Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba6ee143-f521-376e-ba19-1d3400ea691e.roa
File:                     ba6ee143-f521-376e-ba19-1d3400ea691e.roa (raw, json)
Hash identifier:          ulEml/HJEAj+oAx43TryZ4I3s/tb1DOWpZP7SKMIJtM=
Subject key identifier:   19:A5:E6:9C:6F:E0:C7:93:15:40:5C:FD:7D:C4:FD:85:CD:9F:0A:AB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845708B1337AD5B37064F9F9DC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba6ee143-f521-376e-ba19-1d3400ea691e.roa
Signing time:             Fri 05 Apr 2024 01:16:50 +0000
ROA not before:           Fri 05 Apr 2024 01:16:50 +0000
ROA not after:            Thu 04 Jul 2024 01:16:50 +0000
asID:                     6167
IP address blocks:        174.42.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:8b:13:37:ad:5b:37:06:4f:9f:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  5 01:16:50 2024 GMT
            Not After : Jul  4 01:16:50 2024 GMT
        Subject: CN=a9a57661-0ecb-49ad-a07e-98a6281ba479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:31:bf:c5:8f:c8:13:52:cb:af:e7:b3:6f:cb:
                    19:3a:c6:f7:89:f5:fa:8f:80:85:6e:ee:b9:b5:bc:
                    96:6b:48:12:93:28:56:02:80:ba:65:ea:57:9f:47:
                    1b:c9:9c:bf:b8:f2:db:cd:92:1e:e3:70:8a:a0:f5:
                    be:30:03:8a:fe:ac:a8:20:26:39:03:ee:f2:d9:bf:
                    58:b3:fb:18:7f:5a:09:df:6a:74:de:f4:ee:de:07:
                    e4:76:95:29:50:c5:04:98:23:b5:d8:f9:43:c6:05:
                    3a:61:ab:c0:02:c3:cc:93:9c:48:ee:0a:1b:95:f0:
                    ee:85:2a:b0:10:92:39:17:ad:86:c3:fc:4d:47:10:
                    c2:83:fe:44:cd:a9:09:9f:9a:9a:c1:93:15:58:5d:
                    4b:2c:8c:2e:56:44:f4:1a:9f:65:a0:d1:99:e9:0b:
                    a9:49:1b:fa:a2:72:a8:98:fe:5f:45:0d:f0:53:24:
                    10:90:f5:4d:59:12:e0:53:73:b4:16:6b:0f:0a:10:
                    55:b5:ef:04:41:24:55:08:41:94:9a:07:14:3a:32:
                    c7:cb:29:e8:8f:b6:d8:9a:78:73:81:d4:86:1e:49:
                    55:f5:95:b4:cb:0b:c6:bf:7a:94:b8:03:61:d7:ea:
                    3b:15:d5:06:78:15:6b:62:9c:3b:05:1a:ed:35:c7:
                    5a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A5:E6:9C:6F:E0:C7:93:15:40:5C:FD:7D:C4:FD:85:CD:9F:0A:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba6ee143-f521-376e-ba19-1d3400ea691e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f4:e6:98:8d:bf:75:65:e5:4e:5b:9c:9c:06:37:c6:af:aa:
         b7:13:3f:a5:3f:07:18:5e:be:95:94:c0:3e:19:0b:23:3d:3f:
         3a:ca:bc:f7:06:01:f9:14:72:04:97:7a:88:6c:08:7f:11:82:
         e9:f9:d9:3c:8b:91:44:71:28:a7:b3:f5:1c:61:14:1a:a6:56:
         37:51:56:36:c7:f3:8c:0e:54:b2:8f:58:19:ee:f1:27:c5:3a:
         e9:af:a8:a0:8f:09:d3:50:b8:59:10:06:eb:54:60:2b:6d:90:
         4b:e7:ec:85:72:1a:b6:8f:94:e1:89:f8:1d:f1:d0:e3:b9:6a:
         d6:e5:74:89:59:c9:2d:af:e0:77:de:b6:94:c9:47:0e:7a:b5:
         20:3d:91:5d:10:40:9b:3f:c9:67:66:7f:0c:9d:38:8b:05:8a:
         59:d8:79:7d:e8:10:9f:59:ba:9a:15:7c:50:38:73:c7:7d:3f:
         05:35:6a:d1:56:56:94:a6:fb:d7:33:9a:84:3f:f4:24:06:24:
         a2:25:95:ea:9c:fe:ee:34:9a:22:b8:33:8d:ad:14:2f:30:5f:
         c2:dc:b5:ce:00:bc:e5:16:94:65:d7:cd:10:85:58:da:e5:87:
         ff:08:c2:2a:78:42:aa:63:ad:9b:5a:2e:99:62:e9:c2:25:da:
         37:ed:2e:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVwixM3rVs3Bk+fncAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDQwNTAxMTY1MFoXDTI0MDcwNDAxMTY1MFowLzEtMCsGA1UEAxMk
YTlhNTc2NjEtMGVjYi00OWFkLWEwN2UtOThhNjI4MWJhNDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTG/xY/IE1LLr+ezb8sZOsb3ifX6j4CFbu65
tbyWa0gSkyhWAoC6ZepXn0cbyZy/uPLbzZIe43CKoPW+MAOK/qyoICY5A+7y2b9Y
s/sYf1oJ32p03vTu3gfkdpUpUMUEmCO12PlDxgU6YavAAsPMk5xI7goblfDuhSqw
EJI5F62Gw/xNRxDCg/5EzakJn5qawZMVWF1LLIwuVkT0Gp9loNGZ6QupSRv6onKo
mP5fRQ3wUyQQkPVNWRLgU3O0FmsPChBVte8EQSRVCEGUmgcUOjLHyynoj7bYmnhz
gdSGHklV9ZW0ywvGv3qUuANh1+o7FdUGeBVrYpw7BRrtNcdaEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBml5pxv4MeTFUBc/X3E/YXNnwqrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmE2ZWUxNDMtZjUyMS0z
NzZlLWJhMTktMWQzNDAwZWE2OTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrioYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADP05piNv3Vl5U5bnJwGN8avqrcTP6U/BxhevpWUwD4ZCyM9PzrKvPcG
AfkUcgSXeohsCH8Rgun52TyLkURxKKez9RxhFBqmVjdRVjbH84wOVLKPWBnu8SfF
OumvqKCPCdNQuFkQButUYCttkEvn7IVyGraPlOGJ+B3x0OO5atbldIlZyS2v4Hfe
tpTJRw56tSA9kV0QQJs/yWdmfwydOIsFilnYeX3oEJ9ZupoVfFA4c8d9PwU1atFW
VpSm+9czmoQ/9CQGJKIlleqc/u40miK4M42tFC8wX8Lctc4AvOUWlGXXzRCFWNrl
h/8Iwip4QqpjrZtaLpli6cIl2jftLgE=
-----END CERTIFICATE-----
Generated at Sun May 12 02:17:24 2024 by rpki-client on console-ams.rpki-client.org