2f:0b:7f:5e:fa:2e:a0:73:7c:19:9d:68:
                    fd:1e:94:84:12:60:5c:29:c6:d1:e3:74:12:c1:d4:
                    a3:e8:9e:a8:e0:f4:26:7c:99:7d:91:a4:a3:50:16:
                    3c:1b:82:98:9b:85:d6:34:91:23:1b:61:25:b6:4b:
                    b2:69:29:0d:90:f1:85:14:68:65:64:3b:16:40:a8:
                    98:b2:44:b7:df:5f:43:a3:1e:97:1d:0c:12:5b:e5:
                    b2:4e:94:e0:28:ab:76:ef:2c:53:9b:47:73:ae:36:
                    a8:dc:bf:b2:06:1b:2e:eb:4f:4a:26:3c:ca:58:3d:
                    58:90:6b:2e:18:24:2a:59:bf:ae:82:e0:8d:10:d7:
                    66:ff:9a:d0:ab:da:c2:93:ad:df:ce:aa:d7:41:9e:
                    38:cf:ae:33:bb:04:19:cc:1e:ab:71:58:78:d1:1f:
                    c4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:87:9B:AF:20:2A:5A:3E:19:FF:3E:83:9A:EA:94:42:5C:6C:09:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97cce5b3-0067-37c9-bd4a-0ac84ed22a29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.111.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:37:09:20:84:aa:22:fe:72:b0:9c:11:27:ce:d5:fd:9f:a3:
         1c:2e:34:bc:77:8e:f2:54:70:e9:eb:27:c8:86:89:75:65:7b:
         40:1c:0a:9a:88:13:54:c9:0f:56:b1:2b:fa:1c:c5:44:f5:90:
         c7:e4:bf:89:a5:5e:24:30:7b:96:23:36:a5:f9:c5:ce:e6:68:
         82:bd:38:3b:9b:3f:28:e3:c2:df:bf:e7:e3:c2:11:29:5d:c3:
         60:be:e0:b9:81:2a:58:9c:e4:28:6c:f3:a3:f5:bc:3f:89:96:
         4d:26:34:94:d7:c8:ab:24:53:fe:27:6d:63:3c:6f:1e:c2:9a:
         22:d3:23:58:29:7f:2e:de:6a:99:4b:86:2a:79:d0:84:e2:e6:
         6b:2a:7b:ed:5f:91:81:b6:24:0d:5c:79:82:23:69:85:47:dc:
         4a:e7:57:4d:e3:d8:c2:21:93:41:fa:46:df:2e:91:32:22:06:
         b0:aa:85:f1:6f:ae:2d:f4:93:a9:ac:cc:dd:19:ab:5e:47:7c:
         b1:1f:de:e8:7c:92:32:47:99:7a:c4:51:90:8d:ce:09:a3:3f:
         f9:c4:da:b4:25:b4:8e:9e:6d:42:22:b1:55:2d:32:e6:f5:72:
         79:ef:0c:52:88:02:77:e7:3d:f2:1c:01:ed:54:d8:df:9a:2a:
         e0:35:a0:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW+swDNEHDYh4T+c8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDUwMzAxMTAyMFoXDTI0MDgwMTAxMTAyMFowLzEtMCsGA1UEAxMk
YjQ3YjQ3MTUtYmU4Ny00NzA2LThmMmQtY2IyODQzOWViOGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnALFkSdS3zWEhJiEIkJwCm0lEjsou6JMt/r2
yuBEuR47hMBEIvCsn7hStKJxlgtHsNwXfJ+MwB5o3RDN693VPtSCZR14Mxs4c5Ll
Wy25nmOsxxvTgOi4OJpRySsvC39e+i6gc3wZnWj9HpSEEmBcKcbR43QSwdSj6J6o
4PQmfJl9kaSjUBY8G4KYm4XWNJEjG2EltkuyaSkNkPGFFGhlZDsWQKiYskS3319D
ox6XHQwSW+WyTpTgKKt27yxTm0dzrjao3L+yBhsu609KJjzKWD1YkGsuGCQqWb+u
guCNENdm/5rQq9rCk63fzqrXQZ44z64zuwQZzB6rcVh40R/EEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGKHm68gKlo+Gf8+g5rqlEJcbAkVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTdjY2U1YjMtMDA2Ny0z
N2M5LWJkNGEtMGFjODRlZDIyYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASG+JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF83CSCEqiL+crCcESfO1f2foxwuNLx3jvJUcOnrJ8iGiXVle0AcCpqI
E1TJD1axK/ocxUT1kMfkv4mlXiQwe5YjNqX5xc7maIK9ODubPyjjwt+/5+PCESld
w2C+4LmBKlic5Chs86P1vD+Jlk0mNJTXyKskU/4nbWM8bx7CmiLTI1gpfy7eaplL
hip50ITi5msqe+1fkYG2JA1ceYIjaYVH3ErnV03j2MIhk0H6Rt8ukTIiBrCqhfFv
ri30k6mszN0Zq15HfLEf3uh8kjJHmXrEUZCNzgmjP/nE2rQltI6ebUIisVUtMub1
cnnvDFKIAnfnPfIcAe1U2N+aKuA1oGI=
-----END CERTIFICATE-----
Generated at Sun May 19 17:25:04 2024 by rpki-client on console-ams.rpki-client.org