Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2310a57-6abb-3627-99ca-041501d01454.roa
File:                     d2310a57-6abb-3627-99ca-041501d01454.roa (raw, json)
Hash identifier:          WUPa7EZiquypqe3KbUH5+G0ZuAI/wxUbALKUpw/XSH4=
Subject key identifier:   94:DD:18:4D:CF:62:7F:53:A0:A0:CD:6D:FD:69:2B:26:2F:FB:EC:2A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA084ABD72EAD6316A1440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2310a57-6abb-3627-99ca-041501d01454.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.218.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:08:4a:bd:72:ea:d6:31:6a:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=06c49bb4-44ed-43ca-b656-2fdf82006461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5a:17:03:d3:cc:53:3b:fb:b0:07:96:ee:96:
                    d9:c2:84:2d:30:7c:0c:e9:fd:c0:e3:8a:94:0d:af:
                    b7:a6:e3:38:50:d4:ea:07:ed:7c:19:95:6d:9b:b7:
                    96:96:d8:22:c1:26:09:d1:b5:2b:46:c9:5f:b8:ce:
                    b3:3e:cc:d8:81:f2:cc:5d:04:da:9f:e1:fc:91:4f:
                    cf:8b:e7:2f:08:75:4d:db:45:0c:2f:33:36:d1:73:
                    fd:3a:8b:ab:3d:26:de:75:7a:d7:a5:0b:01:70:a9:
                    62:ee:9a:f4:b1:72:e5:73:c4:e0:f4:3f:73:20:54:
                    0b:1c:e0:67:3d:3b:01:ef:37:f4:9b:ec:35:c1:c3:
                    a0:41:f0:10:73:ac:42:13:57:3c:5a:b2:7a:d7:4a:
                    56:ad:6e:99:a0:a5:8b:a6:48:35:34:f5:68:f2:9a:
                    cc:ab:ee:e9:b2:83:cb:b1:5c:f7:63:42:5b:f7:2d:
                    e8:fc:02:49:9f:1d:49:be:83:49:78:ab:78:2d:27:
                    09:24:a9:cf:a5:1c:07:34:7b:8e:7f:62:5a:ff:d9:
                    3e:4c:68:36:67:88:2a:79:e3:7a:47:12:25:74:de:
                    fe:46:af:83:a1:c0:fc:0c:f0:f0:3a:0c:92:46:bb:
                    e9:95:88:76:a7:5a:97:7c:86:4a:82:2b:4e:ab:54:
                    24:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DD:18:4D:CF:62:7F:53:A0:A0:CD:6D:FD:69:2B:26:2F:FB:EC:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2310a57-6abb-3627-99ca-041501d01454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.218.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:37:6c:2f:7c:ad:e4:8b:8b:e3:a5:16:40:72:77:00:1f:bf:
         32:8a:1a:9a:54:bf:b8:88:09:6f:0c:7b:ce:fd:37:87:e9:37:
         ba:ab:8e:d6:17:68:06:21:ad:9b:b8:e4:d5:f9:df:b8:2c:78:
         dd:fe:73:64:11:4a:62:18:48:5e:89:d8:eb:38:f8:66:61:15:
         55:30:97:c2:02:7f:a3:a3:f8:fa:99:ae:7b:4f:b5:f1:1a:39:
         41:a1:9e:07:2c:76:00:e4:00:42:27:1d:40:50:3c:e8:2f:6f:
         6b:2e:1c:ff:bd:be:e5:c5:53:2e:3c:6d:47:74:fd:17:15:3e:
         12:41:fb:82:54:20:f3:76:be:d9:1c:ab:f3:d9:ad:b5:11:29:
         37:5c:ef:56:68:de:c1:f2:ed:37:60:1e:87:c6:06:67:3e:4c:
         02:82:c3:e9:d3:45:82:dd:aa:d6:b6:44:87:c4:84:4a:c2:6d:
         a1:64:62:6b:ae:ef:66:31:ba:98:e1:be:25:ac:d7:7b:c5:eb:
         4d:77:6c:0a:4c:fe:0a:d6:ff:db:2e:8f:aa:04:9b:bb:39:22:
         12:26:e4:c3:a7:8e:36:a8:ed:fb:0c:19:fb:c5:ad:84:88:0d:
         75:45:58:94:6d:36:9a:98:c8:a5:df:3b:b9:8a:d4:b5:20:5d:
         a4:cc:3a:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh+ghKvXLq1jFqFEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTExNTAyMDAyOFoXDTI1MDIxMzAyMDAyOFowLzEtMCsGA1UEAxMk
MDZjNDliYjQtNDRlZC00M2NhLWI2NTYtMmZkZjgyMDA2NDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmloXA9PMUzv7sAeW7pbZwoQtMHwM6f3A44qU
Da+3puM4UNTqB+18GZVtm7eWltgiwSYJ0bUrRslfuM6zPszYgfLMXQTan+H8kU/P
i+cvCHVN20UMLzM20XP9OourPSbedXrXpQsBcKli7pr0sXLlc8Tg9D9zIFQLHOBn
PTsB7zf0m+w1wcOgQfAQc6xCE1c8WrJ610pWrW6ZoKWLpkg1NPVo8prMq+7psoPL
sVz3Y0Jb9y3o/AJJnx1JvoNJeKt4LScJJKnPpRwHNHuOf2Ja/9k+TGg2Z4gqeeN6
RxIldN7+Rq+DocD8DPDwOgySRrvplYh2p1qXfIZKgitOq1QkmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJTdGE3PYn9ToKDNbf1pKyYv++wqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDIzMTBhNTctNmFiYi0z
NjI3LTk5Y2EtMDQxNTAxZDAxNDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtpwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGM3bC98reSLi+OlFkBydwAfvzKKGppUv7iICW8Me879N4fpN7qrjtYX
aAYhrZu45NX537gseN3+c2QRSmIYSF6J2Os4+GZhFVUwl8ICf6Oj+PqZrntPtfEa
OUGhngcsdgDkAEInHUBQPOgvb2suHP+9vuXFUy48bUd0/RcVPhJB+4JUIPN2vtkc
q/PZrbURKTdc71Zo3sHy7TdgHofGBmc+TAKCw+nTRYLdqta2RIfEhErCbaFkYmuu
72YxupjhviWs13vF6013bApM/grW/9suj6oEm7s5IhIm5MOnjjao7fsMGfvFrYSI
DXVFWJRtNpqYyKXfO7mK1LUgXaTMOk4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:55 2024 by rpki-client on console-fra.rpki-client.org