Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d43b13c4-84f0-393f-88b8-df21aa4881fb.roa
File:                     d43b13c4-84f0-393f-88b8-df21aa4881fb.roa (raw, json)
Hash identifier:          FVsq/hNbCl93uNnMG6H0MklqbrU2Bv7lisF27ZtmORo=
Subject key identifier:   BF:3C:B7:D2:06:7B:A8:0B:DB:F0:4C:3D:A3:10:0C:12:44:B9:56:0E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835F5C19A39E9DDF6DD2380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d43b13c4-84f0-393f-88b8-df21aa4881fb.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.252.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:f5:c1:9a:39:e9:dd:f6:dd:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=fe6514c4-1300-4ec5-960d-fc3f247fd5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8c:06:58:83:93:a5:0b:27:e1:a3:86:7e:18:
                    a9:18:bb:0f:d8:00:37:a2:c6:fe:87:b3:0f:d4:59:
                    bb:ad:16:d8:34:6d:30:c3:77:e8:71:36:2e:1a:9c:
                    82:1f:02:e4:10:33:8b:35:1f:e3:14:3c:af:66:5c:
                    a6:f6:d4:da:a4:06:f7:ee:ef:b0:8a:9a:9c:2b:50:
                    43:a3:c7:f3:ad:63:7e:2d:a9:56:8a:46:f1:63:66:
                    c5:f6:bd:98:2a:8b:ae:d9:b8:b4:46:3b:29:ee:73:
                    de:03:b7:d1:85:19:4d:40:52:2e:5d:1c:55:9d:6d:
                    0a:22:81:a9:51:00:d1:c7:0c:30:cb:48:f9:ef:e5:
                    27:42:fd:c8:aa:cf:65:04:51:a6:8d:67:10:90:f6:
                    1d:5b:6a:88:db:e1:fa:77:e4:12:99:b6:3b:78:57:
                    d3:b7:e2:dc:54:68:28:16:6f:c2:2b:19:00:82:95:
                    3c:47:c3:d4:30:6c:b9:0a:88:1c:f5:19:78:a5:cf:
                    03:02:61:04:7f:92:40:d1:02:bb:99:f7:7c:5a:2d:
                    0c:65:b7:fd:0e:cd:2b:7b:7b:43:68:e4:ba:4d:15:
                    0b:1b:8e:66:a2:89:66:22:84:38:29:bd:b9:2f:06:
                    f6:ba:24:be:11:3c:66:c6:c3:f4:b4:c3:72:72:ff:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3C:B7:D2:06:7B:A8:0B:DB:F0:4C:3D:A3:10:0C:12:44:B9:56:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d43b13c4-84f0-393f-88b8-df21aa4881fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.252.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:5f:ba:cd:e3:f0:e3:2b:05:2b:15:d1:b0:85:40:fb:7b:ce:
         7c:a2:ae:f3:23:d4:a1:a9:02:9d:39:de:3e:7c:ed:f1:17:e7:
         47:f6:6a:2d:d6:a8:c4:70:53:a5:11:f9:ae:e2:c2:28:95:75:
         bd:95:f4:1b:9a:a8:84:cf:d7:55:f6:51:26:b6:c6:d2:1a:6b:
         39:96:9e:b2:b9:1c:84:8e:c6:f6:34:5e:60:f4:69:7b:99:ae:
         70:00:23:e5:f0:e2:cd:ae:58:ee:8f:de:51:8a:dd:67:e0:82:
         9f:f0:b3:d9:3f:63:a9:75:23:91:54:73:76:72:67:34:03:37:
         00:cd:03:4a:5a:bd:ea:07:d0:64:4a:94:34:73:cf:be:a5:45:
         f8:c4:0c:7b:77:4f:0d:06:99:9c:c5:2e:35:58:4a:26:e3:10:
         32:21:b5:d3:59:08:09:de:b8:90:4e:8f:71:e9:7b:fe:63:94:
         e5:c9:52:bf:3f:00:30:75:b5:67:61:00:4a:a7:3d:e1:18:37:
         70:1c:8b:57:6d:ce:35:b6:24:95:87:a0:36:15:c8:46:d3:ae:
         db:03:c1:6a:eb:15:5e:a6:4f:25:3d:7f:fc:52:c4:ba:fc:c1:
         12:4a:28:f7:80:27:f3:af:1f:c7:a7:26:f9:5a:ab:b3:31:6f:
         fa:7e:a5:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcoNfXBmjnp3fbdI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkwOTEzMDA0MVoXDTI0MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk
ZmU2NTE0YzQtMTMwMC00ZWM1LTk2MGQtZmMzZjI0N2ZkNWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YwGWIOTpQsn4aOGfhipGLsP2AA3osb+h7MP
1Fm7rRbYNG0ww3focTYuGpyCHwLkEDOLNR/jFDyvZlym9tTapAb37u+wipqcK1BD
o8fzrWN+LalWikbxY2bF9r2YKouu2bi0Rjsp7nPeA7fRhRlNQFIuXRxVnW0KIoGp
UQDRxwwwy0j57+UnQv3Iqs9lBFGmjWcQkPYdW2qI2+H6d+QSmbY7eFfTt+LcVGgo
Fm/CKxkAgpU8R8PUMGy5Cogc9Rl4pc8DAmEEf5JA0QK7mfd8Wi0MZbf9Ds0re3tD
aOS6TRULG45moolmIoQ4Kb25Lwb2uiS+ETxmxsP0tMNycv89UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL88t9IGe6gL2/BMPaMQDBJEuVYOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDQzYjEzYzQtODRmMC0z
OTNmLTg4YjgtZGYyMWFhNDg4MWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvwQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGpfus3j8OMrBSsV0bCFQPt7znyirvMj1KGpAp053j587fEX50f2ai3W
qMRwU6UR+a7iwiiVdb2V9BuaqITP11X2USa2xtIaazmWnrK5HISOxvY0XmD0aXuZ
rnAAI+Xw4s2uWO6P3lGK3Wfggp/ws9k/Y6l1I5FUc3ZyZzQDNwDNA0paveoH0GRK
lDRzz76lRfjEDHt3Tw0GmZzFLjVYSibjEDIhtdNZCAneuJBOj3Hpe/5jlOXJUr8/
ADB1tWdhAEqnPeEYN3Aci1dtzjW2JJWHoDYVyEbTrtsDwWrrFV6mTyU9f/xSxLr8
wRJKKPeAJ/OvH8enJvlaq7Mxb/p+pTM=
-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:22 2024 by rpki-client on console-fra.rpki-client.org