Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dce87167-83da-30d6-ab14-e9947fbd7aaf.roa
File:                     dce87167-83da-30d6-ab14-e9947fbd7aaf.roa (raw, json)
Hash identifier:          H2gDedtwWA8GisKplA5D9RO2N73uXSYmaOH+Z8IG4mg=
Subject key identifier:   AB:45:9B:C1:56:BA:B7:A5:50:3B:67:A1:62:E1:01:72:53:09:FA:E2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858470120418239C6135175398780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dce87167-83da-30d6-ab14-e9947fbd7aaf.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.200.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:41:82:39:c6:13:51:75:39:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=8150a13b-20a2-4eaf-9316-e4c0d3d2b59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:71:b6:e9:d2:7e:72:04:71:90:79:56:c2:21:
                    46:6a:a1:47:5b:b5:8c:53:eb:31:69:a5:30:c1:65:
                    ea:b8:cd:99:61:90:85:57:7c:3e:65:e2:8d:11:57:
                    a1:5e:dc:fd:04:93:ff:66:5a:25:6c:6c:60:4b:50:
                    65:26:d2:2c:6d:07:83:1b:8e:ef:e0:e7:69:13:ce:
                    8a:20:0b:83:df:84:8d:c4:9a:2b:5c:e5:2a:e7:8b:
                    95:60:bd:d1:41:24:e6:9f:b2:2e:29:e5:79:c8:2f:
                    fa:8e:81:de:62:4e:8b:3c:59:be:53:e8:f2:58:1c:
                    ed:3a:3d:e6:7a:3f:d4:16:f6:aa:24:5c:03:ae:0f:
                    56:a8:2a:9e:fe:2b:18:37:88:ee:f8:79:bd:97:77:
                    f4:17:81:86:aa:7e:77:60:97:35:4b:ab:69:5c:46:
                    51:a1:69:88:11:59:19:1b:64:35:f3:48:05:46:0b:
                    30:9f:cf:5e:15:35:0f:1f:44:5c:36:f4:ea:c0:6d:
                    84:51:d6:a3:e1:46:bd:59:2c:2d:55:c2:a1:f6:37:
                    c0:de:aa:cc:57:2a:de:aa:92:b5:00:91:dd:94:fd:
                    bc:ad:72:ac:ea:0d:ee:ca:1d:8b:d5:0c:e8:0e:f2:
                    a1:80:21:e6:90:c5:ab:7a:32:11:f6:6f:6b:35:73:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:45:9B:C1:56:BA:B7:A5:50:3B:67:A1:62:E1:01:72:53:09:FA:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dce87167-83da-30d6-ab14-e9947fbd7aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.200.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c4:8f:14:90:06:d0:41:f2:bf:8c:72:ca:5e:c6:f0:84:bd:
         d6:ed:d0:a4:27:a0:20:ad:50:46:d8:20:5b:3f:f7:7e:4a:6c:
         19:2d:d2:5a:0e:d4:3b:f2:3b:18:fc:13:b9:6e:75:39:8d:5a:
         84:6f:8e:a6:57:1b:d1:b0:af:24:9a:d9:e2:50:d3:1b:6b:5a:
         c7:cb:8b:9f:a4:68:07:8c:54:dc:84:e4:d8:de:f3:3d:5f:bc:
         97:7d:97:54:d1:65:1e:ed:3f:80:af:c8:60:6c:d3:c9:6b:58:
         ac:36:5c:6e:16:0c:b8:6b:26:7c:aa:65:36:82:36:50:bc:04:
         4d:89:1c:30:49:9f:09:32:42:f8:f0:30:49:32:3a:62:18:0c:
         7d:0a:40:db:5d:93:4c:55:8e:04:a0:bc:7b:33:a8:14:2a:ae:
         d8:a6:d8:e0:ca:86:d1:fa:5f:d9:40:47:9c:26:b1:35:ad:ec:
         47:82:79:4b:f9:a1:99:57:8b:3a:f1:3c:8a:ea:41:a6:6e:e6:
         81:de:ab:8b:77:b0:d0:f0:d3:46:bc:ff:c3:d3:2c:b4:62:e9:
         18:45:ee:97:5a:1a:74:aa:36:c8:31:34:6c:1a:b9:05:e4:17:
         a1:37:1f:69:a0:d7:70:87:e8:e6:e3:b0:21:d2:9c:7f:b9:9f:
         89:0c:b8:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcBIEGCOcYTUXU5h4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDgyNjEzMDA0MVoXDTI0MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk
ODE1MGExM2ItMjBhMi00ZWFmLTkzMTYtZTRjMGQzZDJiNTljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nG26dJ+cgRxkHlWwiFGaqFHW7WMU+sxaaUw
wWXquM2ZYZCFV3w+ZeKNEVehXtz9BJP/ZlolbGxgS1BlJtIsbQeDG47v4OdpE86K
IAuD34SNxJorXOUq54uVYL3RQSTmn7IuKeV5yC/6joHeYk6LPFm+U+jyWBztOj3m
ej/UFvaqJFwDrg9WqCqe/isYN4ju+Hm9l3f0F4GGqn53YJc1S6tpXEZRoWmIEVkZ
G2Q180gFRgswn89eFTUPH0RcNvTqwG2EUdaj4Ua9WSwtVcKh9jfA3qrMVyreqpK1
AJHdlP28rXKs6g3uyh2L1QzoDvKhgCHmkMWrejIR9m9rNXNicwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKtFm8FWurelUDtnoWLhAXJTCfriMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGNlODcxNjctODNkYS0z
MGQ2LWFiMTQtZTk5NDdmYmQ3YWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErsgQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzEjxSQBtBB8r+McspexvCEvdbt0KQnoCCtUEbYIFs/935KbBkt0loO
1DvyOxj8E7ludTmNWoRvjqZXG9GwrySa2eJQ0xtrWsfLi5+kaAeMVNyE5Nje8z1f
vJd9l1TRZR7tP4CvyGBs08lrWKw2XG4WDLhrJnyqZTaCNlC8BE2JHDBJnwkyQvjw
MEkyOmIYDH0KQNtdk0xVjgSgvHszqBQqrtim2ODKhtH6X9lAR5wmsTWt7EeCeUv5
oZlXizrxPIrqQaZu5oHeq4t3sNDw00a8/8PTLLRi6RhF7pdaGnSqNsgxNGwauQXk
F6E3H2mg13CH6ObjsCHSnH+5n4kMuG8=
-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:25 2024 by rpki-client on console-fra.rpki-client.org