Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e53a33dd-a4c3-3fad-a65f-a7be4971d5fc.roa
File:                     e53a33dd-a4c3-3fad-a65f-a7be4971d5fc.roa (raw, json)
Hash identifier:          PFmBs3x+VVa+Cjv4LzZL+p4rQkwZe1qHNPDm9LHGnJQ=
Subject key identifier:   A0:42:C6:C2:E4:28:F9:ED:8A:B2:E2:6A:CD:52:76:FC:A0:D2:86:44
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835E85EF442AD2EA7E74EC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e53a33dd-a4c3-3fad-a65f-a7be4971d5fc.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.245.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:e8:5e:f4:42:ad:2e:a7:e7:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=8441c25a-977a-42f0-858f-123c149f83e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:b2:52:7c:40:02:90:ce:f7:ee:16:3b:52:
                    67:1c:13:a9:88:ca:56:c5:aa:2c:50:67:b5:7c:be:
                    0e:f1:41:79:f3:d5:a9:9a:fc:88:fc:7c:11:44:9e:
                    5f:1f:fe:b0:7e:c0:10:1a:74:c1:5e:33:f0:82:d9:
                    54:da:8c:eb:af:d2:93:f2:a2:66:12:48:93:76:15:
                    49:4d:83:ee:66:b1:fe:e5:9a:27:c6:40:57:33:bd:
                    35:d5:75:af:44:0c:c4:4b:b4:4d:4c:d1:c3:8f:52:
                    39:4c:e7:3a:a6:21:52:46:94:8e:19:ca:db:60:2c:
                    32:cf:e2:d4:7c:42:4a:d3:68:da:22:e1:d3:b2:5f:
                    24:e2:1d:3d:16:09:90:76:06:5c:29:19:23:e3:02:
                    36:cf:8d:f1:aa:f1:75:1d:d7:e8:2f:95:61:01:25:
                    1d:59:2a:a4:9f:cd:27:2f:d3:05:ba:f2:29:df:3f:
                    98:c5:97:3f:c5:02:63:95:56:09:53:fe:df:27:ee:
                    13:98:fc:d9:9f:be:06:90:8a:fe:c5:e7:86:64:db:
                    64:e9:56:fc:7d:cd:57:a9:ba:04:c1:fa:a0:02:d1:
                    de:62:83:2b:64:63:50:68:93:3f:2d:b4:c7:d2:1c:
                    3d:03:8a:2f:73:b9:a2:ac:e7:81:a0:a2:57:0d:37:
                    ea:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:42:C6:C2:E4:28:F9:ED:8A:B2:E2:6A:CD:52:76:FC:A0:D2:86:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e53a33dd-a4c3-3fad-a65f-a7be4971d5fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.245.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:3b:dc:90:c0:52:45:29:3e:74:89:0e:9b:1d:f7:1a:1b:74:
         be:55:00:61:cf:c6:14:d9:f9:a8:85:70:20:76:7d:e2:e3:77:
         97:2d:13:cb:06:62:41:16:3f:de:52:6d:29:8d:4d:7a:e7:ac:
         ef:a2:c0:21:bc:34:96:df:b7:81:52:9b:18:8a:f6:da:6e:83:
         a6:f8:59:52:e0:c6:12:a6:25:81:57:ee:ef:89:e6:46:b7:65:
         20:0a:49:99:d8:a4:a4:12:7d:af:62:7f:3b:0d:6a:b6:bf:d4:
         b3:92:b9:75:9a:01:cd:33:55:77:00:45:75:17:b0:7a:db:b4:
         10:2e:67:4d:1c:cf:3a:f6:59:fa:9f:82:0f:84:7e:e3:de:fb:
         ca:5a:d0:23:71:5f:77:af:53:79:8a:18:91:cd:d3:2e:b7:62:
         54:88:75:42:5d:2e:8d:ff:e9:41:e2:7e:50:d7:79:35:9e:c7:
         18:53:83:9e:11:6e:10:49:0d:c9:8d:d6:54:da:14:98:d8:f0:
         84:2a:fa:c4:58:7b:1e:db:1a:ea:19:33:cc:60:25:68:5b:81:
         8b:42:29:0c:81:b4:06:ff:70:c1:32:2a:7c:df:bf:02:5a:31:
         b8:15:08:c8:96:08:a6:71:15:1b:8e:17:71:0c:c3:fd:be:4d:
         8d:c4:fb:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcoNehe9EKtLqfnTsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkwOTEzMDA0MVoXDTI0MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk
ODQ0MWMyNWEtOTc3YS00MmYwLTg1OGYtMTIzYzE0OWY4M2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup+yUnxAApDO9+4WO1JnHBOpiMpWxaosUGe1
fL4O8UF589WpmvyI/HwRRJ5fH/6wfsAQGnTBXjPwgtlU2ozrr9KT8qJmEkiTdhVJ
TYPuZrH+5ZonxkBXM7011XWvRAzES7RNTNHDj1I5TOc6piFSRpSOGcrbYCwyz+LU
fEJK02jaIuHTsl8k4h09FgmQdgZcKRkj4wI2z43xqvF1HdfoL5VhASUdWSqkn80n
L9MFuvIp3z+YxZc/xQJjlVYJU/7fJ+4TmPzZn74GkIr+xeeGZNtk6Vb8fc1XqboE
wfqgAtHeYoMrZGNQaJM/LbTH0hw9A4ovc7mirOeBoKJXDTfqJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKBCxsLkKPntirLias1Sdvyg0oZEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTUzYTMzZGQtYTRjMy0z
ZmFkLWE2NWYtYTdiZTQ5NzFkNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKU73JDAUkUpPnSJDpsd9xobdL5VAGHPxhTZ+aiFcCB2feLjd5ctE8sG
YkEWP95SbSmNTXrnrO+iwCG8NJbft4FSmxiK9tpug6b4WVLgxhKmJYFX7u+J5ka3
ZSAKSZnYpKQSfa9ifzsNara/1LOSuXWaAc0zVXcARXUXsHrbtBAuZ00czzr2Wfqf
gg+EfuPe+8pa0CNxX3evU3mKGJHN0y63YlSIdUJdLo3/6UHiflDXeTWexxhTg54R
bhBJDcmN1lTaFJjY8IQq+sRYex7bGuoZM8xgJWhbgYtCKQyBtAb/cMEyKnzfvwJa
MbgVCMiWCKZxFRuOF3EMw/2+TY3E+1k=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:59 2024 by rpki-client on console-fra.rpki-client.org